Kalakshar US

Microsoft has been taking a lot of hits over its Xbox Game Pass price hike and the overall lackluster offering of games. So to make up for it, they are offering a Call of Duty game for the first time on its virtual buffet. Unfortunately, it’s Call of Duty: Modern Warfare III, one of the lowest rated games in the series.

Calling the reviews for Modern Warfare III “mixed” would be generous. IGN’s Simon Cardy said its single-player campaign was “shallow,” “dull” and “the worst Call of Duty single-player campaign I’ve played.” Jump Dash Roll’s Derek Johnson wrote that its main campaign is “genuinely not worth playing” and its signature Zombies mode “isn’t quite as atrociously terrible as its single-player but that doesn’t mean it’s anything resembling something fun.”

Modern Warfare III won’t be the only Call of Duty game available for Xbox Game Pass subscribers. Xbox Game Pass will provide day one access to Call of Duty: Black Ops 6 in October. Of course, we don’t know how good the game will be but one imagines it’ll garner a bit more favor from critics compared to Modern Warfare III.

This article originally appeared on Engadget at https://www.engadget.com/a-call-of-duty-game-is-coming-to-xbox-game-pass-just-not-one-anyone-wants-175255224.html?src=rss 

Cybersecurity company Dragos has flagged malware that can attack industrial control systems (ICS), tricking them into malicious behavior like turning off the heat and hot water in the middle of winter. TechCrunch reports that’s precisely what the malware, dubbed FrostyGoop, did this January in Lviv, Ukraine, when residents in over 600 apartment buildings lost heat for two days amid freezing temperatures.

Dragos says FrostyGoop is only the ninth known malware designed to target industrial controllers. It’s also the first to specifically set its sights on Modbus, a widely deployed communications protocol invented in 1979. Modbus is frequently used in industrial environments like the one in Ukraine that FrostyGoop attacked in January.

Ukraine’s Cyber Security Situation Center (CSSC), the nation’s government agency tasked with digital safety, shared information about the attack with Dragos after discovering the malware in April of this year, months after the attack. The malicious code, written in Golang (The Go programming language designed by Google), directly interacts with industrial control systems over an open internet port (502).

The attackers likely gained access to Lviv’s industrial network in April 2023. Dragos says they did so by “exploiting an undetermined vulnerability in an externally facing Mikrotik router.” They then installed a remote access tool that voided the need to install the malware locally, which helped it avoid detection.

The attackers downgraded the controller firmware to a version lacking monitoring capabilities, helping to cover their tracks. Instead of trying to take down the systems altogether, the hackers caused the controllers to report inaccurate measurements — resulting in the loss of heat in the middle of a deep freeze.

Dragos has a longstanding policy of neutrality in cyberattacks, preferring to focus on education without assigning blame. However, it noted that the adversaries opened secure connections (using layer two tunneling protocol) to Moscow-based IP addresses.

“I think it’s very much a psychological effort here, facilitated through cyber means when kinetic perhaps here wasn’t the best choice,” Dragos researcher Mark “Magpie” Graham told TechCrunch. Lviv is in the western part of Ukraine, which would be much more difficult for Russia to hit than eastern cities.

Dragos warns that, given how ubiquitous the Modbus protocol is in industrial environments, FrostyGoop could be used to disrupt similar systems worldwide. The security company recommends continuous monitoring, noting that FrostyGoop evaded virus detection, underscoring the need for network monitoring to flag future threats before they strike. Specifically, Dragos advises ICS operators to use the SANS 5 Critical Controls for World-Class OT Cybersecurity, a security framework for operational environments.

This article originally appeared on Engadget at https://www.engadget.com/russia-linked-hackers-cut-heat-to-600-ukrainian-apartment-buildings-in-the-dead-of-winter-researchers-say-171414527.html?src=rss