{"id":26733,"date":"2023-08-30T09:05:29","date_gmt":"2023-08-30T13:05:29","guid":{"rendered":"https:\/\/www.thundercloud.net\/infoave\/new\/?p=26733"},"modified":"2023-08-30T09:05:29","modified_gmt":"2023-08-30T13:05:29","slug":"wednesday-newsbytes-windows-11-gets-new-backup-feature-new-settings-app-in-windows-11-is-a-mind-reader-how-the-fbi-removed-oakbot-from-infected-pcs-whiffy-malware-sends-hackers-your-location-an","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/wednesday-newsbytes-windows-11-gets-new-backup-feature-new-settings-app-in-windows-11-is-a-mind-reader-how-the-fbi-removed-oakbot-from-infected-pcs-whiffy-malware-sends-hackers-your-location-an\/","title":{"rendered":"Wednesday Newsbytes: Windows 11 Gets New Backup Feature; New Settings App in Windows 11 is a Mind Reader; How the FBI Removed Oakbot from Infected PCs: Whiffy Malware Sends Hackers Your Location&#8230; and more!"},"content":{"rendered":"<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Wednesday Newsbytes: Windows 11 Gets New Backup Feature<\/span><\/strong><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">; New Settings App in Windows 11 is a Mind Reader<\/span><\/strong><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">; How the FBI Removed Oakbot from Infected PCs: Whiffy Malware Sends Hackers Your Location&#8230; and more!<\/span><\/strong><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Every day we scan the tech world for interesting news in the world of technology and sometimes from outside the world of technology. Every Wednesday, we feature news articles that grabbed our attention over the past week. We hope you find this week&#8217;s\u00a0 &#8216;Wednesday Newsbytes&#8217; informative and interesting!<\/span><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.digitaltrends.com\/computing\/the-windows-11-backup-app-takes-another-cue-from-macs\/\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">The new Windows 11 Backup App takes another cue from the Mac<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">The latest Windows 11 Insider Preview includes a new Backup App that functions in a similar fashion to Time Machine in macOS.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The backup app will allow for more regular backups of most apps, settings, and data in Windows 11. This will allow for easier restore abilities, as well as the ability to transfer data to a new PC, NotebookCheck noted.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Notably, Time Machine works by allowing you to frequently back up data in macOS. If an issue arises with your Mac system, you can select a date of one of your most recent backups, before the issue occurred, and restore the system to that date to see if the issue will resolve. Time Machine has been a staple on macOS since 2007.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Microsoft recently announced its new Backup App as part of its Windows 11 Insider Preview Build 23466 release, which is now available for download from the Dev Channel.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The system features that will generally be backed up include stock applications, documents, photos, files, passwords, and basic settings, in addition to Start Menu and Taskbar configurations. In terms of modification, the system does allow you to determine which files and settings you wish not to include in your backup. Applications downloaded from the Microsoft Store aren\u2019t eligible for automatic backup and reinstallation.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">You can initiate a backup by visiting the new Windows Backup app or through the Accounts\/Windows Backup section in the Settings&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.digitaltrends.com\/computing\/the-windows-11-backup-app-takes-another-cue-from-macs\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-family: helvetica, arial, sans-serif; font-size: 18pt;\"><strong><span style=\"text-decoration: underline;\">Read more at Digital Trends<\/span><\/strong><\/span><span style=\"font-family: helvetica, arial, sans-serif; font-size: 18pt;\"><strong><span style=\"text-decoration: underline;\">.<\/span><\/strong><\/span><\/a><\/p>\n<blockquote>\n<hr \/>\n<p><a href=\"https:\/\/www.laptopmag.com\/news\/windows-11-settings-app-is-a-mind-reader-now-with-new-update-heres-whats-new\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Windows 11 &#8216;Settings&#8217; app is a mind reader now with new update \u2014 here&#8217;s what&#8217;s new<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Settings is getting a new homepage<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Microsoft is introducing a new addition to the Settings app that is currently available for testing among Windows 11 insiders. The Redmond-based tech giant boasted that the new update features a new Settings homepage that&#8217;s built to deliver more personalization to Windows 11.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The most salient aspect of this update is that the homepage will feel more like &#8220;you.&#8221; In other words, based on your usage patterns and trends, it will populate recommended settings that you use the most (e.g., Display, Sound, Search permissions).<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Windows 11 Settings app gets a new homepage<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The new homepage in the Settings app will have seven new cards:<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Recommended settings<\/span><br \/>\n<span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Bluetooth Devices<\/span><br \/>\n<span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Personalization<\/span><br \/>\n<span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Account Recovery<\/span><br \/>\n<span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Cloud storage<\/span><br \/>\n<span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Microsoft 365<\/span><br \/>\n<span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Xbox<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Each interactive card, according to Microsoft, will be optimized to offer &#8220;the most relevant information&#8221; at your finger tips. For example, the Recommended settings card will surface your most commonly used Windows 11 settings&#8230;.