Your phone's motion sensors may reveal your PIN, passwords

April 11, 2017

London, Apr 11: Hackers can steal your PINs and passwords just from the motion of your phone when you type in the information, warn experts who have unveiled how easy it is for malicious websites and installed apps to spy on you. Cyber experts at Newcastle University in the UK have shown it is possible to crack four-digit PINs with a 70 per cent accuracy on the first guess - 100 per cent by the fifth guess - using just the data collected via the phone's numerous internal sensors.

phoneDespite the threat, the research shows that people are unaware of the risks and most of us have little idea what the majority of the twenty five different sensors available on current smart phones do. While all the major players in the industry are aware of the problem, no-one has yet been able to find a solution.

"Most smart phones, tablets, and other wearables are now equipped with a multitude of sensors, from the well-known GPS, camera and microphone to instruments such as the gyroscope, proximity, NFC, and rotation sensors and accelerometer," said Maryam Mehrnezhad, research fellow at Newcastle University. "But because mobile apps and websites don't need to ask permission to access most of them, malicious programmes can covertly 'listen in' on your sensor data and use it to discover a wide range of sensitive information about you such as phone call timing, physical activities and even your touch actions, PINs and passwords," said Mehrnezhad.

"More worrying, on some browsers, we found that if you open a page on your phone or tablet which hosts one of these malicious code and then open, for example, your online banking account without closing the previous tab, then they can spy on every personal detail you enter," she said. "And worse still, in some cases, unless you close them down completely, they can even spy on you when your phone is locked," she added.

"Despite the very real risks, when we asked people which sensors they were most concerned about we found a direct correlation between perceived risk and understanding," said Mehrnezhad. "So people were far more concerned about the camera and GPS than they were about the silent sensors," she said.

Sensors are now commonplace in smart devices and are largely responsible for the boom in mobile gaming and health and fitness apps, and soon in all devices in the Internet of Things (IoT), researchers said. The data provided by them combined with the growing computational ability of mobile phones and tablets has transformed the way we use them.

In total, the team identified 25 different sensors which now come as standard on most smart devices and are used to give different information about the device and its user. Only a small number of these - such as the camera and GPS - ask the user's permission to access the device. The research was published in the International Journal of Information Security.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
February 5,2020

Feb 5: Tesla is making Elon Musk a lot richer without paying him a dime.

A blistering stock rally has bolstered the value of CEO Musk's 19% stake in the electric car maker by $16 billion since the start of 2020, to $30 billion.

Tuesday's steep climb in the share price could sweeten Musk's payday under his record-breaking compensation package, which is built on stock options that rely on market value targets. Two milestones have now been achieved that could see Musk unlock options worth $1.8 billion.

The controversial chief executive, who is also the majority owner and CEO of rocket maker SpaceX, recently testified that he did not have a lot of cash as he successfully defended himself in a defamation lawsuit. He previously has taken loans using his Tesla shares as collateral.

Musk does not take a salary, choosing instead a risky options package that envisions the stock market value of Tesla rising to $650 billion over 10 years, a prospect that was derided by some investors when the deal was announced in 2018.

That target now looks less crazy. Shares of Tesla have rallied over 50% since the company posted its second consecutive quarterly profit last Wednesday, which was viewed as a major accomplishment for a company competing against established automotive heavyweights including General Motors Co  and BMW.

Tesla shares have climbed about 400% since early June, helped by the company's better-than-expected financial results and ramped-up production at its new car factory in Shanghai.

On Tuesday, Tesla surged as much as 24% before falling back in the final minutes of the trading session to end the day up 13.7%. That put its market capitalization at $160 billion, almost twice the combined value of Ford Motor and General Motors.

The shares had also rallied on Monday, partly fueled by Panasonic Corp's 6752.T saying its automotive battery venture with Tesla was profitable for the first time.

The options Musk was awarded in 2018 vest incrementally based on targets for Tesla's stock market value and its financial performance. The market capitalization would have to sustainably rise by $50 billion increments over the agreement's 10-year period, with the full package payout reached if the market cap reaches $650 billion, as well as the company's meeting revenue and profit targets.

Musk is on his way to seeing his first two tranches of options vest. He achieved operational targets on revenue and adjusted earnings last year.

The rise in Tesla's market capitalization last month to a target of $100 billion opened the way for Musk's first tranche of options to vest. With Tuesday's surging share price, the market capitalization blew past the second target of $150 billion, opening the way for the second tranche to vest. Tesla's market capitalization must stay at or above each target level for one- and six-month averages for each set of options to vest.

Tesla was valued at about $52 billion when shareholders approved the pay package in March 2018, a time when the company faced a cash crunch, production delays and increasing competition from rivals.

