Mar 18, 2025Ravie LakshmananAd Fraud / Mobile SecurityCybersecurity researchers have warned about a large-scale ad fraud campaign that has leveraged hundreds of malicious apps published on the Google Play Store to serve full-screen ads and conduct phishing attacks."The apps display out-of-context ads and even try to persuade victims to give away credentials and credit card information in phishing attacks," Bitdefender said in a report shared with The Hacker News.Details of the activity were first disclosed by Integral Ad Science (IAS) earlier this month, documenting the discovery of over 180 apps that were engineered to deploy endless and intrusive full-screen interstitial video ads. The ad fraud scheme was codenamed Vapor.These apps, which have since been taken down by Google, masqueraded as legitimate apps and collectively amassed more than 56 million downloads between them, generating over 200 million bid requests daily."Fraudsters behind the Vapor operation have created multiple developer accounts, each hosting only a handful of apps to distribute their operation and evade detection," the IAS Threat Lab said. "This distributed setup ensures that the takedown of any single account would have minimal impact on the overall operation."By mimicking seemingly harmless utility, fitness, and lifestyle applications, the operation has been able to successfully dupe unwitting users into installing them.Another important aspect is that the threat actors have been found employing a sneaky technique called versioning, which involves publishing to the Play Store a functional app sans any malicious functionality such that it passes Google's vetting process. The features are removed in subsequent app updates to show intrusive ads.What's more, the ads hijack the device's entire screen and prevent the victim from using the device, rendering it largely inoperable. It's assessed that the campaign began sometime around April 2024, before expanding at the start of this year. More than 140 bogus apps were uploaded to the Play Store in October and November alone.The latest findings from the Romanian cybersecurity company show that the campaign is bigger than previously thought, featuring as many as 331 apps that racked up more than 60 million downloads in total.Besides hiding the app's icon from the launcher, some of the identified applications have also been observed attempting to collect credit card data and user credentials for online services. The malware is also capable of exfiltrating device information to an attacker-controlled server.Another technique used for detection evasion is the use of Leanback Launcher, a type of launcher specifically designed for Android-based TV devices, and changing its own name and icon to impersonate Google Voice."Attackers figured out a way to hide the apps' icons from the launcher, which is restricted on newer Android iterations," Bitdefender said. "The apps can start without user interaction, even though this should not be technically possible in Android 13."It's believed that the campaign is the work of either a single threat actor or several cybercriminals who are making use of the same packing tool that's advertised for sale on underground forums."The investigated applications bypass Android security restrictions to start activities even if they are not running in the foreground and, without required permissions to do so, spam the users with continuous, full-screen ads," the company added. "The same behavior is used to serve UI elements featuring phishing attempts."Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

Mar 18, 2025Ravie LakshmananCyber Attack / MalwareAt least four different threat actors have been identified as involved in an updated version of a massive ad fraud and residential proxy scheme called BADBOX, painting a picture of an interconnected cybercrime ecosystem.This includes SalesTracker Group, MoYu Group, Lemon Group, and LongTV, according to new findings from the HUMAN Satori Threat Intelligence and Research team, published in collaboration with Google, Trend Micro, Shadowserver, and other partners.The "complex and expansive fraud operation" has been codenamed BADBOX 2.0. It has been described as the largest botnet of infected connected TV (CTV) devices ever uncovered."BADBOX 2.0, like its predecessor, begins with backdoors on low-cost consumer devices that enable threat actors to load fraud modules remotely," the company said. "These devices communicate with command-and-control (C2) servers owned and operated by a series of distinct but cooperative threat actors."The threat actors are known to exploit several methods, ranging from hardware supply chain compromises to third-party marketplaces, to distribute what ostensibly appear to be benign applications that contain surreptitious "loader" functionality to infect these devices and applications with the backdoor.The backdoor subsequently causes the infected devices to become part of a larger botnet that's abused for programmatic ad