This Malware Can Take Control Of Facebook Accounts

Do you have a Facebook account? Even if it has been a while since you last logged on there is a new threat you should be aware of. A new strain of malware called FlyTrap was used recently to take control of thousands of Facebook accounts. Yours could be next if it hasn’t been compromised already.

FlyTrap is an Android based malware strain that works by stealing cookies. It relies on a few basic social engineering tricks to lure unsuspecting victims to using their Facebook credentials to log into a malicious app. The app harvests the login data allowing the hackers to reuse it later.

This malware strain so dangerous because of the fact that many people make regular use of their Facebook login credentials as a quick and convenient way to log into a variety of other sites. That is even if they haven’t actually been on Facebook in a very long time.

Essentially that means that those users are reusing the same password across a great many sites on the web and once the hackers have your Facebook credentials they can, of course, log into any site you’ve used them on.

According to security researchers, the hackers controlling FlyTrap have been running campaigns since at least March of this year (2021). They’re offering highly attractive incentives like Netflix coupons to lure unsuspecting victims to hand over their credentials.

If you see an offer that looks too good to be true (“Login here with Facebook to claim 3 free months of Netflix!” for example) then steer clear. It’s entirely possible to find legitimate and completely safe offers like that on the web. All too often it’s a trap with means to deny you control over your account. Don’t fall for it.

Latest Security Update For Apple Devices Is Critical

Do you have an Apple device? If so then you should be aware that the company recently issued an OS update that includes Macs, iPads, and iPhones.

You’ll want to update to iOS 14.7.1 or iPadOS 14.7.1 immediately if you have not already done so because this version includes a patch for a high severity security flaw that hackers are actively exploiting in the wild.

The security issue is being tracked as CVE-2021-30807. It allows a hacker to execute arbitrary code with kernel privileges. This is a memory issue at the root. Apple addressed it in the patch referenced above via improved memory handling routines.

The latest OS version provides a raft of other enhancements and useful features in addition to resolving the security issue. The new features make it well worth getting. However it’s the bug fix that makes this one essential.

This is an update you’ll want to prioritize even if you’re normally not big on grabbing the latest bug fixes and patches as soon as they are available. The fact that hackers are already actively exploiting the flaw referenced above makes upgrading as soon as possible absolutely essential.

If your company has a fairly permissive “Bring Your Own Device” policy you may want to consider requiring all Apple devices to have the latest patch applied before they connect to your network in order to minimize your risk. Even if you don’t use Apple equipment in your office but you’ve got some of the company’s products at home you will want this update and you’ll want to make it a priority.

Kudos to the unnamed researcher who discovered the issue and to Apple for their rapid response in updating the OS’s in their ecosystem to make them safer and more secure.

Security Issue Found In Dell’s SupportAssist Software

Do you have a Dell PC? If so, be aware that recently, security researchers at Eclypsium have discovered a major security flaw in the company’s SupportAssist software that comes pre-installed on most of the Dell machines running Windows on the market today.

The flaw is rated a hefty 8.3 severity (out of a possible 10), and enables remote attackers to impersonate Dell’s website and take total control of the target machine, using the boot process to break OS-level security protocols.

The researchers who discovered the flaw had this to say about the matter:

The issue affects 129 Dell models of consumer and business laptops, desktops, and tablets, including devices protected by Secure Boot and Dell Secured-core PCs, with roughly 30 million individual devices exposed to attacks.”

Needless to say, this is a serious issue for all Dell users. If there’s a silver lining though, it lies in the fact that Dell responded quickly and there’s already a fix for the issue. Unfortunately, you’ll have to update your BIOS to get the fix and due to the nature of the flaw, the researchers who discovered it recommend against using Dell’s BIOSConnect to get the latest.

Unfortunately, this is not the first time Dell customers have faced issues like this. Back in May of 2019, Dell patched another high severity flaw with their SupportAssist software that allowed an attacker to remotely execute code and take full control of a target machine. The software was patched again in February of 2020 to address a different security flaw that also allowed for remote code execution.

If the past is any guide then, there are likely to be additional flaws in the code. So if you’re a Dell customer, just to be safe, you’ll probably want to bookmark the company’s site and check in regularly just to make sure you’re not missing a critical update that could leave you vulnerable.

Update Windows If Your PC Is Making High Pitched Sounds

Ever since the March 2021 release of Windows 10, 2004 , a small fraction of users have been reporting a mysterious issue with the OS that causes the PC to emit a high pitched sound when using certain apps. Given the intermittent nature of the issue, it proved notoriously difficult to track down, but if it’s been driving you mad in recent months, there’s good news. Microsoft has isolated the bug and fixed it, so it won’t impact you further.

The company had this to say about the issue:

After installing KB5000842 or later updates, 5.1 Dolby Digital audio may play containing a high-pitched noise or squeak in certain apps when using certain audio devices and Windows settings.”

If you’re sick to death of hearing “that sound,” then just grab Windows 10 Update KB5003690 and install it, and the issue should plague you no further. Note, however, that this is an optional update, so you won’t get it automatically. You’ll need to manually perform a “Check for Updates” to install the fix.

If you’d rather not jump though those hoops, then you don’t have to do anything, as the fix will be rolled into the July 2021 Patch Tuesday update. So if you can live with it or work around it until then, just know that help is on the way.

Kudos to Microsoft for digging through their mountains of code and finding this notoriously annoying bug. It may not have impacted legions of users, but for those who did hear the squelch, it was maddening indeed.

Also, be aware that in May (2020), Microsoft removed the final compatibility holds that prevented customers from upgrading to Windows 10 2004 20H2 and 21H1. The company had placed a hold related to Conexant and Synaptics audio driver issues that were causing problems for the Windows 10 update process. Those issues have now been resolved!

Support Ending For Windows 7 And 8 Nvidia Graphics Drivers

Does your PC have an NVIDIA graphics card?

If so, be aware that the company recently announced that as of October, 2021, they’re suspending support for drivers designed for use with Windows 7, Windows 8, and Windows 8.1. If you want to keep getting security fixes and updates, you’ll need to upgrade your OS to Windows 10.

Feature improvements will be stopped for the Operating Systems listed above immediately, but critical security updates will continue through the end of September.

While somewhat disappointing, especially if you have an older PC, it’s not exactly a surprise. Microsoft has already ended support for those older Operating Systems, and the vast majority of the company’s GeForce customers have already upgraded to Windows 10, so NVIDIA’s move will only impact a tiny segment of the company’s customers.

In fact, according to the Steam Hardware and Software survey conducted in May of this year (2021), only 2.13 percent of users worldwide are still running Windows 7, only 0.07 percent are running Windows 8, and only 0.98 percent are running Windows 8.1. So again, this is a problem that will only impact a handful of users. Even so, if you’re one of them, that’s small consolation.

In any case, the change is coming, so if you haven’t upgraded to Windows 10, now you have one more reason to do so.

If there’s a bright spot to be found in the recent announcement, it lies in the fact that Microsoft is still offering a free upgrade to Windows 10 for the few remaining Windows 7 users. So if that’s what you’ve got on your rig, you can save money by taking advantage of the free upgrade offer.

Although there are sure to be a few grumbles of displeasure, NVIDIA’s announcement is a good thing overall. Embrace the change.