Connect with us

Technology

Android banking Trojan evolves to evade detection and strike globally

Published

on

Android banking Trojan evolves to evade detection and strike globally

Android banking Trojan Medusa has returned after almost a yearlong hiatus and is now even more dangerous. The new variant of the Trojan is lightweight and requests fewer device permissions to avoid detection.

First identified in 2020, Medusa is a Turkish-linked banking Trojan that initially targeted Turkish financial institutions. 

It expanded rapidly by 2022, launching major campaigns in North America and Europe, causing significant monetary harm. Medusa’s new variant is now targeting Android users across the globe, including those located in the U.S., Canada, Spain, France, Italy, the U.K. and Turkey.

A man looking at his Android phone. (Kurt “CyberGuy” Knutsson)

Advertisement

How does the Medusa Android Trojan evade detection?

Since July 2023, Medusa attacks are back with a new version. Cybersecurity experts from Cleafy found a spike in the number of installs of an app called “4K Sports.” This app is being used by hackers to put malware on people’s Android phones. The new malware is an upgraded Medusa with big changes in how it works.

It asks for fewer permissions, making it sneakier. It still requests Accessibility Services, which is a big red flag. Android’s Accessibility Service is a powerful tool that helps people with disabilities use mobile devices more easily. When you grant an app Accessibility permissions, you’re essentially giving it the ability to do whatever it wants on your phone.

CLICK HERE FOR MORE U.S. NEWS

Cybercriminals are aware of this, so most malware that infects your phone will ask for Accessibility permissions. You should be immediately suspicious when an app requests permissions in this area. Medusa’s new variant also requests Broadcasting SMS, Internet Foreground Service and Package Management permissions.

The Android Trojan now has 17 fewer commands than before but adds five new ones, like setting a black screen overlay, taking screenshots and more.

Advertisement

Cleafy reveals that hackers are using not only the 4K Sports app to install Medusa but also fake apps like Google Chrome, InatTV, Purolator and 5G. In the U.S., Chrome, InatTV and Purolator are the main apps being misused by these hackers.

A person on their Android phone. (Kurt “CyberGuy” Knutsson)

BEST ANTIVIRUS FOR ANDROIDS — CYBERGUY PICKS 2024

What is the scale of the Medusa cyberattack?

Medusa is going after people all over the world, including the U.S. and Europe. Cleafy found two different Medusa botnet groups, each working in its own way.

The first group, with botnets named AFETZEDE, ANAKONDA, PEMBE and TONY, mainly targets people in Turkey but also hits Canada and the U.S. They use Medusa’s usual tricks, like phishing, to spread the malware.

Advertisement

The second group, including the UNKN botnet, shows a change in Medusa’s strategy. It mainly targets European users, especially in Italy and France. Unlike the usual variants, some of these new ones were installed through apps downloaded from untrusted sources. This means the hackers are trying new ways to spread the malware beyond the usual phishing tactics.

Illustration of a cybercriminal. (Kurt “CyberGuy” Knutsson)

ANDROID BANKING TROJAN MASQUERADES AS GOOGLE PLAY TO STEAL YOUR DATA

10 ways you can protect yourself from the Android banking Trojan

While a Trojan is hard to detect and can be dangerous once it enters your phone, there are several things you can do to protect your data.

1. Be cautious of phishing attempts: Be vigilant about emails, phone calls or messages from unknown sources asking for personal information. Avoid clicking on suspicious links or providing sensitive details unless you can verify the legitimacy of the request.

Advertisement

2. Have strong antivirus software: Android has its own built-in malware protection called Play Protect, but it’s not enough to stop all malicious software. Historically, Play Protect hasn’t been 100% foolproof at removing all known malware from Android phones. The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.

3. Download apps from reliable sources: It’s important to download apps only from trusted sources like the Google Play Store. They have strict checks to prevent malware and other harmful software. Avoid downloading apps from unknown websites or unofficial stores, as they can pose a higher risk to your personal data and device.

4. Use an identity theft protection service: Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. 

One of the best parts of using some services is that they might include identity theft insurance of up to $1 million to cover losses and legal fees and a white glove fraud resolution team where a U.S.-based case manager helps you recover any losses. See my tips and best picks on how to protect yourself from identity theft. 

Advertisement

5. Monitor your accounts: If you think you have been affected by the banking Trojan, regularly review your bank statements, credit card statements and other financial accounts for any unauthorized activity. If you notice any suspicious transactions, report them immediately to your bank or credit card company.

6. Enable SMS notifications for your bank accounts: By enabling SMS notifications, you can monitor your accounts for any unauthorized transactions.