<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.laptopmag.com\/news\/windows-11-settings-app-is-a-mind-reader-now-with-new-update-heres-whats-new\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\"><span style=\"font-family: helvetica, arial, sans-serif;\"><strong><span style=\"font-size: 18pt;\">Read more at Laptop Mag.<\/span><\/strong><\/span><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/how-the-fbi-nuked-qakbot-malware-from-infected-windows-pcs\/\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">How the FBI nuked Qakbot malware from infected Windows PCs<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The FBI announced today the disruption of the Qakbot botnet in an international law enforcement operation that not only seized infrastructure but also uninstalled the malware from infected devices.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">During this past weekend\u2019s law enforcement operation, Operation Duck Hunt, the FBI redirected the botnet\u2019s network communications to servers under its control, allowing agents to identify approximately 700,000 infected devices (200,000 located in the U.S.).<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">After they took control of the botnet, the FBI devised a method to uninstall the malware from the victims\u2019 computers, effectively dismantling the botnet\u2019s infrastructure, from the victims\u2019 PCs to the malware operators\u2019 own computers.<\/span><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">What is Qakbot?<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Before we learn how the FBI uninstalled Qakbot from computers, it is essential to understand how the malware was distributed, what malicious behavior it performed, and who utilized it.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Qakbot, aka Qbot and Pinkslipbot, started as a banking trojan in 2008, used to steal banking credentials, website cookies, and credit cards to conduct financial fraud.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">However, over time, the malware evolved into a malware delivery service utilized by other threat actors to gain initial access to networks for conducting ransomware attacks, data theft, and other malicious cyber activities.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Qakbot is distributed through phishing campaigns that utilize a variety of lures, including reply-chain email attacks, which is when threat actors use a stolen email thread and then reply to it with their own message and an attached malicious document&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/how-the-fbi-nuked-qakbot-malware-from-infected-windows-pcs\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-family: helvetica, arial, sans-serif;\"><span style=\"font-size: 24px;\"><b><u>Read more at Bleeping Computer.<\/u><\/b><\/span><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.tomsguide.com\/news\/this-mysterious-new-malware-uses-wi-fi-networks-to-give-hackers-your-exact-location\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 24pt;\"><strong><span style=\"font-family: helvetica, arial, sans-serif;\">This mysterious new malware uses Wi-Fi networks to give hackers your exact location<\/span><\/strong><\/span><\/a><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Whiffy Recon malware sends hackers your exact location every 60 seconds<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Normally when hackers infect one of the best Windows laptops with malware, financial gain is their motivation. However, they also like to deploy infostealer malware to get their hands on your personal data.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Security researchers at Secureworks\u2019 Counter Threat Unit have come across a mysterious new malware strain that is after something else entirely: your exact location. As reported by The Hacker News, hackers are now using the SmokeLoader malware to deliver a new malware strain called Whiffy Recon.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">As its name suggests, SmokeLoader is a Malware-as-a-Service offering sold on dark web forums that\u2019s designed to drop additional payloads (which include other malware) on vulnerable computers. It\u2019s typically distributed through either phishing emails or malicious documents.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Now SmokeLoader is being used to infect PCs with Whiffy Recon, but even the security researchers that discovered this new malware strain aren\u2019t quite sure what the hackers behind this campaign intend to use it for.<\/span><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Pinpointing your exact location<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">According to a new blog post detailing Secureworks\u2019 findings, the Whiffy Recon malware \u201chas only one operation\u201d and \u201cevery 60 seconds it triangulates the infected systems\u2019 position by scanning nearby Wi-Fi access points.\u201d<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">To find an infected device\u2019s exact location, Whiffy Recon uses the information obtained from these Wi-Fi access points as a data point for Google\u2019s geolocation API. It does this by constantly checking Windows\u2019 WLAN AutoConfig Service on infected PCS. However, if this service doesn\u2019t exist, WhiffyRecon shuts down on its own. The malware also adds a shortcut to the Windows Startup folder&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.tomsguide.com\/news\/this-mysterious-new-malware-uses-wi-fi-networks-to-give-hackers-your-exact-location\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Read more at Tom&#8217;s Guide.<\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.techradar.com\/pro\/security\/another-major-spyware-app-has-been-hacked-with-thousands-of-victims-saved\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 24pt;\"><strong><span style=\"font-family: helvetica, arial, sans-serif;\">Another major spyware app has been hacked, with thousands of victims saved<\/span><\/strong><\/span><\/a><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Hackers found, and disabled, another top spyware manufacturer<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Hackers have attacked the makers of a widepsread mobile spyware tool, destroying all of the data the company gathered on its victims while exposing the malicious actors who were paying for the spyware service.