
<amp-img src="/blog-content/june-2022/062222/tiktok.jpg" layout="responsive" width="2000" height="1333" alt="tiktok">
</amp-img>
<img src="/blog-content/june-2022/062222/tiktok.jpg" layout="responsive" width="2000" height="1333" alt="tiktok">
</img>

With over [1 billion monthly active global users](https://wallaroomedia.com/blog/social-media/tiktok-statistics/), TikTok has rapidly become one of the quintessential social media platforms alongside giants like Facebook (now Meta) and Twitter. However, immense growth does not come without immense risks- such as the enormous breach in the company’s trust that was recently reported.

## TikTok: The Ticking Timebomb

TikTok is not new to the whole data privacy game. In fact, they have been [responding to questioning](https://newsroom.tiktok.com/en-us/statement-on-tiktoks-content-moderation-and-data-security-practices) regarding the security of their user’s data for years. Despite this, however, [leaked audio](https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-tapes-us-user-data-china-bytedance-access) from more than 80 internal meetings within the organization suggest that China-based employees have accessed nonpublic data about TikTok users from the United States on more than one occasion.

The audio consists of 14 recordings from nine different TikTok employees, all of which indicates that engineers located in China had access to American user data from at least September 2021 to January 2022. The recordings vary from small group meetings among executives to much larger presentation meetings.

## A Potential Fix

In the outbreak of this information, TikTok spokesperson Maureen Shanahan made one, short statement:

> “We know we’re among the most scrutinized platforms from a security standpoint, and we aim to remove any doubt about the security of U.S. user data. That’s why we hire experts in their fields, continually work to validate our security standards, and bring in reputable, independent third parties to test our defenses.”

And there is something to support that testimony- Project Texas. [Project Texas](https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-project-texas-bytedance-user-data) is a contract currently being negotiated between TikTok, the cloud services provider Oracle, and the Committee on Foreign Investment in the United States (CFIUS).

In the agreement, TikTok would hold specific data coming from U.S. users, such as their phone numbers and birthdays, exclusively at a data center operated by Oracle within the state of Texas. That data would then _only_ be accessible to U.S.-based TikTok employees.

While this might sound like a good start, there is still much work to be done, primarily in deciding what type of data would be “protected.” As of right now, the recordings suggest that all _public_ data, such as a users’ public profile and what they post, are _not_ considered as such.

## You are Your Best Defense

Overall, you are your best defense from those hungry for your data, but that is also a very tough job to do. That is why we at Redact want to make it easier for you to have more control over your own information on the Internet.

At bare minimum, you can protect yourself by controlling what you post online, which is [extremely beneficial](https://redact.dev/blog/why-is-deleting-old-posts-so-important). And if you’ve already posted stuff that you want to get rid of, don’t worry! We’ve got you covered.

You can use Redact to delete thousands of unnecessarily revealing social media posts, direct messages, and even emails within minutes! So, what are you waiting for? Download Redact for **free** right this moment at [redact.dev/download](https://redact.dev/download).


Leaked Audio Reveals U.S. TikTok Data was Accessed from China


<amp-img src="/blog-content/june-2022/062122/microsoft-vulnerability.jpg" layout="responsive" width="2000" height="1333" alt="microsoft-vulnerability">
</amp-img>
<img src="/blog-content/june-2022/062122/microsoft-vulnerability.jpg" layout="responsive" width="2000" height="1333" alt="microsoft-vulnerability">
</img>

Microsoft recently announced they had detected some critical vulnerabilities in a mobile framework used by Android.

The [Microsoft 365 Defender Research Team](https://www.microsoft.com/security/blog/2022/05/27/android-apps-with-millions-of-downloads-exposed-to-high-severity-vulnerabilities/) detected flaws in a framework operated by mce Systems last year. The vulnerabilities have been patched now, so are no longer a threat, but did provide full access to phones for a while.

It apparently wasn’t just the framework, some apps also carried a vulnerability that could be leveraged by a hacker. That vulnerability passed checks run by the Google Play Store. In fact, the vulnerabilities were so serious, they had a CVSS score of between 7.0 and 8.9. (CVE-2021-42598, CVE-2021-42599, CVE-2021-42600, and CVE-2021-42601).

## Microsoft Swoops In

It’s somewhat ironic that a company known across the globe for security vulnerabilities and providing bugged software managed to spot bugs in more secure software.

But, sometimes, even the mightiest among us make mistakes.

The 365 Defender Research Team were some of the first to identify the vulnerabilities and report them to mce Systems and relevant companies to patch them.

