Detecting Unwanted Location Trackers (DULT) Now Available on iOS, Android

May 15 2024

.bh__table, .bh__table_header, .bh__table_cell { border: 1px solid #C0C0C0; }
.bh__table_cell { padding: 5px; background-color: #FFFFFF; }
.bh__table_cell p { color: #2D2D2D; font-family: ‘Helvetica’,Arial,sans-serif !important; overflow-wrap: break-word; }
.bh__table_header { padding: 5px; background-color:#F1F1F1; }
.bh__table_header p { color: #2A2A2A; font-family:’Trebuchet MS’,’Lucida Grande’,Tahoma,sans-serif !important; overflow-wrap: break-word; }

Gone Phishing Banner

Welcome to Gone Phishing, your daily cybersecurity newsletter that’s starting hump day with some good news (for once!). Check out this newly announced collaboration πŸ‘‡πŸ‘‡πŸ‘‡

Today’s hottest cybersecurity news stories:

  • 🀝 Apple & Google team up to stop bluetooth tracking devices πŸ•΅

  • πŸ“§ Relentless email campaign bombards enterprises w/ spam πŸ—‘οΈ

  • πŸ‘¨β€πŸ’» Online fraud in Southeast Asia is $64 billion a year industry πŸ’°

Putting a stop to the Blue-sleuths πŸ‘€

🚨 Detecting Unwanted Location Trackers (DULT) Now Available on iOS, Android! πŸ“±

Apple and Google Team Up to Safeguard User Privacy and Safety Against Bluetooth Tracking Devices! πŸ›‘οΈπŸ”’ Apple and Google have joined forces to introduce a groundbreaking feature aimed at protecting users from the misuse of Bluetooth tracking devices. The feature, known as "Detecting Unwanted Location Trackers" (DULT), will notify users across both iOS and Android platforms if a Bluetooth tracking device is detected without their consent, helping to address potential risks to privacy and safety. πŸš«πŸ“‘πŸ”

Key Highlights of DULT Implementation! πŸŒŸπŸ”„πŸ”Ž

  • Android devices running versions 6.0 and later and iOS devices with iOS 17.5 will now have access to the DULT capability.

  • Users will receive alerts such as "Tracker travelling with you" on Android and "[Item] Found Moving With You" on iOS if an unidentified Bluetooth tracking device is detected.

  • The feature provides users with options to view the tracker's identifier, play a sound to locate it, and access instructions to disable it, ensuring greater control over their privacy and security.

  • This cross-platform collaboration, involving community and industry input, offers instructions and best practices for manufacturers to integrate unwanted tracking alert capabilities into their products.

Addressing Misuse of Tracking Devices! βš οΈπŸ”

The development of DULT comes in response to reports of malicious or criminal misuse of Bluetooth tracking devices, such as AirTags, which have been exploited by bad actors for stalking and tracking purposes. This initiative aims to empower users to identify and address potential threats to their safety and privacy effectively.

Apple's Security Updates! πŸ›‘οΈπŸ“²

In addition to the DULT announcement, Apple has also backported a security fix for CVE-2024-23296, addressing a vulnerability in the RTKit real-time operating system. This proactive measure underscores Apple's commitment to addressing security vulnerabilities and protecting its users against potential exploits.

Stay Secure with the Latest Updates! πŸ”’πŸ“²

Users are encouraged to update their devices to the latest software versions to benefit from these security enhancements and stay protected against emerging threats. By collaborating with industry partners and implementing innovative solutions, Apple and Google are working together to ensure a safer and more secure digital experience for users worldwide. πŸ’ͺπŸ”’

sIgN Up tO OuR NeWsLeTtEr πŸ’€

🚨 New Threat Alert: Social Engineering Campaign Targets Enterprises! πŸ›‘οΈπŸ“§

Cybersecurity Researchers Uncover Ongoing Spam and Phone Call Scheme! πŸ“²πŸ’»

A new social engineering campaign has been detected, aiming to infiltrate enterprise environments through a combination of spam emails and phone calls. πŸš¨πŸ“§

Attack Methodology: Sneaky and Persuasive Tactics! 🎭πŸ”₯

  • Threat actors flood users' email inboxes with newsletter sign-up confirmation messages, overwhelming email protection solutions.

  • Impacted users receive phone calls from attackers posing as IT personnel, urging them to install remote monitoring and management software under the guise of resolving email issues.

  • Remote access to compromised computers is exploited to download additional payloads, harvest credentials, and establish persistence on hosts.

Attackers' Arsenal: Remote Desktop Software and RATs! πŸ’»πŸ”“

  • Attackers leverage batch scripts to download legitimate tools like OpenSSH for Windows and launch reverse shells to C2 servers.

