TECHNOLOGY
You’ve Got Spam Mail: APAC accounts for a quarter of global malicious emails in 2022
September 7, 2022 2:05 p.m.
Spam mails have evolved since the first one was sent back in 1978. Its evolutions span from the techniques, tactics, and the latest trends cybercriminals piggyback on to make it more legitimate-looking and urgent-sounding – an effective formula to prey upon an unsuspecting user.
One of Kaspersky’s elite researchers, Noushin Shabab, probed into the spam threat landscape in Asia Pacific (APAC) this year to answer – what if emails do not get opened?
Shabab, presented in front of selected media from the region during Kaspersky’s 8th APAC Cyber Security Weekend, revealed that the region received 24% of the global malicious spam mails being detected and blocked by Kaspersky solutions. This means one in four junk electronic messages were delivered to computers in APAC.
Noushin Shabab, Senior Security Researcher for Global Research and Analysis Team (GReAT) at Kaspersky
Malicious spam is not a technologically complex attack, but when done with sophisticated social engineering techniques, it poses a severe threat to individuals and enterprises alike. These junk mails are sent out in mass quantities by spammers and cybercriminals who are looking to do one or more of the following:
- Make money from the small percentage of recipients that actually respond to the message
- Run phishing scams – in order to obtain passwords, credit card numbers, bank account details, and more
- Spread malicious code onto recipients’ computers
In 2022, more than half (61.1%) of the malicious spam detected in the region targeted Kaspersky users from Vietnam, Malaysia, Japan, Indonesia, and Taiwan.
Shabab cited three main factors which cause the bulk of spam emails targeting APAC —- its population, the high adoption of e-services, and the pandemic lockdowns.
The APAC region has almost 60% of the world’s population and this means that there are more potential victims for scammers here compared to other parts of the world. The extensive use of online services such as online shopping and other online platforms for day-to-day activities here also makes individuals more susceptible to falling victim to scams. There is also the lingering pandemic aftermath which led to lockdowns and work-from-home set up in the region where people took their work computers home. Home networks are usually less protected from cyberattacks.
“Since 2018, the number of malicious spam mails detected by our solutions has seen a gradual decline after its peak in 2019. This, however, does not equate to our mailboxes being cleaner and safer. Our constant monitoring of the current and new Advanced Persistent Threats (APTs) operating in Asia Pacific showed that majority of these notorious threat actors use targeted phishing called spear phishing to crack into an organization’s systems,” reveals Noushin Shabab, Senior Security Researcher for Global Research and Analysis Team (GReAT) at Kaspersky.
The most recent example of an APT targeting key entities in APAC through sophisticated malicious mails is the “Sidewinder” threat actor. Since October 2021, the Sidewinder threat actor has been using new malicious JS code with recently created C2 server domains. The attacker, also known as Rattlesnake or T-APT4, targets victims with spear-phishing emails containing malicious RTF and OOXML files.
Known for targeting military, defense and law enforcement agencies, foreign affairs, IT, and aviation entities in Central and South Asia, Sidewinder is considered one of the most prolific threat actors monitored in the APAC region. Kaspersky experts also recently found spear phishing documents which appear to be aimed at future targets in Singapore.
Some of the main characteristics of this threat actor that make it stand out among the others are the sheer number, high frequency and persistence of their attacks, and the large collection of encrypted and obfuscated malicious components used in their operations. Kaspersky experts, who have been monitoring Sidewinder since 2012, have detected over a thousand spear phishing attacks by this APT actor since October 2020.
Sidewinder also continues to expand its victimology and to sharpen its phishing tactics.
For instance, to reduce the suspicion raised by some of their spear-phishing documents that had no text content, the group followed their first attempt to attack the victim – a spear-phishing email containing a malicious RTF exploit file – with another similar email, but in this case, the title of the malicious document was “_Apology Letter.docx”, and it contained some text explaining that the previous email was sent in error and that they are reaching out to apologize for that mistake.
“There are many more well-oiled APT groups like Sidewinder who are constantly upgrading their tools and tactics to target high-profile victims in APAC through believable spam and phishing emails. The implication for enterprises and government organizations here is that a single malicious email when clicked can crumble your most sophisticated defenses, and usually, APTs like Sidewinder just need one door to open, one machine to infect, and then it can hide and stay undetected for long,” Shabab adds.
