Technology

• A malicious variant of KeePass is being offered online
• The malware deploys an infostealer and a Cobalt Strike beacon
• The cybercriminals are using the access to deploy ransomware

Cybercriminals are distributing a tainted version of a popular password manager, through which they’re able to steal data and deploy ransomware. This is according to security researchers WithSecure Threat Intelligence, who recently observed one such attack in the wild.

In an in-depth analysis published recently, the researchers said a client of theirs downloaded what they thought was KeePass - a popular password manager. They clicked on an ad from the Bing advertising network, and landed on a page that looked exactly like the KeePass website.

The site, however, was a typosquatted version of the legitimate password manager. Since KeePass is open-source, the attackers kept all of the legitimate tool’s functionalities, but with a little extra Cobalt Strike on the side.

60% off for Techradar readers

With Aura's parental control software, you can filter, block, and monitor websites and apps, set screen time limits. Parents will also receive breach alerts, Dark Web monitoring, VPN protection, and antivirus.

Preferred partner (What does this mean?)View Deal

Purview and Defender

The fake password manager exported all of the saved passwords in a cleartext database, which was later relayed to the attackers through the Cobalt Strike beacon. The attackers then used the login credentials to access the network and deploy ransomware, which is when WithSecure was brought in.

WithSecure said that the campaign has the fingerprints of an initial access broker (IAB), a type of hacking group that obtains access to organizations and then sells it to other hacking collectives. This particular group is most likely associated with Black Basta, an infamous ransomware operator, and is now being tracked as UNC4696.

This group was previously linked to Nitrogen Loader campaigns, BleepingComputer reported. Older Nitrogen campaigns were linked to the now defunct BlackCat/ALPHV group.

So far, this was the only observed attack, but that doesn’t mean there aren’t others, WithSecure warns: "We are not aware of any other incidents (ransomware or otherwise) using this Cobalt Strike beacon watermark – this does not mean it has not occurred."

The typosquatted website that’s hosting the malicious KeePass version was still up and running at this time, and was still serving malware to unsuspecting users. In fact, WithSecure said that behind the site was extensive infrastructure, created to distribute all sorts of malware posing as legitimate tools.

Via BleepingComputer

You might also like

• Beware - this fake KeePass download site is just spreading malware
• Take a look at our guide to the best authenticator app
• We've rounded up the best password managers

Apple's built-in translator has limited language options. Here's how to set Google Translate as your translator of choice.

The company didn't specify pricing but said some models will be priced higher due to 25% tariffs affecting the auto industry.

It seems that the big robot vacuum manufacturers all got together and decided that what we really need is a bot with a mechanical arm. One that can move clutter out of its path as it cleans, and even sort your mess out and relocate it where it needs to go. We saw a few arm-equipped robot vacuums at this year's CES – the event where everyone showcases their upcoming launches – but Roborock surprised everyone by announcing that its own model wasn't just at the wacky invention stage, it would actually be going on sale within the year.

Fast-forward a few months, and the Saros Z70 is indeed now available to buy. So does it deliver on its potential, or has Roborock rushed it through before the tech is ready? Is this innovative bot ready to compete with the rest of the best robot vacuums on the market? I've spent the past two weeks testing it out – you can get the full low-down in my Roborock Saros Z70 review.

While it's not perfect, there are plenty of great things about it – including a few that surprised me. Read on for 3 things I loved about this handy robovac, plus 3 that I think still need work if it's going to be genuinely useful.

3 things I loved 1. The pincering is excellent

The hardware part of the pincer arm is very well designed. In my tests I found I could remote control the robot over to a bit of clutter and tell it to pick it up, and it would – almost without fail – recognize it and adjust its positioning and pincer so it could pick it up. I could then resume control and drive the bot where I wanted the clutter to go.

Should the pickup fail, Roborock has included manual adjustment options so you can operate the arm yourself. These are intuitive and precise, and the grip is gentle but firm. The arm also tucks neatly away behind a hatch when it's not in use, so it can't get caught on anything while the bot's on its travels. There's big potential for people with limited mobility here.

2. There are plenty of safety measures

Most people I talk to about this robovac seem afraid that the OmniGrip will be overzealous and try and tidy away the cat. Roborock has built in plenty of safety features to ensure this doesn't happen. First, all the arm features are off by default, so nothing at all will happen until you specify exactly what you want it to do.

