Key Takeaways The US and China have agreed to lower tariffs, with the US now charging a 30% tariff, whereas China will charge 10%. Actual prices may not come down in the long run, but we may see an increase at a much lower pace. Lower tariffs may also not see massive domestic production shifts, so the trade deficit may close more slowly than expected. After a long-fought tariff war, the US and China seem to have reached an understanding. The two countries’ representatives met at Geneva and decided to lower the tariffs for 90 days. The US agreed to bring down its tariffs from 145% to 30%, while China will now only impose a 10% tariff on US goods instead of the previous 125%. It’s worth noting that the 30% tariff by the US comprises a 10% universal tariff imposed by Trump on all countries and an additional 20% tariff for failing to curb fentanyl flows by the Chinese. Trump used the entire tariff weapon to reduce the US’s massive $295.4B trade deficit with China as of 2024. He accused China of taking ‘unfair advantage’ of the US for years. This is also the largest trade deficit the US has had with any trading partner. Will Lower Tariffs Lead to Lower Prices? One important thing to understand is that while the tariffs have been reduced, the overall average effective tariff still stands at 17.8%, which is the highest since 1934. Even if you consider the shift in consumption due to the increased tariffs, the average tariff rate would come to 16.4%, the highest since 1937.  This means that consumers might not actually see lower prices. At most, we might see slower price increases. Companies like Nvidia have already pumped up the prices of their components and products by 10 to 15%. Acer has also announced a 10% price increase as a result of the tariffs. Also, a lot of products have already been shipped to the US, effective with the 145% tariff rates. Almost 12,000 containers with products for companies like Amazon, Ikea, Tractor Supply, and Home Depot have hit the shores of the US. The PC hardware inventory turnover is 30-90 days on average, which means that the price changes may be deferred by almost six weeks. So, it might take some time for the reduced tariffs to come into effect. Even then, you can expect the prices to be more than in the pre-tariff era. This will also depend on the time required to get rid of the high-tariffed inventory sitting on the US shelves. Fast-moving consumer goods usually have a faster inventory turnover, which means you can expect a price drop soon. However, high-value products like PCs may sit on the shelves for a good couple of months. The expectation of reduced prices is also based on the assumption that no further escalations will occur. This is only a 90-day pause, and the tariff scenario remains somewhat uncertain. The overall average price levels are expected to increase by 1.7% in the short run. This means that the average American household may lose $2,800 in purchasing power when compared to 2024. Even after consumption adjustment, the loss stands at around $2,300. Production Moving Back to the US? In the wake of increasing tariffs, several companies have announced moving production back to the US to save costs. For instance, Nvidia said that it will move $500 billion worth of AI server supply chain to the US. Along with partners like TSMC, Foxconn, Wistron, Amkor, and SPIL, Nvidia plans to set up AI servers and server assembly plants in the US. Apple, too, has announced a $500 billion investment in the U.S., including a Houston manufacturing facility. Trump even went on to say that he talked with Tim Cook after the tariff reduction announcement, and ‘he’s going to be building a lot of plants in the United States for Apple.’ Trump also hinted that the actual value of these investments may be way more than $500 billion. It’s worth noting that these announcements were made when the tariffs were as high as 145%. In such a situation, it wasn’t possible for these companies to shift the entire increase in cost to the customers through price hikes. For instance, Apple said that it would lose $900 million as a result of the tariffs. However, now the situation has eased off massively, with the tariffs standing at just 30%. So, do these manufacturers still have the motivation to shift production units to domestic shores? Sure, 30% is still nothing to sniff at, but a part of this cost can be passed on to the customers while the rest can be recovered through better production planning and cost-cutting. Bottom Line All in all, this seems to be a Catch-22 situation for Trump. The entire point of imposing heavy tariffs was to lower imports and encourage domestic production. While tariffs as high as 145% met these purposes, a 30% tariff may not deter the US manufacturers. However, increasing tariffs beyond a certain point would essentially bring trading to a halt between the US and China, which doesn’t serve the purpose either. So, it now all comes down to how well Trump can negotiate with the US companies. His talks with Cook seem to be reassuring as of now. We’ll know in due course whether production sees a ‘differentiable’ shift in the next few months. Krishi is a seasoned tech journalist with over four years of experience writing about PC hardware, consumer technology, and artificial intelligence.  