editor – Earlybirds Invest https://earlybirdsinvest.com Latest Crypto News Sun, 31 Aug 2025 04:47:57 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.7 https://i0.wp.com/earlybirdsinvest.com/wp-content/uploads/2024/12/cropped-New-Project-2024-12-17T235703.455.png?fit=32%2C32&ssl=1 editor – Earlybirds Invest https://earlybirdsinvest.com 32 32 240146708 TamperedChef infostealer delivered through fraudulent PDF Editor https://earlybirdsinvest.com/tamperedchef-infostealer-delivered-through-fraudulent-pdf-editor/ https://earlybirdsinvest.com/tamperedchef-infostealer-delivered-through-fraudulent-pdf-editor/#respond Sun, 31 Aug 2025 04:47:57 +0000 https://earlybirdsinvest.com/tamperedchef-infostealer-delivered-through-fraudulent-pdf-editor/

TamperedChef infostealer delivered through fraudulent PDF Editor

Threat actors have been using multiple websites promoted through Google ads to distribute a convincing PDF editing app that delivers an info-stealing malware called TamperedChef.

The campaign is part of a larger operation with multiple apps that can download each other, some of them tricking users into enrolling their system into residential proxies.

More than 50 domains have been identified to host deceiving apps signed with fraudulent certificates issued by at least four different companies.

The campaign appears to be widespread and well-orchestrated as the operators waited for the ads to run their course before activating the malicious components in the applications, researchers say.

Full update delivers infostealer

A technical analysis from cybersecurity services company Truesec describes the process of TamperedChef infostealer being delivered to a user’s system.

The researchers discovered that the malware was delivered through multiple websites that promoted a free tool called AppSuite PDF Editor.

Based on internet records, the investigators determined that the campaign started on June 26, when many of the websites involved were either registered or started to advertise AppSuite PDF Editor.

However, the researchers found that the malicious app had been verified through the VirusTotal malware scanning services on May 15th.

It appears that the program behaved normally until August 21st, when it received an update that activated malicious capabilities built to collect sensitive data like credentials and web cookies.

According to Truesec, TamperedChef infostealer is delivered with the “-fullupdate” argument for the PDF editor’s executable.

The malware checks for various security agents on the host. It also queries the databases of installed web browsers using the DPAPI (Data Protection Application Programming Interface) –  a component in Windows that encrypts sensitive data.

TamperedChef infostealer checking for installed security agents
TamperedChef infostealer checking for installed security agents
source: Truesec

Digging deeper for the distribution method, Truesec researchers found evidence suggesting that the threat actor spreading TamperedChef within AppSuites PDF Editor relied on Google advertising to promote the malicious program.

“Truesec has observed at least 5 different google campaign IDs which suggests a widespread campaign” – Truesec

The threat actor likely had a strategy to maximize the number of downloads before activating the malicious component in AppSuites PDF Editor, as they delivered the infostealer just four days before the typical expiration period of 60 days for a Google ad campaign.

Looking further into AppSuites PDF Editor, the researchers found that different versions of the program were signed by certificates “from at least four companies,” among them ECHO Infini SDN BHD, GLINT By J SDN. BHD, and SUMMIT NEXUS Holdings LLC, BHD.

Joining a residential proxy

Truesec found that the operator of this campaign has been active since at least August 2024 and promoted other tools, including OneStart and Epibrowser browsers.

It is worth noting that OneStart is usually flagged as a potentially unwanted program (PUP), which is typically the term for adware.

However, researchers at managed detection and response company Expel also investigated incidents involving AppSuites PDF Editor, ManualFinder, and OneStart, all “dropping highly suspicious files, executing unexpected commands, and turning hosts into residential proxies,” which is closer to malware-like behavior.

They found that OneStart can download AppSuite-PDF (signed by an ECHO INFINI SDN. BHD certificate), which can fetch  PDF Editor.

“The initial downloads for OneStart, AppSuite-PDF, and PDF Editor are being distributed by a large ad campaign advertising PDFs and PDF editors. These ads direct users to one of many websites offering downloads of AppSuite-PDF, PDF Editor, and OneStart,” Expel.

The code-signing certificates used in this campaign have already been revoked, but the risk is still present for current installations.

In some instances of PDF Editor, the app would show users a message asking for permission to use their device as a residential proxy in return for using the tool for free.

