Hackers target Windows clipboard to steal cryptocurrency wallet addresses

New email-based malware dubbed as ComboJack is targeting Japanese and American web surfers to steal cryptocurrency during transactions. Once installed and lurking in the background, the malware grabs the victim’s long cryptocurrency wallet address stored in the Windows clipboard. Due to their extreme length, many users simply copy and paste that string of characters, and that is when ComboJack attacks. 

Discovered by researchers at the Palo Alto Networks, it’s a variant of a cryptocurrency stealer called CryptoJack. It grabs the address of a victim’s cryptocurrency wallet coped to the clipboard and replaces it with the address of the hacker’s wallet. Thus, victims believe they are transferring digital currency to their personal virtual wallets when instead they’re unknowingly pasting a different destination into the transaction prior to completion. 

CryptoShuffler was the first malware to use this stealing agent in 2017, but solely focused on Bitcoin. In 2018, ComboJack arrives to target not only Bitcoin investors, but Ethereum, Litecoin, Monero, and many other digital currencies. But the route this malware takes can be avoided by simply not opening an emailed attachment from untrusted sources.  

According to the report, victims receive emails regarding a lost passport. The shady message requests that the victim view an attachment that’s supposedly a scanned passport in a PDF format for identification purposes. But once victims open the PDF, they are presented with a single line to open an embedded document. Inside this secondary file is an embedded remote object that attacks a security hole in Windows. 

“An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory,” Microsoft’s database states. “An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.” 

The embedded remote object downloads a two-part file, one part containing a self-extracting executable, and a second part containing password-protected components to create and install the final payload: ComboJack. The malware then uses a built-in Windows tool to give it system-level privileges, edits the registry to make sure it remains running in the background and enters into an infinite loop. ComboJack then checks the system clipboard every half second for a cryptocurrency wallet address. 

So why aren’t cryptocurrency users simply manually entering their wallet addresses? Because it’s a pain. Ethereum addresses are 42 characters long while Bitcoin uses 34 characters. The longest is likely Monero, which relies on addresses with characters counts between 95 and 106. This is why users typically copy and paste their addresses, which serves as a virtual gold mine for hackers. 

While the suggestion of manually entering addresses during transactions is out of the question, opening files attached to emails sent from unknown parties is an extremely bad idea. In this case, the big clue starts with the actual poorly written message along with its suspicious attachment. But even after opening the PDF, the request to open another file should be another huge red flag.

Editors’ Recommendations

• The best bitcoin wallets
• How to find the IP address of your router and login info
• Ethereum vs. bitcoin: What’s the difference?
• How to trade bitcoin for other cryptocurrencies
• IRS forces Coinbase to cough up tax data of 13,000 digital coin traders

Google Home and Home Mini get hands-free calling in the UK

The Home Mini is also on sale for £39.

I use my Google Home every single day for a variety of things, but one feature that continues to put a smile on my face each time I use it is the ability to makes hands-free voice calls. This is something that’s been available in the United States since last August, and now it’s finally making its way to the UK.

Whether you have a Google Home or Google Home Mini, you can now use your voice to call any of your contacts or businesses that are listed on Google Search/Maps. Also, after you make your first call with Google Home, you can open the Home app on your phone and link your mobile number so that’s what people see when you make a hands-free call.

Placing a call is as easy as saying “Hey Google, call Mum”, and because Google Home knows your voice, it’ll know to call your mum rather than your partner’s or your roommate’s.

Hands-free calling is rolling out to users across the UK over the coming week, and in celebration of its launch and Mother’s Day in the country, you can pick up the Google Home Mini for just £39 (£10 off) between March 5th and the 12th at the Google Store, Currys PC World, John Lewis, and Argos.

See at Google Store

Google Home

• Google Home review
• Google Home Max review
• These services work with Google Home
• Google Home vs. Amazon Echo
• Join our Google Home forums!

Google Store Best Buy Target

Google is helping US military train AI to study drone footage

The US military’s Project Maven is getting some help using AI to interpret drone footage from a not-entirely-unexpected source: Google. The company has confirmed a Gizmodo report that it’s offering TensorFlow programming kits to the Defense Department as part of a pilot that helps Project Maven process the glut of drone footage quickly. Google stresses that the machine learning technology is involved in “non-offensive uses only,” and that it’s flagging material for “human review.” This isn’t helping with drone strikes, then, but it has still raised concerns inside Google’s ranks.

According to Gizmodo sources, some Google staffers were “outraged” that the company would contribute AI tech for drone operations. Others, meanwhile, said it prompted ethical questions about the subjects machine learning should cover. This doesn’t involve killer robots, but it may be uncomfortably close for some.

A tipster for The Verge added that Google was helping the military configure TensorFlow for use, although it’s not clear whether that’s active development or just the basic setup process.

