Articles by "Hacking News"
Showing posts with label Hacking News. Show all posts

KitsonWorld at
bloggers and tech users. Covering useful tools, tutorials, tips and We provide Latest post on android , cryptocurrency , hacking News , PC
Disable this option to stop Xiaomi from Traking your Activities
 
If you own a Xiaomi smartphone Or have installed the Mi browser app on some of your other Android devices, you should enable a newly introduced privacy setting immediately to prevent Xiaomi from spying on your internet activities. The privacy setting now enables Mi Browser users to disable aggregated data collection feature while at Incognito Mode, but it bears noting that it is not enabled by default.

  [Image Source : 91mobiles]

The option can be accessed by tapping the settings icon in the browser > Incognito mode settings > and then disable 'Enhanced incognito mode,' as shown in an attached screenshot below.



The development is based on The insides of a Forbes report last week that detailed how the company's browsers listing users' website visits -- even in incognito mode. The browsers, that come pre-installed on countless Xiaomi devices, capture search engine queries on Google and DuckDuckGo, and also information about what folders consumers open and to which displays they swipe, including the status bar along with the settings menu.




The aggregated information is then moved to the servers located in China and Russia, highlighting servers that the firm rented from a different Chinese tech giant Alibaba, apparently to better understand its users' behavior. 
"My principal concern for privacy is that the data delivered to their servers can be quite easily correlated with a specific consumer," Gabi Cirlig told Forbes.

In response to this report, Xiaomi claimed there were does not collect any information without permission from the user. It added all data is "aggregated and cannot alone be used to recognize any individual." 

Cybersecurity researcher Andrew Tierney, who investigated the information sniffing alongside Cirlig, refuted Xiaomi's reply over the weekend, stating "they connect UUID to my orders which continues over at least 24 hours," and that "this is close enough fora person ."

The company does not appear to be stopping the practice entirely. To put it differently, unless users explicitly opt-out, Xiaomi will nevertheless continue to collect aggregate statistics while at incognito mode.

The fact that this information collection will remain enabled from the incognito mode is Yet another example of a dark pattern that pushes for a privacy-intrusive Default setting. 
What's more, selecting the privacy-friendly option requires at least three steps, Proving once more that solitude comes at a cost, and In its present state, it's Just an illusion of control.
Continue reading

KitsonWorld at
bloggers and tech users. Covering useful tools, tutorials, tips and We provide Latest post on android , cryptocurrency , hacking News , PC

New Android Malware Steals Banking Passwords, Private Data and Keystrokes



A new type of mobile banking malware has been discovered abusing Android's accessibility features to exfiltrate sensitive data from financial applications, read user SMS messages, and hijack SMS-based two-factor authentication codes.

Called "EventBot" by Cybereason researchers, the malware is capable of targeting over 200 different financial apps, including banking, money transfer services, and crypto-currency wallets such as Paypal Business, Revolut, Barclays, CapitalOne, HSBC, Santander, TransferWise, and Coinbase.

"EventBot is particularly interesting because it is in such early stages," the researchers said. "This brand new malware has real potential to become the next big mobile malware, as it is under constant iterative improvements, abuses a critical operating system feature, and targets financial applications."


The campaign, first identified in March 2020, masks its malicious intent by posing as legitimate applications (e.g., Adobe Flash, Microsoft Word) on rogue APK stores and other shady websites, which, when installed, requests extensive permissions on the device.

The permissions include access to accessibility settings, the ability to read from external storage, send and receive SMS messages, run in the background, and launch itself after system boot.


If a user grants access, EventBot operates as a keylogger and can "retrieve notifications about other installed applications and content of open windows," in addition to exploiting Android's accessibility services to grab lockscreen PIN and transmit all the collected data in an encrypted format to an attacker-controlled server.

The ability to parse SMS messages also makes the banking trojan a useful tool to bypass SMS-based two-factor authentication, thereby giving the adversaries easy access to a victim's cryptocurrency wallets and steal funds from bank accounts.


This is not the first time mobile malware has targeted financial services. Last month, IBM X-Force researchers detailed a new TrickBot campaign, called TrickMo, that was found exclusively targeting German users with malware that misused accessibility features to intercept one-time passwords (OTP), mobile TAN (mTAN), and pushTAN authentication codes.

"Giving attacker access to a mobile device can have severe business consequences, especially if the end-user is using their mobile device to discuss sensitive business topics or access enterprise financial information," Cybereason researchers concluded. "This can result in brand degradation, loss of individual reputation, or loss of consumer trust."

EventBot's family of malicious apps may not be active on the Google Play Store, but it's yet another reminder of why users should stick to official app stores and avoid sideloading apps from untrusted sources. Keeping the software up-to-date and turning on Google Play Protect can also go a long way towards protecting devices from malware.
Continue reading
Subscribe to: Posts (Atom)