  • Attempts to deploy Cobalt Strike beacons and remote access trojans like NetSupport RAT and ConnectWise ScreenConnect have been observed.

  • While no ransomware execution has been identified, the campaign shares indicators associated with the Black Basta ransomware operators.

LockBit Black Ransomware Campaign Amplified by Phorpiex Botnet! πŸ–₯οΈπŸ”’

Proofpoint unveils a new LockBit Black ransomware campaign, utilising the Phorpiex botnet to distribute ransomware payloads via email.

The campaign, initiated on April 24, 2024, leverages a leaked LockBit builder, enhancing the scale and sophistication of attacks.

Insights into Mallox Ransomware Group Operations! πŸ’ΌπŸ’°

Sekoia reveals that the Mallox ransomware group targets organisations through Microsoft SQL server brute-forcing, deploying Mallox malware via a .NET-based loader named PureCrypter.

Operating as a ransomware-as-a-service model, Mallox has recruited affiliates and impacted organisations across various sectors, including manufacturing, retail, and technology.

Stay Vigilant Against Emerging Threats! πŸ”πŸ›‘οΈ

Enterprises are advised to remain vigilant against social engineering tactics and ensure robust cybersecurity measures to safeguard their networks and sensitive data. By staying informed and implementing best practices, organisations can effectively mitigate the risks posed by evolving cyber threats. πŸ’ͺπŸ”’

$1 Crypto Stock Just Disrupted the Industry

Iron-fisted regulations on bitcoin mining loom over the industry, as high energy consumption leads to concerns about its environmental impact.

And this carbon-neutral mining stock has positioned themselves to take over.

In many cases… they already have.

This emerging Crypto Trend just put a spotlight On this $1 Hidden Gem.

To make it easy, simply click the link above to instantly subscribe to Bullseye Trades and get all the details on this stock!

That’s a Laos of money 😬

🚨 Battling Southeast Asian Scam Syndicates: A Growing Global Challenge! πŸŒπŸ’°

Recent research sheds light on the escalating threat posed by organised scamming syndicates in Southeast Asia, with staggering annual profits estimated at $64 billion worldwide. πŸ“ˆπŸ’Έ

Rising Scam Operations and Global Impact! πŸš€

Criminal networks in Cambodia, Laos, and Myanmar rake in approximately $43.8 billion annually, accounting for 40% of the combined formal GDP of these nations.

Scams typically involve deceptive tactics like pig butchering, initiated through messaging platforms or dating apps, leading victims into fraudulent investment schemes.

Expanding Reach and Evolving Tactics! πŸ”„πŸ”

  • Once confined to regional markets, these scams have swiftly evolved into a global menace, with connections stretching into the Middle East and Africa.

  • Notably, there's been a surge in targeting non-Chinese victims, possibly in response to heightened scrutiny from Chinese law enforcement.

Forced Labor and Political Corruption: Enablers of Crime! πŸ’ΌπŸ•΅οΈ

  • Organised crime groups exploit hundreds of thousands of people in heavily guarded compounds, coercing them into conducting scams under threats of violence.

  • Political corruption across Southeast Asia, exemplified by instances in Cambodia and Myanmar, provides fertile ground for criminal activities to thrive.

International Efforts and Recommendations for Action! 🌐🀝

  • Coordinated measures are urged, including sanctions on syndicate leaders, holding countries accountable for hosting scam compounds, and considering penalties for platforms facilitating money laundering

  • Acknowledging the national security threat posed by these scams, initiatives like advanced investigation techniques and support for partner governments are underway to combat the scourge.

A Call for Unified Action Against Scam Syndicates! 🚨🀝

As scam operations continue to evolve and expand their reach, international collaboration and concerted efforts are imperative to stem the tide of illicit activities and safeguard global citizens from financial exploitation. πŸ’ͺπŸ”’

πŸ—žοΈ Extra, Extra! Read all about it! πŸ—žοΈ

Every few weeks, we carefully select three hot newsletters to show you. Reputation is everything, so any links we share come from personal recommendation or carefully researched businesses at the time of posting. Enjoy!

  • πŸ›‘οΈ Tl;dr sec: Join 30,000+ security professionals getting the best tools, blog posts, talks, and resources right in their inbox for free every Thursday πŸ“…

  • πŸ’΅Β Crypto Pragmatist: Crypto made simple. Actionable alpha in 5 minutes, 3x a week. Join 47,000+ investors and insiders, for πŸ†“

  • πŸ“ˆΒ Bitcoin Breakdown: The best in Bitcoin, carefully curated by an alien from the future πŸ‘Ύ

Let us know what you think.

So long and thanks for reading all the phish!

footer graphic cyber security newsletter

Recent articles