It's designed only to try and tidy very specific objects, having identified them using Roborock's (generally excellent) object recognition tech, and the arm has a weight sensor that prevents it from lifting objects over 300g. The pincering itself is designed to be 'firm yet gentle', to prevent damage to objects, so kind of like one of those fairground claw games, but with a much higher success rate. Finally, there's a physical 'Emergency stop' button on the robot itself, and a child lock.

3. It's easy to use

This is a new and potentially intimidating bit of tech, so kudos should go to Roborock for making it impressively accessible. It has placed the robot arm options front and center in the companion app, encouraging users to explore and become familiar with them. Plus, the controls themselves are logical and intuitive.

4. It's an unexpectedly great security camera

A lot of high-end robot vacuums can double as home security cams, but you're a little limited by the fact that your view is at ground level. Here, Roborock has added a camera on the arm itself. Not only can the arm reach much higher up, it can also tilt vertically, thus offering a much more expansive field of view than if you were using the front-mounted camera alone. Of course, you can only spy on what's happening inside your home, but useful nonetheless.

3 things that need improving 1. It doesn't work on its own

While the remote control-assisted pincering worked very well in my tests, really, the Saros Z70 needs to be able to tidy up unassisted if it's to be genuinely useful to most people. Theoretically, you can ask the robot to identify objects suitable for tidying while on a whole-home clean, then once it's finished, embark on a second run to pick them up and put them in a designated spot.

Unfortunately, this bit doesn't really work yet. It seems all the conditions need to be absolutely perfect in order for the process to be successful. So the bot needs to see the items and correctly identify them, then be able to find them again, then successfully pick them up, and then find its way to the correct relocation spot. I haven't yet managed a run where one of these factors doesn't fail.

Roborock also told me that the process has a lower success rate on carpet than hard floors, due to a "hardware limitation". That feels like a significant caveat.

If something appears to get stuck on the arm, then all other functions are locked until you manually reset it by pressing physical buttons on the robot. For instance, on one occasion during my tests the arm picked up a sandal, then as it rotated with it, the sandal got caught on a doorstop and the strap twisted, so when the bot tried to drop it, it couldn't. I had to go and rescue it before I could proceed. It's probably a logical safety measure, but it's not ideal to have to physically get involved to fix the matter.

I'm hopeful the automation functions will improve with updates, but right now, this bot can't really be left alone to tidy for you.

2. It can only pick up a few things

At time of writing, the list of supported objects is very short – sandals / light slippers, socks, small towels, and crumpled tissue paper. It makes sense that Roborock would be cautious about adding more objects, because it needs to be confident the bot can correctly identify them and doesn't end up trying to grip something it shouldn't. But it does limit its usefulness a little, as does the weight (and presumably size) limitation.

It's not so much Roborock's fault as a limitation of the form factor. Logically, it follows that the bot won't be able to tackle anything too big or heavy. But it still affects how helpful such a design might be in the longer term.

(Image credit: Future) 3. The price

At the moment, the Roborock Saros Z70 comes with a price tag of $2,599 / AU$3,999 (UK price TBC, but potentially around £1,950 based on what it costs elsewhere). It's the most expensive robovac we've tested, by some margin, and out of reach of most people. At the moment, it's the only robot vacuum on the market to feature a robotic arm, so an eye-watering list price isn't surprising. However, I'm not sure I'd buy it at that price, at least until some of the issues were ironed out.

Because the robot vacuum market is competitive, with new models being released regularly, I'm used to seeing good deals and prices dropping fairly quickly as even better bots hit the market. There look to be more arm-equipped robovacs in the pipeline from other brands, so if the idea proves a hit, we might see a more competitive pricing landscape emerge. I suspect it'll take a while, though.

You might also like...

• I test robot vacuums for a living, and this new bot has the best mopping system I've seen
• Browse the best robot vacuums for pet hair
• I tested Roborock's two best robot vacuums side-by-side – here's how they matched up

After a month with Roborock's ambitious Saros Z70 its headline-grabbing robotic arm still feels like a beta feature.

• Nanoleaf has added two new color-shifting smart lights to its collection
• The Rope Light can be bent into any shape and mounted on an interior wall
• The Solar Garden Lights resemble tulips and are made for use outdoors

Nanoleaf has launched two new smart lights to liven up your home indoors and out: the Nanoleaf Rope Light, which you can position on your wall in any shape you like, and which can be set to your choice of colors and gradients, and the Nanoleaf Solar Garden Lights, which add a little glow to your yard after dark.

Although Nanoleaf makes smart bulbs to fit your ordinary ceiling lights and lamps, the company is best known for fun and funky products like the Nanoleaf x Fantaqi EXPO illuminated display cases for showing off your collectibles, the Nanoleaf Ultra Black Shapes that can be arranged on your walls in any way you see fit, and the Nanoleaf Smart Holiday String Lights, which add festive cheer indoors or out.

