News
- A new Linux malware variant offers advanced features and evasion mechanisms
- It has already infected thousands of devices around the world
- Passwords, credit card info, and more, at risk
A brand new Linux malware has been found infecting thousands of computers around the world, stealing people’s login credentials, payment information, and browser cookies, security researchers are warning.
SentinelLabs and Beazley Security issued a joint report detailing the activities of PXA Stealer, a new Python-based infostealer for the Linux platform.
It was first spotted in late 2024, and has since grown into a formidable threat, successfully evading defense tools while wreaking havoc across the globe.
Side-loadingSince its inception, PSA Stealer has seen multiple iterations, with the latest one stealing information from roughly 40 browsers - saved passwords, cookies, personally identifiable information (PII), autofill data, authentication tokens, and more.
It can target browser extensions for various crypto wallets, including Exodus, Magic Eden, Crypto.com, and many others, and can pull data from sites such as Coinbase, Kraken, and PayPal. Finally, it can inject a DLL into running browser instances to bypass encryption mechanisms.
PSA Stealer is apparently being distributed through phishing emails and malicious landing pages. The malicious attachments contain a legitimate program (such as a PDF reader) and a weaponized DLL. The program sideloads the DLL, successfully deploying the malware while not raising any alarms.
More than 4,000 computers were infected with PSA Stealer in 62 countries, the two companies said, suggesting that the campaign is rather successful.
However, the attackers - who seem to be of Vietnamese origin - aren’t interested in using the stolen data themselves, and instead are selling it on the black market - in a Telegram group.
The majority of the victims are located in South Korea, the US, the Netherlands, Hungary, and Austria.
"Initially surfacing in late 2024, this threat has since matured into a highly evasive, multi-stage operation driven by Vietnamese-speaking actors with apparent ties to an organized cybercriminal Telegram-based marketplace that sells stolen victim data," the researchers explained. So far, more than 200,000 were stolen passwords, as well as hundreds of credit card information and more than four million cookies.
Via The Register
You might also like- Hackers hit SAP security bug to send out nasty Linux malware
- Take a look at our guide to the best authenticator app
- We've rounded up the best password managers
- Battlefield 6 will be a "gritty and real" experience like earlier entries in the series
- Battlefield Studios UX director Alan Pimm said the game will have a different atmosphere to Battlefield 2042
- The developer also said it's "not a military sim" but "it's got enough of that grit that you feel it's believable"
According to EA, Battlefield 6 will be a modern military shooter inspired by earlier entries in the series and designed to be a "gritty and real" experience for players.
Speaking in an interview with TechRadar Gaming at the Battlefield 6 multiplayer reveal event, Battlefield Studios user experience director Alan Pimm said that the game's return to a modern setting after the futuristic Battlefield 2042 was something that the studio knew players wanted.
"Battlefield 3 and 4 were our strongest muses," Pimm said. "They were the ones that were in that same kind of modern frame, which is what people want. They don't want ultra-modern or futuristic. They want the weapons of today, that was the strong thing that came out of the research."
The developer said the upcoming shooter will look very different from 2042, particularly in terms of color palette and overall atmosphere, and will return "back to the grit" the series is best known for.
(Image credit: EA)"It's remembering that dirt should be dirty. We're not a pristine, sterile environment anymore. You've got the dust, the particles, the mud... You're not running around in a hero cape," Pimm explained.
"You're not running around in a hero cape. You know you are the soldier on the battlefield with your friends in amongst the muck and the dust and the explosions. The fiber of everything we've done in this is going 'let's make it gritty. Let's make it gritty and real.'
"It's not military sim, that's not where we go, it's fun still, but it's got enough of that grit that you feel it's believable."
Battlefield 6 will launch on October 10, 2025, for PS5, Xbox Series X, Xbox Series S, and PC.
An early access period will begin on August 7-8, followed by open beta weekends on August 9-10 and on August 14-17.
