Tech – Page 83 – Scriptingthewhy.com

Buzzing in Your Computer

Consider following on social media!

Quick note: if you’re viewing this via email, come to the site for better viewing. Enjoy!

Tom: Hey, did either of you check out the script?
Aaron: Yeah Tom, now shut up the movie is about to start.
Photo by Pavel Danilyuk, please support by following @pexel.com

So, you’re a fan of Transformers, huh? Well, brace yourself, because this might shock you. You know how those robots can turn into cars, planes, and other stuff?

Well, guess what? Some of them can also hack into your computer or your online accounts without breaking a sweat. It’s crazy, the internet never stops being the place where people can exploit sweet childhood memories.

We’re going to look at what the attack is, who is using it, the functionality and effects upon release, and what are some ways to protect yourself from this transformer transforming your life into a nightmare.

Kim: So uh…we’re just friends huh?
Dave: *Thinking: If I pretend like I’m drinking she’ll stop asking me questions.*
Photo by Pavel Danilyuk, please support by following @pexel.com

The Attack

Have you ever experienced a transforming nightmare? For those who may not know it’s called “malware” which means “malicious software”. This refers to any software that is designed to harm, disrupt, or steal data from a computer or a network. You can think of this as your neighbor offering you food knowing it’s laced with naptime medicine.

The newest addition to being laced with something that stings and honey is not included is called “BumbleBee”. BumbleBee is a malware downloader written in C++ language and has a single function that handles various tasks.

This is malware that can hide in plain sight and deliver ransomware payloads to infected systems. In a nutshell, this bee sting giveth and this bee taketh your data.

Not only do I collect pollen but I can give your computer everything you never wanted, like a virus.
Photo by Egor Kamelev, please support by following @pexel.com

Who Can It Be Now

Who would set something like this up to take your data? Well, we’re happy to tell you that this didn’t come out from Beyonce’s beehive. BumbleBee has been linked to several cybercriminal groups, such as EXOTIC LILY and TrickBot.

Let us quickly go over the two. EXOTIC LILY is a financially motivated group that may have acted as initial access brokers for other malicious actors and targets a wide range of industries also involving IT.

TrickBot is a Trojan that threat actors spread via spear phishing campaigns. This is done by using tailored emails that contain malicious links. And you thought ChatGPT was only good for fixing resumes and completing essays.

Enjoy the read so far? Why don’t you consider subscribing so you can keep up to date?

Well, it’s time to mail some ransomware.
Photo by Liza Summer, please support by following @pexel.com

That Sinking Feeling

Now moving on to how something like BumbleBee works. BumbleBee is a downloader that is distributed through malspam (malware spam- spam email with malware) campaigns. Emails are sent with a malicious attachment that has an ISO extension.

When the user opens the attachment, they see a folder with two files: a DLL file and an LNK file. Both files are infected with this troublesome transformer. The LNK file is a shortcut that executes the DLL file when clicked. Trigging the BumbleBee downloader to download and run other malware on the compromised system.

What’s the other malware that could be downloaded we hear you ask. Well, this could be but is not limited to viruses, worms, trojans, spyware, adware, ransomware, and more. What problems can they cause? Don’t worry, we have you on that as well.

Malware can cause various problems, such as slowing down the system, encrypting or deleting files, displaying unwanted ads, or demanding a ransom to restore access. Malware can infect a device through various methods, such as downloading attachments, clicking on links, visiting malicious websites, or using infected USB drives.

So all in all, BumbleBee gets into your system, transforms, drops off, and rolls out. And you thought Optimus was bad.

This isn’t what we meant as far as protecting your information but it’s a start.
Photo by cottonbro studio, please support by following @pexel.com

The Prevention

So how does one protect themselves from what came from the beehive? Well, to protect your computer from malware and other threats of the like. You should follow some basic security practices.

First, avoid opening attachments and clicking on links in emails that look off or are irrelevant to you. Especially if they came from an unknown sender. Second, use only official tools to update and activate the software you use. And never download or run any cracks, keygens, or patches from unknown sources.

