Researchers discover advanced cyber-espionage malware

Both Kaspersky and Symantec have unearthed a new type of malware so advanced, they believe it could have links to a country’s intelligence agency. They’re calling it “Remsec,” “Strider” (Aragorn’s nickname in LOTR) and “ProjectSauron,” because it has several references to the Necromancer in Tolkien’s series. According to Symantec, it has been used for what could be state-sponsored attacks to infiltrate 36 computers across at least seven organizations around the world since 2011. Its targets include several individuals in Russia, a Chinese airline, an unnamed organization in Sweden and an embassy in Belgium. Kaspersky says you can add various scientific research centers, military installations, telecommunications companies and financial institutions to that list.

ProjectSauron has been active since at least 2011, but it was only unearthed recently because it was designed not to use patterns security experts usually look for when hunting for malware. Kaspersky only discovered its existence when it was asked by an unnamed government organization to investigate something weird going on with its network traffic.

The malware can move across a network — across even air gapped computers that are supposed to be more secure than typical setups — to siphon passwords, cryptographic keys, IP addresses, configuration files, among other data off computers. It then stores all those information in a USB drive that Windows recognizes as an approved device. Both security companies believe its development required the involvement of specialist teams and that it costs millions of dollars to operate.

They didn’t name a government in particular, but they noted that the malware took cues from older tools used for state-sponsored attacks, including Flamer that’s been linked to Stuxnet in the past. As you might know, the Stuxnet worm, widely believed to be the joint creation of the US and Israel, infected Iran’s nuclear program computers in the mid-2000s.

Via: Ars Technica

Source: Symantec, Reuters, Kaspersky

How to change your nickname in Pokémon Go for Android

How can I change my Trainer’s nickname in Pokémon Go?

Along with version 0.33.0 of Pokémon Go, Niantic Labs now allows you to change your Trainer nickname — but only once per account, so be sure about it!

How to change your Trainer’s nickname in Pokémon Go for Android

Open Pokémon Go from your home screen or app drawer.
Tap the red Poké Ball on the bottom of your screen.
Tap the Settings button on the top right of your screen.

Tap Change Nickname in the Settings list.

Tap Yes to the question “Do you want to change your nickname?”
Enter desired nickname. Tap OK.

Tap Yes to confirm.

That’s it! Now your Trainer’s nickname is changed forever, and the only way you can choose a new one is to create a new account.

More: These are the Pokémon Go tips, tricks and cheats you need right now

Pokémon Go

• Join our Pokémon Go forums!
• How to deal with GPS errors in-game
• Which team should you choose?
• How to play without killing your battery
• The Ultimate Pokémon Go Game Guide!
• Listen to the Pokémon Go podcast!

Oracle data breach opened credit card payment systems to attack

Data thieves don’t always have to go straight to the source to swipe payment details… sometimes, they can take a roundabout route. Oracle has confirmed to security guru Brian Krebs that hackers breached a support portal for Micros, the point-of-sale credit card payment system it acquired in 2014. It’s not certain just how many systems were breached (Krebs’ sources say over 700), but the intruders had slipped malware on to the portal that would let them grab logins for the companies using Micros. They wouldn’t have had direct access to payment data, but there’s a chance those account details could be used to slip malware into the credit card systems and then grab sensitive info.

Oracle is quick to stress that it has “addressed” the rogue code, and that its other services weren’t affected. The payment details themselves are encrypted both in the database and when in use, too, so attackers couldn’t easily make use of it. However, there are hints that a well-known Russian criminal group, the Carbanak Gang, may have been involved — the hackers likely knew what they could get. And when Micros’ users include heavyweights like Adidas, Burger King and Hilton, there’s a worry that the culprits got the keys to someone’s kingdom.

Source: Krebs on Security

New ‘Pokemon Go’ Update Adds Driving Warning, Changes ‘Nearby’ Into ‘Sightings’

Niantic has today updated Pokemon Go to version 1.3, bringing several improvements, tweaks and fixes to the game. The main addition is a dialogue option for users who may be playing while driving, while the “Nearby” feature has been transformed into “Sightings” as the developer continues work on testing a new tracking system.

If players are going over a certain speed, the game will now warn them that they’re moving too fast. To continue playing, users have to click a button that tells the app that they’re a passenger and not a driver. Throws have also seen improvements, with the curve ball throw receiving accuracy adjustments while the “Nice,” “Great” and “Excellent” throws now receive the appropriate experience from the game.

The game’s “Nearby” feature has also been changed into “Sightings.” The new feature, which Niantic says it is testing with a subset of users, points out Pokemon that have been sighted in the area. Behind illustrations of nearby Pokemon are illustrations of grass. Unlike before, tapping on a singular Pokemon does focus on a single Pokemon. In last week’s Pokemon Go update, Niantic disabled the vague and difficult-to-understand “three steps” tracking mechanic.