fraud, click fraud, and offers illicit residential proxy services -Hidden ads and launching hidden WebViews to generate fake ad revenueNavigation to low-quality domains and clicking on ads for financial gainRouting traffic through compromised devicesUsing the network for account takeover (ATO), fake account creation, malware distribution, and DDoS attacksAs many as one million devices, mainly comprising inexpensive Android tablets, connected TV (CTV) boxes, digital projectors, and car infotainment systems, are estimated to have fallen prey to the BADBOX 2.0 scheme. All the affected devices are manufactured in mainland China and shipped globally. A majority of the infections have been reported in Brazil (37.6%), the United States (18.2%), Mexico (6.3%), and Argentina (5.3%).The operation has since been partially disrupted a second time in three months after an undisclosed number of BADBOX 2.0 domains have been sinkhole in an attempt to cut off communications with the infected devices. Google, for its part, removed a set of 24 apps from the Play Store that distributed the malware. A portion of its infrastructure was previously taken down by the German government in December 2024."The infected devices are Android Open Source Project devices, not Android TV OS devices or Play Protect certified Android devices," Google said. "If a device isn't Play Protect certified, Google doesn't have a record of security and compatibility test results. Play Protect certified Android devices undergo extensive testing to ensure quality and user safety."The backdoor that forms the core of the operation is based on an Android malware known as Triada. Codenamed BB2DOOR, it is propagated in three different ways: A pre-installed component on the device, fetched from a remote server when booted for the first time, and downloaded via more than 200 trojanized versions of popular apps from third-party stores.It's said to be the handiwork of a threat cluster named MoYu Group, which advertises residential proxy services built upon BADBOX 2.0-infected devices. Three other threat groups are responsible for overseeing other aspects of the scheme -SalesTracker Group, which is connected to the original BADBOX operation as well as a module that monitors infected devicesLemon Group, which is connected to residential proxy services based on BADBOX and an ad fraud campaign across a network of HTML5 (H5) game websites using BADBOX 2.0 LongTV, a Malaysian internet and media company whose two dozen apps are behind an ad fraud campaign based on an approach known as "evil twin""These groups were connected to one another through shared infrastructure (common C2 servers) and historical and current business ties," HUMAN said.The latest iteration represents a significant evolution and adaptation, with the attacks also relying on infected apps from third-party app stores and a more sophisticated version of the malware that entails modifying legitimate Android libraries to set up persistence.Interestingly, there is some evidence to suggest overlaps between BB2DOOR and Vo1d, another malware that's known to specifically target off-brand Android-based TV boxes."The BADBOX 2.0 threat in particular is compelling in no small part because of the open-season nature of the operation," the company added. "With the backdoor in place, infected devices could be instructed to carry out any cyber attack a threat actor developed."The development comes as Google removed over 180 Android apps spanning 56 million downloads for their involvement in a sophisticated ad fraud scheme dubbed Vapor that leverages fake Android apps to deploy endless, intrusive full-screen interstitial video ads, per the IAS Threat Lab.It also follows the discovery of a new campaign that employs DeepSeek-themed decoy sites to trick unsuspecting users into downloading an Android banking malware referred to as Octo.Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

My childhood dream from when I was 12 years old a channel that shows nothing butThe Simpsons24 hours a day, 7 days a week is finally a reality.Thats because Disney+announced they are addinga 24/7 stream ofThe Simpsonsepisodes to their lineup of live programming. According to the press release, at launch the channel will show 767 episodes across seasons 1-35 programmed in chronological order.(Yes, there are now almost 300 hours ofSimpsons episodes.)Of course, all of these episodes arealready available on Disney+ on demand, and you can pick and choose which ones you want to watch in any order. But who wants to make a decision about whatSimpsons to watch out of 767 possible choices? This takes all that thought out of it. Just click play and stream for as long as you feel like paying for a Disney+ subscription.The press release also says that the programming on theSimpsons stream will be refreshed monthly. The stream is available to Premium subscribers of DisneyDisney+s 24/7Simpsons stream launches today. Other streams available for Premium Disney+ subscribers include Hits & Heroes (which has Marvel movies and assorted action franchises), Throwbacs (nostalgic Disney content), and Real Life (documentaries and biopics). There are also streams for ABC News and shows for younger viewers that are available for ll Disney+ users.Disney+ alsojust added the latest Best Picture winner at the Academy Awards,Anora, which is a wonderfulfilm and also a very fun thing to watch on Disney+. You could even make it a thematically-appropriate double feature withCinderella.Sign up for Disney+ here.Get our free mobile appObscure Streaming TV Shows You Might Not Have Heard OfThere are so many streaming shows now. These are the ones you need to watch.Gallery Credit: Emma Stefansky

