Crazy Thursday.

- Dr. Web, the Russian antivirus company, disclosed a breach. Dr. Web stopped sending antivirus updates September 16th. Subsequently, Dr. Web reportedly disconnected their servers from their internal network while they investigated the suspected compromise. Dr. Web reports to have resolved the issue and has returned to normal day-to-day operations. No Threat Actor has been attributed to the compromise. They believe the compromise occurred on or around September 14th.

- Yesterday, or sometime before, GitHub users were targeted in mass by a large scale phishing and/or malware campaign. An unknown Threat Actor(s) pushed their Lumma Stealer campaign by leaving bogus issues on GitHub projects. When the project owner visited the issue, the issue linked to a domain titled 'GitHub-Scanner'. GitHub-Scanner requested the visitor prove their humanity (e.g. not a robot) by doing Windows + R and CTRL + V + ENTER. When the site is visited, the website copies malicious code to the users clipboard. Windows + R, opening Windows Run, and CTRL + V, pasting the malicious code to the Run window and ENTER would run the code, this would trick the user into executing their malware payload. Once the payload is executed, it downloads a file called 'IE6.exe'. IE6.exe is Lumma information stealer. While it is a clever trick, the Threat Actor(s) (intentionally, or unintentionally) did not account for users who are not running Windows. This caused confusion for non-Windows users, or users on mobile devices.

Funfact: Making cows wear VR headsets increases milk yields by 22%

In some countries, for example in Russia, farmers put VR headsets on their cows during winters because when it snows, the ground gets covered and thus cows cannot graze on green fields which stresses them out and decreases their milk yields.

The VR headsets show them beautiful green fields landscapes, relaxing the cows. This method ended up increasing the milk production by 22% in winters

Follow @TechLeaksZone

Telegram has banned this channel from global search, along with @NekogramAPKs.

And Cherrygram channels, Octogram and other forks channels too

Although the Pixel 9 Pro is already available to purchase in many countries like the US, however, atleast in India, Pixel 9 Pro will go on sale in November.
( 3 months late from the August release)

Follow @TechLeaksZone

Telegram changed it's privacy policy and terms of services:

Privacy policy changed mainly from

If Telegram receives a court order that confirms you're a terror suspect, we may disclose your IP address and phone number to the relevant authorities.

to

If Telegram receives a valid order from the relevant judicial authorities that confirms you're a suspect in a case involving criminal activities that violate the Telegram Terms of Service, we will perform a legal analysis of the request and may disclose your IP address and phone number to the relevant authorities.

Telegram ToS added a new line:

Use our service to send spam or scam users.
Promote violence on publicly viewable Telegram channels, bots, etc.
Post illegal pornographic content on publicly viewable Telegram channels, bots, etc.
NEW: Engage in activities that are recognized as illegal in the majority of countries. This includes child abuse, selling or offering illegal goods and services (drugs, firearms, forged documents), etc.

Kaspersky antivirus has reportedly begun silently installing a new antivirus product called "Ultra AV" on United States-based users machines.

tl;dr

Winamp source code released online but with a catch

The iconic Winamp media player, launched in 1997 by Nullsoft, gained massive popularity while coinciding with the rise of MP3s music files. After Nullsoft's acquisition by AOL, its development slowed & in 2013, Winamp was discontinued. In 2014, new owner Radionomy took over the project intending to resume development. However, it failed to bring Winamp to its former glory & now after three decades, its source-code along with build tools, and associated libraries for the Windows app has been released on GitHub.

The kicker is that executables and changes to the code cannot be published. So the promise of “open source” has vanished. They have created their own license, the “Winamp Collaborative License (WCL) Version 1.0” :-

• No Distribution of Modified Versions whether in source or binary form.
• Cannot distribute a forked version.
• Only the maintainers of the official repo are allowed to distribute.

Follow @TechLeaksZone

Some controversy today as YouTube tech reviewer Marques Brownlee 'Panels' app is getting pretty substantial backlash.

tl;dr Marques Brownlee app, 'Panels', offers high-definition wallpapers from Digital Artists for $49.99/year. People criticized the app for an array of reasons, beside the idea of paying $49.99/year for wallpapers on your cell phone, the app requests tracking information, and contains ads.

Unsurprisingly, and as is tradition, internet nerds quickly began inspecting the app under the metaphorical microscope. Security researcher @I_Am_Jakoby discovered the apps API is wildly insecure. He wrote a simple script which programmatically scrapes every high-definition wallpaper.

Attached image is the script he shared. If you want to experiment with it, just OCR it or something.

RIP Snapdragon 8 Gen 4, Welcome Snapdragon 8 Elite

Qualcomm changed its naming scheme, from using numbers like Snapdragon 870, 888 and now to using Generations like Snapdragon 8 Gen 1

Just after 3yrs, Qualcomm again has again changed its naming scheme. Snapdragon 8 Gen 4 will be known as Snapdragon 8 Elite and Xiaomi 15 series will be the first smartphone to be powered by the same.

Follow @TechLeaksZone