A full payoff for Musk would surpass anything previously granted to U.S. executives, according to Institutional Shareholder Services, a proxy advisor that recommended investors reject the pay package deal at the time.

Musk currently owns about 34 million Tesla shares, and his compensation package would let him buy another 20.3 million shares if all his options tranches vest.

When Tesla unveiled Musk’s package, it said he could in theory reap as much as $55.8 billion if no new shares were issued. However, Tesla has since awarded stock to employees and last year sold $2.7 billion in shares and convertible bonds, diluting the value of the stock.

Musk has transformed Tesla from a niche car maker with production problems into the global leader in electric vehicles, with U.S. and Chinese factories. So far it has stayed ahead of more established rivals including BMW and Volkswagen.

Many investors remain skeptical that Tesla can consistently deliver profit, cash flow and growth. More Wall Street analysts rate Tesla "sell" than "buy," and the company's stock is the most shorted on Wall Street.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
March 15,2020

Cybercriminals continue to exploit public fear of rising coronavirus cases through malware and phishing emails in the guise of content coming from the Centers for Disease Control and Prevention (CDC) in the US and World Health Organisation (WHO), says cybersecurity firm Kaspersky.

In the APAC region, Kaspersky has detected 93 coronavirus-related malware in Bangladesh, 53 in the Philippines, 40 in China, 23 in Vietnam, 22 in India and 20 in Malaysia. 

Single-digit detections were monitored in Singapore, Japan, Indonesia, Hong Kong, Myanmar, and Thailand. 

Along with the consistent increase of 2019 coronavirus cases comes the incessant techniques cybercriminals are using to prey on public panic amidst the global epidemic, the company said in a statement. 

Kaspersky also detected emails offering products such as masks, and then the topic became more commonly used in Nigerian spam emails. Researchers also found scam emails with phishing links and malicious attachments.

One of the latest spam campaigns mimics the World Health Organisation (WHO), showing how cybercriminals recognise and are capitalising on the important role WHO has in providing trustworthy information about the coronavirus.

"We would encourage companies to be particularly vigilant at this time, and ensure employees who are working at home exercise caution. 

"Businesses should communicate clearly with workers to ensure they are aware of the risks, and do everything they can to secure remote access for those self-isolating or working from home," commented David Emm, principal security researcher.

Some malicious files are spread via email. 

For example, an Excel file distributed via email under the guise of a list of coronavirus victims allegedly sent from the World Health Organisation (WHO) was, in fact, a Trojan-Downloader, which secretly downloads and installs another malicious file. 

This second file was a Trojan-Spy designed to gather various data, including passwords, from the infected device and send it to the attacker.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
May 27,2020

Due to impacts of COVID-19, shipments of total mobile phones are forecast to decline 14.6% in 2020, while smartphone shipments will achieve a slightly slower decline of 13.7 % year over year to total 1.3 billion units this year, according to a Gartner forecast on Tuesday.

"While users have increased the use of their mobile phones to communicate with colleagues, work partners, friends and families during lockdowns, reduced disposable income will result in fewer consumers upgrading their phones," Ranjit Atwal, Senior Research Director at Gartner, said in a statement.

"As a result, phone lifetimes will extend from 2.5 years in 2018 to 2.7 years in 2020," said Atwal.

In 2020, affordable 5G phones were expected to be the catalyst to increase phone replacements, but now it is unlikely to be the case.

5G phones are now forecast to represent only 11% of total mobile phone shipments in 2020.

"The delayed delivery of some 5G flagship phones is an ongoing issue," said Annette Zimmermann, Research Vice President at Gartner.

"Moreover, the lack of 5G geographical coverage along with the increasing cost of the 5G phone contract will impact the choice of a 5G phone."

Overall, spending on 5G phones will be impacted in most regions apart from China, where continued investment in 5G infrastructure is expected, allowing providers in China to effectively market 5G phones.

The combined global shipments PCs, tablets and mobile phones are on pace to decline 13.6% in 2020, according to the forecast.

PC shipments are expected to decline 10.5% this year. Shipments of notebooks, tablets and Chromebooks are forecast to decline slower than the PC market overall in 2020.

"The forecasted decline in the PC market in particular could have been much worse," said Atwal.

"However, government lockdowns due to COVID-19 forced businesses and schools to enable millions of people to work from home and increase spending on new notebooks, Chromebooks and tablets for those workers. Education and government establishments also increased spending on those devices to facilitate e-learning."

Gartner said that 48 per cent of employees will likely work remotely at least part of the time after the COVID-19 pandemic, compared to 30 % pre-pandemic.

Overall, the work from home trend will make IT departments shift to more notebooks, tablets and Chrome devices for work.

"This trend combined with businesses required to create flexible business continuity plans will make business notebooks displace desk based PCs through 2021 and 2022," said Atwal.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.