This is Optimizer, a weekly newsletter sent every Friday from Verge senior reviewer Victoria Song that dissects and discusses the latest gizmos and potions that swear they’re going to change your life. Opt in for Optimizer here.
Technology
Illegal movie downloads could be hiding dangerous new malware
Illegal movie sites are not the best places to visit on the internet. The fact that they are illegal should tell you that. While the legal consequences of pirating content are a big concern, you also risk getting malware, and not just any malware. Security researchers have identified a type of malware targeting illegal movie downloaders, known as Peaklight, classified as next-stage malware.
Its ultimate goal is to infect Windows systems with information stealers and loaders. Below, you’ll find more details about Peaklight, along with tips to stay protected.
GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE
A person about to watch a movie on their laptop (Kurt “CyberGuy” Knutsson)
What is Peaklight
Peaklight is a new type of malware that works only in your computer’s memory and doesn’t leave a trace on your hard drive. It’s designed to secretly download other harmful software, according to Mandiant, a cybersecurity company owned by Google.
“This memory-only dropper decrypts and executes a PowerShell-based downloader,” Mandiant said. “This PowerShell-based downloader is being tracked as PEAKLIGHT.”
Mandiant explains that Peaklight uses a hidden PowerShell script to download more malware. Some of the dangerous programs spread this way include Lumma Stealer, Hijack Loader and CryptBot, which are sold as services that hackers can rent to steal information or control computers.
A woman watching movies on her laptop (Kurt “CyberGuy” Knutsson)
HACKED, SCAMMED, EXPOSED: WHY YOU’RE ONE STEP AWAY FROM DISASTER ONLINE
How does it infect your computer?
The attack starts when someone downloads a Windows shortcut file (LNK), often while searching for pirated movies. These files are hidden inside ZIP folders that pretend to be movie downloads.
When the LNK file is opened, it connects to a content delivery network (CDN) that hides harmful JavaScript code, which runs only in your computer’s memory. This code then runs a PowerShell script called PEAKLIGHT, which connects to a remote server to download more harmful software.
Peaklight is designed to run entirely in your computer’s memory, which makes it much harder for antivirus software to detect. Since it doesn’t leave traces on storage, the antivirus would need to scan the memory (RAM) to catch it.
“PEAKLIGHT is an obfuscated PowerShell-based downloader that is part of a multi-stage execution chain that checks for the presence of ZIP archives in hard-coded file paths,” Mandiant researchers Aaron Lee and Praveeth D’Souza said.
“If the archives do not exist, the downloader will reach out to a CDN site and download the remotely hosted archive file and save it to disk.”
Illustration of a scammer using malware (Kurt “CyberGuy” Knutsson)
PHARMA GIANT’S DATA BREACH EXPOSES PATIENTS’ SENSITIVE INFORMATION
6 ways to protect yourself from malware
1) Avoid downloading pirated content: Stick to legal platforms for movies, music and software. Pirated sites are high risk because they often disguise malware as legitimate content. Even searching for a movie on search engines can lead you to dangerous sites that trigger drive-by downloads.
2) Keep your operating system and software updated: Regularly update your Windows OS, antivirus software, browsers and other applications. Security patches are released to fix vulnerabilities that malware like Peaklight can exploit. Enabling automatic updates is the best way to stay ahead of these threats.
3) Use strong antivirus software: A strong antivirus program is your first line of defense. Choose one that includes real-time scanning, memory scanning and behavioral analysis. Many modern antiviruses scan not only files but also your computer’s memory (RAM), which is where Peaklight hides.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.
4) Be cautious of suspicious links and files: Don’t click on unknown links, especially if they offer free movies, games or other attractive content. Similarly, avoid downloading files from untrusted websites, even if they seem to be harmless ZIP folders.
5) Use strong passwords and two-factor authentication: Secure your online accounts by using strong, unique passwords for each account and enabling two-factor authentication. This ensures that even if some malware like information stealers try to grab your login data, they can’t access your accounts without the extra verification step. You can also use a password manager to generate and store your passwords securely.
