TECHNOLOGY
Andariel, a Lazarus subgroup, expands its attacks with new ransomware
August 10, 2022 7:57 p.m.
Kaspersky experts have uncovered new attacks by Andariel, an advanced persistent threat (APT) subgroup of Lazarus, known for its campaigns in South Korea.
The attacks involved modifications of the well-known malware, DTrack, as well as the use of a brand-new Maui ransomware. They targeted high-profile organizations in the USA, Japan, India, Vietnam, and Russia.
Andariel has operated for over a decade within the infamous Lazarus group, and Kaspersky researchers identified an interesting incident in Japan involving a never-before-seen Maui ransomware. However, in 2022, the group continued expanding its malware arsenal and the geography of its attacks. As CISA reported in July 2022, Andariel affected public and healthcare organizations with the Maui ransomware. Following their research, Kaspersky experts have revealed a thorough analysis of the APT group.
It shows that Andariel deploys a well-known DTrack malware, which executes an embedded shellcode, loading a final Windows in-memory payload. According to Kaspersky Threat Attribution Engine, this spyware was reportedly created by the Lazarus Group and is being used to upload and download files to victims’ systems, record keystrokes and conduct other actions typical of a malicious remote administration tool (RAT). DTrack collects system information and browser history via Windows commands. Interestingly, dwell time within target networks can last for months prior to activity.
The novel malware used by Andariel in 2021 and 2022 has been dubbed Maui ransomware. Kaspersky experts identified its launch after DTrack was deployed within an organization. Maui has been employed for attacks on multiple occasions, primarily targeting companies in the USA and Japan. Kaspersky researchers have assessed that the actor is opportunistic and may compromise any company around the world regardless of their category of business, instead focusing on their good financial standing.
“We’ve been tracking the Andariel APT group for years and see that their attacks are constantly evolving. What requires special attention is that the group has started deploying ransomware on a global scale, demonstrating ongoing financial motivations and interest,”’ comments Kurt Baumgartner, a security expert at Kaspersky.
To learn more about Maui ransomware and other malware used by Andariel, read the report on Securelist.com
To protect yourself and your business from ransomware attacks, consider following these Kaspersky recommendations:
- Do not expose remote desktop services (such as RDP) to public networks unless absolutely necessary and always use strong passwords for them.
- Promptly install available patches for commercial VPN solutions, providing access for remote employees and acting as gateways in your network.
- Always keep software updated on all the devices you use to prevent ransomware from exploiting vulnerabilities.
- Focus your defense strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to outgoing traffic to detect cybercriminals’ connections.
- Back up data regularly. Make sure you can quickly access it in an emergency when needed.
- Use solutions like Kaspersky Endpoint Detection and Response Expert and Kaspersky Managed Detection and Response service, which help identify and stop attacks during the early stages, before attackers reach their final goals.
- Educate your employees to protect the corporate environment. Dedicated training courses can help, such as the ones provided in the Kaspersky Automated Security Awareness Platform.
- Use a reliable endpoint security solution, such as Kaspersky Endpoint Security for Business, that is powered by exploit prevention, behavior detection and a remediation engine that is able to roll back malicious actions. KESB also has self-defense mechanisms, which can prevent its removal by cybercriminals.
- Use the latest Threat Intelligence information to stay aware of actual TTPs used by threat actors. The Kaspersky Threat Intelligence Portal is a single point of access for Kaspersky’s TI, providing cyberattack data and insights gathered by our team for almost 25 years. To help businesses enable effective defenses in these turbulent times, Kaspersky has announced access to independent, continuously updated and globally sourced information on ongoing cyberattacks and threats, at no charge. Request access to this offer here.
TECHNOLOGY
Xiaomi introduces Redmi A5: Powerful camera, performance upgrades wrapped in new design
3:34 p.m. May 23, 2025
XIAOMI Corporation, a consumer electronics and smart manufacturing company with smartphones and smart hardware connected by an Internet of Things (“IoT”) platform at its core, has unveiled Redmi A5, seamlessly blending an extensive array of generous upgrades that make advanced smartphone features accessible to a broader audience.
