Connect with us

Technology

Beware of TikTok’s danger that could be a malware menace to your life

Published

on

Beware of TikTok’s danger that could be a malware menace to your life

TikTok is having a tough time, and hackers are working hard to add to its misery. A malicious code took over accounts on TikTok and compromised the official presence of celebrities and brands, including Paris Hilton and CNN.

The hackers behind this sent malware via direct messages (DMs) on the platform. 

Users didn’t have to click any links or download any files to get hacked. Just opening the message was enough for a device to be infected.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

A person on TikTok (Kurt “CyberGuy” Knutsson)

Advertisement

What you need to know about TikTok DMs exploit

Hackers are apparently targeting high-profile TikTok accounts. So far, accounts from CNN, Sony and Paris Hilton have been targeted. CNN was the first account that got hacked, and it was reportedly down for several days after the incident.

The attack reportedly happens without the account owner needing to click on or open anything, known as a zero-click attack. All they need to do is open a DM, and the account can be taken over, leaving the rightful owner locked out. The vulnerability might lie in how content is processed when a DM is opened. Similar weaknesses have been identified before, such as vulnerabilities in the Chromium browser triggered by fabricated images.

RETAIL PRICES CAN JUMP IN SECONDS WITH HIGH-TECH STORE PRICE TAGS

We reached out to TikTok, and a spokesperson told CyberGuy, “Our security team is aware of a potential exploit targeting a number of high-profile accounts. We have taken measures to stop this attack and prevent it from happening in the future. We’re working directly with affected account owners to restore access, if needed.”

The hack appears to be a “zero-day” attack, which means the bad actors discovered the vulnerability in TikTok’s code before the developers did. TikTok had zero days to prevent it.

Advertisement
2-Beware of TikTok’s zero-click DM danger that could be a malware menace to your device-details

TikTok logo on a smartphone  (Kurt “CyberGuy” Knutsson)

ANDROID BANKING TROJAN MASQUERADES AS GOOGLE PLAY TO STEAL YOUR DATA

TikTok has a history of getting hacked

This is not TikTok’s first hacking incident. In 2023, over 700,000 accounts in Turkey were hacked because TikTok’s two-factor authentication system wasn’t secure enough. This all happened right before an important presidential election in Turkey, which made things even messier.

In 2022, security experts at Microsoft found a major flaw in the TikTok app. All it took was clicking a bad link and hackers could hijack your account.

Concerns about TikTok’s data security and its connection to ByteDance, its Chinese parent company, have also captured the attention of lawmakers. The U.S. government fears China uses the app to spy on Americans or to influence the messages they see. President Biden has even signed a bill forcing ByteDance to either sell its U.S. TikTok operations or face a ban in the country.

HOW TO PROTECT YOURSELF WHEN YOUR CELLPHONE NUMBER IS EXPOSED ON DARK WEB

Advertisement
3-Beware of TikTok’s zero-click DM danger that could be a malware menace to your device-outro

A TikTok account on a laptop (Kurt “CyberGuy” Knutsson)

ANDROID USERS AT RISK AS BANKING TROJAN TARGETS MORE APPS

6 ways to protect yourself from TikTok DM danger

To make sure your TikTok account doesn’t get hacked by malicious DMs, follow these steps.

1. Use strong antivirus software to protect against phishing attempts: Stay vigilant when it comes to emails, phone calls or messages from unknown sources asking for personal information. Avoid clicking on suspicious links or providing sensitive details unless you can verify the legitimacy of the request.

The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.

2. Use strong and unique passwords: Create strong passwords for your accounts and devices and avoid using the same password for multiple online accounts. Consider using a password manager to securely store and generate complex passwords. It will help you to create unique and difficult-to-crack passwords that a hacker could never guess. Second, it also keeps track of all your passwords in one place and fills passwords in for you when you’re logging into an account so that you never have to remember them yourself. The fewer passwords you remember, the less likely you will be to reuse them for your accounts. Get more details about my best expert-reviewed password managers of 2024 here.

Advertisement

3. Enable two-factor authentication: Enable two-factor authentication whenever possible. This adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone, in addition to your password.

4. Keep your TikTok app up to date. Regularly update your TikTok app to avoid getting hacked. While you’re at it, update your antivirus software, web browsers and other applications to ensure you have the latest security patches and protections.

5. Review and adjust privacy settings: Ensure that your TikTok privacy settings are appropriately configured. Limit who can send you direct messages, comment on your videos and view your profile. This reduces the risk of unwanted interactions with potential hackers.