Third, keep your operating system and applications updated with the latest security patches and fixes. Fourth, download software and files only from official or reputable websites, and avoid using third-party downloaders.

Lastly, install a reliable antivirus program on your computer and scan your system regularly for any potential infections or vulnerabilities. Many issues will come a buzzing but if you can avoid being stung from a hit and run, then do so.

It’s a good thing I read Scriptingthewhy. I knew these bees were acting funny. IT’S TIME TO GET YA’ll IN ORDER!
Photo by Anete Lusina, please support by following @pexel.com

Made it this far and found this to be entertaining? Then a big thanks to you and please show your support by cracking a like, sharing this with whomever, scripting a comment, or plug-in to follow.

Would like to give sincere thanks to current followers and subscribers, your support and actions mean a lot and has a play in the creation of each script.

Do you feel like there is something I may have missed on BumbleBee? Script a comment below.

Security, Tech

Owls Up There with Fed Banking

Quick note: if you’re viewing this via email, come to the site for better viewing. Enjoy!

To be or not to be…poor. That is the question. WAIT, WHY IS THAT EVEN A QUESTION!?
Photo by Andrea Piacquadio, please support by following @pexel.com

Let’s start this off by asking a simple question and this is something that many of you can relate to. How many of you enjoy having a bank account full of money? It’s safe to assume that almost everyone reading this script enjoys having a decent sum of money in their bank account.

I know that there may have been a very, very, very small few that might have said, “Money isn’t real, the real value of you isn’t in the form of numbers.” To them, I ask, if that is true then why is it that every time I get a bill, I spiral into a panic attack? Explain that one, however, you’re not wrong, that’s not the point being made here, so hush.

Suppose like in many situations, you check your account before going to sleep to confirm you have a decent amount, but when waking up you get an alert sounding like the accountant bit from South Park talking about your bank account, “Annnd, it’s gone. Your money, it’s all gone.” Let me script for you how this may have happened.

Dear sweet Satan’s cornhole…Z-Daddy was right. My accounts are at zero.
Photo by Andrea Piacquadio, please support by following @pexel.com

Halloween Gone Mobile

So, the numbers in your bank account are gone with the wind and you’re probably wondering how you got to this junction. Well, let me inform you that you may have been infected with a virus called SOVA.

SOVA is a virus designed for mobile phones, as you can predict this is mainly for Android phones, but iPhone users don’t think you’re safe. Your sweet saucy phone jack is just not on the menu for now.

SOVA, in case you were wondering means owl in Russian, the name was given because owls are nocturnal birds of prey, they’re silent, and like a slow jam from the 80s, they stalk and capture their prey. As you could have already guessed, this is Michael Myers of the animal kingdom, and it very well could be on your mobile device.

I don’t stalk my prey; they just don’t see me coming. Stop making a big woot…oh I saw what you did there.
Photo by Pixabay, please support by following @pexel.com

Night-time Owls, Day-time Collection

Outside of SOVA being given a cute name by the threat actor, the first version made its first appearance on the underground markets back in September of 2021. For those who don’t know what the underground markets are, they’re the “dark web” or may also be called the “dark net”. And before you ask, no, there is not an underground store in either of those areas.

SOVA was shown that it not only had the ability to collect usernames, passwords, and other information, but it also has an interesting function that will be brought up later. Trust me, you’re not going to like this. If you suffer from having trust issues with people, you’re really going to have it with your phone after reading this script.

No, no, no, annnnnnd now it’s gone. All of my money, it’s all gone.
Photo by Karolina Grabowska, please support by following @pexel.com

Intruder at Hand

Right now, you’re probably looking at your phone and thinking “I don’t trust you.” And you would be right since your phone is the main attack vector for this malware/virus/trojan. That’s right, viruses have pronouns too.

SOVA is distributed by a smishing attack, which is another form of phishing where the attacker is trying to bait you into clicking on a link for further malicious intent via text messaging.

Once the fake application is installed on the phone, it then sends the list of all applications installed on your device back to the command-and-control server (C2C), this is done with the intent for the attacker to then choose which app to target.

