A Chinese hacker is targeting Android devices in Europe and Latin America with a banking trojan able to steal money from victim’s accounts.
A new report from cybersecurity researchers Cleafy says the trojan, ToxicPanda, is quite similar to a piece of older, known malware called TgToxic, which was first spotted in 2023. The two have some similarities, although ToxicPanda can be described as a “lite” version, since many features seem to be stripped down, and some were left as simple placeholders.
Despite being lighter, ToxicPanda is still a capable piece of malware. It can initiate money transfer, intercept one-time passwords (OTPs) generated both through SMS or authenticator apps, and manipulate user inputs. It can also steal sensitive information from the compromised device, and capture data from other apps. However, to do all that, the app needs to be given permission to access Android’s accessibility services, which is a usual red flag for Android-borne malware.
Years-long campaignIn any case, the malware is usually hidden in fake Chrome, Visa, or 99 Speedmart apps, most likely distributed through third-party websites, social media channels, and possibly phishing. The malicious apps cannot be found on official app repositories (Google Play Store, Samsung’s app store, or similar), and the researchers still speculate on how the apps are being advertised across the web.
So far, the threat actor seems to have infected more than 1,500 Android devices. The majority is located in Italy (56.8%), and Portugal (18.7%), with other notable mentions being Hong Kong (4.6%), Spain (3.9%), and Peru (3.4%). The researchers discovered this information by accessing ToxicPanda’s command-and-control (C2) panel.
The defense mechanisms against these types of attacks remains the same - be careful to only download apps from vetted sources.
Via The Hacker News
You might also likeStep away from your computer or phone for a few minutes, and you might return to an avalanche of notifications about new messages. If you're using Google Chat, you won't have to comb through them all to find out what you missed anymore, thanks to Google's Gemini AI assistant. You can pull up Gemini from the Google Chat sidebar and ask the AI to summarize the conversation and dig into the most important bits.
The new feature expands Gemini's presence from other Google Workspace applications like Docs and Drive into Google Chat. If you click on the "Ask Gemini" icon at the top of the Google Chat interface, a chat window for the AI will appear where you can ask about what's been said in group chats, direct messages, and spaces.
If you ask the AI to "catch me up," you'll get a complete conversation summary, which you can ask for in bullet points. If it's too short, you can request a longer summary too. You can also ask for more specific details, like any requests for help, key takeaways, or other decisions made in the thread. You can even ask about other people's tasks or what a person said about specific topics. The demo below shows how it works.
(Image credit: Google) Gemini ChatGemini can't sort through your entire conversational history, just the current view. It also is restricted to Google Chat. That means no emails or files in Google Drive, despite Gemini having a presence and access to those applications in other circumstances. Google claims this is deliberate as it maintains focus on the current chat in context without pulling in irrelevant information. Plus, tightly constraining data sources reduce the risk of Gemini hallucinating. You also won't be able to pull up Gemini in Google Chat without a subscription to Gemini Business, Enterprise, Education, or Education Premium.
Even with those (likely temporary) limits to availability, bringing Gemini to Google Chat fits with how Google is working to embed Gemini across all of its platforms and services. That includes Gemini Extensions to take up Google Assistant's role with Google Messages, Maps, and pretty much everything Android does.
You might also likeThe best air fryers might be genuinely life-changing pieces of kit, but some hide a snooping dark side that could see them invade your privacy in several alarming ways, according to a new report.
The UK-based consumer body Which? has released a report based on its privacy findings across a range of products, including air fryers, smartwatches, smart TVs and smart speakers. And it makes for worrying reading if you're concerned about the creeping tentacles of tech companies.
While privacy and security concerns around smart TVs are nothing new, the appetite of some air fryers for our personal data is more of a surprise. Which? found that the three fryers it tested all wanted to "record audio on the user's phone, for no specified reason".
The Aigostar and Xiaomi fryers it tested "both sent people’s personal data to servers in China", it said. That action was highlighted in a privacy notice, but that's likely something that many will miss.
More specifically, Which? said the companion Xiaomi app for its air fryer hooked it up to "trackers from Facebook, Pangle (the ad network of TikTok for Business), and Chinese tech giant Tencent (depending on the location of the user)." That was alongside knowing its owner's precise location.