6) Be wary of compressed files (ZIP, RAR): Compressed files are a common method for hiding malware. Even if they appear to be pirated movies, they could contain LNK files or other malicious scripts. Always scan these files with your antivirus before opening them.
HERE’S WHAT RUTHLESS HACKERS STOLE FROM 110 MILLION AT&T CUSTOMERS
Kurt’s key takeaway
The idea of pirating content can be tempting. With so many streaming services and subscriptions out there, it’s impossible to have them all, which makes piracy seem like an option worth considering. But it’s better to pay up or watch something else. You don’t want your computer to be infected by malware and risk losing your money and personal data.
Have you ever been tempted to use illegal streaming or download sites? What stopped you (or didn’t)? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most asked CyberGuy questions: New from Kurt:
Copyright 2024 CyberGuy.com. All rights reserved.
Technology
Microsoft will let you pause Windows Updates indefinitely, 35 days at a time
Windows users will no longer be forced to run automatic updates in the middle of a game or a busy day. Microsoft is rolling out some long-awaited changes to Windows Update to users on its Dev and Experimental Windows Insider channels, including the ability to indefinitely delay updates up to 35 days at a time.
Last month, Microsoft announced a slew of upcoming changes to improve Windows 11 and address some of users’ most common complaints about the platform. Chief among the company’s planned fixes was making updates less disruptive. In its blog post on Friday, Microsoft says you’ll be able to “extend the pause end date as many times as you need” and that there are “no limits” on how many times you can reset to another 35-day window. If you don’t re-pause updates at the end of the 35-day period, updates will run as usual.
The changes to Windows Update also include more detailed titles for driver updates, which will now include the device class they apply to, such as display, audio, or battery.
Additionally, Windows 11 will now always have options in the power menu to restart or shut down without running updates, as well as the option to skip updates when setting up a new Windows device. Microsoft is also “unifying the update experience” to bunch together updates so users don’t have to reboot as frequently. Instead, “updates will download in the background, then will wait for a coordinated installation and restart.”
Technology
Fox News AI Newsletter: Your next Dairy Queen order could be taken by AI
Some social media users are frustrated with Dairy Queen’s AI drive-thru system and prefer human interaction. (Brandon Bell/Getty Images)
NEWYou can now listen to Fox News articles!
Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.
IN TODAY’S NEWSLETTER:
– Dairy Queen’s new drive-thrus without humans spark backlash by frustrated customers
– Meta informs staff of layoffs affecting 8,000 employees amid AI push
– Fox News Poll: Voters see AI as a risk to privacy and paychecks
COLD OPEN: Dairy Queen’s new drive-thrus without humans spark backlash from frustrated customers – Fast-food chain Dairy Queen is moving toward new, fully automated AI drive-thrus operating without human workers.
TRUST DEFICIT: Fox News Poll: Voters see AI risk to privacy, paychecks – A Fox News Poll this week reveals growing anxiety among voters regarding artificial intelligence, with a significant portion expressing concerns that the rapidly advancing technology poses a direct threat to their personal privacy and future paychecks.
DIGITAL HEIST: White House accuses China of ‘industrial-scale’ AI technology theft ahead of Trump-Xi summit – Ahead of the highly anticipated summit between former President Donald Trump and Chinese President Xi Jinping, the White House has raised alarms over China’s industrial-scale theft of artificial intelligence technology.
CCP THEFT: Google engineer stole AI secrets for China, Senate hears explosive testimony – In explosive testimony before the Senate, lawmakers heard alarming details about a Google engineer accused of stealing closely guarded artificial intelligence secrets on behalf of China, highlighting national security risks.
CODE OR CRIME: Florida launches criminal probe into whether chatbot aided suspect in deadly campus shooting – Florida officials have launched a criminal probe to determine whether an artificial intelligence chatbot provided assistance to a suspect involved in a deadly campus shooting, demonstrating a novel challenge for law enforcement.