The vulnerabilities tied into the framework that interfaces with Android to perform self-checks and diagnostics. That gave any potential hacker the opportunity for unrivaled access to an Android phone. Microsoft said the vulnerabilities could “allow adversaries to implant a persistent backdoor or take substantial control over the device".

Fortunately, Microsoft worked with mce Systems to remedy the issue. That, and the process within the Google Play Store that allowed these vulnerabilities through, and the majority of the apps affected have all been fixed.

"We worked closely with mce Systems’ security and engineering teams to mitigate these vulnerabilities," Microsoft said, "which included mce Systems sending an urgent framework update to the impacted providers and releasing fixes for the issues. At the time of publication, there have been no reported signs of these vulnerabilities being exploited in the wild."


Microsoft Identifies Critical Android Vulnerabilities


<amp-img src="/blog-content/june-2022/061922/facebook-alert.jpg" layout="responsive" width="2000" height="1333" alt="facebook-alert">
</amp-img>
<img src="/blog-content/june-2022/061922/facebook-alert.jpg" layout="responsive" width="2000" height="1333" alt="facebook-alert">
</img>

As the most popular social network in the world right now, Facebook is a prime target for hackers and malware. But would you even know if your account had been compromised?

There are a few signs someone else might be using your Facebook account, including:

- Likes and follows you didn’t make
- Posts you didn’t write
- Comments you never made
- Profiles that look identical to yours but aren’t
- You’re locked out of Facebook

Some of those are easier to identify than others. You’ll quickly notice (or be notified of) likes, follows, posts, or comments. You may not notice copycat profiles though. That bit comes later.

You may also have received an email from Facebook telling you there was a login from a different location. Don’t depend on that warning though.

## Checking Facebook for activity

The easiest way to see if someone else is using your Facebook account is to check the activity log:

1. Log into Facebook and select the profile menu at the top right
2. Select Settings & privacy and Activity log
3. Check the log for anything you don’t recognize

The **Activity History** menu on the far left is also a good place to check. It shows everything that has happened using your account in a clear, unambiguous way.

If you do spot something you don’t recognize, or several somethings, change your Facebook account password right away by doing the following:

1. Log into Facebook and select the profile menu at the top right
2. Select **Settings & privacy**, then click on **Settings**
3. Select **Security and login** on the left-hand-side
4. Select **Change password** in the **Login** section in the center pane

Once your password has been changed, we also recommend enabling two-factor authentication. This is accessed in the section under **Login**.

You can optionally select to enable alerts for unrecognized logins underneath the two-factor authentication section. This will send an email to verify a login is legit when you try to log in from a location or device you haven’t used before.

It is important to note that this measure by itself won’t prevent someone using your account once accessed. Instead, it serves as an alarm to notify you as soon as it happens to ensure that you are able to quickly change your password and secure your account.


How to Check if Someone Else is Using Your Facebook Account


<amp-img src="/blog-content/june-2022/061622/watching.jpg" layout="responsive" width="2000" height="1333" alt="watching">
</amp-img>
<img src="/blog-content/june-2022/061622/watching.jpg" layout="responsive" width="2000" height="1333" alt="watching">
</img>

Recently, [Mozilla released a blog](https://blog.mozilla.org/security/2021/06/01/total-cookie-protection-in-private-browsing/) outlining the newest way they plan on protecting the privacy of their users. The change in policy is part of a larger sweeping movement across the tech industry. Companies are now more than ever maximizing the privacy and security of their customers - a stark contrast to last decade’s recklessness.

## The Feature

The feature in question is called “Total Cookie Protection.” Added to the browser in February of this year, it seeks to keep different web services from harvesting, tabulating, and using data that you may not be aware they even have access to.

Before, it was overwhelmingly the case that third party cookies were globally accessible. If you went to Facebook, then to YouTube, then to Amazon, your traffic (purchases, views, likes) on each website were able to be read and stored by each company respectively. This traffic was then used to profile you, show targeted ads, tailor your auto recommendations, and more.

With Total Cookie Protection, it is no longer possible for these platforms to do this. Each website’s cookies are contained to that space and that space alone.

## The Policy

While that all sounds great, it doesn’t answer what actually has changed. If this feature has been on the site for months now, why all the fuss?

Well, Mozilla announced that the feature is now the default for all types of tabs, including “Private Windows.” While this represents a relatively small shift, the effects are large.

For any users who don’t keep abreast with tech news and pay attention to every new feature, they’re now grandfathered into this new standard, keeping their activity more safe and secure. Without even knowing about it, every average Firefox user can now browse the web with fewer eyes watching - something we here at Redact are also in the business of.