Clarity and accessibility are at the core of Krishi’s writing style. He believes technology writing should empower readers—not confuse them—and he’s committed to ensuring his content is always easy to understand without sacrificing accuracy or depth. Over the years, Krishi has contributed to some of the most reputable names in the industry, including Techopedia, TechRadar, and Tom’s Guide. A man of many talents, Krishi has also proven his mettle as a crypto writer, tackling complex topics with both ease and zeal. His work spans various formats—from in-depth explainers and news coverage to feature pieces and buying guides.  Behind the scenes, Krishi operates from a dual-monitor setup (including a 29-inch LG UltraWide) that’s always buzzing with news feeds, technical documentation, and research notes, as well as the occasional gaming sessions that keep him fresh.  Krishi thrives on staying current, always ready to dive into the latest announcements, industry shifts, and their far-reaching impacts.  When he's not deep into research on the latest PC hardware news, Krishi would love to chat with you about day trading and the financial markets—oh! And cricket, as well. View all articles by Krishi Chowdhary Our editorial process The Tech Report editorial policy is centered on providing helpful, accurate content that offers real value to our readers. We only work with experienced writers who have specific knowledge in the topics they cover, including latest developments in technology, online privacy, cryptocurrencies, software, and more. Our editorial policy ensures that each topic is researched and curated by our in-house editors. We maintain rigorous journalistic standards, and every article is 100% written by real authors. Source: https://techreport.com/news/us-china-tariff-understanding-price-impact/ #and #china #reach #tariff #understanding #but #prices #may #not #decrease #immediately

May 13, 2025Ravie LakshmananCyber Espionage / Malware The North Korea-linked threat actor known as Konni APT has been attributed to a phishing campaign targeting government entities in Ukraine, indicating the threat actor's targeting beyond Russia. Enterprise security firm Proofpoint said the end goal of the campaign is to collect intelligence on the "trajectory of the Russian invasion." "The group's interest in Ukraine follows historical targeting of government entities in Russia for strategic intelligence gathering purposes," security researchers Greg Lesnewich, Saher Naumaan, and Mark Kelly said in a report shared with The Hacker News. Konni APT, also known as Opal Sleet, Osmium, TA406, and Vedalia, is a cyber espionage group that has a history of targeting entities in South Korea, the United States, and Russia. It's operational since at least 2014. Attack chains mounted by the threat actor often involve the use of phishing emails to distribute malware called Konni RAT (aka UpDog) and redirect recipients to credential harvesting pages. Proofpoint, in an analysis of the threat group published in November 2021, assessed TA406 to be one of several actors that make up the activity publicly tracked as Kimsuky, Thallium, and Konni Group. The latest set of attacks documented by the cybersecurity company entails the use of phishing emails that impersonate a fictitious senior fellow at a think tank called the Royal Institute of Strategic Studies, which is also a non-existent organization. The email messages contain a link to a password-protected RAR archive that's hosted on the MEGA cloud service. Opening the RAR archive using a password mentioned in the message body launches an infection sequence that's engineered to conduct extensive reconnaissance of the compromised machines. Specifically, present within the RAR archive is a CHM file that displays decoy content related to former Ukrainian military leader Valeriy Zaluzhnyi. Should the victim click anywhere on the page, a PowerShell command embedded within the HTML is executed to reach out to an external server and download a next-stage PowerShell payload. The newly launched PowerShell script is capable of executing various commands to gather information about the system, encode it using Base64-encoding, and send it to the same server. "The actor sent multiple phishing emails on consecutive days when the target did not click the link, asking the target if they had received the prior emails and if