6. Monitor account activity: Regularly check your account activity for any unusual behavior or unauthorized access. TikTok provides a log of devices that have accessed your account. If you notice any unfamiliar devices, immediately change your password and log out of all devices. Also, to report suspicious activity on your account, TikTok provides channels to report a problem in its app.

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET 

Advertisement

Kurt’s key takeaways

TikTok needs to strengthen its system to ensure hackers don’t access users’ accounts. While the latest incident seems to be affecting celebrities and high-profile accounts, bad actors may also start targeting common users. Given these security concerns, it should come as no surprise that I advise against using TikTok, or at the very least, to use it with extreme caution. Meanwhile, be cautious. If someone messages you asking you to click on something or send them something, don’t just do it. Scammers love pressuring people to act fast. So, take a breath and think twice before you click.

HUMANPLUS ROBOT CAN GO FROM PLAYING PIANO TO PING-PONG TO BOXING

Do you think government intervention is necessary to improve the security of social media platforms? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover

Advertisement

Follow Kurt on his social channels

Answers to the most asked CyberGuy questions:

Copyright 2024 CyberGuy.com.  All rights reserved.
 

Advertisement

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

How Watch Duty’s wildfire tracking app became a crucial lifeline for LA

Published

on

How Watch Duty’s wildfire tracking app became a crucial lifeline for LA

If you live in Los Angeles, you are probably already intimately familiar with Watch Duty, the free app that shows active fires, mandatory evacuation zones, air quality indexes, wind direction, and a wealth of other information that everyone, from firefighters to regular people, have come to rely on during this week’s historic and devastating wildfires.

Watch Duty is unique in the tech world in that it doesn’t care about user engagement, time spent, or ad sales. The 501(c)(3) nonprofit behind it only cares about the accuracy of the information it provides and the speed with which the service can deliver that information. The app itself has taken off, rocketing to the top of Apple’s and Google’s app stores. Over 1 million people have downloaded it over the last few days alone. 

The elegance of the app lies in its simplicity. It doesn’t scrape user data, show ads, require any kind of login, or track your information. Its simple tech stack and UI — most of which is maintained by volunteer engineers and reporters — has likely helped save countless lives. While Watch Duty is free to use, the app accepts tax-deductible donations and offers two tiers of membership that unlock additional features, like a firefighting flight tracker and the ability to set alerts for more than four counties.

With plans to expand the service across the United States, as well as overseas and into other emergency services, Watch Duty may eventually replace some of the slower and less reliable local government alert systems for millions of people.

Photo by Lokman Vural Elibol / Anadolu via Getty Images

Advertisement

An app born from fire

The idea for Watch Duty came to cofounder John Mills while he was trying to protect his off-grid Sonoma County home from the Walbridge fire in 2020. He realized there wasn’t a single source for all the information people needed to protect themselves from the blaze, which ultimately killed 33 people and destroyed 156 homes. John and his friend David Merritt, who is Watch Duty’s cofounder and CTO, decided to build an app to help.

“This came out of an idea that John had, and he talked to me about it four years ago,” Merritt tells The Verge. “We built the app in 60 days, and it was run completely by volunteers, no full-time staff. It was a side project for a lot of engineers, so the aim was to keep it as simple as possible.”

Fire reporting is piecemeal at best in fire-prone areas and frequently scattered across platforms like Facebook and X, where fire departments and counties have verified pages sharing relevant updates. But increasingly, social media platforms are putting automated access for alert services behind paywalls. Governments also use a wide variety of alert systems, causing delays that can cost lives, especially in fast-moving fires like the Palisades and Eaton fires that have forced evacuations for more than 180,000 people. And sometimes, these government-run alerts are sent out mistakenly, causing mass confusion.

Watch Duty simplifies all that for millions of people.

Advertisement

“We view what we are doing as a public service,” says Merritt. “It is a utility that everyone should have, which is timely, relevant information for their safety during emergencies. Right now, it’s very scattered. Even the agencies themselves, which have the best intentions, their hands are tied by bureaucracy or contracts. We partner with government sources with a focus on firefighting.”

“We view what we are doing as a public service.”

One of the biggest issues around fires, in particular, is that they can move quickly and consume large swaths of land and structures in minutes. For example, the winds that drove the Palisades fire to spread to more than 10,000 acres reached 90 miles per hour on Tuesday. When minutes matter, the piecemeal alert system that Watch Duty replaces can cause delays that cost lives. 

