News

DinodasRAT Malware Targets Linux Systems in Global Cyber Espionage Efforts

Published

9 months ago

April 1, 2024

DinodasRAT Malware Targets Linux Systems

Cybersecurity researchers have uncovered a Linux variant of the notorious DinodasRAT malware, marking a significant expansion in the cyber espionage campaign associated with Chinese threat actors. Initially identified as targeting government entities across China, Taiwan, Turkey, and Uzbekistan, this development highlights an evolving threat landscape.

Background on DinodasRAT

DinodasRAT, also recognized under the moniker XDealer, is a sophisticated piece of malware developed in C++ and known for its capability to extract sensitive information from infiltrated systems. Historically associated with attacks on Windows platforms, the discovery by Kaspersky of a Linux version underscores the malware’s multi-platform versatility.

Recent Developments

The Slovak cybersecurity firm ESET first shed light on the use of DinodasRAT within Operation Jacana, a cyber espionage campaign against Guyana’s government. Trend Micro’s subsequent analysis revealed the malware’s adoption by the Earth Krahang threat group since 2023, aiming at various governmental targets globally.

Linux Variant Discovery

Kaspersky’s recent findings unveiled the Linux iteration of DinodasRAT (V10) in early October 2023, with origins tracing back to July 2021. This version specifically targets Red Hat-based distributions and Ubuntu Linux, establishing persistence and executing commands fetched from a remote server.

Operational Tactics

Upon activation, DinodasRAT engages in numerous malicious activities, including file manipulation, process enumeration and termination, and execution of shell commands. It also demonstrates the capability to update itself, alter control addresses, and self-uninstall, all while evading detection through sophisticated techniques.

Espionage and Control

Unlike its reconnaissance-focused Windows counterpart, the Linux version of DinodasRAT aims primarily at gaining sustained access to Linux servers. This grants attackers comprehensive control over compromised systems, facilitating data theft and espionage activities.

Technical Sophistication

Further analysis by Check Point compared the malware to SimpleRemoter, an open-source project linked to Gh0st RAT. The Linux variant, dubbed Linodas by Check Point, reflects a high level of technical sophistication, indicating the involvement of experienced Linux developers. Linodas possesses advanced system monitoring capabilities and can manipulate system binaries to evade detection.

Security Implications

The emergence of Linodas underscores a strategic shift by cyber attackers towards Linux servers, exploiting the typically lower security measures in place. This strategy allows threat actors to maintain presence within networks and pivot undetected, presenting a critical challenge for cybersecurity defenses.

Cybersecurity experts emphasize the need for heightened vigilance and enhanced security protocols for Linux systems. The global reach and evolving tactics of campaigns leveraging DinodasRAT necessitate a proactive approach to cybersecurity, ensuring systems are safeguarded against these sophisticated threats.

Games

AMD Ryzen 7 9700X Performance Boost with DDR5-8000: A Preliminary Look

Published

4 months ago

August 12, 2024

Daniel Egusa

The AMD Ryzen 7 9700X, part of AMD’s latest 9000 series, has been paired with Corsair’s Vengeance 2x16GB DDR5-8000 DIMMs to explore the potential performance gains from using higher-speed memory. This initial analysis gives us a glimpse into how DDR5-8000 compares to DDR5-6000 in real-world applications, setting the stage for more in-depth testing in the future.

Testing Setup and Configuration

The testing for the AMD Ryzen 7 9700X was conducted using Corsair Vengeance 2x16GB DDR5-8000 DIMMs (model CMH32GX5M2X8000C36) on an ASUS ROG STRIX X670-E GAMING WIFI motherboard. The memory modules were configured to run at their rated speed of DDR5-8000 with timings of 36-48-48-98 at 1.5V. For comparison, the system was also tested with G Skill F5-6000J3038F16G DDR5-6000 DIMMs, which were configured at 30-38-38-96 timings at 1.35V.

This setup allowed a direct comparison between DDR5-6000 and DDR5-8000 memory, highlighting the impact of higher memory speeds on the Ryzen 7 9700X’s performance.

Initial Observations and Performance

The testing was conducted on an Ubuntu 24.04 LTS system running the Linux 6.10 kernel, utilizing a mix of synthetic and real-world benchmarks. These tests aimed to determine whether the increased bandwidth from DDR5-8000 memory could deliver tangible performance improvements, especially considering the 1:2 UCLK ratio needed to achieve these higher speeds.

The Corsair Vengeance DDR5-8000 modules ran smoothly on the Ryzen 7 9700X system, indicating good compatibility despite the modules being primarily advertised for Intel 700 Series motherboards. The ease of setup through DOCP (Direct Overclock Profile) allowed for a straightforward comparison between the DDR5-6000 and DDR5-8000 configurations.

