Connect with us

Published

on

Hackers are increasingly using online ads for malicious purposes. Often, it’s happening through routine Google searches.

These schemes are dubbed malvertising, and cyber criminals are striking more often and with increased sophistication. In fall 2023, cybersecurity software firm Malwarebytes tracked a 42% increase month-over-month in malvertising incidents in the U.S. All types of brands are being targeted, whether it’s for phishing purposes or for actual malware, said Jérôme Segura, senior director of research at Malwarebytes. “What I’m seeing is just the tip of the iceberg,” he said.

Many of these rogue ads appear as sponsored content during a search engine query on a desktop or mobile device. But malicious code can also be hidden in ads that appear on mainstream websites consumers routinely visit. Some of these ads will only ensnare consumers who click on them, but in some cases, people can be vulnerable in a more passive way — sometimes just by visiting an infected site, said Erich Kron, security awareness advocate for KnowBe4, a security awareness and training company. 

Corporate employees can also be targets of malvertising, Segura said. He cited a few actual examples that were recently uncovered involving big companies. Lowe’s staff members were targeted via a Google ad for an employee portal claiming to be associated with the retailer. Clicking on the link, “myloveslife.net,” which contains a misspelling of the company’s name, took users to a phishing page with Lowe’s logo. This had the potential to confuse employees since many don’t know offhand the URL for their internal website. “You see the brand, even the official logo of that brand, and for you it’s enough to think it’s real,” Segura said.

Segura also cited an ad meant to impersonate Salesforce-owned communication tool Slack. Initially, by clicking on the ad, he was redirected to a price page on Slack’s official website. But suspecting bad actors were at play, Segura dug deeper and uncovered an impersonation ploy, which involved trying to convince unsuspecting users to download something purporting to be the Slack app.

It’s not Google’s fault, but don’t trust it

Malvertising is not new, but cybercriminals are getting smarter and the ads are often so realistic that it’s easy to be duped. The problem is exacerbated by the fact that so many people use and trust Google as a search engine, where many of the malicious ads can be found. It’s not a problem with Google, per se; malicious ads can also show up in queries using other search engines like Microsoft’s Bing. It’s just that Google is such a widely used search engine and people trust it and let their guard down. “You see something appearing on a Google search, you kind of assume it is something valid,” said Stuart Madnick, professor of information technology at MIT Sloan School of Management. 

Consumers can also fall prey to malicious ads on trusted websites they visit regularly.  Many of these ads are legitimate, but some bad ones can slip through the cracks. “It’s like the post office. Does the mailman check every letter you get to make sure it’s really from Publishers Clearing House?” Madnick said.

Be very careful about where and when you click

Consumers can take steps to protect themselves against malvertising attempts. For instance, they should avoid clicking on sponsored links that come up during an internet search. Often, the first ad below the sponsored one will be the product they are looking for, and since it isn’t sponsored, there’s less chance of being sidelined by malicious code or a phishing attempt.

If you do click on a sponsored link, check the URL at the top of the web page to make sure it’s really where you meant to be before taking any other actions. For example, if you’re trying to visit Gap.com, make sure you’re not really on Gaps.com. Consumers who find themselves on a suspicious site should close the window immediately, said Avinash Collis, assistant professor at Carnegie Mellon University’s Heinz College. In most cases, this will avoid further trouble, he said.

Consumers also need to be careful about clicking ads they see on trusted websites, Kron said. They may, for instance, see ads for products that are much lower in cost than elsewhere. But Kron recommends not clicking and instead visiting the trusted website of the product seller. Most of the time, consumers will be able to search on the provider’s site if a special deal exists, or the deal will be highlighted on the main page of the trusted website, he said.

Also avoid calling a telephone number listed in a sponsored ad because it could be a fake telephone number. If you call it, cyber thieves could gain access to your computer or your personal information, depending on the scheme, said Chris Pierson, CEO of BlackCloak, a cybersecurity and privacy platform that provides digital executive protection for corporate executives.

Consumers should make sure they are calling a number from official product documentation they have in their possession, Pierson said. Alternatively, consumers could visit the company’s home page for this information. “Doing a [web] search could return results that are not sponsored by the company and telephone numbers that are associated with cybercriminals. All it takes to get an ad out there is money and, of course, cybercriminals that are stealing money, have the ability to pay for that bait,” Pierson said. 

Avoid ‘drive-by-downloads’

Consumers should also make sure the operating system and internet browsers are up-to-date on their computer and mobile phone. 

So-called drive-by-downloads, which can impact people who merely visit a website infected with malicious codes, generally rely on a vulnerability in the user’s browser. This is not as much of a threat for people who keep their browsers and browser extensions up-to-date, Kron said. 