For some reason, the Aigostar air fryer wanted to know its owner's "gender and date of birth", although this was at least optional. Still, the list of privacy infractions was long and concerning, even with the likes of the UK's ICO (Information Commissioner's Office) due in 2025 to request greater transparency from companies about their use of data
Smart TVs are watching (Image credit: Getty Images)We've been reporting on the potential privacy violations of smart TVs for almost ten years, and the issue isn't getting any better according to this Which? report.
One of the worst offenders in its testing was Samsung, which requested eight "risky" phone permissions, with risky being defined as having invasive access to your phone for actions like recording audio or seeing your exact location.
This put Samsung second only to the Huawei Ultimate smartwatch for privacy black marks, with the watch requesting nine of those "risky" permissions. In its defense, Huawei said that no data was used for marketing purposes and that there was a legitimate reason for all of the requests.
Samsung certainly wasn't alone on the smart TVs front, with other sets from Hisense and LG also asking for a postcode during setup – although in the latter case, it wasn't mandatory.
The issue also isn't just restricted to products asking for our personal data up-front – Which? found that smart speakers like the Bose Home Portable speaker are "stuffed with trackers, including Facebook, Google, and digital marketing firm Urbanairship".
How to boost your privacy You can fine-tune your privacy settings on iOS (left) and Android (right) to help restrict the the access that third-party apps have to your data and phone. (Image credit: Apple / Google / Future)The problem with many of the privacy invasions highlighted by Which? is that a lot are either a mandatory part of the setup process or, like the advertising trackers, largely hidden from view. But there are a couple of ways to protect your privacy.
For starters, you can restrict the data or functions given to companion apps on your iOS or Android phone. On iOS, go to Settings > Privacy & Security, then scroll down to the permission you want to check (for example, microphone or camera). On Android, you can do the same thing in Settings > Security and privacy > Permission manager.
Otherwise, the best thing to do is check the data requests during app setup and opt out of any optional ones you aren't comfortable with. As the Which? report notes, we also need finer controls over the data we share with smart tech companies, but until that happens it's worth being aware that even your air fryer could be prying into your personal data more than you might think.
You might also likeIn good news for creatives on a budget, Asus has introduced the ProArt Display PA27JCV, positioned as the most affordable 5K monitor on the market with a retail price of $799.
This 27-inch display offers a 5120 x 2880 resolution and a pixel density of 218 ppi.
While the screen size may feel somewhat compact for a 5K monitor, Asus is hoping it will appeal to professionals seeking a cost-effective, color-accurate solution.
Just the one HDMI portThe PA27JCV is factory-calibrated for Delta E<2 color accuracy, making it ready for tasks requiring precise color matching. It covers 99% of the DCI-P3, 95% of Adobe RGB, and 100% of the sRGB color spaces, a notable range for visual fidelity. The monitor also features ASUS Light Sync, which adjusts brightness and color gamut based on the surrounding light conditions using ambient and backlight sensors.
The display includes LuxPixel technology, which Asus describes as an anti-glare, low-reflection (AGLR) coating that minimizes reflections without negatively impacting image clarity. This feature offers a “paper-like” screen effect while preserving sharpness.
For productivity, the PA27JCV includes an Auto KVM switch that allows users to control two connected devices with a single keyboard and mouse, handy for multitasking.
Annoyingly the monitor only sports one HDMI 2.1 port, which may be restrictive for anyone wishing to connect multiple HDMI devices. However, it does come with DisplayPort over USB-C with 96-watt Power Delivery, a standard DisplayPort 1.4, and a USB hub with USB 3.2 Gen 1 Type-C and 3x USB 3.2 Gen 1 Type-A ports.
While compact, the PA27JCV supports HDR10 and is VESA DisplayHDR 500 certified, providing contrast with bright whites and deep blacks for a more immersive visual experience. Asus points out that the 5K resolution offers 77% more workspace than a comparable 4K display, helping creators work across multiple windows and applications.
You can buy the PA27JCV through B&H for $799. As an added incentive, Asus is offering a complimentary Adobe Creative Cloud subscription in select regions, providing access to essential creative tools.