Fox News Digital spoke to Jack Schlossberg about his concerns that artificial intelligence is being used to overcharge consumers. (Fox News Digital)
FINE PRINT FURY: Schlossberg unveils plan to crack down on new frontier of AI putting squeeze on consumers – In a move to protect the public from emerging tech threats, Schlossberg has unveiled a comprehensive plan aimed at cracking down on the new frontier of artificial intelligence that is currently putting a financial squeeze on everyday consumers..
CODED MORALITY: Anthropic’s ‘moral compass’ architect suggested AI overcorrection could address historical injustices – The architect behind the “moral compass” at the AI firm Anthropic has controversially suggested that implementing an artificial intelligence overcorrection could serve as a mechanism to address historical injustices.
DIGITAL PREDATOR: Worker at swanky country club accused of using AI to create explicit photos of teen, police say – Police say a worker at an exclusive, swanky country club has been accused of utilizing artificial intelligence tools to generate explicit and inappropriate photographs of a teenager.
BOT BEHAVIOR: Expert rips ‘irresponsible’ AI study over blackmail scenarios – A leading technology expert is pushing back against a recent academic study outlining hypothetical artificial intelligence blackmail scenarios, ripping the research as highly “irresponsible” for stoking unnecessary public panic.
DOUBLE DOWN: Reese Witherspoon doubles down on AI comments, adds no one is paying her to say it – Hollywood actress Reese Witherspoon has doubled down on her controversial comments regarding the integration of artificial intelligence in the entertainment industry, emphatically adding that no one is paying her to endorse the technology.
EFFICIENCY DRIVE: Meta informs staff layoffs affecting 8,000 employees amid AI push – Amid a massive strategic pivot toward artificial intelligence, Meta has informed its staff of impending layoffs expected to affect approximately 8,000 employees as the tech giant restructures its workforce.
Meta CEO Mark Zuckerberg delivers a keynote speech at the Meta Connect annual event at the company’s headquarters in Menlo Park, Calif., on Sept. 25, 2024. (Manuel Orbegozo/Reuters)
ROBOTIC SHOTS: 49ers turning to artificial intelligence at NFL Draft, GM says laggards are already behind – The San Francisco 49ers are heavily integrating artificial intelligence into their scouting process ahead of the NFL Draft, with the team’s general manager warning that franchises failing to adopt the technology are already falling behind, according to Fox News Digital.
HANDS-FREE FEAST: Alexa lets you order food like a real conversation – Amazon’s Alexa is rolling out an updated artificial intelligence feature that enables users to order food by engaging in a seamless, real-time conversation with the virtual assistant.
FREE THROW BOT: Toyota’s CUE7 robot shoots hoops using AI – Toyota is showing off the impressive capabilities of its cutting-edge CUE7 robot, which utilizes advanced artificial intelligence algorithms to accurately shoot basketball hoops.
CUE7 sinks a free throw, a simple moment that reflects a bigger shift toward AI that learns through experience. (Toyota Motor Corporation)
Subscribe now to get the Fox News Artificial Intelligence Newsletter in your inbox.
FOLLOW FOX NEWS ON SOCIAL MEDIA
YouTube
X
SIGN UP FOR OUR OTHER NEWSLETTERS
Fox News First
Fox News Opinion
Fox News Lifestyle
Fox News Health
DOWNLOAD OUR APPS
Fox News
Fox Business
Fox Weather
Fox Sports
Tubi
WATCH FOX NEWS ONLINE
Fox News Go
STREAM FOX NATION
Fox Nation
Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.
Technology
I don’t think Gwyneth Paltrow knows what a peptide is
These days, it seems I cannot escape peptides. Online, I’ve been assaulted by videos of shirtless Chads injecting dubiously sourced bottles of the so-called “Wolverine stack.” On the New York City subway, I’m haunted by Serena Williams’ Ro ads for easy GLP-1 access. Silicon Valley seems to be a parade of peptide parties. In Washington, RFK Jr. has said he’s pro-peptide and wants to expand access. In July, the FDA will meet to possibly reclassify 14 peptides so they can be eligible for compounding.