There he is. Happy Gilmore is back.Wait a minute. Thats not a golf club shaped like a hockey stick. Thats a golf club shaped like a golf club! This is an outrage! You call this a sequel toHappy Gilmore?!?While I nurse this mortal wound, you can watch the first trailer for the much-anticipatedHappy Gilmore 2, in which Adam Sandler reprises his role as a hockey burnout turned golf prodigy who takes the PGA by storm. Nearly 30 years after the original film helped turn Sandler fromSaturday Night Livebreakout to full-fledged movie star, Sandler has made a follow-up for Netflix.You can watchtheHappy Gilmore 2teaser below.READ MORE: Every Adam Sandler Movie, Ranked From Worst to BestIn addition to Sandler, Julie Bowen, Christopher McDonald, and Ben Stiller are all reprising their roles from the original film. The cast also includes pro golfer John Daly, Travis Kelce, Sandlers real-life daughters Sadie and Sunny, and AEW pro wrestler Maxwell Jacob Friedman. Quite an eclectic bunch.Heres the films official synopsis:Happy Gilmore returns!Well okay, then. On the other hand, I guess thats all you really need to know about the movie. Like, what else could they say that would make you tune in? (I would at least like a little confirmation that at some point Happy does use a golf club shaped like a hockey stick, but maybe thats just me.)Happy Gilmore 2premieres on Netflix on July 25.Get our free mobile appThe 10 Worst Movies of the Last Ten Years (2015-2024)Look, lets not beat around the bush. These movies stink.Filed Under: Adam Sandler, Happy Gilmore 2, NetflixCategories: Movie News, Trailers

In the ever-evolving world of health care, the role of technology is becoming increasingly crucial. From improving patient outcomes to streamlining administrative processes, digital technologies are changing the face of the industry. However, for startups developing health tech solutions, breaking into the market and scaling their products can be a challenging journey, requiring access to resources, expertise, and a network they might not have. This is where health tech accelerator programs come in. Health tech accelerator programs are designed to support early-stage startups in the health technology space, providing them with the resources, mentorship, and funding they need to grow and succeed. These programs are often highly competitive, and startups that are selected gain access to a wealth of opportunities that can significantly accelerate their development. In this article, well explore five key benefits of participating in a health tech accelerator program. 1. Access to mentorship and expertise One of the most valuable aspects of health tech accelerator programs is the access they provide to experienced mentors and industry experts. Health tech startups often face unique challenges, such as navigating complex health-care regulations, developing scalable technologies, and understanding the intricacies of health systems. Having mentors who have firsthand experience in these areas can provide critical guidance. These mentors often include clinicians, informaticists, investors, health-care professionals, and thought leaders. Their insights can help startups refine their business strategies, optimize their digital health solutions, and navigate the health-care landscape. With this guidance, startups are better positioned to make informed decisions, avoid common pitfalls, and accelerate their growth. 2. Funding and investment opportunities For many startups, securing funding is one of the biggest hurdles they face. Health tech innovation can be expensive, especially in the early stages when startups are working on solution development, regulatory approvals, and pilot testing. Accelerator programs often provide startups with seed funding, as well as the opportunity to connect with venture capitalists, angel investors, and other potential backers. Many accelerator programs culminate in a "demo day," where startups pitch their solutions to a room full of investors and other key decision-makers. These events can be crucial in securing the funding necessary to scale a digital health solution or product. Beyond initial funding, the exposure gained from being part of a well-known accelerator program can lead to additional investment opportunities down the road. 