they would download the files," the researchers said. Proofpoint said it also observed an HTML file being directly distributed as an attachment to the phishing messages. In this variation of the attack, the victim is instructed to click on an embedded link in the HTML file, resulting in the download of a ZIP archive that includes a benign PDF and a Windows shortcut (LNK) file. When the LNK is run, it executes Base64-encoded PowerShell to drop a Javascript Encoded file called "Themes.jse" using a Visual Basic Script. The JSE malware, in turn, contacts an attacker-controlled URL and runs the response from the server via PowerShell. The exact nature of the payload is currently not known. Furthermore, TA406 has been spotted attempting to harvest credentials by sending fake Microsoft security alert messages to Ukrainian government entities from ProtonMail accounts, warning them of suspicious sign-in activity from IP addresses located in the United States and urging them to verify the login by visiting a link. While the credential harvesting page has not been recovered, the same compromised domain is said to have been used in the past to collect Naver login information. "These credential harvesting campaigns took place prior to the attempted malware deployments and targeted some of the same users later targeted with the HTML delivery campaign," Proofpoint said. "TA406 is very likely gathering intelligence to help North Korean leadership determine the current risk to its forces already in the theatre, as well as the likelihood that Russia will request more troops or armaments." "Unlike Russian groups who have likely been tasked with gathering tactical battlefield information and targeting of Ukrainian forces in situ, TA406 has typically focused on more strategic, political intelligence collection efforts." The disclosure comes as the Konni group has been linked to a sophisticated multi-stage malware campaign targeting entities in South Korea with ZIP archives containing LNK files, which run PowerShell scripts to extract a CAB archive and ultimately deliver batch script malware capable of collecting sensitive data and exfiltrating it to a remote server. The findings also dovetail with spear-phishing campaigns orchestrated by Kimsuky to target government agencies in South Korea by delivering a stealer malware capable of establishing command-and-control (C2 or C&C) communications and exfiltrating files, web browser data, and cryptocurrency wallet information. According to South Korean cybersecurity company AhnLab, Kimsuky has also been observed propagating PEBBLEDASH as part of a multi-stage infection sequence initiated via spear-phishing. The trojan was attributed by the U.S. government to the Lazarus Group in May 2020. "While the Kimsuky group uses various types of malware, in the case of PEBBLEDASH, they execute malware based on an LNK file by spear-phishing in the initial access stage to launch their attacks," it said. "They then utilize a PowerShell script to create a task scheduler and register it for automatic execution. Through communication with a Dropbox and TCP socket-based C&C server, the group installs multiple malware and tools including PEBBLEDASH." Konni and Kimsuky are far from the only North Korean threat actors to focus on Seoul. As recently as March 2025, South Korean entities have been found to be at the receiving end of another campaign carried out by APT37, which is also referred to as ScarCruft. Dubbed Operation ToyBox Story, the spear-phishing attacks singled out several activists focused on North Korea, per the Genians Security Center (GSC). The first observed spear phishing attack occurred on March 8, 2025. "The email contained a Dropbox link leading to a compressed archive that included a malicious shortcut (LNK) file," the South Korean company said. "When extracted and executed, the LNK file activated additional malware containing the keyword 'toy.'" The LNK files are configured to launch a decoy HWP file and run PowerShell commands, leading to the execution of files named toy03.bat, toy02.bat, and toy01.bat (in that order), the last of which contains shellcode to launch RoKRAT, a staple malware associated with APT37. RokRAT is equipped to collect system information, capture screenshots, and use three different cloud services, including pCloud, Yandex, and Dropbox for C2. "The threat actors exploited legitimate cloud services as C2 infrastructure and continued to modify shortcut (LNK) files while focusing on fileless attack techniques to evade detection by antivirus software installed on target endpoints," Genians said. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE     المصدر: https://thehackernews.com/2025/05/north-korean-konni-apt-targets-ukraine.html #North #Korean #Konni #APT #Targets #Ukraine #with #Malware #track #Russian #Invasion #Progress