Other minor changes and fixes include art for the Mystic, Insight and Valor team leaders , the ability to change a user’s nickname, a fix for achievements that were showing incorrect medal icons and a fixed and re-enabled battery saver mode.

Pokemon Go is available in the App Store for free. [Direct Link]

Tag: Pokémon GO
Discuss this article in our forums

Buy an HTC 10, get a pair of $199 JBL USB-C headphones for free until Aug 31

HTC wants to get you into the USB-C audio future with this great promotion.

Now that the luster of the HTC 10 launch has worn off, HTC’s running a pretty fantastic promotion that’ll get you a pair of headphones and an additional $100 accessory credit when you buy an HTC 10 from its website. The headphones on offer here aren’t some cheapo pair, either — they’re the JBL Reflect Aware C headphones that were announced back with the phone and retail for $199.

A borderline purchase normally, now included for free with the phone.

The JBL Reflect Aware C headphones have some distinct advantages because they use the USB-C port on the phone rather than a typical headphone jack, offering active noise cancellation without additional batteries and higher quality end-to-end digital sound. They’re designed to be “sport” headphones that are built to take a beating and plenty of sweat, but they’ll of course work great for other situations as well.

And when you get them absolutely free when buying an HTC 10, it just makes the deal even sweeter. Just buy an HTC 10 from HTC.com between now and August 31, and the JBL Reflect Aware C headphones will automatically be added to your cart. To sweeten the deal even further, HTC is throwing in a $100 accessory credit to spend on the site with purchase. If you happen to want to buy the HTC 10 from another retailer, HTC is still throwing in the $100 accessory credit when you register your phone at HTC.com after buying — a nice gesture.

Not only can you get out ahead of the curve and be ready for the future of USB-C audio with some great headphones, you can do so for absolutely free if you’re interested in an HTC 10 — and if you’ve been on the fence maybe this will push you to getting one.

See at HTC

HTC 10

• HTC 10 review
• HTC 10 specs
• All HTC 10 news
• These are the HTC 10 colors
• Join our HTC 10 forums

HTC
Best Buy
Verizon
Sprint

Pokémon Go updates: Everything you need to know

There’s a new Pokemon Go update. Here’s what you need to know!

Pokémon Go updates aren’t common, but they are a big deal. Here’s what you need to know about each major one!

Update August 8: Added information about version 0.33.0 with new Sightings feature, and more!.

Version 0.33.0 – August 8, 2016

This version introduces a number of new features, including the ability to rename your trainer once — so consider it carefully — and a warning when the game detects that you’re moving in a vehicle, asking you to confirm that you are not actually driving while playing.

Here’s the official change log:

• Added a dialog to remind Trainers that they should not play while traveling above a certain speed; Trainers will have to indicate they aren’t the driver
• Fixed a bug that prevented “Nice,” “Great,” and “Excellent” Poké Ball throws from awarding the appropriate XP bonuses
• Enabled the ability for Trainers to change their nickname one time, so please choose your new nickname wisely
• Added visuals of Team Leaders Candela, Blanche, and Spark.
• We’re currently testing a variation of the “Nearby Pokémon” feature with a subset of users. During this period you may see some variation in the nearby Pokémon UI.

With this update, the game also introduces a change to the “Nearby Pokémon” box in the lower right of the screen, changing the wording to “Sightings”, along with the graphics behind the Pokémon in your vicinity. While we’re not sure how the new “Sightings” feature works just yet — and how different it is to the original “Nearby — we are exploring it and will update when we know more.

Show older updates

Version 0.31.0 — July 30, 2016

This version introduces a number of big changes to the game, including the contested removal of footprints for easily tracking nearby Pokémon. It also allows for the customization of Trainers after they have been outfitted, and introduces warnings to players against trespassing and playing the game dangerously.

• Avatars can now be re-customized from the Trainer profile screen
• Adjusted battle move damage values for some Pokémon
• Refined certain Gym animations
• Improved memory issues
• Removed footprints of nearby Pokémon
• Modified battle damage calculation
• Various bug fixes during wild Pokémon encounter
• Updated Pokémon details screen
• Updated achievement medal images
• Fixed issues with displaying certain map features
• Minor text fixes

Version 0.29.2 — July 13, 2016

This update fixes problems with Android Nougat Developer Preview users.

Pokémon Go

• Join our Pokémon Go forums!
• How to deal with GPS errors in-game
• Which team should you choose?
• How to play without killing your battery
• The Ultimate Pokémon Go Game Guide!
• Listen to the Pokémon Go podcast!