3. Networking and industry connections The health-care industry is notoriously complex and fragmented, making it difficult for new players to break in without the right connections. Health tech accelerator programs offer startups the opportunity to network with key leaders in the health-care and technology ecosystems, including clinicians, payers, pharmaceutical companies, government agencies, and potential customers. Through structured networking events, mentorship sessions, and partnerships with established organizations, startups gain access to a wide range of stakeholders who can help substantiate their products, open doors to new markets, and provide feedback that can be used to refine their offerings. In the health tech space, strong industry connections are often critical to gaining traction and scaling successfully. 4. Market validation and credibility The health tech industry is highly regulated and risk-averse, meaning that customers and investors are often wary of new technologies. Participating in an accelerator program can serve as a form of market validation, signaling that a startups offering has been vetted by experts and has the potential for success. The credibility gained from being accepted into a prestigious accelerator program can be a game-changer. It provides startups with a level of legitimacy that can help them stand out in a crowded and competitive market. Whether its attracting investors, forging partnerships, or securing early customers, the reputation of the accelerator can give a startup a significant boost. Additionally, accelerator programs often have ties to major health-care institutions and organizations. This can provide startups with opportunities to pilot their products in real-world health-care settings, which can serve as both a test of the products viability and a powerful proof of concept for future customers and investors. 5. Access to resources and infrastructure Another significant benefit of accelerators is the access to resources and infrastructure that startups might not obtain otherwise. These resources can include everything from access to clinical data for model building and testing, legal and regulatory support, and technology infrastructure to deploy and scale. For early-stage health tech companies, these resources can be a game-changer. Conclusion Health tech startups are at the forefront of transforming health care, but navigating the challenges of innovation, regulation, and market entry can be daunting. Health tech accelerator programs offer invaluable support by providing startups with the mentorship, funding, networking opportunities, credibility, and resources they need to succeed. Mayo Clinic Platform_Accelerate is a 30-week accelerator program from Mayo Clinic Platform focused on helping startups with digital technologies advance their solution development and get to market faster. Learn more about the program and the access it provides to clinical data, Mayo Clinic experts, technical resources, investors, and more at https://www.mayoclinicplatform.org/accelerate/. This content was produced by Mayo Clinic Platform. It was not written by MIT Technology Reviews editorial staff.

This is today's edition ofThe Download,our weekday newsletter that provides a daily dose of what's going on in the world of technology. When you might start speaking to robots Last week, Google made a somewhat surprising announcement. It launched a version of its AI model, Gemini, that can do things not just in the digital realm of chatbots and internet search but out here in the physical world, via robots. Gemini Robotics fuses the power of large language models with spatial reasoning, allowing you to tell a robotic arm to do something like put the grapes in the clear glass bowl. These verbal commands get filtered by the LLM, which identifies intentions from what youre saying and then breaks them down into commands that the robot can carry out. You might be wondering if this means your home or workplace might one day be filled with robots you can bark orders at. Read our story to find out.James ODonnell This story originally appeared in The Algorithm, our weekly newsletter on AI. To get stories like this in your inbox first, sign up here. And to read more about how AI is making robots smarter, check out: + Fast-learning robots were one of the entries in MIT Technology Reviews list of 10 Breakthrough Technologies for 2025. Read why they made the cut, and the companies you should be keeping an eye on. + Whats next for robots in 2025. With tests of humanoid bots and new developments in military applications, the next year will intrigue even the skeptics. Read the full story. + Robot utility models sidestep the need to tweak the data used to train robots every time they try to do something in unfamiliar settings. Read the full story. + Is robotics about to have its own ChatGPT moment? Researchers are using generative AI and other techniques to teach robots new skillsincluding tasks they could perform