And in Hollywood, Gwyneth Paltrow — mother Goop, one of the original wellness influencers — is selling a series of peptide skincare products. Except, after some research, I’m not sure Paltrow actually understands what peptides are.
You might be wondering why I’m fixating on a Goop product in Optimizer. The short answer: While researching peptides for a forthcoming feature, I’ve descended into madness.
The longer answer is that peptide mania is central to Silicon Valley’s current fixation with longevity and metabolic optimization. As I’ve recently written, wellness trends increasingly inform new health tech features and gadgets that make up the wearable surveillance state. Peptides are also being framed on social media as an innovation that democratizes healthcare. (A similar rhetoric used to describe wearables!) It’s part of the wellness Wild West feedback loop that’s fueling Silicon Valley’s obsession with self-optimization. With that in mind, it’s worth examining how “peptide washing” has crept into various corners of the internet — and the resulting ripple effects.
While peptide shots are a relatively new trend, we’ve known about peptides and how they work for decades. They’re short chains of amino acids, which, in turn, make up proteins. In other words, building blocks for the building blocks. Because a peptide can be a chain ranging from two to roughly 100 amino acids, there are potentially trillions of peptides. Their main function is to act as messengers for various bodily functions. Some are naturally occurring and often come from the foods you eat. Others are made synthetically in a lab. The most famous ones include insulin and GLP-1 medications like semaglutide (Ozempic and Wegovy) and tirzepatide (Zepbound and Mounjaro).
What’s taking social media by storm are peptides that exist in legal gray areas. They’re not widely tested or FDA-approved drugs, and are sometimes sourced from dubious suppliers. I’ve previously written about retatrutide — another popular weight loss peptide — in Optimizer, but there’s a whole slew of others with names that sound vaguely like Star Wars droids. The most popular ones include BPC-157, TB-500, GHK-Cu, and CJC1295. These peptides are touted as biohacks for ailments ranging from fat loss and muscle growth, to faster wound healing, anti-aging, and increased energy. Essentially, everything associated with living a longer, healthier life. Lumped alongside these is NAD+, which is not a peptide but is often marketed as one. That’s partly because it’s frequently consumed as an IV drip and is thus an injectable substance.
But just because you can inject something, that doesn’t make it a peptide.
Do you have experience using peptides?
Or extremely strong feelings about this trend? I’m researching this phenomenon and I’d love to chat with you. Hit me up at victoria.song@theverge.com or on Signal at @ vicmsong.14.
NAD stands for nicotinamide adenine dinucleotide. It’s a coenzyme — basically an enzyme booster — that’s found in every cell. Its primary job is to help convert food into energy. It does this by shuttling electrons from one chemical reaction to another. As you age, your NAD levels naturally decline. This can lead to an array of conditions associated with aging, like Type 2 diabetes, lower energy levels, and saggy skin. Not to get too weedsy, but the + in NAD+ simply denotes one of two versions of the NAD molecule. (The other is NADH.)
Which, finally, brings me to the Goop Youth Boost NAD+ Peptide Rich Cream and whether Gwyneth Paltrow actually knows what a peptide is.
In my research, I was looking into influential people who have spoken out about peptide injections. There’s a long list, but in Hollywood, Paltrow’s name kept popping up. Cue this recent Elle interview, in which Paltrow plays a “fuck, marry, kill” game with wellness trends.
From the get-go, the Elle article incorrectly identifies NAD+ as a peptide. Paltrow is then quoted as saying she uses NAD+ IV drips and an injectable NAD+ pen for impromptu energy boosts. She goes on to say that injectable peptides dealing with inflammation and brain health that are “being formulated for longevity” will be the next NAD+. In the fuck, marry, kill game, Paltrow is asked to choose between NAD+, B12, and peptide shots. She refuses, saying she’d marry them all.
What’s worrisome is the conflation of these treatments, even though they’re three separate things. It’s easy for the average person to read this article and think, “NAD+ is a type of peptide shot and a rich, glamorous celebrity like Gwyneth Paltrow does it, so this must be their secret to looking good.”