The Defense Department has declined to comment on whether or not Google is its only partner in Project Maven. However, it’s not surprising that Google would be involved. Where many military initiatives take years to get rolling, Project Maven was expected to swing into action within 6 months (it reportedly saw first use against ISIS in December). That didn’t leave the military a lot of time, and a combination of private and academic assistance was necessary to help meet the ambitious goal. Like it or not, a private-public AI partnership with the military was more a matter of “when” than “if.”

Via: The Verge

Source: Gizmodo

Even Merriam-Webster realizes the world is a dumpster fire

Every year, the vocabulary druids at Merriam-Webster decide which words bubbling to the top of the cultural consensus should be immortalized forever in its dictionary. In early 2017, the list of over 1,000 additions included CRISPR and botnet, a clear reflection of the scientific and election-related terms buzzing around society. But now, Merriam-Webster has added the words that so clearly defined last year — and at the top of the list is ‘dumpster fire.’

After considering its widespread and meaningful evidence of use, we’ve put ‘dumpster fire’ in the dictionary. Feel free to GIF it as you like. https://t.co/XImxk6c0EY

— Merriam-Webster (@MerriamWebster) March 5, 2018

As NY Mag pointed out, dumpster fire was named the ‘meme of 2016’ by Mother Jones, and last year certainly followed suit. The term certainly blew up during the 2016 election, but the term is far older, as Huffington Post revealed in a deep dive. Still, Merriam-Webster clearly understood its important use as communal catharsis when it chose to include it.

Merriam-Webster added 849 other now-relevant words to the dictionary this year, including self-care, welp, cryptocurrency, initial coin offering and…chiweenie. The list also contains a 20-year-old Simpsons gag, embiggens, which has recently become a catchphrase for comic and media versions of the wonderful Ms. Marvel.

A noble spirit embiggens the smallest man.

Also, ’embiggen’ is now a word we enter. https://t.co/3XmkZO0ral pic.twitter.com/wLUDsWIAga

— Merriam-Webster (@MerriamWebster) March 5, 2018

Via: NY Mag

Source: Merriam-Webster

Google Lens is now available for non-Pixel Android phones

Google Lens is making it way from the Pixel to Android devices and iPhones alike starting today. In a roundabout way, that is. The AI-powered photo analyzing app will live inside Assistant in Google Photos, as spotted by 9to5 Gooogle. The announcement was first made at Mobile World Congress. You should see an overlay on your photos indicating that it’s available for the Lens treatment. The Android roll-out is happening right now, so if you don’t see the update you might need to be patient. Apple fans, however, will have to make do with an ambiguous “coming soon.”

Rolling out today, Android users can try Google Lens to do things like create a contact from a business card or get more info about a famous landmark. To start, make sure you have the latest version of the Google Photos app for Android: https://t.co/KCChxQG6Qm
Coming soon to iOS pic.twitter.com/FmX1ipvN62

— Google Photos (@googlephotos) March 5, 2018

Via: 9to5 Google

Source: Google Photos (Twitter)

Pepe The Frog’s creator sues Infowars for copyright infringement

Despite artist Matt Furie’s attempts to reclaim his Pepe The Frog character from neo-Nazis, his cartoon is still being used by the far-right. He created Pepe in the early 2000s and has described the character as a “peaceful frog-dude” whose true nature “celebrates peace, togetherness and fun.” But in 2015, the far-right began to appropriate Pepe, using him as a representation of hate, white supremacy and anti-Semitism and the character became tied to racists and conspiracy theorists like Richard Spencer and Mike Cernovich. Furie has tried to reclaim Pepe through a #SavePepe campaign and by issuing cease-and-desist notices to those using its image and companies like Amazon, Google and Reddit whose sites hosted infringing content. He even tried to kill off the character last year. Now, he’s going after Infowars.

As the Hollywood Reporter notes, Infowars is currently selling a poster that features Pepe The Frog alongside likenesses of Donald Trump, Milo Yiannopoulos, Ann Coulter, Matt Drudge, Roger Stone, Paul Joseph Watson, Kellyanne Conway and two Trump supporters known as Diamond and Silk. Trump’s “MAGA” slogan is written on the bottom. Furie has filed a lawsuit against Infowars for its use of Pepe in the poster saying in his complaint that he “did not authorize the use of the Pepe image or character in this poster, and does not approve of the association of Pepe with Alex Jones or any of the other figures in this poster, or with the ‘MAGA’ slogan.”

Furie is seeking damages and any profits made from the poster. He’s also asking for an injunction that would prohibit Infowars and anyone working with the site from using Pepe’s likeness.

Via: AV Club

Source: Copyright Infringement Complaint

Honda’s Urban EV pre-orders start in early 2019

Honda said it wanted to sell its Urban EV Concept sometime in 2019, and now it’s official. The automaker has announced that it will start taking orders for a production version of the tiny retro electric car in early 2019, with a European launch in late 2019. There’s no mention of launches in other areas, or an official version of the Sports EV Concept.

