Ransomware threat: Get patched, find a firewall or upgrade fast

New Delhi, Jul 18: India's national cybersecurity agency CERT-in, has warned people of credit card skimming spreading across the world through e-commerce platforms.

Attackers are typically targeting e-commerce sites because of their wide presence, popularity and the environment LAMP (Linux, Apache, MySQL, and PHP), the Computer Emergency Response Team (CERT-In) said in a notice on Thursday.

Recently, attackers targeted sites which were hosted on Microsoft's IIS server running with the ASP.NET web application framework, it said.

Some of the sites affected by the attack were found to be running ASP.NET version 4.0.30319, which is no longer officially supported by Microsoft and may contain multiple vulnerabilities, CERT-In said.

The notice also included a list of best practices for website developers including the use of the latest version of ASP.NET web framework, IIS web server and database server.

The advisory is based on research by Malwarebytes which found that this skimming campaign likely began sometime in April this year.

Credit card skimming has become a popular activity for cybercriminals over the past few years, and the increase in online shopping during the pandemic means additional business for them, too, Malwarebytes said in a blog post, adding that attackers do not need to limit themselves to the most popular e-commerce platforms.

Researchers from global cybersecurity and anti-virus brand Kaspersky had warned in December last year that more cybercriminal groups will target online payment processing systems in 2020. 

It said that over the past couple of years, so-called JS-skimming (the method of stealing of payment card data from online stores), has gained immense popularity among attackers. 

Kaspersky researchers in their report said they are currently aware of at least 10 different actors involved in these type of attacks.

Their number will continue to grow during the next year, the report said, adding that the most dangerous attacks will be on companies that provide services such as e-commerce as-a-service, which will lead to the compromise of thousands of companies.

Feb 5: Tesla is making Elon Musk a lot richer without paying him a dime.

A blistering stock rally has bolstered the value of CEO Musk's 19% stake in the electric car maker by $16 billion since the start of 2020, to $30 billion.

Tuesday's steep climb in the share price could sweeten Musk's payday under his record-breaking compensation package, which is built on stock options that rely on market value targets. Two milestones have now been achieved that could see Musk unlock options worth $1.8 billion.

The controversial chief executive, who is also the majority owner and CEO of rocket maker SpaceX, recently testified that he did not have a lot of cash as he successfully defended himself in a defamation lawsuit. He previously has taken loans using his Tesla shares as collateral.

Musk does not take a salary, choosing instead a risky options package that envisions the stock market value of Tesla rising to $650 billion over 10 years, a prospect that was derided by some investors when the deal was announced in 2018.

That target now looks less crazy. Shares of Tesla have rallied over 50% since the company posted its second consecutive quarterly profit last Wednesday, which was viewed as a major accomplishment for a company competing against established automotive heavyweights including General Motors Co  and BMW.

Tesla shares have climbed about 400% since early June, helped by the company's better-than-expected financial results and ramped-up production at its new car factory in Shanghai.

On Tuesday, Tesla surged as much as 24% before falling back in the final minutes of the trading session to end the day up 13.7%. That put its market capitalization at $160 billion, almost twice the combined value of Ford Motor and General Motors.

The shares had also rallied on Monday, partly fueled by Panasonic Corp's 6752.T saying its automotive battery venture with Tesla was profitable for the first time.

The options Musk was awarded in 2018 vest incrementally based on targets for Tesla's stock market value and its financial performance. The market capitalization would have to sustainably rise by $50 billion increments over the agreement's 10-year period, with the full package payout reached if the market cap reaches $650 billion, as well as the company's meeting revenue and profit targets.

Musk is on his way to seeing his first two tranches of options vest. He achieved operational targets on revenue and adjusted earnings last year.

The rise in Tesla's market capitalization last month to a target of $100 billion opened the way for Musk's first tranche of options to vest. With Tuesday's surging share price, the market capitalization blew past the second target of $150 billion, opening the way for the second tranche to vest. Tesla's market capitalization must stay at or above each target level for one- and six-month averages for each set of options to vest.

Tesla was valued at about $52 billion when shareholders approved the pay package in March 2018, a time when the company faced a cash crunch, production delays and increasing competition from rivals.

A full payoff for Musk would surpass anything previously granted to U.S. executives, according to Institutional Shareholder Services, a proxy advisor that recommended investors reject the pay package deal at the time.

Musk currently owns about 34 million Tesla shares, and his compensation package would let him buy another 20.3 million shares if all his options tranches vest.

When Tesla unveiled Musk’s package, it said he could in theory reap as much as $55.8 billion if no new shares were issued. However, Tesla has since awarded stock to employees and last year sold $2.7 billion in shares and convertible bonds, diluting the value of the stock.

Musk has transformed Tesla from a niche car maker with production problems into the global leader in electric vehicles, with U.S. and Chinese factories. So far it has stayed ahead of more established rivals including BMW and Volkswagen.

Many investors remain skeptical that Tesla can consistently deliver profit, cash flow and growth. More Wall Street analysts rate Tesla "sell" than "buy," and the company's stock is the most shorted on Wall Street.

Washington, Jan 7: Facebook will ban deepfake videos ahead of the US elections but the new policy will still allow heavily edited clips so long as they are parody or satire, the social media giant said Tuesday.

Deepfake videos are hyper-realistic doctored clips made using artificial intelligence or programs that have been designed to accurately fake real human movements.

In a blog published following a Washington Post report, Facebook said it would begin removing clips that were edited--beyond for clarity and quality--in ways that "aren't apparent to an average person" and could mislead people.

Clips would be removed if they were "the product of artificial intelligence or machine learning that merges, replaces or superimposes content onto a video, making it appear to be authentic," the statement from Facebook vice-president Monika Bickert said.

However, the statement added: "This policy does not extend to content that is parody or satire, or video that has been edited solely to omit or change the order of words."

US media noted the new guidelines would not cover videos such as the 2019 viral clip -- which was not a deepfake -- of House Speaker Nancy Pelosi that appeared to show her slurring her words.

Facebook also gave no indication on the number of people assigned to identify and take down the offending videos, but said videos failing to meet its usual guidelines would be removed, and those flagged clips would be reviewed by teams of third-party fact-checkers -- among them AFP.

The news agency has been paid by the social media giant to fact-check posts across 30 countries and 10 languages as part of a program starting in December 2016, and including more than 60 organisations.

Content labeled "false" is not always removed from newsfeeds but is downgraded so fewer people see it -- alongside a warning explaining why the post is misleading.