With a refreshed design, a significantly improved camera, and a larger display, Redmi A5 transforms the essentials into an experience that feels effortlessly refined, crafted for those who value both practicality and aesthetics in their everyday smartphone.
Design and Display
Redmi A5 introduces a sleek new design, elevating its visual appeal with a stylish flat frame and an enhanced camera deco with an all-new metallic-feel surround. This smartphone comes in sophisticated color options, each evoking a distinct sense of character. Midnight
Black and Sandy Gold feature a matte, smudge-resistant finish that offers a timeless, understated elegance. Lake Green and Ocean Blue take inspiration from nature, their veined patterns reminiscent of ripples on a tranquil body of water. With its slim 8.26mm body, Redmi A5 balances modern elegance with a comfortable grip.
Despite its slim profile, Redmi A5 expands possibilities with an up to 120Hz large 6.88-inch display, offering a truly immersive experience whether watching videos, browsing, or reading. Even when hands are damp, wet touch technology helps to maintain responsiveness, further improving usability. Meanwhile, for those longer sessions, TÜV Rheinland-certified eye protection and DC dimming help to minimize strain, making extended screen time easier on the eyes.
Camera and Performance Upgrades
Complementing the display, Redmi A5 introduces a substantial leap in camera capabilities through its powerful 32MP AI dual camera, allowing users to capture moments with remarkable clarity. With a larger sensor that takes in 18% more light4 than the previous generation, night photography stands out with improved detail, delivering brighter, clearer shots in low-light settings. The camera keeps photos crisp and vivid even when confronted with challenging backlit settings. Turning to the front, the upgraded 8MP selfie camera delivers natural-looking portraits with fresh detail. At the same time, the soft-light ring, achieved from the display’s illumination, allows users to take well-lit selfies even in dim environments. Thanks to these thoughtful innovations, Redmi A5 makes capturing and preserving memories effortless, whether a scenic view or a fleeting moment.
Building on its impressive camera upgrades, Redmi A5 has been designed to seamlessly fit into your fast-paced lifestyle, offering features for reliability and convenience at every turn. Powered by the octa-core UNISOC T7250 processor and supported by up to 8GB of RAM5 through memory extension, Redmi A5 easily handles multitasking, providing smooth app performance even during demanding tasks. Yet with its powerful performance, Redmi A5 doesn’t compromise battery life. Equipped with a 5200mAh battery, it supports over 20 hours of video playback and over hours of gaming on a single charge, keeping you going throughout the day.
For further added convenience, Redmi A5 also offers secure access through a side fingerprint sensor and face unlock. Plus, with the 3.5mm headphone jack, users can continue enjoying high-quality wired audio.
Pricing and Availability
Redmi A5 arrives in the Philippines in four colors—Midnight Black, Sandy Gold, Lake Green, and Ocean Blue—offered in two variants: one with 3GB of RAM and 64GB of storage at only P3,599, and another with 4GB of RAM and 128GB of storage at just P4,099.
It has been available online starting May 20 via Xiaomi’s official Shopee and Lazada stores, and in authorized Mi Stores nationwide beginning May 23.
TECHNOLOGY
Chevron champions program to help Filipino pros upskill in Cloud Computing
10:03 a.m. May 21, 2025
Chevron, marketer of Caltex and lubricants, has joined forces again with education technology platform Edukasyon.ph to sponsor a second batch of Amazon Web Services (AWS) re/Start scholars and help unemployed Filipinos upskill in cloud computing. Their joint efforts culminated in April 2025, when all 50 students graduated from the program with flying colors.
The AWS re/Start program is a skills development and job training program that prepares unemployed or underemployed individuals for information technology careers. In 9-12 consecutive weeks, learners gain both technical knowledge as well as behaviors, mindsets and employment essentials, preparing them for entry-level careers in the cloud.
The program also links graduates to in-demand tech jobs, allowing them to apply their new skills and provide for their families. Employers that were present at this year’s exclusive career fair include Chevron, Bayad Center, Kuehne Nagel, Stratpoint, Boss Jobs, Promotexter, Software One, ECloud Valley, Absi and Maverick.