Consumers could also consider installing anti-malware software on their computer and phone. Another option is to avoid ads by installing an ad blocker extension such as uBlock Origin, a free and open-source browser extension for content filtering, including ad blocking. Some consumers may also opt to install a privacy browser such as Aloha, Brave, DuckDuckGo or Ghostery on their personal devices. Many privacy browsers have embedded ad blockers; consumers may still see sponsored ads, but they will see fewer of them, which minimizes the chances of malvertising. 

Consumers who come across suspicious ads should report them to the applicable search engine for investigation and removal if deemed malicious, Collis said. This can help protect other people from being ensnared. 

Proper safety precautions are especially important since there are millions of ads on the internet and cyber thieves are relentless. “You should assume that this could happen to you no matter how careful you are,” Madnick said.

Continue Reading

Technology

YouTube announces AI features from Google DeepMind for Shorts creators

Published

on

By

YouTube announces AI features from Google DeepMind for Shorts creators

Veo in Dream Screen

YouTube

YouTube on Wednesday announced artificial-intelligence features for creators on its Shorts platform that tap into Google‘s DeepMind video-generation model.

The features, known as Veo, will allow creators to add AI-generated backgrounds to their videos as well as use written prompts to generate standalone, six-second video clips. YouTube CEO Neal Mohan said he hopes Veo will enable creators to produce more Shorts videos with the help of AI.

“Everything that we showed with AI was meant to really enhance the work that you do, make it faster, more efficient, to bring your creative ideas to life faster,” said Mohan, speaking at the Made on YouTube event in New York.

The Veo AI backgrounds are an upgrade over a similar AI-generation feature announced by YouTube in 2023 called Dream Screen. The company said its Veo AI background feature will roll out later this year while the six-second AI clips will become available in 2025.

Other announcements at the event included new features in the YouTube Studio app that will allow creators to use AI to generate titles, thumbnails and video ideas. Those features will roll out in late 2024, YouTube said.

Creators have been exploring various ways to leverage generative AI technology. Creators have used the new technology to insert clips in their videos or produce entirely AI-generated videos.

However, some creators expressed concerns that their videos on YouTube are used to train the AI models that built Veo.

“I don’t know how I feel about all this AI stuff,” said Thomas Simons, a comedian with more than 15 million subscribers on YouTube. “It doesn’t fill me with confidence and love.”

There has been criticism that other services like Facebook have become overrun by spammy, AI-generated content. There are also concerns that AI-generated content could violate intellectual property protections.

YouTube’s AI-generated content will be watermarked and will have a label indicating it was created by AI, the company said.

Generative AI places a new perspective on the creator economy, giving creators free access to tools utilized by large language models.

We “really sit at the nexus of that technology and creativity,” Mohan said. “Putting those two things together gives us this unique lens that everything we build is really about enhancing that human creativity.”

WATCH: How YouTube beat Netflix and Disney in the streaming wars

How YouTube beat Netflix and Disney in the streaming wars

Continue Reading

Technology

Elon Musk’s X ‘declined to send an appropriate witness’ to Senate hearing on election threats

Published

on

By

Elon Musk's X 'declined to send an appropriate witness' to Senate hearing on election threats

As the riots raged in the U.K., Elon Musk began making incendiary comments about the situation, including the statement: “Civil war is inevitable.” Musk is the owner of X, the social media platform formerly known as X.

Aytug Can Sencar | Anadolu | Getty Images

While top executives from Alphabet, Meta and Microsoft are headed to Capitol Hill on Wednesday for a hearing on election threats, Elon Musk’s X won’t be participating.

A representative for Sen. Mark R. Warner, the Democratic chair of the Senate Intelligence Committee, said in an emailed statement that X “declined to send an appropriate witness.” No further details were provided.

A spokesperson for X told CNBC that the company’s invited witness was Nick Pickles, who had been the head of global affairs but “resigned on September 6.” Warner’s office said X declined to send a replacement after Pickles’ departure.

The hearing is titled “Foreign Threats to Elections in 2024 — Roles and Responsibilities of U.S. Tech Providers.” Alphabet will be represented by Kent Walker, the president and chief legal officer, while Meta’s head of global affairs, Nick Clegg, will represent the social networking company. Microsoft President Brad Smith will represent the software giant.

The hearing, which is being led Warner (D-Va.) and committee Vice Chairman Marco Rubio (R-Fla.), is centered around lawmakers’ concerns over foreign entities that are attempting to influence the outcome of the presidential elections in November using the biggest tech platforms.