7. Set up two-factor authentication (2FA): 2FA is an extra shield that prevents hackers from accessing your accounts.

8. Use a password manager: A password manager can help you create and store strong, unique passwords for all your accounts, reducing the risk of password theft.

9. Regularly update your device’s operating system and apps: Keeping your software up to date is crucial, as updates often include security patches for newly discovered vulnerabilities that could be exploited by Trojans.

Advertisement

10. Be wary of granting permissions: Carefully review the permissions requested by apps. If an app asks for more access than it needs for its functionality, it could be a red flag.

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET

Kurt’s key takeaways

Hackers behind Medusa have made the malware hard to detect. They use apps that look legitimate to get the malware onto your phone and steal your personal data and sometimes your money. As a rule of thumb, only download apps from the Google Play Store. Google ensures it only allows secure apps on its platform and is safer than any other app store.

What are your thoughts on the increasing sophistication of mobile malware like the Medusa Trojan, and how do you think the cybersecurity industry should respond? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Advertisement

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most-asked CyberGuy questions:

Copyright 2024 CyberGuy.com. All rights reserved.

Advertisement

Technology

The Loch Capsule dishwasher is small, fast, and efficient — it even sanitizes gadgets

Published

on

The Loch Capsule dishwasher is small, fast, and efficient — it even sanitizes gadgets

A dishwasher is a luxury item some people can’t live without. It’s one of the first major kitchen devices I bought just as soon as I could afford one. And now that the kids are grown, it’s the appliance I thought I’d miss most in my nomadic vanlife pursuits.

Loch sent me its $459.99 / €459.99 countertop Capsule dishwasher to review in a tiny home on a remote beach and inside a van on a two-month roadtrip. It’s an excellent product that washes and dries two place settings quickly at bacteria-killing temperatures up to 75 degrees Celsius (167F) in as little as 20 minutes. It’ll even kill bacteria and neutralize viruses on your gadgets with a waterless blast of UV-C light. Hoozah!

What I learned during this review has less to do with the device’s limitations, and more my own. Turns out that I’m willing to do a lot of dishes by hand when faced with resource scarcity, be that space, energy, water, time, or money; and I’m unwilling to become a germaphobe despite claims that cellphones are 10 times dirtier than a toilet seat.

$391

The Good

  • Cleans and dries in about 20 minutes
  • Looks good on a countertop
  • Fits some large pans
  • Sanitizes phones and washes fruit
  • Doesn’t require plumbing

The Bad

  • Loud
  • Expensive
  • Niche product

The Loch Capsule looks clean and minimalistic on a kitchen counter, in my opinion. And while the exterior is plastic, the tub is made of stainless steel, unlike most countertop dishwashers. This differentiator improves drying speed, durability, and hygiene, while helping to keep odors under control.

The unit is tall and deep enough to accommodate large dinner plates and pans that won’t typically fit inside a short and stout countertop machine. It measures 46.5 x 26.2 x 51.5cm (18.3 x 10.3 x 20.3 inches) giving it a narrow footprint and internal volume of about 30 liters. The integrated handle makes carrying the 12kg (26.4lb) dishwasher relatively easy.

If you’re making all your meals at home then you’ll probably only need to run it once per day for a single-person household, or twice for two persons based upon my experience. It comes with an external clean water tank so it can be used anywhere you have access to power and H2O. No plumbing’s required, but a hook-up is available should you tire of refilling the tank.

Advertisement

All the dishes my wife and I used for breakfast and lunch came out spotless.

All but the 12-inch pan was able to fit. The optional “Dual Tray” makes good use of the void created above the bowls.

The fruit cleaning mode doesn’t dry.

A look around back. The two black boxes are for clean water and (optional) waste water if the sink hose doesn’t reach.

Setting it up is pretty straightforward. In most scenarios, you’ll plug into the wall for power, attach and fill the fresh water tank, and run a second hose from the dishwasher to the sink to dispose of the wastewater. In my van, where I had limited space for the Capsule, I had to install it in my “garage” connected to the optional waste water tank since the 1.2m/3.94ft hose was too short to reach my sink.

The glowing white display is covered in capacitive buttons that still respond to touches when my fingers are wet. The look is warm and friendly, but operation is loud, like most countertop dishwashers, something you’ll have to consider for a device meant to be used in small spaces. I measured about 56dB max from one meter. That’s much louder than my own built-in dishwasher, which operates at 38dB. The sound intensity also varies as the water whooshes and the pump vibrates. In other words, it won’t double as a white noise machine while you sleep, if that’s what you’re hoping for.

The Capsule does UV-C sanitization using a wavelength of 265–275nm.

The Capsule does UV-C sanitization using a wavelength of 265–275nm.