Don’t expect to get the exact vehicle you saw in September 2017. While the cheerful-looking design is likely to remain largely intact, the Urban EV was a concept car — Honda is likely to scale back a lot of the technology as the practical realities of manufacturing take over. You probably won’t get the cute external displays or the ultra-wide touchscreen. We’d also expect Honda to tone down certain flourishes, like the square-like steering wheel and wooden dash. Still, it’s notable that Honda is making the Urban EV in the first place — you won’t have to give up that iconic look just to drive an emissions-free Honda machine.

Via: CNET

Source: Honda

Apple Updates Apple Music for Android With Music Video Improvements

Apple today released a new update for its Apple Music app designed to be used on Android devices, which Apple says significantly improves stability to make music playback more reliable.

Apple says today’s Apple Music Android update also introduces “new experiences” for music videos. Users can now watch music videos in fullscreen or inside Now Playing and music videos will continue to play while browsing other areas of the app.

Music videos can also be added to playlists to watch them back to back, and you can listen to music videos in the background while using other apps.

Apple has offered an Apple Music for Android app since November of 2015, and the company regularly updates the app with new features to keep it on par with the iOS versions of Apple Music. The app’s last major update came in April of 2017, when Apple introduced major design changes.

Apple Music for Android can be downloaded from Google Play for free.

Tags: Android, Apple Music
Discuss this article in our forums

Don’t Starve: Pocket Edition review

In Don’t Starve you’re dropped into a world of dangers; use your wits and ingenuity to craft tools to help you survive – no matter what you do though, the end will always be the same.Death is inevitable. My first two days in Don’t Starve were no different; here’s about how they went:

Day 1 – Morning.

“Say pal, you don’t look so good. You’d better find something to eat before night comes.” That’s the only thing the gaunt, sharply-dressed man said to me. I lay on the ground, dazed, as he vanished into a crack in front of my very eyes. Climbing unsteadily to my feet, I looked around at the lightly-wooded grassland. It was specked with tufts of grass, tiny saplings, and wildlife ranging from butterflies to birds to rabbits.

Without the benefit of guidance from a higher power (or even a helpful omnipotent narrator) I began to collect things that might be useful. The branches of the saplings broke away easily enough, and one of the many rocks strewn about turned out to be flint – bound to the branches using some of the aforementioned grass, it created a sort of crude axe. My first tool.

Day 1 – Afternoon.

As the sun descended lower in the evening sky, the gaunt man’s advice grew more poignant – my stomach grumbled. Foraging for berries and wild carrots remedied my hunger for the moment, but as the night crept ever closer, I knew I would need a fire to chase away the shadows – and whatever might lurk in them.

Day 1 – Night.

I gathered enough wood and grass to form a campfire, then fed it logs from nearby trees to keep the flames high. In the darkness, I heard things moving around – I fed another log to the fire.

Day 2 – Morning.

I rose with the dawn, determined after a fitful night’s sleep to get something done to better my circumstances. I made a pickaxe out of more flint and twigs – it would be useful for chipping away at the many boulders in the area. And with that, I had an idea. I would need to build better tools – and a shelter – if I was going to survive in this strange place. So I set out, determined to find enough components to build what I’d need. A road, spied through the trees, led to the North and South – I chose North.

The road passed by a series of headstones – a small, makeshift graveyard, likely full of the people that came before me. Between the graves, a small glimmer – no, two – caught my eye. Wary of ghosts but more curious, I stepped into the graveyard and plucked the shiny objects from the gravedirt. Gold! Two gold nuggets, just sitting there in a graveyard! Confused but not one to complain about good fortune, I pocketed the nuggets and continued down the road, hoping to find some civilization.

Day 2 – Afternoon.

No such luck.

Instead of a town, coming around the bend in the road I found the trees lined with thick strands of spider silk, forming massive webs. Giant egg sacs pulsated from within the webs, and to my horror hatchlings the size of my head extricated themselves from the silk before my eyes. With an inhuman screech, they skittered toward me on eight gooey legs.

In a panic, I swung my primitive axe repeatedly, striking the spiders over and over until they lay dead, carapaces shattered into a dozen and more pieces. The egg sacs pulsated wildly, almost as if they sensed the demise of their brood. I crushed them into mush, and the road was quiet once more. Thinking, perhaps that some of the remains might be useful, I gathered the silk and spider meat and carried on.

Having found what I needed to build my crafting station, I found a small copse of trees and set about clearing the area. Here I built the station, tucking away the remaining lumber for safe keeping, and began my research. Thoroughly inspired by the result, I began to explore other ideas – armor made from bundles of the grass that grew so plentifully around my camp, a chest made of lumber to store my components, a wall to keep unwanted creatures away.