APTs target any sensitive data; one doesn’t need to be a government agency, major financial institution, or energy company to become a victim.
The major danger of APT attacks is that even when they are discovered and the immediate threat appears to be gone, the hackers may have left multiple backdoors open that allow them to return when they choose. This increases the importance of guarding mailboxes – an entry point they usually exploit to get a foothold of an organization’s networks.
Employees across all ranks need to be aware of the threats, such as the possibility of bogus emails landing in their inboxes. Besides education, technology that focuses on email security is necessary.
To be able to search for potential spear-phishing signs without diminishing the company’s actual security, Kaspersky suggests private and public companies to install protective anti phishing solutions on mail servers as well as on employee workstations.
Enterprises should also utilize advanced security software that can detect sophisticated APT attacks.
For governments, Shabab suggests defining better spam regulations to curb spam risks. “Fewer spam emails from legitimate organizations means people are less used to receiving unexpected emails every day and are more vigilant when they are being targeted with malicious spear phishing emails,” she adds.
TECHNOLOGY
Go beyond galaxy to witness real Magic on June 8
May 23, 2023, 5:42 p.m.
Launched at the Mobile World Congress 2023 earlier this year, the leading technology brand HONOR Philippines today dropped the release date of HONOR Magic5 Pro in the country.
As the latest iteration of the HONOR Magic Series line-up, the all-new HONOR Magic5 Pro boasts significant breakthroughs in design, display, photography and performance, beating several industry benchmarks to deliver the superb flagship smartphone on the market today.
Continuing the strong legacy of its flagship predecessors, the HONOR Magic5 Pro adopts enhanced hardware with discrete chipsets, and advanced technologies, combining the best software solutions to deliver a superior flagship that is a class apart.
To make a mark of its superb specs, HONOR linked up with the official Guinness World Records to snap a successful attempt at doing the highest between-the-legs slam dunk. Poland’s Piotr Grabowski achieved the feat at a facility in London in January 2023, and HONOR was there with the upcoming HONOR Magic5 Pro flagship to capture it.
Right after its global release, the HONOR Magic5 Pro has seized the #1 position in the DXOMARK Smartphone Display ranking for the first quarter of 2023. It is also highly recognized during MWC 2023, receiving awards from various tech authorities.
HONOR Magic5 Pro will be officially launched on June 8, 2023 and you can catch it live on HONOR Philippines’ Facebook Page (https://fb.me/e/T11UD2VR).
For more updates and announcements, you may visit HONOR’s website www.hihonor.com or social media platforms: Facebook (Facebook.com/HonorPhilippines), Instagram (Instagram.com/honorphilippines/) and TikTok: (Tiktok.com/@honorphilippines). To check out HONOR’s complete list of retail stores, go to https://www.hihonor.com/ph/retailers/.
TECHNOLOGY
Selling your verified digital wallet? Think again
May 19, 2023 9:29 p.m.
THE recent spate of selling and even rental of verified digital wallets in the country should not be taken lightly. It is, in fact, alarming because its owners or account holders risk losing their identities with far-reaching consequences, according to cybersecurity and digital privacy company Kaspersky.
Since 2022, the local media have been reporting various apprehensions by police authorities of individuals allegedly involved in buying and selling of verified digital wallet accounts. Registered SIM accounts with verified digital wallet accounts are currently being bought for P350 each. On social media, the rates even go as low as P150 per account. These are then sold for an average of P600-P800 each.
This kind of transaction is a cybercrime offense under Philippine laws. If proven guilty, both seller and buyer are up for some jail time and penalties from P100,000 to P500,000.
But what’s stored in a digital wallet?
A digital wallet is usually loaded with personal details of its owner such as full name, date of birth, nationality, phone number, email address, and mailing address. Once verified by the digital wallet company as a legitimate account, all financial transactions can be performed within the digital wallet app.
The transaction limit varies but the maximum amount that can be received or sent per account is as high as P500,000, bypassing the use of credit and debit cards that are regulated and normally require security checks.
Mobile digital wallets are a popular alternative financial service among Filipinos. Unfortunately, some digital wallet users think that selling their account isn’t really a big issue. They believe their accounts are not tied to any bank accounts with a lot of funds so there is nothing to extort from them. And getting a new SIM is cheap and easy and verifying their digital wallet accounts is hassle-free.