You might also like...- Battlefield 6 won't run on the Steam Deck and there are no current plans for a Nintendo Switch 2 version, says EA exec
- The Battlefield 6 battle royale map has seemingly leaked, and Warzone's days could be numbered
- The Nintendo Switch 2 is the company’s least ambitious console to date, but its improvements are astronomical
- Perplexity seen to be ignoring signals like robot.txt to scrape online sites
- It even found protected and hidden test sites from Cloudflare
- OpenAI adheres to responsible crawling, but Perplexity quiet for now
Cloudflare has accused AI giant Perplexity of scraping websites which explicitly disallowed crawling via robots.txt and other network-level rules by hiding its identity and conducting obfuscated crawling activity.
Researchers from the company said they observed Perplexity using multiple user agents, including one impersonating Google Chrome on macOS, as well as rotating IP addresses and ASNs to evade detection.
Alarmingly, Cloudflare detected millions of daily requests across tens of thousands of domains, highlighting the sheer scale of illegitimate scraping by one of the biggest companies in the space.
Perplexity is scraping sites it shouldn't beAccording to Cloudflare's analysis, in many cases, Perplexity ignored or didn't fetch robots.txt files - which are plain-text files placed at the root of a site to tell automated agents (like search engines, AI crawlers and link checkers) which URLs may or may not be fetched.
Tellingly, Perplexity also attempted to access test websites Cloudflare created, even though they were blocked via robots.txt and not publicly discoverable, while using undeclared crawlers that weren't even associated with its official IP range.
"Although Perplexity initially crawls from their declared user agent, when they are presented with a network block, they appear to obscure their crawling identity in an attempt to circumvent the website’s preferences," the researchers write.
In response to its findings, Cloudflare has de-listed Perplexity's bots from its verified bots list. The company has also added new managed rule heuristics to detect and block stealth crawling.
In contrast, OpenAI's crawlers have so far respected robots.txt and block pages, using transparent identifiers and documented behavior to obtain information.
Perplexity denied wrongdoing, calling Cloudflare's post a "sales pitch", adding the identified bots weren't even theirs. TechRadar Pro has asked Perplexity for its comment.
Cloudflare urges bot operators to respect website preferences by being transparent, being well-behaved netizens, serving a clear purpose, using separate bots for separate activities and following rules and signals like robots.txt.
You might also like- How Google's new anti-scraping measures are forcing an industry evolution
- Protect your online footprint with the best VPNs and best business VPNs
- Check out our roundup of the best AI tools
- Clues in Windows 11 previews hint that AI is coming to the taskbar
- This could be in the form of an 'agentic AI' companion
- Exactly what its purpose would be is far from clear at this point
Microsoft could be planning to add an AI element to the taskbar in Windows 11, based on clues in preview builds and theorizing from the rumor mill.
27914 LXP changes. As always, some of these mentions already exist in beta/dev"Taskbar Companion" is mentioned in settingsConfirmation for various disk/partition tasks are now mentioned in settingsNumber and Currency formats mentioned under region1/2July 31, 2025
Windows Latest flagged that well-known leaker Xeno posted on X that they've found a 'Taskbar Companion' feature, which is mentioned in settings (as well as some other bits and pieces, including gaming-related capabilities).
There's no explicit mention of AI here, but Windows Latest notes that it has previously heard Microsoft was thinking about adding AI actions to the taskbar, and that this could be the mentioned companion(s).
The site says that another regular leaker of Windows-related happenings on X, PhantomOfEarth, has pointed out that references to companions were in a Windows Server preview build last month - and that Windows 11 previews have witnessed a mention of 'agentic companions' for the taskbar.
Windows Latest also brings our attention to a string in a recent Windows 11 preview build that's related to controlling 'visibility of agentic companions on the taskbar'.
Consider all this together, and the obvious theory – remembering that it is just speculation which needs to be heavily seasoned at this point – is that the taskbar companion functionality is tied in with agentic AI in some way.
That term refers to an AI agent, or helper, that would be fired up via the taskbar.
