News

Fake Zoom scripts launch malware hidden beneath thousands of lines of code and whitespaceLaunchDaemons ensure the malware runs at boot with admin rights once installedMalicious components disguise themselves as legitimate tools like “icloud_helper” and “Wi-Fi Updater"A new cyber campaign using fake Zoom applications is targeting organizations across North America, Europe, and the Asia-Pacific, experts have warned.This cyber campaign, linked to North Korean hackers, is attributed to the BlueNoroff Group, a known affiliate of the infamous Lazarus Group, and spoofs legitimate video conferencing services from Zoom to fool victims.Primarily focused on the gaming, entertainment, and fintech sectors, this operation appears carefully coordinated and aims to compromise cryptocurrency wallets and other sensitive financial data.How the attack worksThe operation begins with a deceptive AppleScript, designed to look like it is performing routine Zoom SDK maintenance.Analysts have found the script padded with around 10,000 blank lines to hide the malicious commands buried deep within.These commands, found on lines 10,017 and 10,018, use a curl request to silently download malware from a spoofed domain: zoom-tech[.]us.Once installed, the malware embeds itself into the system using LaunchDaemon configurations that execute the malicious payload at startup with elevated privileges.Additional components are then retrieved from compromised infrastructure and disguised as normal macOS tools such as “icloud_helper” and “Wi-Fi Updater.”These components erase traces of temporary files and staging folders, using anti-forensics methods to avoid detection while maintaining backdoor access for remote commands and data theft.This method takes advantage of the common work-from-home scenario where technical glitches are resolved quickly and often with minimal scrutiny.The malware goes beyond simple credential theft. It actively looks for cryptocurrency wallet extensions, browser logins, and authentication keys, confirming BlueNoroff’s ongoing focus on financial gain.In one documented case, a Canadian online gambling company was targeted on May 28, when attackers used fake Zoom troubleshooting scripts to plant the malware.To stay safe, verify Zoom meeting participants independently, block suspicious domains, and use endpoint protection because attackers now use trusted platforms and familiar workflows to slip past basic protection.It is also important to choose the best antivirus and ransomware protection software, especially for organizations with digital assets or crypto holdings.Businesses should adopt identity theft protection to monitor exposed data and credentials, train staff on social engineering risks, and secure cryptocurrency tools with hardware wallets.Via CyberSecurityNewsYou might also likeThese are the best VPNs with antivirus you can use right nowTake a look at our pick of the best internet security suitesA popular WordPress theme has been hijacked by malware

Supply chain attacks are becoming more frequent and more dangerousMany security teams are worried about the risks 70% of firms have suffered one or more attacks in the past yearA new survey from SecurityScorecard reveals that cybersecurity leaders are faced with serious supply chain and third party risks. The survey outlines that CISOs and security professionals all around the globe are struggling to keep up with the pace of expanding threats.The software supply chain has become a worrying weak link for firms of all sizes, as smaller software providers are difficult to assess and often don’t have the cybersecurity capabilities large organizations can afford - with cybercriminals choosing smaller software companies as a point of intrusion to gain access to larger firms.A staggering 88% of respondents were either ‘very concerned’ or ‘somewhat concerned’ about supply chain cybersecurity risks, and with good reason too, since 70% say they have experienced one or more ‘material third-party cybersecurity incidents’, with 5% suffering 10 or more in the past year.Persistent threatsRecent research suggests third party involvement in threats has doubled from 15% to 30% in recent months, and a growing dependence on digital technologies also means a growing dependence on third party software for all industries.As such, organizations are tasked with stringent cybersecurity practices to keep themselves secure. But, not everyone is confident in their ability to do so, with only 26% of organizations incorporating supply chain security into their cybersecurity programs - most rely on ‘point-in-time, vendor-supplied assessments or cyber insurance.’Cybersecurity can be overwhelming even for firms with powerful capabilities, and nearly 40% of respondents reported that data overload and issues with prioritizing threats are their biggest challenge.“Supply chain cyberattacks are no longer isolated incidents; they’re a daily reality,” said Ryan Sherstobitoff, Field Chief Threat Intelligence Officer at SecurityScorecard“Yet breaches persist because third-party risk management remains largely passive, focused on assessments and compliance checklists rather than action. This outdated approach fails to operationalize the insights it gathers. What’s needed is a shift to active defense: supply chain incident response capabilities that close the gap between third-party risk teams and security operations centers, turning continuous monitoring and threat intelligence into real-time action. Static checks won’t stop dynamic threats—only integrated detection and response will.”You might also likeTake a look at our picks for the best malware removal aroundCheck out our choice for best antivirus softwareGenerative AI isn't biting into wages, replacing workers, and isn't saving time, economists say

