Connect with us

TECHNOLOGY

The next WannaCry and drone hacking: Advanced persistent threats in 2023

November 16, 2022 1:14 p.m.

Kaspersky researchers presented their vision of the future for advanced persistent threats (APTs), defining the changes in the threat landscape that will emerge in 2023. Attacks on satellite technologies, mail servers, the rise of destructive attacks and leaks, drone hacking and the next big cyber epidemic are among some of the predictions for the next year.

The political turmoil of 2022 brought about a shift that will echo in cybersecurity for years to come and have a direct effect on the development of future sophisticated attacks. The 2023 forecast is based on the expertise and the activities the Kaspersky Global Research and Analysis Team (GReAT) has witnessed this year while tracking more than 900 APT groups and campaigns.

The next WannaCry and drones for proximity hacking

Statistically, some of the largest and most impactful cyber epidemics occur every six to seven years. The last such incident was the infamous WannaCry ransomware-worm, leveraging the extremely potent EternalBlue vulnerability to automatically spread to vulnerable machines. Kaspersky researchers believe the likelihood of the next WannaCry happening in 2023 is high. 

One potential reason for an event like this occurring is that the most sophisticated threat actors in the world are likely to possess at least one suitable exploit, and current global tensions greatly increase the chance a ShadowBrokers-style hack-and-leak could take place.

Major shifts will be reflected in new types of targets and attack scenarios too, as experts believe next year, we may see bold attackers and specialists adept at mixing physical-and cyber-intrusions, employing drones for proximity hacking. 

Some of the possible attack scenarios include mounting drones with sufficient tooling that would allow the collection of WPA handshakes used for offline cracking of WiFi passwords or even dropping malicious USB keys in restricted areas in the hope that a passer-by would pick them up and plug them into a machine.

Other advanced threat predictions for 2023 include:

  • SIGINT-delivered malware

One of the most potent attack vectors imaginable, which uses servers in key positions of the internet backbone allowing man-on-the-side attacks, may come back stronger next year. While these attacks are extremely hard to spot, Kaspersky researchers believe they will become more widespread and will lead to more discoveries.

  • The rise of destructive attacks

Given the current political climate, Kaspersky experts foresee a record number of disruptive and destructive cyber-attacks, affecting both the government sector and key industries. It is likely that a proportion of them will not be easily traceable to cyber incidents and will look like random accidents. The rest will take the form of pseudo-ransomware attacks or hacktivist operations to provide plausible deniability for their real authors. High-profile cyber attacks against civilian infrastructures, such as energy grids or public broadcasting, may also become targets, as well as underwater cables and fiber distribution hubs, which are challenging to defend.

  • Mail servers become priority targets

Mail servers harbor key intelligence so are of interest to APT actors and have the biggest attack surface imaginable. The market leaders of this type of software have already faced exploitation of critical vulnerabilities, and 2023 will be the year of 0days for all major email programs.

  • APT targeting turns toward satellite technologies, producers, and operators

With existing capabilities, evidence of APTs being capable of attacking satellites -with the Viasat incident as an example- it is likely that APT threat actors will increasingly turn their attention to the manipulation of, and interference with, satellite technologies in the future – making the security of these technologies ever more important.

  • Hack-and-leak is the new black (and bleak)

The new form of hybrid conflict that unrolled in 2022 involved a large number of hack-and-leak operations. These will persist in the coming year with APT actors leaking data about competing threat groups or disseminating information.

  • More APT groups will move from CobaltStrike to other alternatives

CobaltStrike, a red-teaming tool, has become a tool of choice for APT actors and cybercriminal groups alike. With it gaining so much attention from the defenders, it is likely that attackers will switch to new alternatives such as Brute Ratel C4, Silver, Manjusaka or Ninja, all offering new capabilities and more advanced evasion techniques.  

“It is quite clear 2022 saw major changes to the world’s geopolitical order and ushers in a new era of instability. A portion of our predictions focus on how this instability will translate into nefarious cyber activities, while others reflect our vision of which new attack vectors will be explored by attackers. Better preparation means better resilience and we hope our assessment of the future will enable defenders to strengthen their systems and repel cyberattacks more effectively,” says Ivan Kwiatkowski, senior security researcher at Kaspersky.

