News of the Cyber World

[kyonides]

North Koreans Use Fake Names and LinkedIn Profiles to Land Jobs with Western Tech Firms

On Wednesday, the Justice Department confirmed a major investigation of the scheme has been in progress for some time.

There was an element of dark comedy to the Reuters report, which made it sound fairly easy for dictator Kim Jong-un’s serfs to bamboozle Western human resources departments into thinking they were legitimate job applicants from free countries.

For example, reporters got their hands on a canned interview script that told North Koreans to say things like “People are free to express ideas and opinions!” to interviewers, telling them exactly what they wanted to hear about healthy “corporate culture.” The scripts included a variety of prepared excuses for why the disguised North Korean applicant needed to work remotely.

Combined with convincing fake resumes and doctored social media profiles, such tactics were good enough to defeat the vetting process at countless information technology companies.

The interview scripts were uncovered by an American cybersecurity firm called Palo Alto Networks, which was investigating a scheme by hackers to trick software companies into installing malware on their systems by posing as job applicants. Palo Alto’s researchers dubbed this tactic “Contagious Interview.”

Contagious Interview attacks typically begin with phony job applicants persuading employers to interview them online, using a video conferencing platform of the hacker’s choice, usually the popular collaboration platform GitHub. Employers who accepted the offer found themselves downloading malware packages disguised as “click here to connect” software.

Some of the Contagious Interview hackers were also reportedly able to persuade prospective employers to download and install software they had written, to evaluate the quality of their coding work. In both scenarios, the unwitting employee allowed the hackers to open back doors into their systems for further mischief.

Tesla Customers Criticize Elon Musk’s EV Insurance Service

The insurance program, which Tesla CEO Elon Musk claimed would provide “vastly better” service than traditional competitors, has instead been plagued with issues. Customers have reported significant delays in payments, difficulties in reaching claims adjusters, and frustrations with the repair process.

A noteworthy incident involves Mark Bova, a former Green Beret who suffered a traumatic experience while using Tesla’s Autopilot feature. The car suddenly started beeping and swerved left, hitting a median and overturning. Bova had to escape through a window as the car filled with smoke and was immediately taken to the hospital via ambulance, later undergoing surgery for his back injuries.

After his Tesla Model S crashed, Bova struggled to get a timely response from Tesla Insurance. He waited seven months for payment on his totaled vehicle and has yet to be compensated for his substantial medical expenses. His ordeal reflects a broader pattern of customer service issues within Tesla’s insurance arm.

Tesla Insurance was launched as a solution to high insurance rates for electric vehicles, which often carry higher repair costs. The company aimed to simplify the process for Tesla owners and provide more affordable rates. However, customers like Bova have encountered a reality far from these initial promises.

Stellantis Recalls 32,000+ Hybrid Jeep Wrangler SUVs After Several Catch Fire While Parked

As part of what the company described as a routine review of customer information, Stellantis determined that eight of the hybrid Wranglers had caught fire while they were turned off and parked. Six of the vehicles were being charged when the fires started. The company said it doesn’t believe anyone was hurt in the fires.

The recall covers 2021-2024 models of the Jeep Wrangler 4xe SUVs. All other Wrangler models have been deemed safe by Stellantis, which maintains its U.S. headquarters in Auburn Hills, Michigan.

The SUVs affected by the recall can still be driven until they are fixed, but Stellantis is recommending they be parked away from buildings and not be charged until they can be repaired.

Hitting Google Really Hard News

---

‘Fortnite’ Developer Labels Google as ‘Ruthless Bully’ in App Store Antitrust Case

Sweeney’s testimony highlighted Google’s alleged attempts to stifle competition. He recounted how Google tried to entice him with substantial financial incentives to release Fortnite on the Play Store, incentives that he rejected. He described these proposals as “crooked arrangements,” claiming they were designed to prevent Epic from competing against Google. Furthermore, Epic’s lawyers revealed that Google had offered a $360 million package to video game maker Activision Blizzard to discourage competition against the Play Store.

Google’s defense strategy, led by attorney Jonathan Kravis, aimed to reframe the narrative. Kravis attempted to portray Sweeney as primarily motivated by profit, seeking to bypass the commission system to increase his company’s earnings. The defense also pointed out that Epic willingly pays similar commissions to console makers like Sony, Microsoft, and Nintendo without objections.

The trial took an intriguing twist when Sweeney introduced “Project Liberty,” a secret plan to circumvent the commission system. This involved discreetly integrating an alternative payment option in Fortnite’s app, a move that led to both Apple and Google blocking the game from their stores, triggering the current legal battles.

Google Antitrust Trial 2.0: Internet Giant Made Secret Deal with Spotify to Bypass App Store Charges

The Verge reports that the Android app economy is buzzing with the revelation of a secret agreement between Google and Spotify. This deal, unveiled during the antitrust trial brought against Google by Fortnite developer Epic Games, has spotlighted Spotify’s unique ability to completely sidestep Android’s app store fees, a privilege not commonly extended to other app developers.

Spotify, a leading music streaming service, has been leveraging a payment arrangement that effectively nullifies Google’s commission. When users subscribe through Spotify’s own payment system, the company pays zero commission to Google. Even more striking, if users opt for Google’s payment processor, Spotify incurs a mere four percent fee, a stark contrast to the standard 15 to 30 percent charged by Google to most app developers.

This exclusive arrangement has broader implications, especially when viewed in the context of Google’s ongoing antitrust battles. The internet giant, in its legal war with Epic Games, fought hard to keep these specific details under wraps, fearing potential backlash and more demanding negotiations with other app developers seeking similar deals.
...
The uniqueness of Spotify’s deal with Google is further highlighted by Google’s refusal to offer similar terms to other major players like Netflix. This selective approach in offering discounted rates reveals a strategic dimension to Google’s partnerships, potentially influenced by the commercial clout and market influence of Spotify.

Interestingly, Spotify has been a vocal critic of the high commission fees charged by major app stores.