Alphabet and Microsoft recently published research into the efforts by Iranian and Russian hacking groups to influence or attack officials linked to President Joe Biden and former President Donald Trump. The hackers have utilized various tactics including spear phishing.

Earlier this month, the Biden administration said it’s targeting Russian government-sponsored attempts to affect U.S. public opinion.

“We will be relentlessly aggressive in countering and disrupting attempts by Russia, Iran, as well as China or any other foreign malign actor” attempting to “interfere in elections and undermine our members,” Attorney General Merrick Garland said in a statement at the time.

X’s absence from the Wednesday hearing follows a streak of divisive posts by Musk, the world’s richest person, on the app, formerly known as Twitter, which he acquired in 2022. Musk has close to 200 million listed followers.

After a second apparent assassination attempt against Republican former President Donald Trump over the weekend, Musk shared then deleted a post questioning why there weren’t more assassination threats made against President Biden and Vice President Kamala Harris, the Democratic nominee. Biden and Harris have both received assassination threats while in office.

European news agencies also reported this week that Musk has previously shared content on X that had been created by the Social Design Agency, which led a propaganda campaign at the Kremlin’s direction, according to the U.S. Department of the Treasury’s Office of Foreign Assets Control.

On Wednesday, Musk shared a false story on X that claimed explosives were found in a car near Trump’s planned rally in Long Island, New York. According to a statement from Nassau County police, a civilian near the site of the rally had falsely reported explosives being found.

In the early stages of the meeting Wednesday afternoon, Warner said “it’s a shame” that no one from X appeared. He said that, prior to Musk’s takeover, the company was a “collaborator.”

“Under X, they are absent and some of the most egregious activity has taken place” on the platform, Warner said.

WATCH: SpaceX will be filing suit against the FAA for regulatory overreach.

SpaceX will sue the FAA for regulatory overreach, Elon Musk posts on X

Continue Reading

Technology

The iPhone 16 Pro Max has better battery life and great cameras, but Apple Intelligence hasn’t arrived

Published

on

By

The iPhone 16 Pro Max has better battery life and great cameras, but Apple Intelligence hasn't arrived

iPhone 16 Pro

Apple Inc. 

Apple’s iPhone 16 family of phones will hit shelves on Friday. Ahead of their launch, I’ve spent the past five days been testing the high-end iPhone 16 Pro Max.

It’s a great phone with cool updates like a dedicated camera button, and it charges faster over MagSafe than earlier Pro models. The screens are also slightly larger than prior versions.

But this review is tricky, because one of the banner features Apple has been hyping — on stage and in its new ads — is Apple Intelligence. It’s Apple’s suite of AI features for the iPhone, and it’s not coming until later this year.

There are reasons to be excited. A few of the new AI features, like changes to Siri, photo editing, and the option to have AI rewrite text for you, will launch in beta in October. More additions, such as as Apple’s image and emoji generator, more personal Siri responses and integration with ChatGPT, will come later.

I was able to test some of the beta features for this review. Others weren’t available. Those limitations make it difficult to provide a comprehensive assessment of the new device or to suggest whether the upgrade is worthwhile.

Apple shares slid earlier in the week after analysts suggested lighter demand for the iPhone 16 Pro models this year. TF Securities analyst Ming-Chi Kuo said the problem is that Apple Intelligence isn’t out at launch. Barclays also feared it may be because the Chinese language version of Apple Intelligence won’t launch until 2025.

Here’s what you need to know about the new iPhone 16 Pro Max, as of now.

The changes to know about

iPhone 16 Pro.

Apple Inc.

The biggest change you’ll notice is the new camera button. I’m still getting used to it after a few days, but I’m already defaulting to just pulling the phone out of my pocket, tapping the button and taking a picture.

My wife rightly asked me why I don’t just hit the camera button on the lock screen like on earlier iPhones. I don’t have a good answer for that. It just feels more natural to push a camera button.

I enjoyed doing a half-press to get camera controls like the zoom during my son’s first soccer game, though I found it was easier to sometimes just pinch to zoom. The new 48-megapixel wide-angle lens offers sharper images in zoomed-out shots that can capture more scenery.

Videographers will likely enjoy the 4K 120fps recording offered on the iPhone 16 Pro Max. Still, I try to keep my clips in lower quality because I’m sharing them over text messages with family and friends.

The iPhone 16 Pro Max has the best battery life of any iPhone yet. Apple’s new A18 Pro processor paired with a larger battery offers up to 33 hours of video playback, up from 29 hours on last year’s iPhone 15 Pro Max. I was usually able to make it to about dinnertime before needing to charge the 15, and I can make it to bedtime — or beyond — with the new phone depending on how much I’m using it.