The APT predictions have been developed thanks to Kaspersky’s threat intelligence services used around the world. Read the full report on Securelist.

These predictions are a part of Kaspersky Security Bulletin (KSB) – an annual predictions series and analytical articles on key changes in the world of cybersecurity. Click here to look at other KSB pieces.

To look back at what the Kaspersky experts expected to see in the advanced targeted threats landscape in 2022, please read our previous yearly report.

TECHNOLOGY

TECHSHAKE announces strategic business alliance with Mirai Works

6:00 p.m. July 18, 2024

TECHSHAKE PTE. LTD., headquartered in Makati City, Philippines, with a branch office in Singapore, is pleased to announce that it has entered into a business alliance agreement with Mirai Works Inc., headquartered in Minato-ku, Tokyo, a professional-focused human resource service provider in Japan. 

This alliance aims to provide support for the growth and market entry of startups in Japan and Southeast Asia. 

TECHSHAKE’s Business

TECHSHAKE’s vision is to expand the startup ecosystem in Southeast Asia, with a focus on the Philippines, and to connect Southeast Asia with the world. 

TECHSHAKE (Kotaro Adachi, CEO & Co-Founder) manages and runs the Philippines’ premier innovation conference “IGNITE” in collaboration with dentsu X, a subsidiary of Dentsu Inc. and a provider of integrated media planning, branding, and marketing services. Furthermore, TECHSHAKE operates media platforms, matches startups with established companies and investors, and provides essential support for startups to thrive. 

TECHSHAKE is committed to fostering a global environment for business development in the Philippines.

TECHSHAKE is dedicated to nurturing the startup ecosystem in Southeast Asia by connecting entrepreneurs with the necessary resources and networks to succeed. With a strong presence in the Philippines and extensive experience in supporting startups, TECHSHAKE aims to bridge the gap between Southeast Asia and global markets.

Mirai Works (Nagaharu Okamoto, CEO & Co-Founder) is driven by a mission to empower individuals to embrace challenges that shape the future of Japan. Their vision is to cultivate an ecosystem where professionals thrive, regardless of traditional work structures. They are developing a business to provide opportunities for professionals to navigate changes throughout their careers and to support them in the midst of diverse career paths, including independence, entrepreneurship, side businesses, and full-time employment. 

Mirai Works’ initiatives aim to provide resources for individuals to succeed in an evolving work landscape, fostering innovation and growth.

In May 2023, Mirai Works launched “Booster,” (https://booster.mirai-works.co.jp/) a startup support platform aimed at empowering professionals to start and scale their businesses. Booster facilitates growth through acceleration programs, providing information regarding startup ecosystem events and pitch competitions, and personalized mentorship, ensuring startups have access to critical resources for success.

In this collaboration, TECHSHAKE will leverage its expertise and network to support Japanese startups looking to enter the Southeast Asian market. Mirai Works, known for its professional human resource services and startup support platforms, will enhance TECHSHAKE’s efforts by providing hands-on support in various aspects of business promotion. This partnership underscores Mirai Works’ commitment to facilitating cross-border collaboration and growth opportunities for startups in Japan and Southeast Asia.

Details of Cooperation

Not only does Mirai Works support startups registered with Booster, but it also offers a service called “Free Consultant,” (https://freeconsultant.jp/) a freelancer business matching platform. Through Free Consultant, Mirai Works plans to connect highly skilled professionals with Southeast Asian startups supported by TECHSHAKE. Mirai Works provides hands-on support in various aspects of business promotion, including management strategy planning, marketing and PR, IPO preparation, and M&A activities, to drive business growth. Furthermore, Mirai Works will collaborate with TECHSHAKE to hold acceleration programs and offer support for overseas expansion.