“We’ve witnessed how the Filipinos embraced the cashless lifestyle during the pandemic, out of necessity. The ease of access and convenience of digital wallets made everyone quite comfortable, with some now selling, renting out or even loaning their verified accounts. By doing so, cybercriminals do not need to put much effort into phishing anymore as Filipinos are practically giving away their personal data for a song, which is really dangerous,” says Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky.
“As sellers or lenders of their own digital wallet accounts, not only would they get into trouble with the law. Losing their identities is also very likely especially when their data gets into the hands of scammers. With enough information from you, scammers can already set up other financial accounts using your name and use your identity to benefit them. Possible scenarios would be getting harassed by a collection agent for a debt you’ve never owed. It could also mean losing out on job or education opportunities just because your name appeared with an unpleasant digital profile when searched,” adds Yeo.
What other damage can data thieves do?
By selling your verified digital wallet, you are essentially handing out your data to cybercriminals and helping them carry out their evil activities.
With your confidential information in their hands, data thieves can:
- Make purchases on your behalf
- Use your personal details in online gaming. Cybercriminals use stolen identities for doxing (publishing your home address and phone number online for profit, fun, or humiliation) and swatting (reporting a fake emergency to law enforcement agencies to come to your place to intimidate you)
- Use your personal information in online gambling. Fraudsters create networks of thousands of synthetic accounts, normally using stolen personal data and credit card information to accumulate bonus points and redeem their “winnings”. This particular type of fraud is extremely common in online poker and blackjack, where the result can be manipulated through game strategy.
- Add themselves or an alias they can control as an authorized user so it’s easier to use your credit.
- Use and abuse your Social Security number. Scammers may be able to take out loans and claim benefits under your name.
- You may be banned from using the services of your favorite digital wallet company if your name appears to have availed of its loan services and that you cannot pay.
- Sell your information to others who will use it for malicious purposes. Buying and selling of stolen personal information is big business on the dark web, the non-visible Web that can be accessed only by a specialized browser where cybercriminals provide illegal services to one another. Back in 2018, data from Kaspersky showed that criminals can sell someone’s complete digital life in the dark web for less than $50 (or P2,761, today’s forex). In 2020, the cybersecurity company shared that personal identity details such as full name, date of birth, email and mobile can fetch from $0.5 to $10 each (or P27.62 to P552.33).
Is there still a way to save your stolen identity?
Once you have handed over your SIM account with your personal data in it, it is not easy to undo it. Experts suggest replacing your email address and telephone address as well as changing all affected passwords in all of your social media and financial accounts. If you believe you have been victimized by identity fraud, you can lodge a complaint through the Cybercrime Investigation and Coordinating Center (CICC) here.
How else to protect yourself from identity theft?
- Keep data to a “need-to-know” basis. If someone is asking for your personal information, ask why they need it and how they will use it.
- Bank safely. Make sure that you log into financial websites using a secure connection all the time.
- Know who you’re dealing with. If you are requested for your personal or financial information, find out who they are, what company they represent, and the reason for the request. Contact the company to confirm before disclosing any of your personal data.
- Secure the data in your device. Use a security software to maximize your online safety, whether you transact using your personal details on your laptop, PC or mobile phone.
TECHNOLOGY
Infinix incorporates Sound by JBL to bring high-quality audio to next level of smartphones
May 18, 2023 2:09 p.m.
Shanghai – Infinix today announces its new collaboration with HARMAN’s legendary audio and technology brand, JBL, to bring Sound by JBL audio excellence to the next generation of their highly-regarded NOTE Series. At Infinix, the user experience is a top priority, and sound quality plays a fundamental role in that experience. Together with the 75-year legacy of acoustic quality and expertise that the brand is renowned for, the upcoming release of the NOTE Series will be enhanced by the Sound by JBL tuning along with the latest innovations from Infinix.
Users can look forward to an upgraded audio experience in the next generation of Infinix’s NOTE Series, thanks to this exciting new collaboration with JBL. Stay tuned for more information on the release date and features of the new series.
“We’re incredibly excited about our collaboration with the JBL brand here at Infinix. Our hardware expertise combined with JBL’s acoustic technology means we can provide an enhanced audio experience to customers worldwide. With a device that delivers upgraded sound quality, we’re confident we’re in exceeding users’ expectations.” – Liang Zhang, Deputy General Manager at Infinix.