Analysis: double agent(Image credit: Future / John Loeffler)If you want to get an idea of what might be in store for the taskbar, look no further than the Settings app in Windows 11, which has just got an AI agent (for Copilot+ PCs only). This facilitates an intelligent search to find the options you need to tinker with in Settings, so you can throw out a query such as 'How do I change the speed that my mouse pointer moves at?' and the AI will find that option for you - and maybe even offer a recommended setting in some scenarios.
That's useful, no doubt, but the question is: how might AI functionality such as this work in the taskbar? At this point, your guess is as good as mine, but if you want the latter, it could be tied into managing notifications or the calendar (off the system tray).
Alternatively, as Windows Latest hints, it might power some form of recommendations, like apps you might want to install, or websites you may want to visit, which could be piped to you via the taskbar (Microsoft already has this kind of functionality in the Start menu, of course). I sincerely hope that isn't the case, but this is a concept Microsoft has toyed with a bit for the taskbar in the past.
The worrying thing for me is that I'm struggling to think of something that could be genuinely useful in this theorized AI-infused taskbar scenario (whereas the agent in Settings has some clear value in terms of pepping up search functionality). The concern, then, is that this would be a case of more AI just for the sake of it.
At any rate, we are still in the very early stages of progress here, with only the vaguest clues in the background of Windows 11 that something might be happening with AI agents in the taskbar. So, it's far from clear that Microsoft has any such plans - but then again, the addition of more AI in Windows 11 would hardly be a surprise (perhaps for Copilot+ PCs only, as is the case with the Settings agent).
You might also like...- Microsoft promises to crack one of the biggest problems with Windows 11: slow performance
- Microsoft finally plays its trump AI card, Recall, in Windows 11 – but for me, it’s completely overshadowed by another new ability for Copilot+ PCs
- Windows 11 is getting more AI shortcuts, but is Microsoft in danger of cluttering up the OS with AI creep?
- The latest iOS 18.6 update comes with two dozen security patches
- That includes a fix for an actively exploited vulnerability
- It’s important to update your iPhone to keep it safe
It’s important to ensure that you update your iPhone as often as possible, and that’s just been demonstrated by Apple’s iOS 18.6 release. That’s because this update comes with a vital security patch that could help keep your iPhone safe from serious threats.
According to Apple’s iOS 18.6 release notes, the update fixes several zero-day flaws that could have compromised your device – including at least one that is known to have been exploited in the wild. Zero-day vulnerabilities are those that are initially unknown to developers and security researchers, making them particularly dangerous if exploited.
The iOS 18.6 update contains 24 separate fixes ranging from accessibility bugs to problems with the WebKit engine that powers the Safari web browser, and it’s the latter that is affected by an actively exploited vulnerability.
Specifically, the bug in question is tracked as CVE-2025-6558 in the CVE system of tracking security breaches. Apple credits its discovery to Clément Lecigne and Vlad Stolyarov of Google’s Threat Analysis Group, which disclosed the existence of the bug on July 15 and noted that “Google is aware that an exploit for CVE-2025-6558 exists in the wild.”
How to update your iPhone(Image credit: Photo by Jaap Arriens/NurPhoto via Getty Images)To download the iOS 18.6 update, open the Settings app on your iPhone and navigate to General > Software Update. Allow your iPhone to check for updates, then tap Update Now when prompted. Your phone will then download and install the patch, and it might restart several times during the process.
Apple devices are known for their strong security, but that doesn’t make them invulnerable to attack, as this update shows. The iPhone is one of the best smartphones out there, and the huge popularity of iOS among phone users makes it a ripe target for hackers, who are always looking for new ways to poke holes in Apple’s systems.
While much of the public’s attention is focused on the upcoming iOS 26 public beta release, it remains important to keep your existing devices safe and secure, no matter what operating system they’re running.
Downloading the iOS 18.6 update is one of the best ways you can do that right now to ensure you keep security threats at bay.