in homes. Read the full story. Job titles of the future: Pharmaceutical-grade mushroom grower Studies have indicated that psychedelic drugs, such as psilocybin and MDMA, have swift-acting and enduring antidepressant effects. Though the US Food and Drug Administration denied the first application for medical treatments involving psychedelics (an MDMA-based therapy) last August, these drugs appear to be on the road to mainstream medicine. Research into psilocybin has been slowed in part by the complexity of the trials, but the data already shows promise for the psychedelic compound within so-called magic mushrooms. Eventually, the FDA will decide whether to approve it to treat depression. If and when it doesa move that would open up a vast legal medical marketwho will grow the mushrooms? Scott Marshall already is. The head of mycology at the drug manufacturer Optimi Health in British Columbia, Canada, he is one of a very small number of licensed psilocybin mushroom cultivators in North America. Read the full story.Mattha Busby This story is from the latest edition of our print magazine, which is all about relationships. Subscribe now to receive future editions once they landsubscriptions are currently 25% off the usual price! The must-reads Ive combed the internet to find you todays most fun/important/scary/fascinating stories about technology. 1 BYDs new EV can charge in just five minutes Which could help attract customers previously put off by long charging times. (Bloomberg $)+ The company also announced plans to build a charging network in China. (The Guardian)+ The worlds first consumer sodium-ion battery power bank has been announced. (The Verge)+ BYD is one of MIT Technology Reviews Climate Tech Companies to Watch. (MIT Technology Review)2 NASAs stranded astronauts have begun their return to EarthSuni Williams and Butch Wilmore have spent nine long months in space. (CNN)+ The pair kept busy by exercising for two hours a day. (BBC)3 How Elon Musks ties to China could warp American polic Teslas value is heavily dependent on him maintaining a cordial relationship with the CCP. (Vox)+ Musks companies are extremely valuable targets. (The Hill)+ If relations sour with China, Musk may look to expand more aggressively in India. (Rest of World)4 Microsoft is developing an AI model that simulates our brains reasoning The goal is for it to learn from real-world experience, instead of just data. (FT $)+ AI reasoning models can cheat to win chess games. (MIT Technology Review)5 Alphabet has agreed to buy cybersecurity startup Wiz At $32 billion, its the biggest acquisition the company has ever made. (FT $)6 Everything you say to your Echo will be sent to AmazonAnd if you opt out, Alexa wont work anymore. (Ars Technica) + But Amazon denies that ending on-device processing will harm user privacy. (The Register)7 US funding cuts could undo decades of progress fighting HIVExperts are rushing to get drugs to vulnerable communities while they still can.(The Guardian) + Eight countries are likely to run out of treatments soon. (Reuters)+ This annual shot might protect against HIV infections. (MIT Technology Review) 8 Donald Trump is convinced that Joe Biden used an autopenThe President alleges that aides used the gadget to duplicate Bidens signature. (WP $) + However, Trump has not provided any evidence to back up his allegations. (BBC)9 Big Tech is competing with your need to sleep Theres only so many hours in the day to consume content, after all. (Insider $)+ I tried to hack my insomnia with technology. Heres what worked. (MIT Technology Review)10 Thank goodness for Facebook Marketplace It feels like the last bastion of fully human interaction on social media. (NYT $)Quote of the day "It's been a roller coaster for them, probably a little bit more so than for us." Astronaut Suni Williams, who has spent nine months living on the International Space Station, says shes looking forward to returning to her family once she touches back down on Earth, Reuters reports. The big story Exosomes are touted as a trendy cure-all. We dont know if they work. October 2024 Theres a trendy new cure-all in town: exosomes. Theyre being touted as a miraculous treatment for hair loss, aging skin, acne, eczema, pain conditions, long covid, and even neurological diseases like Parkinsons and Alzheimers. Thats, of course, if you can afford the price tagwhich can stretch to thousands of dollars. But theres a big problem with these big promises: We dont fully understand how exosomes workor what they even really are. Read our story. Jessica Hamzelou We can still have nice things A place for comfort, fun and distraction to brighten up your day. (Got any ideas? Drop me a line or skeet 'em at me.) + This destructive little otter is a menace, but still very cute.+ Heres how to make the perfect tomato soup: complete with a surprise twist.+ Londons fanciest bars are going all out to outfit themself with hi-fi listening systems.+ A word of warningthese books are dangerous.

