Malware Detection: The Growing Concern of Spyware on Mobile Devices

The Prevalence of Spyware

Seven out of 2,500 scans may seem like a small number, but it speaks to the widespread use of spyware around the world. The tool, developed by iVerify, has already detected a handful of infections, suggesting that the problem is more prevalent than initially thought.

How It Works

iVerify’s Mobile Threat Hunting feature uses telemetry data from as close to the kernel as possible to tune machine-learning models for detection. This allows the tool to flag characteristic traits of spyware, such as diagnostic data, shutdown logs, and crash logs.

The Challenge of Detection

Developing a detection capability has been a significant challenge, as mobile operating systems like Android and iOS are more locked down than traditional desktop operating systems. The challenge lies in refining mobile monitoring tools to reduce false positives.

Real-World Applications

The detection capability has already been invaluable, helping iVerify identify signs of compromise on the smartphone of Gurpatwant Singh Pannun, a lawyer and Sikh political activist who was the target of an alleged foiled assassination attempt by an Indian government employee in New York City. The feature also flagged suspected nation-state activity on the mobile devices of two Harris-Walz campaign officials during the presidential race.

The Future of Mobile Security

"The age of assuming that iPhones and Android phones are safe out of the box is over," says Cole, a representative from iVerify. "The sorts of capabilities to know if your phone has spyware on it were not widespread. Now you have the ability to know if your phone is infected with commercial spyware. And the rate is much higher than the prevailing narrative."

Conclusion

The detection of spyware on mobile devices is a growing concern, and it is crucial to have tools like iVerify’s Mobile Threat Hunting feature to identify and combat this threat. As the world becomes increasingly dependent on mobile devices, it is essential to stay ahead of the curve and ensure our personal and professional data remains secure.

FAQs

Q: What is spyware?
A: Spyware is a type of malware that is designed to gather information about a device or its user without their consent or knowledge.

Q: What is the prevalence of spyware?
A: The prevalence of spyware is difficult to determine, but it is estimated to be widespread, with 7 out of 2,500 scans detecting spyware.

Q: How does iVerify’s Mobile Threat Hunting feature detect spyware?
A: The feature uses telemetry data from as close to the kernel as possible to tune machine-learning models for detection, flagging characteristic traits of spyware such as diagnostic data, shutdown logs, and crash logs.

Q: What are the challenges of detecting spyware on mobile devices?
A: The main challenge is refining mobile monitoring tools to reduce false positives, as mobile operating systems like Android and iOS are more locked down than traditional desktop operating systems.

12 Days of OpenAI

With the holiday season upon us, many companies are finding ways to take advantage through deals, promotions, or other campaigns. OpenAI has found a way to participate with its “12 days of OpenAI.” 

What are the ’12 days of OpenAI’?

OpenAI CEO Sam Altman shared a bit more details about the event, which kicked off at 10 a.m. PT on Dec. 5 and will occur daily for 12 weekdays with a live stream featuring a launch or demo. The launches will be both “big ones” or “stocking stuffers,” according to Altman.

What has been dropped so far?

Friday, December 6:

On the second day of “shipmas,” OpenAI expanded access to its Reinforcement Fine-Tuning Research Program:

• The Reinforcement Fine-Tuning program allows developers and machine learning engineers to fine-tune OpenAI models to “excel at specific sets of complex, domain-specific tasks,” according to OpenAI.
• Reinforcement Fine-Tuning refers to a customization technique in which developers can define a model’s behavior by inputting tasks and grading the output. The model then uses this feedback as a guide to improve, becoming better at reasoning through similar problems, and enhancing overall accuracy.
• OpenAI encourages research institutes, universities, and enterprises to apply to the program, particularly those that perform narrow sets of complex tasks, could benefit from the assistance of AI, and perform tasks that have an objectively correct answer.
• Spots are limited; interested applicants can apply by filling out this form.
• OpenAI aims to make Reinforcement Fine-Tuning publicly available in early 2025.

Thursday, December 5:

OpenAI started with a bang, unveiling two major upgrades to its chatbot: a new tier of ChatGPT subscription, ChatGPT Pro, and the full version of the company’s o1 model.

The full version of o1:

• Will be better for all kinds of prompts, beyond math and science
• Will make major mistakes about 34% less often than o1-preview, while thinking about 50% faster
• Rolls out today, replacing o1-preview to all ChatGPT Plus and now Pro users
• Lets users input images, as seen in the demo, to provide multi-modal reasoning (reasoning on both text and images)

ChatGPT Pro:

• Is meant for ChatGPT Plus superusers, granting them unlimited access to the best OpenAI has to offer, including unlimited access to OpenAI o1-mini, GPT-4o, and Advanced Mode
• Features o1 pro mode, which uses more computing to reason through the hardest science and math problems
• Costs $200 per month

Where can you access the live stream?

