Netflix, Disney+, and Other Streaming Giants Are All Set to Fight Piracy
- Written by Ari Denial Cybersecurity & Tech Writer
“There is at least $29.2 billion in lost revenue each year due to online TV and film piracy in the US. Additionally, hundreds of thousands of jobs are being lost in the entertainment industry as a result of spiraling global visits to such sites,” stated Motion Pictures Association (MPA) .
According to the Intellectual Property Office (IPO), “There is a range of provisions in criminal and civil law which may be applicable in the case of password sharing where the intent is to allow a user to access copyright-protected works without payment.”
“Where these provisions are provided in civil law, it would be up to the service provider to take action through the courts if required,” they added.
Netflix already started testing the add-on fee ($3) for password sharing with different households in Peru, Costa Rica, and Chile last year. If reports are to be believed, Netflix plans to introduce this change in the US early this year. Users who share passwords with friends and family who don’t live in the same household will have to pay an additional fee. Account activity, device IDs, and IP Addresses will be taken into account to enforce this practice.
SpyNote Is Using Android Spyware to Target Financial Institutions
- Written by Ari Denial Cybersecurity & Tech Writer
Since October 2022, financial institutions have been targeted by a new version of Android malware called SpyNote (aka SpyMax).
“The developer of SpyNote, who was previously selling it to individuals via his Telegram channel, made the source code public on GitHub. This has helped hackers further develop and distribute the spyware, often also targeting banking institutions,” said ThreatFabric .
SpyNote is a feature-rich application that can install arbitrary apps, gather SMS messages, calls, videos, and audio recordings, track GPS locations, and even prevent attempts to uninstall the app.
According to ThreatFabric, “One of the main differences between the first variants, SpyNote.A and SpyNote.B, and the latest one, SpyNote.C, is the campaign objective. SpyNote.C has been the first variant to openly target banking applications, impersonating a large number of reputable financial institutions like HSBC, Deutsche Bank, Kotak Bank, and BurlaNubank, as well as others to well-known applications like WhatsApp, Facebook, and Google Play.”
Similarly to other banking malware, SpyNote requests access to accessibility services to extract two-factor authentication (2FA) codes from Google Authenticator and record keystrokes to deceive banking credentials.
SpyNote utilizes Android’s MediaProjection API to capture screen content and steal Facebook and Gmail passwords. It is also able to pose as the official Google Play Store service and other generic applications in the productivity, gaming, and wallpapers categories.
As per ThreatFabric, these are a few of the SpyNote artifacts that are mainly delivered through smishing attacks:
- Bank of America Confirmation (Package Name – yps.eton.application)
- Kotak Bank (Package Name – splash.app.main)
- HSBC UK Mobile Banking (Package Name – com.employ.mb)
- BurlaNubank (Package Name – com.appser.verapp)
- Deutsche Bank Mobile (Package Name – com.reporting.efficiency)
- Current Activity (Package Name – com.willme.topactivity)
- Conversations_ (Package Name – com.appser.verapp)
- Virtual SimCard (Pacakge Name – cobi0jbpm.apvy8vjjvpser.verapchvvhbjbjq)
The Dutch Security Firm estimated that 87 different customers purchased SpyNote.C between August 2021 and October 2022 after its developer advertised it on Telegram under the name CypherRat. However, it appears that several criminal groups are co-opting CypherRat in their campaigns since SpyNote became open source in October 2022.
“SpyNote will keep using Accessibility Service to collect essential data from users’ devices and it will be able to develop towards a successful distribution. We also believe that the trend will continue adopting better security measures like obfuscation and packers to help safeguard the program itself. Different forks of SpyNote will likely continue appearing, following the release of its source code”, the company predicted.
