Monday 11 February 2019

First Clipper Malware Discovered on Google Play

Clipper malware
Android/Clipper.C impersonating MetaMask on Google Play
Clippper malware was discovered on Google Play, the official Android app store. This malicious malware was discovered in Feb 2019.

What is the clipper malware? 


Addresses of the online cryptocurrency wallets have a long string of characters that includes alphabets and numbers.These addresses are basically long for security reasons. The users generally copy and paste the addresses using the clipboard instead of taking the trouble to type them out.

The people who steal the cryptocurrency, take advantage of this lapse and replace the wallet address in the clipboard. This is the clipper malware.

The attacker intercepts the address on the clipboard and changes it to the address belonging to him.
The user then ends up with the wallet address that has been switched by the attacker.

Though the clipper malware is relatively new, where the cryptocurrency stealers alter the address, it is considered an established malware.

The origins of clipper malware


The clipper malware was first discovered in 2017 on the Windows platform.

Later it was noticed in the shady Android app stores in the summer of 2018.

In August 2018, the first Android clipper malware was discovered. It is sold on underground hacking forums and subsequently seen in shady Android app stores.

The clipper malware was also hosted on download.cnet.com. This is one of the most popular software hosting sites. This malware was discovered by ESET researchers.

In February 2019, the malware was found on Google Play, which is the official Android app store.

How does the clipper malware function? 


The clipper malware was detected on the Google Play store. This malicious malware was found out by ESET security solutions. The malware, Android/Clipper.C, impersonates a genuine service known as MetaMask.

The clipper malware basically steals the user’s credentials and private keys in order to access the user’s Ethereum funds. This malware can also change the Bitcoin or Ethereum wallet address of the user and replace it with the address of the hacker. The wallet address of the user is replaced by the wallet address of the hacker using the clipboard.

When and how was the clipper malware discovered? 


On 1st Feb 2019, the ESET security solutions discovered the clipper malware, Android/Clipper.C on Google Play, the official Android app store. This was then intimated to the Google Play security team. They immediately removed the app from the Store.

This hacking targets the users who make use of the mobile version of the MetaMask service. The MetaMask service runs Ethereum decentralized apps in the browser without any need of running a complete Ethereum node.

Currently, the MetaMask service is not offering the mobile app. They are available as add-ons for desktop browsers like Chrome and Firefox.

Previously too, malicious apps were discovered on Google Play impersonating MetaMask in order to access the victim’s cryptocurrency funds.

Security measures against clipper malware


Users should update their Android devices and use reliable mobile security solution.

Download apps from the official Google Play store.

For any Google Play search, stick to the official website of the app developer or service provider for the link to the official app.

For any sensitive transactions involving information or money, double check every step.

Thursday 7 February 2019

Mono-Live Gadget Review: Mobvoi TicWatch S2

Mono-Live Gadget Review: Mobvoi TicWatch S2
Here’s a budget friendly smart watch up for review. The Mobvoi TicWtach S2 was launched recently with the TicWatch E2. Both are similar except for a few minor differences. The Mobvoi TicWatch S2 has a more sportier feel to it than its predecessor. Overall the Mobvoi TicWatch S2 is good value for money making it an excellent gift to give a loved one this Valentine’s day. Its better than expected battery life, sturdy quality and big enough display make it a worthwhile buy. But enough chit chat. Let’s get more to the specifics of the watch.

Design of the Mobvoi TicWatch S2: 


Just like its predecessor, the Mobvoi TicWatch S2 tends more towards the bulky side of things. The watch is just shy of 13mm in thickness but pulls off that extra bulk well. This is important when it comes to working out in such watches. You don’t want it to be too clunky and get in your way. Its light weight feel, although it does not look anywhere near light weight, is courtesy of the polycarbonate material it is made of.

The Mobvoi TicWatch S2 is definitely a step up from its predecessor when it comes to build. The TicWatch S was more plasticky and felt cheap. Coming to the S2 and E2, the S2 feels a lot more sturdy and well- built as compared to its launch partner. The Mobvoi TicWatch S2 has also got a MIL- STD- 810G rating. This is a mark of durability and ruggedness as defined by the US military. So you know you’re getting the real deal with this watch.

Coming to the Screen Of the Mobvoi TicWatch S2: 


The mobvoi TicWatch S2 comes with a 1.39 inch circular screen. It has a 400 by 400 resolution AMOLED display. This gives you a pretty sharp picture quality for a watch coming in at the price that it does. Ok, if you peer up close to the screen you may notice pixels, but on a day to day basis you won’t see any of them.

The screen is pretty bright and can be seen even while outdoors on a bright sunny day. However the Mobvoi TicWatch S2 does not come with ambient light sensors so you’ll have to adjust the brightness on your own.