Benchmark Results

The benchmarks revealed that while DDR5-8000 offers greater bandwidth, the performance gains were more nuanced. In certain synthetic benchmarks, the higher memory speed provided a noticeable improvement, particularly in tasks that heavily rely on memory bandwidth. However, in real-world workloads, the benefits were less pronounced, with some applications showing only marginal gains.

One key factor is the UCLK ratio. Running at 1:2 instead of 1:1, which is required for DDR5-8000 speeds, may offset some of the potential performance improvements by introducing latency. This trade-off is something to consider for users looking to maximize performance in specific tasks.

What’s Next?

This preliminary analysis provides a snapshot of what DDR5-8000 memory can offer when paired with the Ryzen 7 9700X. However, it’s clear that more comprehensive testing, including additional benchmarks and comparisons with other DIMM kits, is needed to fully understand the impact of high-speed memory on AMD’s new Zen 5 architecture.

Artificial Intelligence

Galaxy AI to Expand to Mid-Range Galaxy A Phones in 2024

Published

5 months ago

August 7, 2024

William Watson

Exciting news for Galaxy A phone users! Samsung is set to bring its innovative Galaxy AI technology to select mid-range Galaxy A models in 2024. This expansion will start with the Galaxy A35 and Galaxy A55, according to sources from SamMobile.

Limited Galaxy AI Features for Galaxy A35 and A55

While this is a significant move, it’s important to note that not all Galaxy AI features will be available on these mid-range devices. Samsung has yet to specify which AI tools will be included, but features requiring substantial on-device processing power will likely be omitted.

The rollout of Galaxy AI to the Galaxy A35 and A55 is expected to happen through the One UI 6.1.1 update, which could arrive as early as this month or next. However, there is no confirmed release date.

Current Availability and Limitations

As of now, the most affordable Galaxy AI-enabled phone available is the Galaxy S23 FE. Even this model does not include all the AI features found in the original Galaxy AI suite for the Galaxy S24 series, such as Instant Slow-Mo.

Despite hardware similarities, older Galaxy A models like the Galaxy A54, which shares the Exynos 1380 SoC with the Galaxy A35, are not confirmed to receive Galaxy AI. Samsung appears to be focusing on models released in 2024 and later.

Samsung’s AI Ambitions

At Unpacked 2024, Samsung announced its ambition to extend Galaxy AI tools to over 200 million Galaxy devices, including phones, tablets, and wearables. This expansion to mid-range Galaxy A phones is a part of that strategy, aiming to democratize advanced AI features across a broader range of devices.

Summary

Samsung’s Galaxy AI is set to arrive on mid-range Galaxy A phones, starting with the Galaxy A35 and A55, through the One UI 6.1.1 update. While not all AI features will be available, this marks a significant step in making advanced AI technology more accessible. Stay tuned for further updates on the rollout and specific features.

Apps and Software

Reports: Samsung Delays One UI 7.0 Beta Release, Focuses on One UI 6.1.1

Published

5 months ago

August 7, 2024

Florencia Haden

If you’re eagerly anticipating the One UI 7.0 beta update for your Galaxy phone, you may need to exercise some patience. According to a recent rumor, the beta program for One UI 7.0 is not expected to launch shortly.

Rumors Indicate Delay

The latest situation of One UI 7 Beta: There are still no plans to launch it in the near future.
— ICE UNIVERSE (@UniverseIce) August 5, 2024

The information comes from a post on X (formerly Twitter) by @UniverseIce, which states, “There are still no plans to launch it [One UI 7.0 beta] shortly.” The source did not provide specific dates, leaving the exact timeline unclear. This contrasts with earlier reports suggesting the One UI 7.0 beta might go live in the third week of August.

Focus Shifts to One UI 6.1.1

According to our sources, Samsung may have delayed the One UI 7.0 beta release to prioritize the rollout of the One UI 6.1.1 update across more devices. One UI 6.1.1 debuted with the Galaxy Z Fold 6 and Galaxy Z Flip 6 during the Unpacked event in July. Despite being a minor update, One UI 6.1.1 is expected to reach older Galaxy foldable phones, Galaxy tablets, and some high-end slab-type phones.

New Features and Improvements

The One UI 6.1.1 update is set to introduce new Galaxy AI features to older flagship phones. However, One UI 7.0 promises to be a more significant release. It is rumored to bring substantial changes to UI elements, new animations, and potentially more extensive Galaxy AI capabilities.

Limited Beta Release

When One UI 7.0 beta eventually launches, it will be available in limited markets and for select devices. If everything proceeds smoothly, the first stable build is expected to roll out before the end of the year.

Conclusion

Samsung’s decision to focus on One UI 6.1.1 indicates a strategic move to enhance the current user experience while preparing for the more extensive changes expected with One UI 7.0. We will keep you updated with any new information regarding the release dates and features of these updates.