The researchers note that the proxy network provider may be a legitimate entity not involved in the campaign and that the operator of PDF Editor is capitalizing as affiliates.

It appears that whoever is behind PDF Editor is trying to maximize their profit at the expense of users worldwide.

Even if the programs in this campaign are considered PUPs, their capabilities are typical of malware and should be treated as such.

The researchers warn that the operation they uncovered involves more apps, some of them not yet weaponized, capable of distributing malware or suspicious files, or executing commands surreptitiously on the system.

Both reports from Truesec and Expel [1, 2] include a large set of indicators of compromise (IoCs) that could help defenders protect users and assets from getting infected.

Picus Blue Report 2025

46% of environments had passwords cracked, nearly doubling from 25% last year.

Get the Picus Blue Report 2025 now for a comprehensive look at more findings on prevention, detection, and data exfiltration trends.

]]>
https://earlybirdsinvest.com/tamperedchef-infostealer-delivered-through-fraudulent-pdf-editor/feed/ 0 55991
Replace your Adobe Acrobat subscription with this PDF editor that lasts for life https://earlybirdsinvest.com/replace-your-adobe-acrobat-subscription-with-this-pdf-editor-that-lasts-for-life/ https://earlybirdsinvest.com/replace-your-adobe-acrobat-subscription-with-this-pdf-editor-that-lasts-for-life/#respond Sun, 17 Aug 2025 12:55:24 +0000 https://earlybirdsinvest.com/replace-your-adobe-acrobat-subscription-with-this-pdf-editor-that-lasts-for-life/

]]>
https://earlybirdsinvest.com/replace-your-adobe-acrobat-subscription-with-this-pdf-editor-that-lasts-for-life/feed/ 0 53661
I tried Canva’s new photo editor, but can it replace my favorite app? https://earlybirdsinvest.com/i-tried-canvas-new-photo-editor-but-can-it-replace-my-favorite-app/ https://earlybirdsinvest.com/i-tried-canvas-new-photo-editor-but-can-it-replace-my-favorite-app/#respond Sun, 15 Jun 2025 01:55:08 +0000 https://earlybirdsinvest.com/i-tried-canvas-new-photo-editor-but-can-it-replace-my-favorite-app/
the photo editor feature selected in the canva smartphone app

Megan Ellis / Android Authority

I’ve been using Canva for years, mostly for simple designs. So when I saw that Canva had rolled out a new photo editing tool, which is more advanced that the simple tweaks you can make in a design, I was interested in trying it out.

I stumbled across a useful feature that’s not in my favorite photo-editing app Snapseed, so I wondered if Canva could actually replace the free app’s place in my workflow. I tried out the Canva app’s new tool to see just how effective it would be at replacing Snapseed, and whether many of its features were locked behind a paywall.

What is the most important feature in a photo editor?

30 votes

My favorite Canva photo editor feature is one Snapseed doesn’t have

a smartphone showing the Canva app's selection of the background of an image

Megan Ellis / Android Authority

I don’t bother with generative AI on my smartphone, but there is one AI feature I enjoy when it comes to image editing: background selection and removal. I love Snapseed and its selective editing tools, but I sometimes wish I could just select the background or foreground with one click.

When I tried out Canva’s new photo editor for the first time, I was excited to find that it had these automatic selection tools. Not only were they available for free, but they were also really accurate. Snapseed doesn’t have this type of automatic selection, while I’ve found Google Photos’ editing tools to not be as accurate as I would like when blurring the background.

When I tried out Canva’s new photo editor for the first time, I was excited to find that it had auto-select tools.

I’ve found that I’ve had to edit photos less in general as camera smartphones have advanced, especially now that I’m trying out the vivo X200 Pro. But when it comes to photos that I use for the websites I work for, I sometimes wish the background would be more out-of-focus. The X200 Pro is pretty capable at adjusting the focus to hone in on the subject of the photo, but since I’m usually handling two phones at the same time for an image, I sometimes struggle to get the camera to focus correctly.

That’s what made me really interested in Canva’s photo editor and after trying it out, I was really impressed by the selection accuracy. Not only can I use it to reduce the sharpness of the background, but I can adjust other aspects like the contrast and saturation. This opens up a whole realm of creative possibilities. Snapseed does have a lens blur feature, but this applies more of a vignette and blur around the edges rather than making the foreground stand out from the background.

