❌

Reading view

There are new articles available, click to refresh the page.

Hackers are Using this TikTok Challenge To Stage Malware Attacks

✇EffectHacking
By: Gokul G
Hackers are Using this TikTok Challenge To Stage Malware Attacks

A challenge called "Invisible Challenge" is trending on TikTok, where people film themselves naked while using a special effect filter that basically removes the character's body from the video, leaving only a blurred outline image of it.

Here is an example of the Invisible Challenge:


After the challenge became a trend, a lot of people started searching for ways to remove that TikTok filter from the videos to see what they weren't meant to see. Anyone with a little bit of understanding of how video editing works can realize that such things are not possible (at least not in the way they want it)

Hackers saw this demand, and they started posting TikTok videos with links to a fake software called "unfilter" that claimed to be able to remove that TikTok filter from videos. 

Those links will take you to a page asking you to join the "Space Unfilter" Discord server which contains NSFW videos claimed to be the result of "Unfilter" software.

If you follow all the instructions to get the "unfilter" software, you will end up installing a WASP stealer malware on your machine. All your Discord accounts, crypto wallets, credit cards, and whatever else you think is valuable will be stolen before you know it.

"Over 30,000 members have joined the Discord server created by the attackers so far and this number continues to increase as this attack is ongoing," Guy Nachson, a supply chain security researcher at Checkmarx said in a blog post.

US Bans ZTE, Huawei Equipment over Security Concerns

✇EffectHacking
By: Gokul G
US Bans ZTE, Huawei Equipment over Security Concerns

The United States has banned the use and sale of Huawei and ZTE telecom devices over security concerns. The move is a major setback for the two Chinese companies, which have been seeking to expand their presence in the US market. It also raises fears of a wider trade war between the US and China.

It is unclear what will happen next. These companies will likely lose a lot of business as they will no longer be able to sell their products in the US. This could result in a large number of job losses.

AXLocker: A New Ransomware that Steals Discord Accounts

✇EffectHacking
By: Gokul G

AXLocker: A New Ransomware that Steals Discord Accounts

Ransomware operators now have a new weapon called "AXLocker" in their already impressive arsenal. According to researchers at Cyble, this ransomware isn't particularly sophisticated beyond the fact that it is good at stealing Discord tokens from a victim's machine. 

After infecting the machine, it starts encrypting essential files and then sends the victim's sensitive information such as Computer name, Username, Machine IP address, System UUID, and Discord tokens to the operator's server. It then displays a ransom note like the one shown below.

AXLocker Ransomware Ransom Note

"This ransomware uses the AES encryption algorithm to encrypt files". "We observed that the ransomware does not change the file name or extension after the encryption," researchers said in a blog post.

Researchers Found a Critical Security Flaw That Could Sabotage Space Missions

✇EffectHacking
By: Gokul G
Researchers Found a Critical Security Flaw That Could Sabotage Space Missions

A security flaw in networking technology used in spacecraft, airplanes, energy generation systems, and industrial control systems has been discovered by researchers from the University of Michigan, the University of Pennsylvania, and NASA.

The flaw exploits a network protocol known as "time-triggered Ethernet," or TTE. It allowed researchers to gain access to the primary network that is used for mission-critical devices like life support systems. They achieved this through an attack dubbed "PCspooF".

To pull off a PCSpooF attack, an attacker needs to plant a small, malicious device on the network. This makes remote attacks impossible.

If you want to know more about PCspooF, read PCspooF: Compromising the Safety of Time-Triggered Ethernet.

Australia May Ban the Payment Of Ransom To Cyber Criminals

✇EffectHacking
By: Gokul G
Australia May Ban the Payment Of Ransom To Cyber Criminals

Following recent cyber attacks, Australia's Home Affairs Minister Clare O'Neil said on Sunday that the government is looking at outlawing the payment of ransom to cyber criminals.

By outlawing ransom payments, the government hopes to make it more difficult for cybercriminals to profit from their activities. This is a welcome move by the government, and one that will hopefully help to reduce the incidence of cybercrime in Australia.

Used Xbox Game Bar's Capture Feature? You Won't Get the Windows 11 2022 Update

✇EffectHacking
By: Gokul G

Windows 11 with questions about the latest update


If you have ever used the Xbox Game Bar to capture footage, you won't be getting the Windows 11 2022 update.

But why?

Because the Windows 11 2022 update has a bug that can cause audio sync issues in the Xbox Game Bar, especially when using the "Record last 30 seconds" feature.


So they just blocked an entire update just for audio sync issues?

Yes, they consider the bug in Windows 11 2022 Update (22H2) a serious issue.


So when will I get the Windows 11 2022 Update?

If you previously used the capture feature in the Xbox Game Bar, you will get the update as soon as Microsoft fixes the bug.


Important: The bug may potentially affect third-party applications that use the same underlying Windows libraries or APIs.


What if I already installed the latest update? And having audio sync problems?

You can download and install the optional cumulative update KB5018496,  that should fix the issues.

❌