The Capsule can also wash gadgets and fruit. The basket fits about seven apples, which take eight minutes to wash, or 12 in total if you add UV cleaning. A waterless UV mode can be used to kill surface bacteria on baby bottles and personal devices like phones and earbuds using medical-grade UV-C light.

Loading dishes into the Capsule can feel like playing expert-level Tetris. The first time I tried, it took me about five minutes to load 18 items into that small cavity. Now it takes about a minute or two, while filling and emptying the clean and dirty water containers takes another few minutes. An optional $19 “dual tray” shelf can be placed at the bottom to make space for a large pot, or at the top where it can fill any available free space to wash silverware or other small, flat items.

Several cleaning modes are available, from a 15-minute Meal Wash all the way up to a 152-minute Intensive Clean. I found the 15-minute mode to work so well that I didn’t need to resort to the longer cycles, so long as I didn’t burn anything or wait until the next day to start a wash.

Advertisement

To test, I loaded the Capsule with all the mess produced at breakfast and lunch by two people, including two 10.5-inch plates covered in bacon grease, silverware covered in peanut butter, a milky yogurt bowl, espresso cups, a juice glass, a chef’s knife, tongs, and a sport bottle. And while the diameter of my 12-inch pan does fit inside the Capsule, its handle does not, contrary to Loch’s claim, so I had to handwash it. (My 10-inch pan with 8-inch handle just fits, but the angle doesn’t leave room for much else.)

Everything came out clean, hot to the touch, and mostly dry in the 15-minute Meal Wash mode, on par with my much larger built-in machine. I was impressed. The cycle used 2.5 liters (0.66 gallons) of water and consumed between 220Wh and 300Wh in my repeated tests, with power usage peaking at around 900W. The 15 minute wash cycle actually takes between 20 and 25 minutes to complete. The most intensive wash mode ran for 2 hours and 28 minutes, and consumed 420Wh and almost 4 liters of water.

A 33.3 percent increase on my average daily energy usage and 100 percent increase in water consumption. I can’t justify that.

For comparison, when applying my hippie-approved vanlife dishwashing technique to the same dishes with the same mess, I was able to wash and dry everything – including the 12-inch pan – in just six minutes from one liter of water and zero power consumed. This approach involves wiping everything off with a used paper towel or discarded food packaging, filling a bowl with unheated tap water, dipping in a soapy sponge and getting to work. Mind you, vanlife is less clean than regular life, but we haven’t died yet.

If I installed the Loch Capsule in my van I’d have to run the 15-minute mode twice each day to clean all the dishes my wife and I typically use. That’s about 500Wh and 5 liters of water a day — a 33.3 percent increase on my average daily energy usage and 100 percent increase in water consumption. I can’t justify that. This dishwasher is for rigs carrying a lot more water and battery power than I do, or anyone willing to frequently dock at serviced campsites.

Advertisement

1/11

It fits neatly on the counter of this tiny home, with the clean water on top and the waste hose extended to the sink.

Importantly, vanlifers don’t usually travel with full-sized dishes and pans. So, a more compact countertop dishwasher from companies like Comfee or Farberware that costs around $300 or below might be a better option. Loch does sell a Capsule Solo for $399.99 without the UV stuff and plumbing hookup. It’s otherwise the same dishwasher and currently on sale for $339.99.

Even inside a tiny house I find it hard to justify the $459.99 price tag of the Capsule, even at its sale price of $390.99, despite the surf shack’s ample supply of hot water and electricity. For one or two people, it’s just faster to wash the dishes myself and I don’t lose any precious space on top of the counter, or below it. And my freshly washed hands leave me little use for a UV blaster that kills bacteria that doesn’t pose a real threat anyway.

To justify buying a Loch Capsule dishwasher you, and at most one other household member, must really hate washing dishes, have ready access to water and power, and have almost no space but still use large pans and dishes. That’s a niche, but one that the Loch Capsule dishwasher fills admirably.

The Loch Capsule is an excellent countertop dishwasher with minor flaws – it’s just not for me.

Advertisement

Photography by Thomas Ricker / The Verge

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Continue Reading

Technology

Fox News AI Newsletter: Historic infrastructure buildout for AI

Published

on

Fox News AI Newsletter: Historic infrastructure buildout for AI

NEWYou can now listen to Fox News articles!

Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.

IN TODAY’S NEWSLETTER:

– Nvidia CEO says AI boom is fueling the ‘largest’ infrastructure buildout in history
– Apple taps Google Gemini to power Apple Intelligence
– Amazon to cut thousands of jobs in sweeping corporate layoffs

TECH TSUNAMI: Nvidia CEO Jensen Huang said the rapid expansion of artificial intelligence is setting off what he described as the “largest infrastructure buildout in human history,” as companies and governments pour trillions of dollars into the computing power needed to run AI systems in real time.