However, if you want to generate a new background or remove the background, you will need to subscribe to Canva’s premium plan.

Could Canva replicate the best Snapseed features?

editing a photo of a cat in the canva app

Megan Ellis / Android Authority

With my curiosity officially piqued, I decided to explore other features in Canva’s photo editor to see if it could excel in the same areas as Snapseed. Just like Snapseed, Canva allows you to edit a range of image attributes. This includes brightness, highlights, shadows, temperature, and sharpness.

Just like Snapseed, Canva allows you to edit a range of image attributes.

I prefer having these types of fine-tuned controls, since they’re simple enough for a beginner to get to grips with without being as overwhelming as curve editing. At the same time, Canva also has plenty of preset effects and filters that make editing a breeze for those who prefer one-tap editing.

That said, Canva does lack some of the more advanced features of Snapseed, like adjusting color curves. But this isn’t a feature that I use in Snapseed anyway, so its absence in Canva isn’t an issue. You can also do a color edit in Canva, which I think is a bit easier to use than adjusting a curve.

I also like that Canva has a brush editor, so you can specifically select areas that you want to fine-tune. I find this useful for selecting parts of an object to highlight, or reducing the presence of shadows.

Canva fails in one key area

duplicate images in the canva uploads folder

Megan Ellis / Android Authority

With everything that works in Canva’s favor, there’s a major caveat — since Canva is primarily used through the web platform, its mobile app isn’t as optimized it should be. Don’t get me wrong, Canva’s Android app has significantly improved over the years. There was a time I refused to use it, but this aversion isn’t as strong as it used to be.

That said, I still found the usability of the app to be lacking. Sometimes bugs would prevent my touch input from registering. Meanwhile, pressing the back button on my smartphone often exits the app rather than simply exiting a feature within the photo editor.

I found the usability of the app to be lacking.

Another thing I dislike about the app is that even if it has access to your camera roll, it will re-upload an image you select to edit. This meant that when I accidentally exited the app by pressing the back button, then selected the photo I wanted to edit, it would re-upload the photo again. I had to learn to go to my Projects tab, then the Uploads folder, to edit an image I had uploaded.

The editing workflow is a bit more intuitive in the Canva web app, but I would say that it still needs some improvements — such as making it much easier to access existing uploads.

Canva will be my go-to editor for PC

After trying Canva’s photo editor, I’ve decided to use it when editing photos on my PC. Since Snapseed doesn’t have a desktop version anymore, this means that it’s not replacing the app’s place in my workflow, but rather complementing it.

It works out well for me because when I adjust the images I use for websites, I prefer to edit them on my PC rather than my smartphone. But Canva’s mobile app quirks means that I won’t be using it to edit my social media photos on my smartphone. For that purpose, I’ll be sticking with Snapseed, which I still consider one of the best photo editor apps for Android.

]]>
https://earlybirdsinvest.com/i-tried-canvas-new-photo-editor-but-can-it-replace-my-favorite-app/feed/ 0 42074
Adobe Acrobat’s subscription model just got roasted by this lifetime PDF editor https://earlybirdsinvest.com/adobe-acrobats-subscription-model-just-got-roasted-by-this-lifetime-pdf-editor/ https://earlybirdsinvest.com/adobe-acrobats-subscription-model-just-got-roasted-by-this-lifetime-pdf-editor/#respond Sun, 18 May 2025 00:10:08 +0000 https://earlybirdsinvest.com/adobe-acrobats-subscription-model-just-got-roasted-by-this-lifetime-pdf-editor/

]]>
https://earlybirdsinvest.com/adobe-acrobats-subscription-model-just-got-roasted-by-this-lifetime-pdf-editor/feed/ 0 36833
Your Adobe Acrobat subscription is so yesterday—own this PDF editor instead https://earlybirdsinvest.com/your-adobe-acrobat-subscription-is-so-yesterday-own-this-pdf-editor-instead/ https://earlybirdsinvest.com/your-adobe-acrobat-subscription-is-so-yesterday-own-this-pdf-editor-instead/#respond Tue, 11 Feb 2025 10:27:49 +0000 https://earlybirdsinvest.com/your-adobe-acrobat-subscription-is-so-yesterday-own-this-pdf-editor-instead/

]]>
https://earlybirdsinvest.com/your-adobe-acrobat-subscription-is-so-yesterday-own-this-pdf-editor-instead/feed/ 0 18791