Apple's New MacBook Disconnects Microphone "Physically" When Lid is Closed

Posted by on
 October 31, 2018  Mohit Kumar Apple introduces a new privacy feature for all new MacBooks that "at some extent" will prevent hackers and malicious applications from eavesdropping on your conversations. Apple's custom T2 security chip in the latest MacBooks includes a new hardware feature that physically disconnects the MacBook's built-in microphone whenever the user closes the lid, the company revealed yesterday at its event at the Brooklyn Academy of Music in New York. Though the new T2 chip is already present in the 2018 MacBook Pro models launched earlier this year, this new feature got unveiled when Apple launched the new Retina MacBook Air and published a full security guide for T2 Chip yesterday. "This disconnect is implemented in hardware alone, and therefore prevents any software, even with root or kernel privileges in macOS, and even the software on the T2 chip, from engaging the microphone when the lid is closed,...

Hackers with a heart? GandCrab devs send decryption keys to Syrians

Posted by on
In a rather interesting turn of events, the developers of the ransomware GandCrab are showing mercy to a specific subset of their victims. As reported by Bleeping Computer, the cybercriminals behind GandCrab have decided to release decryption keys to Syrian victims of the ransomware. What spurred this change of heart was pleas on social media from civilians caught in the brutal conflict, specifically those that lost family in said conflict. The heart-wrenching tweet below is an example of the requests, as it shows a father who merely desiring to have access to his computer that has photos of his dead children.
gandcrab
The hackers following this development, either out of compassion or to prevent being blacklisted by other hackers, proceeded to announce they would release decryption keys to Syrian victims. Their explanation was that this was a mistake and Syria was a country that should have been not allowed to be targeted by the ransomware. Whether or not this is actually true is up for debate, as someone surely would have noticed that Syrians had been attacked along with other targets. Nevertheless, it wasn’t long before the developers tried to rectify the situation.
Below is the statement released by GandCrab’s creators (which was translated from Russian by Lawrence Abrams of Bleeping Computer):We regret that we did not initially add this country to the exceptions. But at least that way we can help them now. Whose keys are not (only for citizens of Syria and the CIS, Ukraine including) - you need to come to us and take a picture of yourself with a passport and payment page. After that, we will issue a decryptor for free. This is indicated just in case any clever people patch the file so that it works everywhere. Hi, Polish kurvy. As for other countries — we will not share the keys, even if we are closed someday. We will remove them. It is necessary to resume the punitive process in respect of some countries. Let me remind you that you can only decrypt using our keys that are stored on our server. We issue them only after payment. There are no other miracle ways. With love from crabs, representatives of different countries, religions, beliefs.
GandCrab hackers and other cybercriminals do not care who they hurt as long as they get a payday. While the victims of war in Syria will have the decryption keys, I am certain that there are other areas ravaged by war that have been hit by similar attacks. The way that malware spreads is without any real concern for human decency, and catching bastards who prey on the innocent is the single greatest reward of being a cybersecurity professional.
In a rather interesting turn of events, the developers of the ransomware GandCrab are showing mercy to a specific subset of their victims. As reported by Bleeping Computer, the cybercriminals behind GandCrab have decided to release decryption keys to Syrian victims of the ransomware. What spurred this change of heart was pleas on social media from civilians caught in the brutal conflict, specifically those that lost family in said conflict. The heart-wrenching tweet below is an example of the requests, as it shows a father who merely desiring to have access to his computer that has photos of his dead children.
gandcrab
The hackers following this development, either out of compassion or to prevent being blacklisted by other hackers, proceeded to announce they would release decryption keys to Syrian victims. Their explanation was that this was a mistake and Syria was a country that should have been not allowed to be targeted by the ransomware. Whether or not this is actually true is up for debate, as someone surely would have noticed that Syrians had been attacked along with other targets. Nevertheless, it wasn’t long before the developers tried to rectify the situation.
Below is the statement released by GandCrab’s creators (which was translated from Russian by Lawrence Abrams of Bleeping Computer):
We regret that we did not initially add this country to the exceptions. But at least that way we can help them now. Whose keys are not (only for citizens of Syria and the CIS, Ukraine including) - you need to come to us and take a picture of yourself with a passport and payment page. After that, we will issue a decryptor for free. This is indicated just in case any clever people patch the file so that it works everywhere. Hi, Polish kurvy. As for other countries — we will not share the keys, even if we are closed someday. We will remove them. It is necessary to resume the punitive process in respect of some countries. Let me remind you that you can only decrypt using our keys that are stored on our server. We issue them only after payment. There are no other miracle ways. With love from crabs, representatives of different countries, religions, beliefs.
GandCrab hackers and other cybercriminals do not care who they hurt as long as they get a payday. While the victims of war in Syria will have the decryption keys, I am certain that there are other areas ravaged by war that have been hit by similar attacks. The way that malware spreads is without any real concern for human decency, and catching bastards who prey on the innocent is the single greatest reward of being a cybersecurity professional.