The attacker fires back the malware that can perform collecting keystrokes, steal cookies, intercept multi-factor authentication tokens, copy and paste, and add fake overlays for a range of apps.

But are you ready to have some major trust issues? This malware can perform actions like clicking, swiping, and pretty much interacting the same way as if you were using it. This is all done via the accessibility service, guessing this is the last time you’ll trust a handicap sign.

All of our accounts are wiped clean, if only we kept reading Scriptingthewhy.
Photo by energepic.com, please support by following @pexel.com

Panic, Pause, and Simple Steps

While this seems like the sky is falling and you’re never going to dance again because empty words have no rhythm. Though it’s easy to pretend, knowing this information will not make you a fool. Always be very careful when you download from a friend as this could be potential harm that you have been given.

A few other ways of preventing from downloading such malware are to make sure you check all of the details of the application such as reviews and how often the application is downloaded. Make sure you download from only trusted sources like the manufacturer’s store or from the app store.

Other practices are making sure your OS (Operating System), applications, and anti-virus software are up to date. Most of the ways to keep your devices and information safe are to follow simple best practices but most of the time the combination of “It’s our app and we want it now” and reading takes too much effort that exposes us to possible threats.

This is my third time this month getting a spa treatment, and it’s all thanks to those cursed scripts. Bless you Z-Daddy.
Photo by John Tekeridis, please support by following @pexel.com

Made it this far and found this to be entertaining? Then a big thanks to you and please show your support by cracking a like, scripting a comment, or plug-in to follow.

Would like to give sincere thanks to current followers and subscribers, your support and actions mean a lot and has a play in the creation of each script.

Do you feel like I may have missed something about SOVA? Script a comment below.

Cloud Talk, Tech

We’re All Shakespeare

Daily writing prompt

Are you a leader or a follower?

View all responses

Shakespeare, quantum theory, all I wanted was a burger.
Photo by Andrea Piacquadio, please support by following @pexel.com

Balancing Acts

So many times, we are asked interesting questions. Which one is better, Xbox or PC? How often do frogs think about the sun? How does Super String theory apply to geopolitics? Or, and the most challenging and controversial question, “Peanut butter or jelly, which is better?”

Comparing apples to oranges aside, the latest question that made us question life and its meaning. We were asked if we consider ourselves to be leaders or followers. That’s an interesting question and kind of a mixed bag to answer. But here at Scriptingthewhy, we like spicing things up so here we go.

I think our leader is a little dingy.
Photo by Miguel A. Padrinan, please support by following @pexel.com

To lead or not to lead, that is the question. To answer this question, we are both. It depends on the situation. Many would argue they’re a leader because there are a lot of perks to being a leader.

What are the perks? Don’t worry, we have you. The perks are but are not limited to instructing others, being the standard for others, and basking in the praise for good decisions.

However, if someone had an input that led to things working out for the better, give them the credit. There have been too many times when leaders take credit for someone else’s idea. This makes a bad leader, don’t be this person.

A quick side note, we know this generation ties their whole existence on people “hitting that like button” and seeing the followers count pile up, but having followers does not makeup who you are. Find out who you are, improve yourself from there, and cherish that. We spent weeks, months, a year even, with no followers. If we wrote only for the follower count, this question would not be getting an answer. Seeing that you’re important and supporting yourself first before seeking approval from others is all we’re saying.

Detouring aside, what are the perks of being a follower? The list isn’t as extensive or appealing, but some perks are, not being responsible for most things, not being in the spotlight, participating in teamwork, and reserving the right to say “Hey, I saw our leader grazing on grass. Uh, I think they’re unfit to lead.”

Enjoy what you’ve read so far? Why not subscribe for more?

Life, the final frontier. Let’s enjoy it this go-round.
Photo by saifullah hafeel, please support by following @pexel.com

As mentioned earlier, we’re considering to be both. Why? Well, both are equally important. You can’t be a good leader if you’ve never followed, and you can’t be a good follower if you never led.

The most important positioning is having the flexibility to be either or. No one is ever truly one thing. This is because we all have something to offer.

If you like this post on leader or follower then click here for another read.