According to Chevron Philippines Senior Corporate Advisor Raissa Bautista, Chevron values its partnership with the AWS re/Start program and Edukasyon.ph as their tie-up offers learners opportunities to continue their education and personal growth. This would also prepare graduates to enter the dynamic field of cloud computing and innovate in their respective companies.
She told the graduates, “This program has created a full circle of education and gives everybody a second chance if they had to stop for a while. I am also fascinated with the age of digitization because I think it’s really the future. I know the possibilities are limitless, so just spread your wings and good luck.”
Meanwhile, Edukasyon.ph Strategic Account Manager Joshua Toquero said that Edukasyon and Chevron renewed their partnership for AWS re/Start because they both value helping young professionals reach their dream careers.
He also hopes that AWS re/Start graduates realize they no longer have to struggle alone because multiple stakeholders are willing to help them reach their dreams. “I hope they believe that no man is an island and that you can achieve your goals if you work hand-in-hand with other people in the community.”
TECHNOLOGY
Vertiv accelerates AI Infrastructure Evolution in alignment with NVIDIA 800 VDC Power Architecture Announcement
12:11 p.m. May 20, 2025
Designed for next-generation AI factories, Vertiv’s 800 VDC solutions planned for 2026, in support of NVIDIA rack-scale compute platforms
Vertiv (NYSE: VRT), a global provider of critical digital infrastructure, today confirmed its strategic alignment with NVIDIA’s announcement of an AI roadmap to deploy 800 VDC power architectures for the next generation of AI-centric data centers. Paving the way for future-ready designs, Vertiv’s 800 VDC power portfolio is scheduled for release in the second half of 2026 — ahead of NVIDIA Kyber and NVIDIA Rubin Ultra platform rollouts.
Vertiv aligns with the NVIDIA AI roadmap to stay one GPU generation ahead, enabling customers to deploy their power and cooling infrastructure in sync with NVIDIA’s next-generation compute platforms. Vertiv provides end-to-end power, cooling, integrated infrastructure and services to support AI factories and other data center deployments.
As rack power requirements in AI environments scale beyond 300 kilowatts, 800 VDC enables more efficient, centralized power delivery by reducing copper usage, current, and thermal losses. Vertiv’s upcoming portfolio will feature centralized rectifiers, high-efficiency DC busways, rack-level DC-DC converters, and DC-compatible backup systems, expanding its broad, end-to-end power management portfolio that already includes a robust AC power train.
“As GPUs evolve to support increasingly complex AI applications at giga-watt scale, power and cooling providers need to be equally innovative to provide energy-efficient and high-density solutions for the AI factories. While the 800 VDC portfolio is new, DC power isn’t a new direction for us, it’s a continuation of what we’ve already done at scale,” said Scott Armul, executive vice president of global portfolio and business units at Vertiv. “We’ve spent decades deploying higher-voltage DC architectures across global telecom, industrial, and data center applications. We’re entering this transition from a position of strength and bringing real-world experience to meet the demands of the AI factory.”
Vertiv’s experience in DC power spans more than two decades of ±400 VDC deployments, broadened by strategic acquisitions during the early 2000’s. These solutions support critical loads in global telecom networks, integrated microgrids, and mission-critical facilities. This foundation establishes Vertiv as a trusted leader in the safe design, deployment, and operation of higher-voltage DC architectures, with proven scale, portfolio, and long-term serviceability.
Designed for homogeneous AI zones in hyperscale environments, Vertiv’s 800 VDC portfolio is a key pillar of its “unit of compute” strategy — a systems-level design engineered to enable all infrastructure components — to interoperate as one modular and scalable system, matching infrastructure demands of next-generation GPUs. Vertiv’s support for both AC and DC architectures is a strategic differentiator in the evolving AI data center landscape.
For more information about Vertiv’s DC power solutions and end-to-end power and cooling solutions, visit www.vertiv.com.
Xiaomi introduces Redmi A5: Powerful camera, performance upgrades wrapped in new design
DEFTAC celebrates 3 decades of excellence, honors global champs
Chevron champions program to help Filipino pros upskill in Cloud Computing
