Apps
New Malicious Campaign Hunts Discord Messenger Users
On July 26, using the internal automated system for monitoring open-source repositories, Kaspersky researchers identified a malicious campaign dubbed LofyLife. The campaign employed 4 malicious packages spreading Volt Stealer and Lofy Stealer malware in the open-source npm repository to gather various information from victims, including Discord tokens and credit card information, and to spy on them over time.
The npm repository is a public collection of open-source code packages widely used in front-end web apps, mobile apps, robots and routers, and also to serve countless needs of the JavaScript community. Its popularity makes the LofyLife campaign even more dangerous, as it could potentially have affected numerous users of the repository.
The identified malicious repositories appeared to be packages used for ordinary tasks such as formatting headlines or certain gaming functions, however, they contained highly obfuscated malicious JavaScript and Python code. This made them harder to analyze when being uploaded to the repository. The malicious payload consisted of malware written in Python dubbed Volt Stealer, and a JavaScript malware dubbed Lofy Stealer, which possesses numerous features.
Volt Stealer was used to stealing Discord tokens from the infected machines along with the victim’s IP address and upload them via HTTP. The Lofy Stealer, a new development from the attackers, is able to infect Discord client files and monitor the victim’s actions – detecting when a user logs in, changes email or password details, enables or disables multi-factor authentication and adds new payment methods, including full credit card details. Collected information is also uploaded to the remote endpoint.
“Developers rely heavily on open-source code repositories – they use them to make IT-solution developments faster and more efficient and significantly contribute to the development of the IT industry as a whole. As the LofyLife campaign shows, however, even reputable repositories cannot be trusted by default – all code, including open-source code, that a developer injects into his products becomes their own responsibility. We’ve added detections of this malware to our products, so users who run our solutions will be able to identify whether they have been infected and remove the malware,” comments Leonid Bezvershenko, a security researcher at Kaspersky’s Global Research and Analysis Team.
Apps
Google Maps Integrates Waze Incident Reports for Enhanced Navigation
Google Maps has started to display Waze incident reports during navigation, allowing users to contribute by confirming road conditions via prompts. This integration follows Google’s July announcement that both apps would share more data, including Waze-sourced road closures, construction updates, speed cameras, and police presence information.
Over the holiday weekend, a Reddit user shared a screenshot of a prompt indicating “Police reported ahead” based on Waze driver reports, as reported by 9to5Google and Android Authority. Users can update these reports to reflect current conditions, similar to other incident notifications in Google Maps.
This is the first confirmed sighting of the feature in action, but more reports are expected. Despite merging the teams behind Maps and Waze, Group Project Manager Can Comertoglu told The Verge that the apps will continue to operate separately. Waze’s 500,000-plus contributors prefer some features of Waze over Google Maps, and vice versa.
This new feature enhances Google Maps’ functionality by leveraging Waze’s real-time incident reporting, providing users with more comprehensive and up-to-date information on their routes.
Apps
Yango Maps Launches Live Public Bus and Marine Transport Tracking in Dubai
Yango Maps, the popular navigation app, has introduced a significant upgrade for Dubai users. The app now offers real-time tracking of public buses and marine transport, providing a more efficient and convenient commuting experience.
Thanks to the Roads and Transport Authority (RTA)’s open data policy, Yango Maps can now display accurate and up-to-date locations of public transportation vehicles. By switching to the “Transport” tab, users can easily view the real-time movement of buses and ferries on the map.
The app also allows users to search for specific bus numbers and view their routes, stops, and estimated arrival times. This feature is particularly useful during peak hours or in extreme weather conditions, as it helps users plan their journeys efficiently and avoid unnecessary waiting.
Yango Maps continues to evolve with innovative features that aim to simplify urban navigation. By incorporating real-time public transport data, the app empowers users to make informed decisions and optimize their daily commutes.
Apps
PetWatch App Launches in the UAE
Today marks the official launch of PetWatch, a revolutionary app designed to cater to the soaring number of pet owners in the UAE. As pet ownership has surged by 25% in the last five years, PetWatch emerges as a solution to the growing demand for reliable pet care. By connecting pet owners with certified sitters, PetWatch fosters a community-driven approach to ensure the well-being of furry friends.
A recent PetWatch survey underscored the concerns of pet owners, with over 68% expressing doubts about the reliability of pet sitters. To address these concerns, PetWatch has implemented a stringent vetting process for all sitters on its platform. Each sitter undergoes rigorous training and certification to guarantee they meet the highest standards of pet care, providing pet owners with peace of mind.
“PetWatch was created out of a genuine need among pet owners. We understand the worries that arise when leaving a beloved pet behind,” said Monja Madan, Founder of PetWatch. “Our platform connects pet owners with trusted sitters and builds a community where pets are cherished as family. With love, trust, and safety at its core, we strongly believe PetWatch app will reform pet care in the UAE.”
PetWatch stands out with its commitment to quality and community. Here’s why:
- Certified Caregivers: Every PetWatch sitter completes our rigorous training program, ensuring they have the skills to provide exceptional pet care.
- Thorough Vetting: Our team personally verifies each sitter, including ID checks and in-person meetings, building trust between owners and sitters.
- Continuous Learning: Our sitters learn from professional vets and dog trainers, gaining hands-on experience and preparing them for any pet situation.
- Dedicated Support: PetWatch offers daily customer support, providing owners and sitters with expert advice and resources.
Other features include:
- Personalized Profiles: Create detailed profiles for your pet and sitter to find the perfect match.
- Vaccination Management: Track vaccination records and receive reminders for upcoming shots.
- In-App Communication: Chat, share photos, and stay connected with your sitter.
- GPS Tracking: Monitor your pet’s location for added peace of mind.
- Comprehensive Checklist: Ensure all pet care needs are met with customizable checklists.
- Easy Payments: Handle transactions seamlessly within the app.
PetWatch addresses common concerns like trust and time constraints. By connecting owners with certified sitters, offering personalized features, and fostering a supportive community, PetWatch ensures your furry friend is always in the best hands. “By combining certified expertise with robust community engagement, PetWatch empowers pet owners and sitters alike,” added Madan. “PetWatch represents more than just a platform; it’s a movement toward a better way to care for our pets.”
To further enhance the pet care experience, PetWatch is expanding its platform to include health-tracking tools and educational resources. This will empower pet owners with valuable information about their pet’s health and behaviour.
You must be logged in to post a comment Login