The live streams are held on the OpenAI website, and posted to its YouTube channel immediately after. To make access easier, OpenAI will also post a link to the live stream on its X account 10 minutes before it starts, which will be at approximately 10 a.m. PT/1 p.m. ET daily.

What can you expect?

The releases remain a surprise, but many anticipate that Sora, OpenAI’s video model initially announced last February, will be launched as part of one of the bigger drops. Since that first announcement, the model has been available to a select group of red teamers and testers and was leaked last week by some testers over grievances about “unpaid labor,” according to reports.

Conclusion

The 12 days of OpenAI have just begun, with many exciting releases and upgrades already announced. From Reinforcement Fine-Tuning Research Program to ChatGPT Pro, there’s much to look forward to as the holiday season unfolds. Stay tuned for more updates and releases throughout the campaign.

FAQs

Q: What is the 12 days of OpenAI?

A: The 12 days of OpenAI is a campaign by OpenAI, where the company will host 12 days of live streams and release “a bunch of new things, big and small,” starting from December 5.

Q: What has been dropped so far?

A: OpenAI has already dropped two major upgrades to its chatbot, ChatGPT Pro and the full version of its o1 model, and expanded access to its Reinforcement Fine-Tuning Research Program.

Q: How can I access the live stream?

A: The live streams are held on the OpenAI website, and posted to its YouTube channel immediately after. OpenAI will also post a link to the live stream on its X account 10 minutes before it starts, which will be at approximately 10 a.m. PT/1 p.m. ET daily.

Q: What can I expect from the releases?

A: The releases remain a surprise, but many anticipate that Sora, OpenAI’s video model, and other exciting upgrades and new features will be launched during the campaign.

Q: When will the 12 days of OpenAI end?

A: The 12 days of OpenAI will end on December 18, with the last live stream occurring on that day.

The Secret Word: A New Way to Verify Identity in the Age of AI Identity Fraud

The Warning

The Federal Bureau of Investigation (FBI) has issued a warning about a new type of identity fraud, where criminals use artificial intelligence (AI) models to generate convincing profile photos, identification documents, and chatbots embedded in fraudulent websites. These tools automate the creation of deceptive content, making it difficult to identify the human behind the scam.

The Problem with Voice Scams

The warning extends beyond voice scams. The FBI announcement details how criminals use AI models to generate convincing profile photos, identification documents, and chatbots embedded in fraudulent websites. These tools automate the creation of deceptive content while reducing previously obvious signs of humans behind the scams, such as poor grammar or obviously fake photos.

The Secret Word

To combat this issue, the idea of a "secret word" has emerged. This is a word or phrase known to a select few, which can be used to verify someone’s identity. The concept was first proposed by an AI developer named Asara Near on Twitter in March 2023.

The Origin of the Secret Word

According to our knowledge, the first appearance of the secret word in the context of modern AI voice synthesis and deepfakes can be traced back to Asara Near’s tweet. The idea is to establish a "proof of humanity" word, which trusted contacts can ask for in case they receive a strange and urgent voice or video call from the individual.

The Idea Spreads

Since Near’s tweet, the idea has spread widely. In February, Rachel Metz covered the topic for Bloomberg, writing that the concept is becoming common in the AI research community and is simple and free to implement.

The Power of Passwords

Of course, passwords have been used since ancient times to verify someone’s identity. It seems likely that some science fiction story has dealt with the issue of passwords and robot clones in the past. It’s interesting that, in this new age of high-tech AI identity fraud, this ancient invention – a special word or phrase known to few – can still prove so useful.

Conclusion

In conclusion, the secret word is a new way to verify identity in the age of AI identity fraud. By using a word or phrase known to a select few, individuals can ensure that their contacts are not communicating with a deepfaked or deepcloned version of themselves.

FAQs

Q: What is a secret word?
A: A secret word is a word or phrase known to a select few, which can be used to verify someone’s identity.

Q: How does it work?
A: A trusted contact can ask for the secret word if they receive a strange and urgent voice or video call from the individual, to ensure they are speaking with the real person and not a deepfaked or deepcloned version.

Q: Is this a new concept?
A: No, the idea of using a special word or phrase to verify identity is not new. However, the concept of a secret word in the context of AI voice synthesis and deepfakes is a recent development.

Q: Is the secret word effective against identity fraud?
A: Yes, the secret word can be an effective way to verify someone’s identity and prevent identity fraud.