This New Firefox Policy is Taking the World by Storm


<amp-img src="/blog-content/june-2022/061522/facebook-lawsuit.jpg" layout="responsive" width="2000" height="1333" alt="facebook-lawsuit">
</amp-img>
<img src="/blog-content/june-2022/061522/facebook-lawsuit.jpg" layout="responsive" width="2000" height="1333" alt="facebook-lawsuit">
</img>

[According to Bloomberg](https://www.bloomberg.com/news/articles/2022-06-08/meta-hit-with-8-suits-claiming-algorithms-hook-youth-ruin-lives#xj4y7vzkg), 8 different lawsuits have been filed against Meta in the last week, the parent company of social media platforms including Facebook, Instagram, and WhatsApp. This is nothing new, and such lawsuits get filed every few months. Is this one any different?

## The Cases

On their own merits, each lawsuit is very, very weak. They claim that the social media platforms have led to a bevy of health concerns, mental and physical. While it may be the case that social media does indeed lead to problems in these areas, it’s not clear why Meta should be held accountable.

For instance, nobody is suing alcohol companies for distilling what is essentially neurotoxins that feel good while they slowly kill you. The link between frequent alcohol abuse and long term health effects is clear.

However, the health consequences are widely understood. If somebody chooses willingly to partake in something everybody knows has negative consequences, the company who sells that thing cannot be sued for your decision. The same must be the case for social media.

## The Discourse

Whether or not these cases actually come to mean anything - and they almost certainly will not - the fact that these appear so commonly points to a conversation that’s being had in society. To quote Tom Brokaw following the Challenger disaster, “We’ll all have to examine what it is that we want from this era of high technology.”

Social media comes with consequences. With unprecedented connectivity, we’re now more able than ever to replace real relationships with virtual ones. We hide in increasingly atomized, isolated islands, incapable of talking to each other the way we used to.

Every human being has a record of every thought they’ve ever deemed meaningful enough to post, every memory a picture has been snapped of, every scheduled meeting, every business letter sent. It’s all archived for all time.

This unprecedented state of affairs is one that people are increasingly unconvinced is the best way into an ever uncertain future.


Meta Hit with Lawsuits, do they have Teeth?


<amp-img src="/blog-content/june-2022/061422/faceswap.jpg" layout="responsive" width="2000" height="1333" alt="faceswap">
</amp-img>
<img src="/blog-content/june-2022/061422/faceswap.jpg" layout="responsive" width="2000" height="1333" alt="faceswap">
</img>

This article may seem a little late, but the issue of Deepfakes is still very relevant, and there’s a lot of misinformation spread around about what they are, how they work, and what they’re capable of.

In addition to providing an overview of the matter at hand, we’ll discuss the limits of the technology, and what threat it poses, if any.

## What are they?

In short, Deepfakes are pieces of media wherein another person’s face or body is superimposed onto a picture or video. While photoshop isn’t anything new, Deepfake technology puts a bit of a twist on the situation.

As opposed to more manual methods of photo manipulation that have existed since the start of photography, Deepfakes are far more dynamic and flexible. That’s because of a key distinction in how Deepfake technology works.

## How does it work?

Deepfakes employ machine learning techniques. These of course come with pros and cons.

Machine learning is very slow, takes an incredible amount of computing power, and doesn’t result in perfect outcomes every time. For example, the youtuber Tom Scott [made a video in 2018](https://youtu.be/OCLaeBAkFAY?t=208) attempting to implement these techniques with his own machine to rather unimpressive results.

The pros; however, are massive. Unlike conventional methods of face swapping, Deepfakes promise to be dynamic and universally applicable. If you train the algorithm well at the start, you can put the desired face onto any target.

This is of course a very scary idea.

## The limits of the technology

Deepfakes are still able to be spotted with current technology and a watchful eye, but it’s getting increasingly difficult. Just last year, the [fake Tom Cruise TikTok account](https://www.tiktok.com/@deeptomcruise/video/7082855268043836678) took the world by storm, gaining millions of views.

That isn’t to say that you can’t tell at all, but it does raise a question - if somebody wanted to lie using this technology, could they?

Well, not everybody.

It’s still the case that this is very hardware intensive, and isn’t likely to result in a good outcome unless you know what it is that you’re doing. Any amateur with a GPU can not crack open some free software and start cranking out videos of Biden declaring war on China.

That’s not to say that you shouldn't be vigilant and use common sense when analyzing sensational videos of people saying things, just that some of the alarmism of a truly post truth world where it’s impossible to tell what’s real and fake is still a little ways off.


What are Deepfakes?