More from TechRadar ProThe Samsung Galaxy Ring took the wearables world by storm, with the product shoving this smartwatch alternative into the spotlight – and helping to generate more interest in competitors in the best smart ring category from the likes of Oura and RingConn. Now it looks like Samsung is gearing up to launch an upgrade to this product line shortly, with a tipster’s comments making it sound like we could see the Galaxy Ring 2 fairly soon.
Korean leaker Lanzuk – who has a track record of spoiling Samsung’s release plans – says Samsung is “planning to launch its Galaxy Ring 2 model a bit earlier than originally scheduled” (translated from Korean). Specifics are light on the ground, but that could mean we’ll get a Galaxy Ring 2 in 2025, and maybe even in the first half of the year at that.
In fairness, the Galaxy Ring was first shown off in January 2024, so an early Galaxy Ring 2 announcement was also already kind of on the cards. However, we didn’t get our hands on the Galaxy Ring until July, so in 2025, we could get the Galaxy Ring 2 in, say, February instead of needing to wait half a year.
Alternatively, Samsung may want to stick with a more condensed reveal and release schedule some time in the middle of the year (say May or June), especially as a refresh after barely six months could upset purchasers of the original Galaxy Ring. Yearly refreshes are expected. However, a biyearly refresh is less likely to happen.
'More feature' on the way too Will Samsung take cues from Oura? (Image credit: Oura)Beyond teasing the release date, Lanzuk added that the device will supposedly be thinner, have a longer battery life, and contain “more features.” Again, details are light, but this could include sleep apnea detection, expanded gesture controls, or improved fitness tools.
Perhaps it’ll also include that adaptive sizing feature teased by a recently awarded Samsung patent, though we’ll have to wait and see what’s announced.
On this note, as with all leaks we should take Lanzuk’s blog post and our speculation with a pinch of salt. Until Samsung makes an announcement we don’t know what we’ll get from the Galaxy Ring 2 – nor when it will launch, assuming it does ever launch.
You might also likeThere aren't many onscreen stereotypes more enticing than a trained assassin and Eddie Redmayne is bringing the cool, killer vibes to a new 10-episode TV adaptation of The Day of the Jackal to Sky Atlantic in the UK and Peacock in the US. Read on for how to watch The Day of the Jackal online from anywhere with a VPN.
Loosely based on Frederick Forsyth's 1971 novel of the same name, this version brings the action bang up to date with a cat and mouse story set in the modern day. Some things never change, however, and that goes for the steely, secretive contract killer played here by Oscar-winning actor Eddie Redmayne (The Theory of Everything, Fantastic Beasts and Where to Find Them).
Trying to stop him achieving his lethal objectives is MI6 officer Bianca, played by Lashana Lynch who so impressed as special agent 007 in No Time to Die. Can she stop him before the next victim is taken out by the Jackal's silenced sniper rifle?
With Brian Kirk in the director's chair who has dazzling small screen filmography that also includes Game of Thrones, Boardwalk Empire, Luther and many more, you can expect a compelling, stylish series that will keep you hooked until the end.
We’ve got all the information on where to watch The Day of the Jackal online and stream every episode from anywhere.
Can I watch The Day of the Jackal for free?You can watch The Day of the Jackal online for free – but not everywhere on the planet.
The free-to-stream TVNZ+ website and app in New Zealand is showing episodes of The Day of the Jackal absolutely free. All you need to do is register, using your email address, name, year of birth and gender. (Just note that it doesn't start until Friday, November 15).
In India, The Day of the Jackal will be shown for free on smartphone devices through the JioCinema app.
Australians can also watch episodes for free by signing up for a free trial to streaming service Binge.
Not at home in those countries right now? That's where downloading the best VPN can help...
How to watch The Day of the Jackal online from outside your countryIf you’re traveling abroad when The Day of the Jackal airs, you’ll be unable to watch the show like you normally would due to annoying regional restrictions. Luckily, there’s an easy solution.
Downloading a VPN will allow you to stream online, no matter where you are. It's a simple bit of software that changes your IP address, meaning that you can access on-demand content or live TV just as if you were at home.