(For the curious: B12 is a vitamin. Supplementation can boost energy if you have a B12 deficiency, which is relatively common in the elderly, vegetarian, and vegan populations. As for NAD+, there’s considerable research interest, but limited clinical evidence for drips or supplements at the moment. I wrote a whole Optimizer newsletter about dubious peptide shots.)
From this interview, I get the sense that Paltrow knows that peptides are trendy, but she doesn’t actually admit to using any specific one. After some more digging, I found she has stated that she loves glutathione IV drips. Now, that is a peptide. However, she characterized her usage as “I love IV drips!” so, again, I’m not sure if Paltrow is aware that IV drips and peptides are not the same thing. Upon looking into her “peptide-rich” moisturizer, I’m even less certain.
Calling it a “Youth Boost NAD+ Peptide Rich Cream” would suggest this $105 moisturizer has both NAD+ and a bunch of peptides. Peruse the ingredient list, and you’ll find it doesn’t even have NAD+. It has NMN, or nicotinamide mononucleotide, a precursor (another kind of building block) for NAD+. As for its peptide content, the marketing claims the cream features “biomimetic plant-derived peptides.” Again, the list only refers to one true peptide molecule: arginine/lysine polypeptide. (A polypeptide is a longer peptide; this one supposedly helps with wrinkles.) It also appears last. In skincare, the ingredient list is generally ordered in terms of concentration. The top three to five ingredients make up the bulk of the formula. One hack is to find the so-called “one percent line”, which you can estimate from when the first preservative or fragrance appears. Given how this list is written, this is a standard moisturizer with a teeny sprinkle of a single peptide thrown in for marketing flavor. Even if there was a more potent amount, peptides are delicate molecules. Effectiveness for any topical skincare active — be it peptides or salmon sperm DNA — depends on stable formulation, concentration, whether the molecule can penetrate the skin barrier, and packaging that prevents degradation.
In any case, I reached out to Goop to clarify the peptide content in this cream. I have not heard back.
The only thing I can conclude is Paltrow isn’t afraid to try fringe wellness trends. (That and she loves an IV drip.) If someone handed her a peptide shot with the promise of energy and youth, I’d bet she’d do it. But do I think a peptide-curious person could ask her to explain the pros and cons of this trend based on her public statements? Now that’s a bet I would not take.
I could be wrong. In which case, I find her statements and her moisturizer to be disappointing given her status and influence. Case in point, the average person likely isn’t going to go through the trouble of accessing gray market peptide vials. They probably won’t be able to afford the same quality treatments as Paltrow, either. But a so-called peptide cream from a celebrity? That’s easily accessible. And in this particular case, that consumer wouldn’t be getting much of the thing they purportedly want to try.
More concerning is the flattening of any injectable as a peptide. Paltrow showing up to a podcast with an IV drip, speaking of peptides, phospholipids, and regular vitamins in a single breath? That’s confusing. It conflates relatively harmless therapies — like vitamin supplementation — with those that aren’t as well-studied. And the more influential people do this, the more regular people will too.
Peptides aren’t inherently dangerous. Injections aren’t evil. But the way peptide mania has made a more extreme, experimental trend as casual as taking a multivitamin? That feels like the slipperiest of slopes.
-
Technology3 minutes agoMicrosoft will let you pause Windows Updates indefinitely, 35 days at a time
-
World9 minutes agoHamas influence looms over Gaza elections as experts warn vote could backfire
-
Politics15 minutes agoFlorida Dem filed for re-election days before resignation as House Ethics Committee ramped up pressure
-
Health21 minutes agoYour daily coffee habit may be quietly reshaping your gut and mood, study finds
-
Sports27 minutes agoMorez Johnson Jr declares for NBA draft, maintains college eligibility
-
Technology33 minutes agoFox News AI Newsletter: Your next Dairy Queen order could be taken by AI
-
Business39 minutes agoBed Bath & Beyond is back in California after vowing never to return
-
Entertainment45 minutes agoJada Pinkett Smith asks court to make Will Smith’s former friend pay her $49,000 legal bills