Day 2 – Night.

So lost was I in my inventing fervor that I barely noticed when the sun drooped over the horizon. I turned to my stockpile of components and reached for the grass I needed to kindle my campfire, only to find I had used the last of it to make my armor.

And as the last sliver of daylight vanishes behind the horizon, I listen to the beings in the dark growing ever closer. They are coming for me.

Impressions of Don’t Starve

Don’t Starve is a survival-crafting game from KLEI Entertainment. In it, the goal is to stay alive as long as humanly possible, taking into account Hunger, Sanity and Health as you brave the unknown wilderness in which you wake up. Along the way you will research and build new tools and equipment to help you survive.

The graphics in the game are top-notch. Beautiful, hand-drawn graphics with a 2D feel, but in a 3D world. It’s a unique style that really leaves an impression. It’s very Tim Burton-y in a way, calling back to Nightmare Before Christmas in its design. There were a couple graphical glitches on my LG V30, though, with the game’s UI not scaling properly and leaving a couple of the buttons bleeding off the screen with no way to fix it without manually changing the resolution of my phone – which, luckily, is an option in the V30’s menus.

When you load up Don’t Starve, a haunting, brassy melody greets you – and sets the tone for the rest of the game. In addition to its absolutely beautiful graphics, KLEI’s signature game also features fantastic sound design. It doesn’t feature a full voice-over, but the Peanuts-esque whomp-whomp sounds characters make is oddly perfect for the setting.

Gameplay-wise, Don’t Starve gives no help; no tutorial, no hand-holding, not even an explanation of the controls. I found the lack of a tutorial to be jarring, but immersive – when you know as little as the main character, it really embeds you in the role. Exploring the world and figuring out the mechanics is half the charm of the game, as long as you’re ready for it. If you aren’t, it can be quite frustrating – consider yourself warned.

Value

Don’t Starve is $4.99 on the Google Play Store. While that may seem steep for a mobile game, it should be noted that the same game on Steam or Consoles costs up to $14.99 – the mobile game is a bargain, by comparison.

Pre-order your Microsoft Surface Pro with LTE for always-on internet

Microsoft’s Surface Pro is perhaps the most iconic detachable tablet 2-in-1 around, which makes sense given that it essentially defined the market when it was first introduced in 2013. The latest version updated the pen technology, improved performance, and refined the design, making it our favorite overall 2-in-1. It really lacked one important feature, always-on connectivity, and Microsoft is resolving that with the new Surface Pro with LTE version that is now widely available for pre-order.

As The Verge reports, the machine was made available to business customers in December. If you head over to the Microsoft Store, you will see that you can now enter in your order for one of the two versions that will make their way to the market. There will be two models, one with 4GB of RAM and a 128GB PCIe solid-state drive (SSD) for $1,150 and one with twice the RAM and storage for $1,450. Both will be equipped with a seventh-generation Intel Core i5 processor, and it’s the more powerful version that is currently listed for pre-order.

Here are the complete specifications for the Surface Pro:

Dimensions
11.5 x 7.93 x 0.33 in

Weight
1.70 pounds (tablet only)

Keyboard
Signature Type Cover optional

Processor
Seventh-generation Intel Core i5

RAM
4GB or 8GB RAM

Graphics
Intel UHD 620

Display
12.3-inch PixelSense display

Resolution
2,736 x 1,824 or 267 PPI

Storage
128GB or 256GB PCIe SSD

Networking
802.11ac, Bluetooth 4.1

Connectivity
USB-A 3.0, Surface Connect port, mini-DisplayPort, microSD card reader, 3.5mm combo jack

Windows Hello
Infrared camera

Operating System
Windows 10

Battery
45 watt-hour

Price
$1,150

Availability
Pre-order

Review
4 out of 5 stars

Of course, you will likely want to pick up a Surface Pen for $100 and a Signature Type Cover for $160. Unfortunately, neither of them are included with the Surface Pro itself and the keyboard, in particular, is a vital component if you want to use the tablet as more of a traditional laptop.

The LTE configurations are great options for anyone who needs to be highly mobile, given the 2-in-1’s excellent battery life and overall solid productivity performance. And if you work in quiet environments, never fear — the LTE configurations are also fanless, meaning they’re completely silent even while working hard. The additional LTE Advanced connectivity means that you will be able to stay connected to the network anywhere you go.

If you order today, you will receive your Surface Pro with LTE Advanced by May 1.

Editors’ Recommendations

• Amazon is blowing out prices on the original Surface Book, starts at $790
• The best laptops for video editing
• Asus ZenBook 13 vs. Dell XPS 13
• Samsung Notebook 9 Pen vs. Pixelbook
• Dell XPS 13 vs. Dell XPS 15 2-in-1