Use a VPN to watch The Day of the Jackal from anywhere.
Editors ChoiceNordVPN – get the world's best VPN
We regularly review all the biggest and best VPN providers and NordVPN is our #1 choice. It unblocked every streaming service in testing and it's very straightforward to use. Speed, security and 24/7 support available if you need – it's got it all.
The best value plan is the two-year deal which sets the price at $3.59 per month, and includes an extra 3 months absolutely FREE. There's also an all-important 30-day no-quibble refund if you decide it's not for you.
- Try NordVPN 100% risk-free for 30 daysVIEW DEAL ON
How to watch The Day of the Jackal online in the USNBC's streaming service Peacock is where you can watch The Day of the Jackal in the US. It kicks off a week after the UK premiere, with the first five episodes hitting the platform on Thursday, November 14.
After that, you get one episode per week, culminating in a double bill to end the season on Thursday, December 12.
The Peacock price is starts at $7.99 a month or $13.99 if you want to ditch all ads. And you can get 12 months for the price of 10 by opting for an annual plan.
How to watch The Day of the Jackal online in CanadaThe Day of the Jackal is on Showcase in Canada from 9pm ET/PT on Thursday, November 14. Cable subscribers with Showcase can also stream it through the Global TV app.
Another option to watch The Day of the Jackal online is via StackTV. The service is available through the likes of Amazon Prime Video, Bell, Rogers and Fubo. Prime subscribers can get StackTV with a 14-day free trial and then for $12.99 per month.
How to watch The Day of the Jackal in the UKSky has the rights to will show the revamped The Day of the Jackal in the UK.
It all gets started with five (yes, five!) back-to-back episodes from 9pm GMT on Thursday, November 7 on Sky Atlantic. After that, the remaining five episodes will air one per week at the same on Thursday evenings.
Sky subscribers can stream episodes on their smartphone, smart Tvs, games consoles and online via the Sky Go app. You can also watch The Day of the Jackal through a Now Entertainment Membership from as little as £6.99 a month.
How to watch The Day of the Jackal online in AustraliaThe Day of the Jackal will begin streaming on the Binge streaming service with two episodes landing per week from Thursdays from November 7. Try the service with its FREE 7-day trial.
On TV, episodes are due to go out on Thursdays on Foxtel via Showcase (check your local listings for times, as they vary) so you can also watch via Foxtel Now.
The Day of the Jackal trailer The Day of the Jackal castThe Day of the Jackal isn't being released at the exact same time around the world – it's going out in the UK and Australia first, with the rest of the planet catching up later.
You can read more about its release schedule in the US above. Below are the episode air dates in the UK:
I'm no economist and my financial acumen is, as my partner would tell you, suspect. But I fundamentally understand one thing: if you charge companies more to make or ship products, they will not eat those extra costs and will instead serve them to you like so much overcooked gruel.
With Former President Donald Trump now officially President-Elect in the US and set to take office on January 20th, he will surely fulfill a key campaign promise: import tariffs of between 12% and 60%. On the bleeding edge is China, which is expected to suffer through the most draconian 60% tariff structure.
There are no precise numbers of how much technology is produced in China and other countries, but it is a fact that most of the gadgets you love and use are not made in the United States.
Amazon, for instance, reportedly makes most of its Fire and Kindle products in China. Apple produces most of its iPhones in China but has been moving some manufacturing of it and other Apple gear to India and Vietnam. Similarly, Google manufactures Pixels and other devices in China, Vietnam, Taiwan, and India. Lenovo produces most of its laptops in China.
The hard truthI have no issue with products being produced wherever it's most efficient and cost-effective. I know labor is cheaper and the proximity to components is better outside the US.
It's also likely that regulations are somewhat more lenient in, for instance, China and Vietnam, though American companies have in recent years tried forcing their Chinese counterparts to conform to US manufacturing standards for things like safety. I want everyone to be safe at work and to be paid a fair living wage but also appreciate tech gear I can still afford. It would be fantastic if we could have both, but that might be unrealistic.
The goal of tariffs is to fix trade distortions. The US does have a trade deficit. On election day in the US, the Census Bureau released its U.S. International Trade in Goods and Services report for September 2024 (PDF). The key headline was that the trade deficit rose $13.6b to a total of $84.4b.