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">A report by TechCrunch, tipped off by DDoSecrets, a nonprofit transparency group that documents data leaks, examined a large database &#8211; 1.5GB in size &#8211; it received from an unnamed hacking group, claiming the database came from WebDetetive, a mobile spyware app built for the Portuguese-speaking community.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The majority of the victims were located in Brazil, it was said.<\/span><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Flipping the script<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The hackers told DDoSecrets that they found multiple vulnerabilities in WebDetetive\u2019s infrastructure and endpoints which allowed them to access the database. While inside, they uncovered that some 76,000 Android devices were victims of the spyware, which was harvesting all sorts of private and sensitive information.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">However, instead of stealing the victim data and posting it online, the group deleted their devices from the spyware\u2019s network, rendering it useless. The infected devices were no longer able to send new data to the spyware\u2019s server. The group said it did this \u201cbecause we could.\u201d They also generated a different database (the one shared with DDoSecrets) and filled it with information on the people who were using WebDetetive\u2019s services.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The data included customer IP addresses and their purchase history. It also included all of the devices each customer infected, which version of the spyware was installed, and the type of data that was being stolen.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Spyware, or stalkerware apps, are not available on official app stores, such as the Play Store or the App Store. They can be installed from third-party stores and other places on the internet&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.techradar.com\/pro\/security\/another-major-spyware-app-has-been-hacked-with-thousands-of-victims-saved\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\"><strong><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">Read more at TechRadar.<\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<blockquote><p><a href=\"https:\/\/www.businessinsider.com\/social-media-flooded-spammy-ai-content-2023-8\" target=\"_blank\" rel=\"noopener\"><strong><span style=\"font-size: 24pt; font-family: helvetica, arial, sans-serif;\">Scientists found more than 1,000 AI spam bots trying to scam people and steal their social media profiles \u2014 and regulators can&#8217;t keep up<\/span><\/strong><\/a><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">People keep finding new uses for ChatGPT. One of the latest is flooding social media with spam bots and AI-generated content that could further degrade the quality of information on the internet.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">A new study shared last month by researchers at Indiana University&#8217;s Observatory on Social Media details how malicious actors are taking advantage of OpenAI&#8217;s chatbot ChatGPT, which became the fastest-growing consumer AI application ever this February.<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">The research, conducted by Kai-Cheng Yang, a computational social science researcher, and Filippo Menczer, a computer-science professor, found that ChatGPT&#8217;s ability to generate authoritative-looking text is being used to run &#8220;botnets&#8221; on X, formerly Twitter.<\/span><\/p>\n<p><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\">What are botnets and why are they bad?<\/span><\/p>\n<p><span style=\"font-size: 14pt; font-family: helvetica, arial, sans-serif;\">Botnets are networks of hundreds of harmful bots and spam campaigns on social media that can go undetected by current anti-spam filters. They are deployed for many reasons&#8230;<\/span><\/p><\/blockquote>\n<p><a href=\"https:\/\/www.businessinsider.com\/social-media-flooded-spammy-ai-content-2023-8\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\"><strong><span style=\"text-decoration: underline;\">Read more at Insider<\/span><\/strong><\/span><span style=\"font-size: 18pt; font-family: helvetica, arial, sans-serif;\"><strong><span style=\"text-decoration: underline;\">.<\/span><\/strong><\/span><\/a><\/p>\n<hr \/>\n<p><span style=\"font-family: helvetica, arial, sans-serif; font-size: 18pt; color: #993366;\"><strong><em>Thanks for reading this week&#8217;s Wednesday Newbytes. We hope these articles were informative, interesting, fun, and helpful. Darcy &amp; TC<\/em><\/strong><\/span><\/p>\n<p><a href=\"https:\/\/thundercloud.net\/donation.htm\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone\" src=\"https:\/\/thundercloud.net\/infoave\/images\/2017\/goodfight2017.png\" alt=\"Help us help you!\" width=\"573\" height=\"136\" \/><\/a><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-24576\" src=\"https:\/\/www.thundercloud.net\/infoave\/new\/wp-content\/uploads\/2022\/11\/ny23.png\" alt=\"\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Wednesday Newsbytes: Windows 11 Gets New Backup Feature; New Settings App in Windows 11 is a Mind Reader; How the FBI Removed Oakbot from Infected PCs: Whiffy Malware Sends Hackers Your Location&#8230; and more! Every day we scan the tech world for interesting news in the world of technology and sometimes from outside the world of\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.thundercloud.net\/infoave\/new\/wednesday-newsbytes-windows-11-gets-new-backup-feature-new-settings-app-in-windows-11-is-a-mind-reader-how-the-fbi-removed-oakbot-from-infected-pcs-whiffy-malware-sends-hackers-your-location-an\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":23363,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1655,4421,101,3770,4431,2883,1669,1680,4461,1674,4372,2145,4221],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/26733"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=26733"}],"version-history":[{"count":2,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/26733\/revisions"}],"predecessor-version":[{"id":26735,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/26733\/revisions\/26735"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media\/23363"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=26733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=26733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=26733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}