Source: Ed ReeveAdjaye Associates founder David AdjayeAdjaye Associates has insisted it is feeling bullish after reporting a loss of 720,000 and a downturn in revenue during the year that its founder David Adjaye faced allegations of sexual misconduct.The practice said its pre-tax profit margin would have stayed in the black without a one-off payment of 1.46m made after reviewing claims for withholding taxes from foreign jurisdictions.The firms latest accounts, covering for the year to 31 December 2023, cover the period when Adjaye was accused of sexual misconduct towards three women, which he has consistently denied.The accusations, first published in the Financial Times, led to the practice being dropped from a number of high profile projects including the 57m International Slavery Museum in Liverpool.The fallout from the story also led to Adjaye stepping down from a number of key roles including as design advocate for the Mayor of London and a ceremonial association with architecture school the African Futures Institute.> Also read:Adjaye London CEO Lucy Tilley: Well work even harder to carry on our legacy. Well keep goingBut the RIBA Gold Medal-winning architect made no mention of the allegations in the accounts, instead blaming the firms performance on a commercially challenging year for the construction industry at large, adding that a global economic slowdown had led to delays on a number of significant projects.While turnover dropped from 20.5m to 17.1m, a spokesperson for the practice described the fall in revenue as a blip and said the firm was feeling confident and carrying on.We had a storm thrown at us and we toughed it out, the spokesperson said, admitting that 2023 had been possibly the worst year that any architecture firm could have gone through.The firm also claimed that a cut in staff numbers during the accounting period from 96 to 85 was relatively minor given the circumstances, while describing its profit margin as commendable if the one-off tax payment was excluded.The spokesperson declined to comment on the tax payment, which the firm blamed for sending its pre-tax profit tumbling into the red from 2.5m in 2022.Turnover in the practices two largest markets also fell during the period, from 14m to 13m in the Middle East and from 4.8m to just 892,000 in Asia.However, income rose in Africa from 261,400 to 1.46m and from 684,000 to 984,000 in the UK.The firm paid a dividend of 1.9m during the year. Adjaye is listed as the sole director of the company, which is majority owned by its parent company Adjaye Holdings Limited, which is in turn majority owned by Adjaye.Major projects completed by the practice during 2023 included the King Salman Park Visitor Centre in Riyadh, the George Street Plaza and Community Building in Sydney and a residential tower in New York called 130 William.

Deputy prime minister says greenfield site could be classed as grey belt amid concerns over harm to wildlife1/5show captionAngela Rayner has approved Howells plans for a supersized version of Cumbrias famous Tebay service station in Cheshire after concluding the site meets the definition of the new grey belt land class.Controversial proposals for the Tatton Services scheme, which has been designed for Tebay Services owner Westmorland Family, were approved by Cheshire East council in 2023 despite provoking considerable opposition from local residents.The consent included a condition that it should be referred to the secretary of state for the Ministry of Housing, Communities and Local Government (MHCLG) for final sign off due to the scale of the scheme and its location on green belt land.It is set to be three times the size of its northern sister station on the M6, which has gained a cult following for motorists driving to and from Scotland due to its dramatic rural setting and its farm shop selling a vast array of artisanal food.Located on a 16ha site between junctions seven and eight of the M56 motorway near Altrincham, south west of Manchester, it will contain a 6,300 sq m shop building, a 100-bedroom hotel, a 1,000 sq m fuel station, electric vehicle charging stations and a refurbishment of an existing early 19th century farmhouse.The application received more than 150 letters of objection flagging the potential loss of ancient woodland, loss of wildlife, additional traffic and the lack of need for another service station on the M56.The council also received a letter from local MP and Conservative Party chairman Graham Brady highlighting concerns raised by his constituents over the schemes impact on existing local businesses and doubts over whether it justified the loss of green belt land.However, MHCLG has now signed off the scheme following a public inquiry held in October last year which resulted in a recommendation for approval from planning inspector David Rose.Housing minister Matthew Pennycook, writing on behalf of Rayner, the communities secretary, said Rayner agreed with the inspectors recommendation that a need for a motorway service station on this part of the road network is indisputable.Rayner is said to have concluded that the site meets the definition of grey belt, a new land classed broadly defined as poor quality areas of the green belt which was created in the governments revisions to the National Planning Policy Framework last December.Pennycook said Rayner considered the site to be essentially a standalone pocket of land surrounded by motorway infrastructure and its development as a service station would not fundamentally undermine the purposes of the green belt.The NPPF defines grey belt as land that does not strongly contribute to three defined green belt purposes, preventing urban sprawl, preventing towns merging into one another and preserving the setting of historic towns. Rayner said the Tatton Services scheme would not contribute to any of these purposes.She also agreed with the inspector that any additional traffic would be limited and restricted to a series of roundabouts close to the site.Cheshire Easts planning officer had recommended the scheme for approval despite arguing that it reduces openness and encroaches into the countryside.But the officer added that these impacts were clearly outweighed by the need for the service station and its economic benefits.The plans have been developed by a joint venture between Westmorland Family and developer Pegasus Group, with the project team including lead architect Howells, landscape architect Planit IE and MEP, sustainability and energy consultant Ramboll.

Feeling stressed? We asked experts about who should take ashwagandha to potentially help with anxiety, sleep, stress and more.

Tariffs, inflation and stock market volatility won't affect your CD returns.