The watch also has an always on kinda display mode going on, which displays the time as well as other things when not in use too. This is a step up over what you get in smart watches like the Apple watch that does not display anything when not in use. However you may have to charge this thing often because of this little feature.

Getting to the Software in the Mobvoi TicWatch S2: 


The Mobvoi TicWatch S2 comes with a Qualcomm Snapdragon Wear 2100 chip along with 512MB RAM and 4GB storage. This is similar to what’s in the Mobvoi TicWatch E2. With this kind of chip in the watch, apps fire up quickly without any delay. However Google Assistant may be a little slow to bring up on the watch.

Monday 4 February 2019

In a Stumble for Apple, a FaceTime Bug Lets iPhone Users Eavesdrop

FaceTime Bug
A critical flaw allows eavesdropping on other FaceTime users, very easily. Apple has disabled one of its communication software features while waiting to deploy a patch. For three months, it has been possible for others to activate the microphone and camera of your iPhone remotely. The major bug in the FaceTime app was revealed on Monday, January 28th.

As reported by the US site 9to5Mac, the software flaw results from the group call function set up by Apple in October with the update iOS 12.1 to call up to 32 people simultaneously. It allows anyone to spy on a contact whose iPhone is running iOS 12.1 or later, even if they decline their call.

The major security flaw allowing eavesdropping affects the latest version of iOS. This bug has just been detected. It appeared with one of the new tools introduced on iOS 12, the group video call on FaceTime.

With this FaceTime bug, users can remotely listen to conversations on other iPhones even before their call is accepted. Even more disturbing, this critical flaw is easily exploitable and has been reproduced by many users on social networks, and Apple has already recognized the problem.

Unfortunately, since Facetime is not yet an App on the App Store, it will probably have to wait until an update of iOS. While waiting to deploy a patch, Apple has decided to suspend group calls on FaceTime. This will naturally limit the exploitation of this flaw.

This is not the first time that Apple has recognized a significant security breach in one of its systems. In November 2017, MacOS High Sierra allowed you to log in to a protected session as an administrator without a password. A fix was deployed the next day.

How does the fault work? 


A video posted on Twitter shows how the FaceTime bug works. An iPhone user initiates a FaceTime call and then inputs own number into the field dedicated to adding other participants to the conversation. The recipient’s microphone then starts, without even answering the call.

Internet users also noticed that it was possible to activate the front camera if the recipient pressed the power button or volume of his iPhone, a manipulation that usually ignores the call. These two bugs have also been observed on Macs.

When you call someone from FaceTime, and before they answer, you can drag the screen up to add another person to the conversation. This third person can be your own phone number.

That’s when a group video conference starts with the audio turned on. The first called number can then be listened to without having to accept the conversation. The transmitted sound is bi-directional, the added person can therefore also listen to the exchange.

How to disable FaceTime on your iPhone or iPad? 


Even though Apple has disabled Group Facetime from their server it is recommended that you manually disable it. You can easily disable FaceTime on your iPhone or iPad. Open the Settings and locate Facetime. Slide the toggle from green to grey to switch off Facetime.

Apple has said in a comment to Buzzfeed that they are aware of the bug and will issue a patch later in the week to fix it.

Tuesday 29 January 2019

Google Makes Learning Fun and Easier through: 13 Google for Education Tools

Sometimes learning can be tough and boring. There are times when you wish you could just lay back and rest. This may not be because you are lazy but are due to learn something that you find a little bit difficult. In such cases learning needs to be made simpler and not only that but also focused and fun. Google plans on doing just that through their Google for Education tools. Google plans on bringing the learning initiative to Chromebooks with easy student access and to make learning easier.

Learning through Devices a Part of Google for education tools: 


Google plans on launching a number of devices in 2019 with a view to providing learning. There will be more than 25+ devices or so that Google plans on releasing in the year 2019. There will be a choice from the Asus Chromebook Tablet CT100 to convertibles like the Acer Chromebook Spin 512. The Acer Chromebook Spin will have a 3:2 inch screen ratio for a larger display, so that viewing is made easier on it. There will also be other devices such as the Lenovo 300e Chromebook and clamshell devices such as the Dell Chromebook 3400.

Chromebooks are not the only devices that Google has lined up as part of its Google for education tools initiative. Google also has something for educators too. After all learning is not the only criteria but teaching is just as important if students have to learn well. Educators will have the Google Pixel Slate and the Pixelbook as options to teach with.

Customize your settings and Save your Work with these Google for Education Tools: 

Google allows you the option of customizing your settings with multilayered security settings, individual profiles, automatic updates and data protection. The thing that is great with this tool is that you can now access all these settings no matter what you device you’re using. You just log into your account and presto! All your settings are the same as you set them as on the device you logged in previously.

Google has also added in this option for all types of learners be it those with visual impairments, auditory problems and more.