Apple has introduced new fee structures for developers using the App Store in the EU in order to meet the requirements of the bloc's Digital Markets Act. Last month, the European Commission ruled that Apple was not in compliance the legislation and ordered the company to make changes within 30 days. Apple can still file an appeal of the decision until July 7.

The new terms make things a little complicated. When apps promote offers for digital goods or services in the EU, they'll be subject to an "initial acquisition fee" and a "store services fee" as well as a Core Technology Fee for apps with more than 1 million annual installs. Developers who agree to the StoreKit External Purchase Link Entitlement (EU) Addendum will be charged a Core Technology Commission (CTC) of 5 percent rather than the CTF. The CTC applies to "all sales of digital goods or services that occur within a 12-month period from the date of an install, including app updates and reinstalls" rather than the CTF approach based on installation numbers. The exact rules and exemptions are now listed on a dedicated support page.

There are also two separate tiers of fee structures. Tier 1 is for apps using mandatory store services and Tier 2 covers apps using optional store services. The initial acquisition fee is 2 percent for both tiers, although participants in the Apple Small Business Program and recurring subscriptions after the first year will not be subject to that charge. The Tier 1 store services fee is 5 percent, while Tier 2 is 13 percent normally or 10 percent for program participants.

That's the approach for the remainder of this year, although Apple said it plans to adopt a single business model of the Core Technology Commission for all developers in the EU beginning January 1, 2026.

Apple is also offering new terms about how developers can promote and communicate offers to users in the EU. The destination for a promo can now be "a website, alternative app marketplace, or another app, and can be accessed outside the app or within the app via a web view or native experience." The company is also toning down language in the "scare sheets" it displays when a user follows a link to outside the App Store. This article originally appeared on Engadget at https://www.engadget.com/apps/apple-details-new-fee-structures-for-app-store-payments-in-the-eu-204253948.html?src=rss

Elon Musk has reportedly fired Omead Afshar, Tesla's head of manufacturing and operations in North America and Europe, according to Forbes. Both CNBC and Bloomberg corroborated the report. Afshar's exit follows Milan Kovac, the head of engineering on Tesla's Optimus robot, who left the company in early June.

Afshar was promoted to the role last year, Bloomberg reports, after working for multiple different Musk-owned companies since 2017. The timing of his exit isn't particularly surprising given the trouble Tesla has faced selling cars. Sales in Europe have shrunk for a fifth consecutive month and the European Automobile Manufacturers' Association reports that registrations of new Teslas dropped by nearly 41 percent in May. The company is also struggling in China, where sales fell 15 percent in the same month.

While Musk appears to be holding Afshar responsible, the blame clearly lies at Musk's feet. Helping to fund President Donald Trump's re-election in the US, running the destructive DOGE cost-cutting efforts after his election and just generally maintaining a noxious public presence have permanently tainted Musk and his companies. While SpaceX still benefits from government contracts, Tesla's sales are vulnerable to public opinion, something the Tesla Takedown movement has been leveraging to its advantage with protests outside of the company's dealerships.

Firing Afshar, leaving his position in the US government and launching Tesla's robotaxi service in Austin are all different attempts from Musk to change the narrative around Tesla. It's not clear yet whether they'll actually help.This article originally appeared on Engadget at https://www.engadget.com/transportation/evs/elon-musk-reportedly-fired-a-key-tesla-executive-following-another-month-of-flagging-sales-205118891.html?src=rss