You might also like- AMD has announced the Radeon RX 9060 GPU for pre-built gaming PCs
- It will use 8GB of VRAM similar to its 9060 XT counterpart
- It seems as though Team Red isn't giving up on 8GB GPUs
The GPU market has seen a handful of additions recently, mostly from Nvidia and AMD with the RTX 5000 series and Radeon RX 9000 series lineups, respectively – and it looks like Team Red isn't done just yet, perhaps in an unwanted way.
As reported by our friends at Tom's Hardware, AMD announced the Radeon RX 9060 GPU spotted in a new Radeon driver update's patch notes, a new 8GB option for gamers that will only be available via pre-built systems – in other words, the GPU won't be available to purchase separately via retailers.
This appears to be a watered-down version of the 8GB Radeon RX 9060 XT model, which was less favored in comparison to its 16GB model. 8GB GPUs haven't been selling well at retailers, as previously indicated by a German retailer's sales figures.
Recent rumors also suggest that Nvidia and its board partners may be dropping GPU prices due to a lack of sales and oversupply, which likely includes 8GB configurations – and the indication is that PC gamers don't want to pay inflated high prices for mid to high-end GPUs, and a significant portion clearly aren't settling with low-end 8GB cards.
However, it's essential to note that this new GPU appears to be specifically designed for pre-built systems, which should help introduce more affordable gaming PCs, especially for those new to the ecosystem.
Analysis: 12GB of VRAM should be the new standard(Image credit: Future)I think it's been stated more than enough at this point that 8GB GPUs just won't cut it for PC gaming today. These GPUs aren't completely useless, as they can still run games at 1080p, but with more poorly-optimized PC games of recent years and games requiring more VRAM, I don't think 8GB of VRAM is the solution for desktop GPUs.
Consumers are clear to voice their satisfaction with 16GB GPUs, so at the very least, I'd like to see Nvidia and AMD follow in Intel's footsteps; it's seemingly abandoned 8GB GPUs entirely, with its latest lineup consisting of 10GB and 12GB GPUs.
There's no doubt that those on a budget may find use in these GPUs, but in terms of longevity, it's the last option that I would recommend for a new GPU.
I was hoping Team Green and Team Red would set the new standard to 12GB, but now I'm left hoping that both take this into consideration for the next generation of graphics cards.
You might also like...- You might not have to wait long for the ROG Xbox Ally – a new leak suggests a launch may be sooner than you expect
- Need a new GPU? Nvidia's RTX 5000 Super models may be coming sooner than you expect
- AMD isn't giving up on high-end GPUs – a new leak hints at a new Radeon GPU challenging Nvidia's next-gen flagship graphics card
- Google makes it easier to join Meet calls on Companion mode
- Laptops listen out for hardware via ultrasound signals
- It only works with Chrome and supported hardware
One of the biggest pain points for Google Meet users joining video conferencing calls could soon be solved after the company by adding a new Companion Mode feature to automatically allow users to join a call.
In a blog post, the company unveiled its new automatic room check-in feature, which uses ultrasound proximity detection to streamline the process of joining meetings in Companion mode.
Users' laptops will leverage the built-in microphone to detect an ultrasound signal from Google Meet hardware, making it even easier to join in with multi-person calls - and hopefully putting an end to annoying or jarring echoes for good.
Google Meet gets even easier in Companion mode"To simplify joining meetings from a conference room and prevent disruptive audio feedback, Google Meet now intelligently guides you to the best joining option," Google noted.
When a laptop detects nearby Google Meet hardware, it will switch from highlighting 'Join now' to 'Use Companion mode', which allows them to join into a call without duplicating audio or video in a shared room.
Already a useful feature, Companion mode disables the mic and camera by default to prevent audio feedback or echo, allowing users to view presentations, use the in-meeting chat, participate in polls, share their screen and use captions.
"This wayfinding feature helps ensure a seamless, echo-free start to your meeting," Google added.