The latest addition to Nanoleaf's collection of fun interior smart lights is the Rope Light – a five-meter LED string that you can bend and twist into any shape, and attach to your wall.

(Image credit: Nanoleaf)

The Nanoleaf Rope Light has 420 LEDs and 70 addressable color zones, allowing you to create smooth gradients and animations. It's compatible with the Nanoleaf app, which allows you to apply scenes or make your own custom color palettes by drawing with your fingertip.

You can also use the Rope Light to mirror the colors on your PC monitor via the Nanoleaf desktop app. We'll be testing it soon to see how it compares with the best Ambilight alternatives, and whether it deserves a spot in our guide to the best smart lights.

It costs $69.99 (about £50 / AU$110), and is available now direct from Nanoleaf.

How does your garden glow?

The Rope Light looks great, and I look forward to testing it, but personally I'm most excited by the Nanoleaf Solar Garden Lights. These weather-resistant smart lights resemble a bunch of tulips and can be staked into the ground wherever you like.

As the name suggests, each cluster of lights is connected to a solar panel, which you can position to catch the optimum amount of sunshine, and has a subtle black and gray finish to blend in with the plants and ornaments in your garden.

Although they'd look striking lining the edge of your garden path, judging by Nanoleaf's photos, the Solar Garden Lights look particularly striking when placed right beside a plant, where the lights seem to be growing out of it organically. Unlike most garden lights, I can imagine them working well in a pot, so you can enjoy them even if you only have a balcony or paved yard.

(Image credit: Nanoleaf)

They aren't compatible with the Nanoleaf app (which is perhaps a bit of a shame), but their daylight sensors mean you can sync them so they only turn on after dark, and they come with a remote control that lets you change their colors, apply scenes, and set timers.

The Solar Garden Lights are also available today direct from Nanoleaf, and cost $49.99 (about £40 / AU$80) for a set of two light clusters.

You might also like

• Philips Hue bulb types explained: choose the right lights for your home
• If the Philips Hue Play HDMI Sync Box is too expensive, this new budget-friendly alternative from WiZ could be exactly what you need
• This Nanoleaf light strip adds Ambilight-style illumination to your gaming setup – and it's amazingly cheap

• Nintendo has partnered with Samsung to help produce chips for the Switch 2
• Bloomberg reports that the partnership will ramp up production of the Switch 2
• Sources say the increased production could mean Nintendo could ship more than 20 million Switch 2 units by March 2026

In a bid to increase production of the Nintendo Switch 2, Nintendo has partnered with Samsung Electronics Co. to help manufacture main chips for the console.

As reported by Bloomberg, Nintendo has turned to Samsung to make a customized processor designed by Nvidia for the Switch 2, using its 8-nanometer node, so it can speed up production.

Sources say that with this new partnership with Samsung, the pace should be fast enough for Nintendo to ship more than 20 million Switch 2 units by March 2026.

It's also said that Samsung can ramp up further if it's required, though it would depend on capacity at hardware assemblers like Foxconn Technology Group.

Samsung, which also makes memory chips and display components for Nintendo, has reportedly been competing with Taiwan Semiconductor Manufacturing Co (TSMC) to make chips, a company that also partners with Apple and Nvidia.

With its new Nintendo contract, it's said that Samsung hopes to grow its business and secure more ground.

Nintendo president Shuntaro Furukawa has said that the company expects to sell 15 million Switch 2 consoles during its launch window. When asked by investors why the forecast number was so low, Furukawa said that the company set the figure "with the aim of reaching the same level of sales we achieved with Nintendo Switch".

He also attributed the console's high cost to Nintendo's predictions, but said that its backward compatibility and software bundles will increase sales before the end of the first fiscal year.

The Nintendo Switch 2 launches globally on June 5, 2025, for $449.99 / £395.99. UK pre-orders and US pre-orders are now live.

If you missed out on securing a pre-order and are struggling to find stock, GameStop and Best Buy have announced they will be restocking Switch 2 units in-store and online during the console's launch.

You might also like...

• Nintendo Switch 2 pre-orders live: latest UK stock updates as My Nintendo Store's pre-order date arrives, while US pre-orders remain delayed
• Here are the Nintendo Switch 2 launch games that you'll be able to pick up and play on June 5
• Nintendo Switch 2 is forecasted to sell 100 million units by the end of 2029, according to industry analysts