I love that Apple increased the speed of its MagSafe charging. I used MagSafe when it came out but ultimately switched back to regular cable charging because it was quicker. Now, MagSafe gives up to a 50% charge in 30 minutes if you’re using a 30-watt charger (not included.)

The screens are slightly larger on this year’s Pro models. The iPhone 16 Pro Max moved from 6.7 inches to 6.9 inches. I didn’t notice a difference and could only tell when I put the two phones next to each other. It’s still a fantastic screen with a high refresh rate, which means scrolling is smooth. It’s colorful and bright and I love the always-on display for seeing notifications without picking up my phone. It’s not new this year but still useful and limited to the Pro models.

Apple Intelligence

Apple Intelligence photos

Apple Inc. 

In the absence of Apple Intelligence at launch, I’m limited to testing a few beta features. They’re hit or miss, as to be expected in beta.

Apple Intelligence could help drive a new cycle of iPhone upgrades. Apple reported $39.3 billion in iPhone sales during the fiscal third quarter, about 46% of the company’s total revenue and down 1% from a year earlier. CEO Tim Cook said the segment grew on a constant currency basis.

I like email summaries provided by Apple Intelligence. They’re accurate and give you just a couple of lines that summarize what’s said or relayed in an email. This only works in Apple’s Mail app, though, so it won’t work if your company makes you use Outlook or if you prefer Gmail. Similarly, I found that Apple Intelligence accurately summarized long bits of text (including the introduction to this review) and returned an accurate snippet. 

In notifications, it’s just OK. Summaries of news alerts were correct. Summaries of text messages sometimes were unnecessary. In one text from my wife, for example, Apple Intelligence suggested I threw a dinosaur at my daughter and made her cry before I apologized. In reality, my son was the culprit. The original text would have been sufficient. 

In a daycare app notification that I use, Apple Intelligence did a good job summarizing that my daughter “took a nap, ate Cheerios, and is playing happily.” That would be a perfect amount of information to receive while driving.

Apple Intelligence photos

Apple Inc. 

Another Apple Intelligence feature can help you create movie memories, which are little snippets of photos and videos set to music. In a TV ad, Apple shows a young woman using it to create memories of a dead goldfish with the help of Siri.

I couldn’t use Siri to create movies like that. Instead, I opened the Photos app, tapped Memories and wrote in a prompt asking for a photo memory of my son “learning to fish at Skytop set to a fishing tune.” It correctly showed pictures of a family trip to the Poconos but didn’t include any pictures of my son fishing there. The music was called “Fishing Tune” by Jiang Jiaqiang but didn’t sound like fishing music to me. Another test, asking for a photo memory of my son “playing soccer,” worked better but also included a picture of him as a baby with a football in his hands.

There’s also the whole new Siri interface that glows along the edges of the screen. I like the look compared to the globe, and it’s easier to type to Siri by tapping the screen indicator at the bottom of the display. Siri doesn’t feel drastically changed to me right now, although I liked that I could ask iPhone-specific questions like “How do I use my iPhone to scan a document?” and “How do I take a screen recording?” Siri presents the answer in a simple step-by-step guide at the top of the screen.

You can speak to Siri with interruptions now, too. So, if you get stumped while you’re thinking and say “umm” or “hold on a second,” you can continue to ask questions in the same line of thought, like “How tall is the Eiffel Tower?” and then follow with, “And when was it built?” But it doesn’t always work. I tried “How far is Boston?” for example, followed by, “And what’s the weather there?” Siri gave me the weather for my current location. 

Apple Intelligence can be useful and I’m excited to see where it goes.

Apple iPhone 16

An attendee holds two iPhone 16s as Apple holds an event at the Steve Jobs Theater on its campus in Cupertino, California, on Sept. 9, 2024.

Manuel Orbegozo | Reuters

I focused this review on the iPhone 16 Pro Max. The iPhone 16 is slightly smaller and has a little less battery life but is otherwise identical. My colleague used the regular iPhone 16.

There are a few differences between the two. The iPhone 16 comes in more colors and is built out of aluminum instead of titanium like the higher-end Pro models. It also has the new camera button but lacks the higher refresh rate and the always-on features of the Pro model displays.

The iPhone 16 will support all of the Apple Intelligence features I’ve mentioned above, plus the ones that are still coming. Apple also upgraded the processor for faster performance and added a new macro camera mode for up-close pictures of objects, as well as support for capturing spatial images for the Apple Vision Pro headset. It offers up to 22 hours of video playback versus the 20 hours in last year’s iPhone 15.

Should you buy it?

Continue Reading

Trending