Proximity-based Room Check-in replaces the manual check-in prompt shown after clicking 'Use Companion mode'.
The tool will be available to all Google Workspace customers with Google Meet hardware, but could take up to 15 days from August 4 to show up for all users. For now, the feature is only supported on Google Meet web via Chrome, together with certified Google Meet peripherals.
You might also like- We've listed the best business webcams
- Need an upgrade? Consider one of the best business laptops
- Google Meet will now use Gemini to suggest "next steps" after your team meetings
- Mozilla is warning its dev community of an ongoing attack
- The attackers want access to the devs' accounts
- Tainting browser addons with malware could be the play here
Mozilla is warning its developer community they are at risk of being targeted by devious new phishing attacks urging them to “exercise extreme caution and scrutiny” when receiving emails claiming to have come from either Mozilla, or AMO (addons.mozilla.org).
“Phishing emails typically state some variation of the message “Your Mozilla Add-ons account requires an update to continue accessing developer features,”” the company said in its description of what the targets could expect.
The company did not say who the threat actors are, what they’re looking to achieve, or how successful they are - however, given browser add-on developers are being targeted, it’s safe to assume the miscreants are looking for a way to compromise the products with malware.
Supply chain attacksBrowser add-ons are tiny programs that add extra features or functions to a web browser, and users usually install them to customize or enhance their browsing experience.
Some of the most popular addons include ad blockers, spelling and grammar checkers, password managers, screenshot tools, and VPNs or privacy tools.
By tainting the solutions with malware, cybercriminals can engage in supply chain attacks, gaining access to people’s bank accounts, social media accounts, cryptocurrency tokens and NFTs, passwords, session cookies, and more.
It’s a common attack vector, too. Less than a month ago, it was reported that many Chrome and Edge addons, including several prominent products, were found spying on users and communicating with a third-party server.
At the time, security researchers from Koi Security reported that a seemingly benign Chrome add-on called “Color Picker, Eyedropper — Geco colorpick”, which allows users to quickly identify and copy color codes from any point within their browser, was secretly a malware.
While working as advertised, and having thousands of downloads and positive reviews, the add-on also did something in the background - it hijacked browser activity, tracked the websites users were visiting, and communicated with remote C2 infrastructure.
This discovery led them down a path that uncovered an entire web of add-ons, all doing similar things.
Via The Register
You might also like- Hackers hit SAP security bug to send out nasty Linux malware
- Take a look at our guide to the best authenticator app
- We've rounded up the best password managers
Have you noticed your Fitbit is registering you’re awake more during the night, with your graph now showing more awake events than it did previously? It turns out this isn’t a bug lingering from the recent major outage; it’s an intended side effect of a recent update.
That’s according to a note Fitbit shared with its community explaining that “Your sleep tracking just got more accurate.” Noting this is just the first in a “series of upcoming improvements” to sleep tracking.
Specifically, this first update involves some tweaks to how your Fitbit tracks your sleep to make it more accurate. This is perhaps why your awake time and number of awake events have increased as you do briefly wake up throughout the night (even if you don’t realize), but the old system didn’t correctly track all of these instances.
The upshot is that your Fitbit should more accurately track your night's rest to give you a better measure of your body’s recovery.
(Image credit: Andrea Gaini)The only unclear thing is which Fitbits will support this new sleep tracking, but we expect it will at least include the Fitbit Charge 6, Inspire 3, Sense 2, and Versa 4 – as these are the four models Google still sells.
Some older models may also be included, but Fitbit hasn’t clarified which ones.
However, if more improvements are planned, these could be detailed at the upcoming Made By Google event, which will happen on August 20 at 10am PT / 1pm ET / 6pm BST / 3am AEST.
While Google promises the event will focus on “the latest additions to our Pixel Portfolio of devices,” Fitbit might be included in that, even if it's just as part of a wider Pixel Watch discussion.
Whatever happens, you can be sure we’ll be ready to cover it.
You might also like