Another tariff goal is to prompt companies to shift manufacturing back to the US, which, according to the Brooking's Institute is well behind China, where manufacturing accounts for 27% of the country's output, compared to just 12% in the US. And it's widely known that the majority of tech production, including semiconductors, still happens outside the US.
Tariffs don't do what you think they doTariffs seem unlikely to change that equation any time soon. In fact, Tariff's have a history of having the opposite of their intended effect. According to the Cato Institute:
"Recent empirical evidence indicates the new US tariffs imposed in 2018 and 2019 were almost entirely passed on to US consumers, resulting in higher prices and reduced export growth."
To repeat, Tariffs imposed on companies are passed along to us and that means they appear in the form of higher prices for the tech products we buy every day. The Cato Institute adds, by the way, that Tariffs lead to increased protectionism (shielding us from unwanted foreign competition) and corruption.
It's possible that the tech giants will go another way and accelerate plans – if they have them – to move manufacturing to the US. Of course, that act could involve increased costs just for building out the infrastructure and paying US workers higher wages for the same work they get from Chinese employees at a fraction of the cost.
Do we have a plan?I've asked Google, Amazon, Lenovo, and Apple how they plan to handle these potential tariffs. Would they just eat the extra cost or pass it along to consumers? Amazon had no comment. As of this writing, the others have yet to respond.
I doubt they'd eat the costs of tariffs but do not expect any of them to willingly admit that prices are about to rise for, say, your next iPhone, future laptop, or new Kindle.
If these tariffs happen early next year, though, the costs will have to go somewhere. Even if it forces companies to move manufacturing back to the US in the long run, the short-term net of it all is higher costs for tech companies and more expensive tech gear for consumers.
On the bright side, we have a Black Friday straight ahead of us. It might make sense to stock up on those gadgets now.
You might also likeWindows 11 24H2 is continuing its run of trouble with bugs and this time we’re hearing about various difficulties with printers, which are mostly hitting Arm-based Copilot+ PCs, but also other computers (with x86 Intel and AMD chips) too.
Neowin reports that there are quite a number of complaints from those with printers who have upgraded to Windows 11 24H2 and are finding their device is no longer working. This is affecting all the best-known printer manufacturers, the likes of Brother, Canon, HP and so forth.
The issue is mainly being experienced by those with a Copilot+ PC powered by an Arm processor, as mentioned, and it either completely derails the printer, leaving it non-functional, or breaks certain features. In other cases, Windows 11 users can’t install the printer driver.
As noted at the outset, these gremlins in the works are also hitting standard (non-Arm, Intel and AMD CPU-based) PCs, and there are reports of various printer hiccups, and indeed printers vanishing from these systems, too.
On Reddit, one admin observes in a post about ‘24H2 problems hitting us hard’ that: “Print queues [are] clogging, that’s if the driver wasn’t randomly deleted from the machine.”
Printers going missing, or the driver being removed, appear to be common themes with 24H2, as well as not being able to install (or reinstall) said printer driver.
Potential workarounds to fix printer installation problems (Image credit: Shutterstock / fizkes)Microsoft has acknowledged the issue and produced a support document which provides some possible workarounds to get your printer going on an Arm PC.
The company notes: “Some Arm PCs (for example, Copilot+ PCs) may not be able to add or install a printer using the included installer or the installer from the manufacturer’s website.”
The first suggestion to get around an installation failure is simply to connect your printer using a USB port.
Otherwise, you can connect the printer by going into the Settings app, then Bluetooth & devices > Printers & scanners, where you select the Add device option. This then allows you to manually add the printer to your system (hopefully, at any rate).
With any luck, one of these two options will help you get around any inability to install a printer – though there may still be other scenarios where printers are misfiring with Windows 11 24H2 by the sound of things.
All this comes among a raft of issues with Windows 11 24H2, including new Intel Z890 motherboards constantly crashing, drive space mysteriously vanishing, and also Task Manager malfunctioning among many other problems. The good news is that Microsoft is working on fixing a bunch of these bugs already, but there’s a lot of firefighting to be done.
You may also like...