“Some of the delivery systems for push notifications and text messages that government agencies use had a 15-minute delay, which is not good for fire,” says Merritt. “We shoot to have push notifications out in under a minute. Right now, 1.5 million people in LA are getting push notifications through the app. That’s a lot of messages to send out in 60 seconds. In general, people are getting it pretty much all at the same time.”

A simple tech stack

Advertisement

For Watch Duty, this kind of mass communication requires reliable technology as well as a group of dedicated staff and skilled volunteers. Merritt says that Watch Duty relies on a number of corporate partners with whom it has relationships and contracts to provide its service. 

“We shoot to have push notifications out in under a minute.”

The app is built on a mix of technology, including Google’s cloud platform, Amazon Web Services, Firebase, Fastly, and Heroku. Merritt says the app uses some AI, but only for internal routing of alerts and emails. Reporters at Watch Duty — those who listen to scanners and update the app with push notifications about everything from air drops to evacuation updates — are mostly volunteers who coordinate coverage via Slack.

“All information is vetted for quality over quantity,” he says. “We have a code of conduct for reporters. For example, we never report on injuries or give specific addresses. It’s all tailored with a specific set of criteria. We don’t editorialize. We report on what we have heard on the scanners.” 

According to Merritt, the app has 100 percent uptime. Even though it started with volunteer engineers, the nonprofit has slowly added more full-time people. “We still have volunteers helping us, but it’s becoming more on the internal paid staff as we grow, as things get more complex, and as we have more rigorous processes,” he says.

Advertisement

“All information is vetted for quality over quantity.”

He says there are no plans to ever charge for the app or scrape user data. The approach is kind of the Field of Dreams method to building a free app that saves people’s lives: if you build it well, the funding will come. 

“It’s the antithesis of what a lot of tech does,” Merritt says. “We don’t want you to spend time in the app. You get information and get out. We have the option of adding more photos, but we limit those to the ones that provide different views of a fire we have been tracking. We don’t want people doom scrolling.” 

Photo by FREDERIC J. BROWN / AFP via Getty Images

Collecting information in the era of Trump

Advertisement

Watch Duty relies heavily on publicly available information from places like the National Weather Service and the Environmental Protection Agency. Should the incoming Trump administration decide to execute on threats to dismantle and disband the EPA (which monitors air quality) and the National Oceanic and Atmospheric Administration, the parent agency to the National Weather Service, such moves would impact Watch Duty’s ability to operate. 

Even still, Merritt is optimistic. “We will be pretty well insulated from any change to policy,” he says. “We are either buying that information ourselves already or we are happy to buy it, and we will take that cost on. The fact that we’re soon going to be covering the entire US will defray the cost of anything that shifts from a policy perspective. Our operation costs are mostly salaries. We are trying to hire really good engineers and have a really solid platform. If we need to raise a grant to buy data from the National Weather Service, then we will.”

Regardless of what the next administration does, it’s clear that Watch Duty has become a critical and necessary app for those in Southern California right now. The app currently covers 22 states and plans to roll out nationwide soon. 

“We got 1.4 million app downloads in the last few days,” according to Merritt. “I think we have only received 60 support tickets, so that shows that something is working there. We are really just focused on the delivery of this information.”

Advertisement
Continue Reading

Technology

China’s newest humanoid robot is ready to serve like never before

Published

on

China’s newest humanoid robot is ready to serve like never before

Chinese startup Pudu Robotics has unveiled its latest creation, the D9 humanoid robot, designed to revolutionize the way we work and interact with machines. 

Standing at an impressive 5.57 feet tall, this bipedal machine is not just another robot — it’s a versatile assistant ready to tackle a wide range of tasks in various settings.

D9 humanoid robot. (Pudu Robotics)

Capabilities and features of the humanoid robot

The D9 is no ordinary robot. With its ability to walk upright and carry loads up to 44 pounds, it’s built to handle real-world challenges. But what sets it apart from its predecessors?

I’M GIVING AWAY THE LATEST & GREATEST AIRPODS PRO 2

Advertisement

Advanced mobility: The D9 can walk at speeds of up to 4.5 mph, outpacing the average human stroll. It’s not just about speed, though. This robot can navigate stairs, slopes and even maintain balance when knocked off-kilter.

Intelligent navigation: Equipped with high-accuracy sensors, the D9 creates real-time 3D semantic maps of its surroundings. This allows for autonomous route planning and precise self-positioning.

Versatile applications: From performing ground cleaning tasks with the Pudu SH1 to carrying boxes in warehouses and stocking shelves in stores, the D9’s potential applications are vast.