<amp-img src="/blog-content/june-2022/061322/security-course.jpg" layout="responsive" width="2000" height="1333" alt="security-course">
</amp-img>
<img src="/blog-content/june-2022/061322/security-course.jpg" layout="responsive" width="2000" height="1333" alt="security-course">
</img>

It is no secret that we at Redact value a person’s online security. Whether it be from our own product (which you can download for free here), or from this very blog, we work to keep not just our own users, but the overall public informed about general information and potential threats to that security. So, when a unique opportunity to enrich our audience’s knowledge presents itself, it is an understatement to say we are eager to share it- and a certain information security company has been generous enough to bring such an opportunity.

Offensive Security (OffSec), the creators of Kali Linux, [recently announced](https://www.offensive-security.com/offsec/offsec-live/) that they would be livestreaming a penetration test course using Kali Linux on the popular streaming platform, Twitch.

The best part about it? It’s entirely free!

## About the Course

Typically, this course has been only available through a paywall and is widely used as a preparation tool for the Offensive Security Certified Professional (OSCP) certification exam and was taught in-person. In the wake of the COVID-19 pandemic, however, the course had to transition to an online format.

As the creators themselves put it, “OffSec Live is our attempt to take what is great about OffSec Academy, and our learnings about successful student learning journeys, and make it available to all students…”

If you are eager to get a thorough review of this course, however, you can still purchase it and get specific, bonus perks during the Twitch livestream, such as being able to talk directly with mentors and instructors via Discord, as well as having access to unique exercises and lab machines.

## Like Online Security? Try Redact!

If you are interested in OffSec’s Kali Linux course, there’s a solid chance you’ll love Redact, too!

Redact provides users, whether they be grizzled online veterans or newcomers to the ominous world of the Internet, with a safe and easy-to-use platform to get rid of pesky old social media posts, direct messages, and even emails!

In addition to that, it’s all free! Every user has access to the same version of Redact with no payment required. So, what are you waiting for? Download Redact for free at [redact.dev/download](https://redact.dev/download) today!


OffSec is Teaching a Kali Linux Penetration Testing Course on Twitch


<amp-img src="/blog-content/june-2022/061222/google-chrome-malware.jpg" layout="responsive" width="2000" height="1333" alt="panic">
</amp-img>
<img src="/blog-content/june-2022/061222/google-chrome-malware.jpg" layout="responsive" width="2000" height="1333" alt="panic">
</img>

A very noticeable rise in a particular brand of Chrome malware has been noticed by security companies. The so-called ‘ChromeLoader malware’ has apparently made a significant return and we all need to be aware.

The ChromeLoader malware, officially called Choziosi Loader, is spread through infected downloads and has been spotted frequently in cracked game ISOs and social media posts with QR codes to pirate content.

The malware isn’t too destructive but it is incredibly annoying.

It hijacks your browser and redirects you to advertising websites. While relatively harmless, the nature of malware means it can be modified at any time to do more damage.

## Invasive Malvertising

The malware is particularly effective at leveraging PowerShell in Windows to inject itself as a Chrome addon.

However, another version has been found working on Mac computers, so nobody is safe right now.

The malware has been spotted inside cracked ISOs, cracks for games and in Twitter posts advertising cracked games. The posts include a QR code that takes you direct to the website to grab the file.

Once activated, the malware will install itself as a Chrome extension and will remove all traces of its installation, including the usual giveaway, the scheduled task within Windows.

This makes it very difficult to find without a malware scanner.

macOS is also being targeted with a version using the DMG disk image format. It will install as either a Chrome or Safari extension and redirect traffic.

## Removing malware from your system

We don’t judge, but if you download cracked or pirate content, you need to be careful on so many levels. This malware is one of many you’re susceptible to, so you need to be aware.

Use a malware scanner regularly and make sure to keep the scanner updated. Malwarebytes for example, has updated itself to track ChromeLoader malware.

We presume other malware scanners have done the same thing, but check, don’t assume.

Check Chrome for any extensions you don’t recognize and remove or disable them. Then perform a full malware scan.


Our cat diaries

Leaked Audio Reveals U.S. TikTok Data was Accessed from China • 2022-06-22

Microsoft Identifies Critical Android Vulnerabilities • 2022-06-21

How to Check if Someone Else is Using Your Facebook Account • 2022-06-19

This New Firefox Policy is Taking the World by Storm • 2022-06-16

Meta Hit with Lawsuits, do they have Teeth? • 2022-06-15

What are Deepfakes? • 2022-06-14

OffSec is Teaching a Kali Linux Penetration Testing Course on Twitch • 2022-06-13

Rise in ChromeLoader Malware Causes Concern • 2022-06-12