TITANS UNITE: Apple and Google just made one of the most important artificial intelligence (AI) announcements of the year. Under a new multi-year collaboration, Apple will base the next generation of its Apple Foundation Models on Google’s Gemini models and cloud technology.

Advertisement

A Google Gemini artificial intelligence mobile phone app, arranged in Riga, Latvia, on Monday, Jan. 27, 2025. Chinese artificial intelligence startup DeepSeek rocked global technology stocks Monday, raising questions over America’s technological dominance.  (Andrey Rudakov/Bloomberg via Getty Images)

JOB CUTS: Amazon is planning to cut thousands of jobs as part of a broader push to eliminate nearly 10% of its corporate workforce, according to Reuters.

GOING MOBILE: Amazon has rolled out Alexa.com, which brings Alexa+ directly to your web browser for Early Access users. Instead of relying on a speaker or phone, you can now open a laptop and start using Alexa like any other web-based AI tool.

AI FOR MAIN STREET: The House of Representatives passed a bill that would require the government to create more access to artificial intelligence (AI) education for small businesses Tuesday evening.

The chamber of the House of Representatives is seen at the Capitol in Washington, Feb. 28, 2022. (J. Scott Applewhite, File)

Advertisement

BEYOND DATA CENTERS: Qualcomm CEO Cristiano Amon joins “Mornings with Maria” to discuss the next phase of the AI boom that’s expanding beyond data centers into cars, devices and robotics.

THE ENTERPRISE SHIFT: ServiceNow and OpenAI are deepening their strategic partnership with an enhanced collaboration to help enterprises accelerate efforts to turn artificial intelligence (AI) into measurable business outcomes.

JOB CONCERNS: Palantir CEO Alex Karp suggested Tuesday that usage of artificial intelligence “bolsters civil liberties,” while also warning Europe that its adoption of technology is falling behind the U.S. and China. 

Co-Founder and CEO of Palantir Technologies Alex Karp speaks onstage during Jacob Helberg at the Hill & Valley Forum 2025 on April 30, 2025 in Washington, DC.  (Jemal Countess/Getty Images for Jacob Helberg)

NOT TRUE: Billy Bob Thornton is setting the record straight about hanging up his cowboy hat. The 70-year-old star of Taylor Sheridan’s hit series “Landman” shut down rumors he’s exiting the Paramount+ drama, calling the claims false.

Advertisement

‘SO WRONG’: Pro Football Hall of Famer Jimmy Johnson appeared to be just as unsettled as other football fans were over an AI video that appeared of him during the college football national championship.

COMING SOON: Tesla CEO Elon Musk said Thursday the company is planning to make its Optimus robots available for sale to the public by the end of 2027.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook
Instagram
YouTube
X
LinkedIn

SIGN UP FOR OUR OTHER NEWSLETTERS

Fox News First
Fox News Opinion
Fox News Lifestyle
Fox News Health

DOWNLOAD OUR APPS

Fox News
Fox Business
Fox Weather
Fox Sports
Tubi

Advertisement

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements, and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

Continue Reading

Technology

Meta is stopping teens from chatting with its AI characters

Published

on

Meta is stopping teens from chatting with its AI characters

Meta is “temporarily pausing” the ability for teens to chat with its AI characters as it develops a “new version” of the characters that will offer a “better experience.” The company made the announcement in an update to a blog post from October where the company had detailed more parental controls for teen AI use. The change blocking teens from accessing the characters will go into effect “starting in the coming weeks.”

”Since we announced our plans to build parental controls for AI characters in October, we started developing a new iteration of AI characters generally (i.e. for both adults and teens),” spokesperson Sophie Vogel tells The Verge. “Rather than building the parental controls twice (for the current AI characters and the new iteration of AI characters) we’re pausing teen access to the current version while we focus on the new iteration. When that new iteration is available for teens, it will come with parental controls.”

According to TechCrunch, “Meta said that it heard from parents that they wanted more insights and control over their teens’ interactions with AI characters, which is why it decided to make these changes.”

In October, Meta announced that parents would be able to block their teens’ access to one-on-one conversations with its AI characters, block their teens from talking with specific AI characters, and share insights with parents on the topics their teens discuss with Meta’s AI characters and its AI assistant. The original plan was to roll out those controls early this year.

Last year, also in October, Meta changed Instagram teen accounts to allow teens to be able to see content that’s reflective of what might be shown in a movie rated for people that are 13 or older.

Advertisement

Update, January 23rd: Added information from a Meta spokesperson.

Continue Reading

Trending