Natural interaction: Perhaps most impressively, the D9 boasts “human-level multimodal natural interactions,” thanks to its sophisticated artificial intelligence processing frameworks.

Advertisement
newest chinese robot

D9 humanoid robot. (Pudu Robotics)

AI-POWERED ROBOT SINKS SEEMINGLY IMPOSSIBLE BASKETBALL HOOPS

The evolution of Pudu robotics

The D9 isn’t Pudu’s first foray into robotics. In September, they introduced the D7, a semi-humanoid robot on wheels designed for tasks like sorting components, serving in restaurants and operating elevators. The D9 builds on this foundation, expanding the range of possible applications.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

newest chinese robot 3

D9 humanoid robot. (Pudu Robotics)

CHINESE HUMANOID ROBOT COULD BE THE FUTURE OF AFFORDABLE IN-HOME CARE

Competitive landscape

With the introduction of the D9, Pudu Robotics enters a competitive field alongside giants like Tesla and Unitree. While pricing details for the D9 are yet to be announced, it’s speculated to fall in the $20,000 to $30,000 range, similar to Tesla’s Optimus.

Advertisement
newest chinese robot 4

D9 humanoid robot. (Pudu Robotics)

ELECTRIC HUMANOID ROBOT POISED TO SHAKE UP THE JOB MARKET

Kurt’s key takeaways

The Pudu D9 showcases advanced mobility and intelligent interaction capabilities. As it prepares to enter the market, its potential impact on various industries could be profound, transforming how we approach tasks across sectors. The future looks promising for humanoid robots like the D9 as they pave the way for more efficient and interactive work environments.

What concerns do you have about the potential impact of humanoid robots like the Pudu D9 on the future of work and everyday life? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Advertisement

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most-asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.

Advertisement

Continue Reading

Technology

Intel still dreams of modular PCs — it brought a tablet laptop gaming handheld to CES

Published

on

Intel still dreams of modular PCs — it brought a tablet laptop gaming handheld to CES

At CES 2025, Intel let journalists into its private “Innovation Showcase,” where we saw things like prototype next-gen laptops and giant stereo 3D handheld gaming PCs.

While I was there, I also spotted a heavy metal handheld on a table that didn’t seem… fully attached… to its screen. When I lifted the screen, it came away easily.

It felt suspiciously light to be a real tablet, so I flipped it over and saw three connectors underneath:

Above it, on a shelf, was a laptop with a suspiciously sized chunk of plastic on the bottom that looked like a perfect match. A minute later, Intel gaming evangelist Colin Helms confirmed: I was looking at a concept modular PC.

That module contains a complete Intel Lunar Lake computer, the entire guts you’d need to make one work outside of peripherals and screen. It’s basically a reboot of Intel’s abandoned Compute Card idea, except it’s not all Intel’s doing and you probably shouldn’t ever expect it to ship.

Advertisement

It’s a concept from Quanta, a company whose name you don’t typically see on the laptops and tablets they create, because Quanta is an ODM (like Compal, Pegatron, Wistron, and Apple’s better known iPhone supplier Foxconn) that designs and manufactures hardware on behalf of brand names.

Quanta’s calling the whole modular system the “AI8A,” and the aforementioned module at its heart is the “Detachable AI Core.” Helms told me it plugs into other concept computers as well, including an all-in-one desktop that Intel didn’t have to show off. And presumably, like the Compute Card idea, you could upgrade your computer just by putting a new new module into it.

The modular laptop has lots of concept-y bells and whistles too, so many that Intel’s CES staff hadn’t even worked them all out yet.

For starts, the laptop has a motorized hinge, so you can tell it to open and close its own lid; it also claims to offer eye-tracking that lets you sling around multitasking windows just by looking at where you’d like them to be. It apparently comes with a mouse integrated into a ring that you could wear.

The most mundane: a built-in Qi wireless charging pad in the palmrest, with indicator lights to show your battery’s remaining capacity.

Advertisement

I couldn’t try any of it working, unfortunately, nor did I manage to ask what “AI8A” means, because I mistakenly thought it said Aiba until I checked my photos closely just now. Nor could we hotswap the module between the handheld and laptop, since the module apparently doesn’t have a battery inside.

Again, this is a cool computing concept car: it’s not likely that this computer will ever ship, even in a more practical / less gadgety form. Thankfully, we have begun to see some real, practical modularity in the laptop space since the death of Intel’s Compute Card. Framework just celebrated its fifth anniversary this week, and Dell took a smaller step forward at CES with its first modular repairable USB-C port.

Photos by Sean Hollister / The Verge

Continue Reading

Trending