Continue Reading

TECHNOLOGY

Last Call for Entries to the OPPO imagine IF Photography Awards 2024

8:59 p.m. July 15, 2024

OPPO today issued a last call for entries to the OPPO imagine IF Photography Awards 2024. Since the competition was launched on January 17, over one million submissions have been received from 73 countries and regions, each showcasing a vibrant tapestry of cultures and traditions from around the world. As the global submission deadline approaches on July 28, OPPO is calling on photography enthusiasts to seize the final opportunity to capture spectacular moments through the lens of their cameras and collectively demonstrate the power of mobile imaging.

imagine IF Campaigns Gather Inspiring Work from around the World

Since inaugurating the competition at the start of the year, OPPO has initiated a series of themed activities aimed at encouraging its global user base to use the power of images to expand their imaginative boundaries. From May to July, coinciding with Mother’s Day and the beginning of the summer season, the ‘Road to Paris’ campaign invited users to portray the grace of mothers and capture the excitement of sport through the photographic lens for the chance to win a spot at Paris Photo 2024. The ‘In Sync with the World’ campaign meanwhile sought images that portrayed exploration around the world. Across both campaigns, the wide breadth of entries received showcased strong and emotive works that help to foster exchange and understanding between different cultures.

Photo 1 Shot by Isthisreal; Photo 2 Shot by Andrewoptics; Photo 3 Shot by Shisan and Petrichor

Celebrating Culture in All Its Diversity

Many of the entries submitted so far this year have seen participants from around the world showcase the unique landscapes and traditions of their home countries through stunning photographs. From the lively coastal life of Rio de Janeiro to the profound natural wonders of the Amazon rainforest, each image offers a portal into a new world for audiences to step into.

Alongside the main OPPO imagine IF Photography Awards, OPPO has also collaborated with Discovery Channel to showcase the diversity and allure of world cultures through the ‘Culture in a Shot’ program. Kicking-off in June in northern Thailand, the program has so far seen OPPO capture traditional crafts and musical instruments in a series of captivating images that bring the region’s rich and colorful cultural heritage to global audiences while advocating for deeper cross-cultural exchange.

Shot by Jerome Teo

Share Your Imagination for the Chance to Win Incredible Prizes

Entries for the OPPO imagine IF Photography Awards 2024 remain open until 24:00 (UTC+8) on July 28. Submission to this year’s competition will be judged by a prestigious global judging panel that includes the likes of contemporary photography icon Steve McCurry, together with National Geographic Photographer Michael Yamashita, Hasselblad Master Tina Signesdottir Hult, Magnum Photos member Alec Soth, and OPPO Senior Vice President and Chief Product Officer Pete Lau. A series of exciting awards are on offer to all participants, including individual prizes of up to USD24,000 and the chance to have their work exhibited at Paris Photo 2024.

Schedule and Prizes of OPPO imagine IF Photography Awards 2024

More than just a photography competition, the OPPO imagine IF Photography Awards is a platform for cultural exchange and creative inspiration. All photography enthusiasts are invited to take part and share moving moments that ignite inspiration and imagination through the global platform. To learn more about the OPPO imagine IF Photography Awards and to submit an entry, please visit the official website at https://imagine-if.oppo.com/en/.

Continue Reading

TECHNOLOGY

ZTE CEO Xu Ziyang at MWC Shanghai 2024: Ingenuity for Solid Foundation, Openness for Win-Win

10:20 p.m. July 12, 2024

ZTE Corporation (0763.HK / 000063.SZ), a global leading provider of integrated information and communication technology solutions, announced today that the company’s CEO, Xu Ziyang, has delivered keynote speeches at both the “AI First” session and the GTI Summit themed “5G-A×AI” at MWC Shanghai 2024. Mr. Xu shared ZTE’s practices and innovations in intelligent digitalization amidst the AI wave.

In his keynote speech at the “AI First” session, Xu Ziyang shared insights under the theme “Ingenuity for Solid Foundation, Openness for Win-Win.” He emphasized that while the world has already entered an AI-driven industrial revolution, the development of generative AI faces challenges that extend from hallucinations, security, and ethics, to computing power, energy consumption, datasets, standardization, and commercial applications. To address these challenges, ZTE proposes three major principles: openness and decoupling, computing and network evolution, and training and inference enhancement.