Integrated with JBL Tech
When building the NOTE Series, Infinix collaborated closely with JBL engineers to optimize the software system of their new generation NOTE Series. The software processing within the Note series was tuned to deliver JBL’s signature sound that ensures well-balanced mid-tones as well as rich bass, along with high-quality and faithful sound reproduction.
Incorporating advanced audio processing engineered and perfected by JBL, the new Note Series with Sound by JBL will deliver enhanced audio with distortion-free volume, deeper bass and JBL’s signature sound that users will enjoy, especially when listening to music or watching videos. This technological breakthrough demonstrates Infinix and JBL’s commitment to providing innovative products with superior sound quality.
“The JBL brand is all about delivering the fullest sound experience, and we are therefore extremely proud to collaborate with the Infinix team to deliver superior audio through Sound by JBL. Rooted in a shared passion for sound, we know the Infinix team is committed to audio excellence in their mobile devices, and we will continue to work together bringing upgraded sound quality to more consumers as we look forward to deepening our cooperation with Infinix for more product development.” – Roumu Hu, Vice President and General Manager, HARMAN Embedded Audio.
Availability
Infinix intends to introduce this new technology in their upcoming phone models, starting with the next release of the NOTE series. The launch is scheduled for May, so customers can look forward to experiencing the enhanced sound quality of this innovative technology very soon.
Infinix Incorporates Sound by JBL to Bring High-Quality Audio to the Next Level of Smartphones
Shanghai, May 17, 2023 – Infinix today announces its new collaboration with HARMAN’s legendary audio and technology brand, JBL, to bring Sound by JBL audio excellence to the next generation of their highly-regarded NOTE Series. At Infinix, the user experience is a top priority, and sound quality plays a fundamental role in that experience. Together with the 75-year legacy of acoustic quality and expertise that the brand is renowned for, the upcoming release of the NOTE Series will be enhanced by the Sound by JBL tuning along with the latest innovations from Infinix.
Users can look forward to an upgraded audio experience in the next generation of Infinix’s NOTE Series, thanks to this exciting new collaboration with JBL. Stay tuned for more information on the release date and features of the new series.
“We’re incredibly excited about our collaboration with the JBL brand here at Infinix. Our hardware expertise combined with JBL’s acoustic technology means we can provide an enhanced audio experience to customers worldwide. With a device that delivers upgraded sound quality, we’re confident we’re in exceeding users’ expectations.” – Liang Zhang, Deputy General Manager at Infinix.
Integrated with JBL Tech
When building the NOTE Series, Infinix collaborated closely with JBL engineers to optimize the software system of their new generation NOTE Series. The software processing within the Note series was tuned to deliver JBL’s signature sound that ensures well-balanced mid-tones as well as rich bass, along with high-quality and faithful sound reproduction.
Incorporating advanced audio processing engineered and perfected by JBL, the new Note Series with Sound by JBL will deliver enhanced audio with distortion-free volume, deeper bass and JBL’s signature sound that users will enjoy, especially when listening to music or watching videos. This technological breakthrough demonstrates Infinix and JBL’s commitment to providing innovative products with superior sound quality.
“The JBL brand is all about delivering the fullest sound experience, and we are therefore extremely proud to collaborate with the Infinix team to deliver superior audio through Sound by JBL. Rooted in a shared passion for sound, we know the Infinix team is committed to audio excellence in their mobile devices, and we will continue to work together bringing upgraded sound quality to more consumers as we look forward to deepening our cooperation with Infinix for more product development.” – Roumu Hu, Vice President and General Manager, HARMAN Embedded Audio.
Availability
Infinix intends to introduce this new technology in their upcoming phone models, starting with the next release of the NOTE series. The launch is scheduled for May, so customers can look forward to experiencing the enhanced sound quality of this innovative technology very soon.
Go beyond galaxy to witness real Magic on June 8
Selling your verified digital wallet? Think again
100 days to go before world’s best play in front of world’s best fans
First in Manila! All immersive experiences lead to SM with its 3D Whale Shark billboard, Space Tunnel, Golden Gateway, dazzling light shows
Up to Date – Pop and viral news, memes, photos, videos, music