Be Internet Legends with Google for education tools initiative:

Google has now started an online safety program in partnership with experts up at Parent Zone. Primary school teachers can now order the Be Internet Legends curriculum pack all for free. There are also new languages added to the pack including Arabic, Italian, Belgian, Polish, and will be soon coming in Turkish as well.

Plan with Google for Education Tools: 

As part of Google for Education Tools initiative, Google makes planning for teaching a course easier with its new Classwork page. Not only that, but Classroom has a new look and feel to it, promising to make work easier.

Jamboard an Interesting Google for Education Tool: 

You can create, edit and view Jams- a collaborative whiteboard space right on your Chromebook or from a Chrome browser or alternatively from the jamsboard app as well. Jamsboard allows you to modify frames and switch between drawing to keyboard shortcuts while jamming. You’ll even be able to add images shortly. Interested users can also head on to Jamsboard for a free course on Student agency and engagement.

Bringing Augmented and Virtual Reality to the Education Front: 

As part of the Google for education tools initiative, students can now create VR tours using Tour Creator on the Chromebook. They can then view their creations through a guided app using the Expeditions Android app. Google is also translating its most popular tour guides into Arabic, Hindi, German, Italian, Korean, Japanese, Russian, Portuguese, French and Spanish.

Locked mode and Gradebook as Google for education tools: 


While on locked mode on the Chromebook students will not be able to browse away from their quiz unless they submit their answers.

The Gradebook on the Chromebook allows teachers to check answers and compute average for the class as well as calculate grades by weighted average or total points. Making a teacher’s life much more easier and faster.

Learning Coding as a part of Google for education tools initiative: 


Google recently introduced First + Scratch 3.0 which is the latest version of coding to be taught to kids. This version is complete with lesson plans,new videos and digital materials. The lesson plans will also be easily shared via Google Docs. To learn more about the latest version you can check out Google’s First Starter Guide.

Be Job Ready with these new Skills: 


Google for education tools now includes teaching new skills like critical thinking, collaboration, creativity, communication and digital skills. These skills are based on the UK Essential Digital Skills Framework and the Computing National Curriculum in England. All this will be available on the new English and Digital Skills website in the UK.

Hands on with Google for Education Tools: 


This new tool allows you to save your experiments across all your devices through your G Suite Education account. Google has also released new training modules and lessons on the Google for Education Teacher Center as well as Scholastic. If you’re more the hands on type then you can check out the new Science kit from Arduino for middle school or the new science journal app with Go Direct line of classroom sensors.

Learn about Travel using these Google for Education Tools:

Google earth also features in as a Google for education tool. You can now bring the whole world to your classroom with no download necessary. Students can learn about streets, learn about the weather, volcanoes and about sea temperature. Google makes learning interactive by showing layers and areas, distances and 3D views of things. This makes learning a lot more easier and understandable.

These Google for Education Tools are all set to make learning easier and more understandable for students. Their interactive content and ease of learning makes these tools a must have for anyone wanting a brighter future.

Tips to Convert Videos to the Best Format

Do you want to convert your video to the ‘best’ format for a particular device or platform? On the surface that may sound easy, but how do you identify the best format – and what should you look for?
While there are several ways that you could find the best format and convert your videos to it, these tips should help make it a lot easier:

  • Make sure the format has hardware support

    For a video to be played, the format needs to be supported so that the device or platform it is viewed on is able to decode it. However that decoding can take place either using software or hardware.

    The problem with software decoding is that it requires a lot of processing power – especially for high quality videos. That is why as a rule the ‘best’ format should always have hardware support.

  • Factor in the compression

    Part of the video format (i.e. the video codec) will dictate the type of compression that is used to encode and store the video. Newer formats normally have more efficient types of compression, meaning that they can compress the same quality of video to a smaller file size than older formats.

    As you can imagine this is an important factor because the ‘best’ format should compress the video to the smallest file size possible while maintaining its quality. However it is complicated by the fact that it takes time before devices have hardware support for newer formats built-in.

  • Try working backwards based on how the video will be used

    Instead of trying to identify the best format based on its hardware support and compression, you could work backwards based on how the video will be used. For distribution formats such as MP4 with H.264 are the best option, and the same goes for online videos.

    In general MP4 with H.264 is a ‘safe’ format for most devices, but you could check if HEVC is supported seeing as it has better compression rates.

See how these tips can help you to convert your video to the best format? Once you’ve identified what it is, all you need to do is use a video converter to switch your video to that format. For example you could use Movavi Video Converter to convert QuickTime to MP4, AVI to FLV, MPG to MKV, and so on.

Regardless of how you approach it, following these tips should help you to end up with a format that has the best possible compression while still supported by the hardware of the device it will be played on. That is as good as it gets, and should allow you to enjoy high quality videos without taxing your processor (or storage) too much.