Centered on customer value, ZTE provides a full-stack and full-scenario intelligent computing solution encompassing computing power, networks, capabilities, intelligence, and applications. This establishes a robust foundation through technical expertise and fosters innovation through collaborative partnerships, aimed at empowering various industries in their digital transformation. By continuously injecting momentum into high-quality economic development, ZTE plays a pivotal role in shaping a brighter future in the AI era. 

At the GTI Summit during MWC Shanghai 2024, Xu Ziyang participated in the GTI-GSMA 5G-A×AI cooperation signing ceremony and delivered a speech titled “Computing and Network Evolution Towards an Intelligent Future.” He detailed the transition from traditional industrialization to new industrialization, addressing core challenges, proposing solutions, and citing practical cases. The critical pathway involves breakthroughs in core digital and intelligent technologies, enhancing infrastructure efficiency and capability, and deeply integrating industry expertise. This accelerates the convergence of digital and physical realms, enhances production and transaction efficiency, and establishes agile, resilient organizations prepared for an uncertain future.

According to Mr. Xu, ZTE advocates focusing on four dimensions – digitalization, networking, intelligence, and low-carbon initiatives – to tackle current challenges and drive continuous innovation and development. The company promotes openness and decoupling, unleashing superior computing with advanced networks, enhancing intelligence capabilities, and driving business growth through green initiatives, with a strong commitment to vigorously supporting the healthy and sustainable development of the industry chain, fostering a thriving digital economy.

Below is the original text of Xu Ziyang’s speech titled “Ingenuity for Solid Foundation, Openness for Win-Win”:

Good day, everyone. It’s an honor to be invited to speak here at the MWC Shanghai. Today, I’d like to share ZTE’s insights and practices under the theme of “Ingenuity for Solid Foundation, Openness for Win-Win”.

Embracing Changes and Promoting Intelligent Evolution

Over the past year, large language models and generative AI have accelerated the transformation towards an increasingly digital and intelligent world. With the rapid emergence of new technologies and products, new business scenarios and models are also gaining momentum. Although generative AI is still in the early stage, there is a growing consensus that the world has already entered an AI-driven industrial revolution. AI will have disruptive and far-reaching impacts on all aspects of production and life, and significantly reshape the global economic landscape. According to forecasts by a consulting firm, by 2030, AI will boost China’s GDP by 26% and North America’s by 14.5%. This is equivalent to USD 10.7 trillion and accounts for almost 70% of the global economic impact. Apparently, AI will bring unprecedented business opportunities in various sectors such as retail, financial services, and healthcare.

Apart from issues concerning hallucinations, security, and ethics, the development of generative AI also faces challenges in terms of computing power, energy consumption, dataset, standardization, commercial application, etc. Therefore, advancements in multiple areas are required. As such, ZTE proposes three major principles: computing and network evolution, training and inference enhancement, openness and decoupling.

First, to break through technology bottlenecks, it’s crucial to strengthen research on architectures, algorithms, computing networks, and hardware-software synergy, thus improving AI training and inference efficiency. Second, various solutions such as Retrieval-Augmented Generation (RAG) and AI agents should be employed to ensure reliability, security, and interpretability, thereby facilitating the widespread application of large models and higher value creation, and building a data flywheel that improves both capabilities and business efficiency. Finally, accelerating standardization through openness and decoupling will help build a thriving industrial and commercial ecosystem.

Building a Highly-Efficient Foundation Through Computing and Network Evolution

To begin with, we emphasize computing and network evolution to build a highly-efficient foundation. For intelligent computing, high-speed network connections are not just vital but also indispensable. From die-to-die connectivity to interconnects of chips, servers, and data centers, continuous innovation and breakthroughs in network technology will greatly enhance the performance and efficiency of intelligent computing.

More specifically, Die-to-Die (D2D) emphasizes high-speed interconnects between bare dies in a single package. Combined with the full series of in-house parallel and serial D2D interface IPs, as well as the advanced 2.5D and 3D packaging technologies, our solution enables heterogeneous integration and disaggregation. To a certain extent, challenges arising from the slowdown of Moore’s Law and constraints in manufacturing can be effectively mitigated. We have developed chip architectures that enable heterogeneous computing and network processing, which in turn deliver enhanced performance and cost efficiency.

Continue Reading