Globe Telecom website hacked by Bloodsec International

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdER84IwqbOWGNezv-qhKI-Oe9A0Tf54vlFbiLo5xKklzNU22hCg4GIWqAYHUe1dnOCRZD4-UJ-Jd7_nrZ49jzNm__PAn57AcqkBs1wSD03g2DrTP0qWxCu1ceyn9ya6i_ZAjve4K6qjAp/s1600/Globe+Telecom+website+hacked+by+Bloodsec+International.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Globe Telecom website hacked by Bloodsec International" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdER84IwqbOWGNezv-qhKI-Oe9A0Tf54vlFbiLo5xKklzNU22hCg4GIWqAYHUe1dnOCRZD4-UJ-Jd7_nrZ49jzNm__PAn57AcqkBs1wSD03g2DrTP0qWxCu1ceyn9ya6i_ZAjve4K6qjAp/s1600/Globe+Telecom+website+hacked+by+Bloodsec+International.jpg" title="" /></a></div> <br /> <br /> Globe Telecom is one of the most popular Internet Service Provider (ISP) in Philippines.Hacker from the team BloodSec International defaced  4 subdomains of Globe telecom website.<br /> <br /> Hacker was unhappy with the service quality provided by Globe Telecom.Following message was written on the deface page.<br /> <blockquote class="tr_bq"> “Dear GLOBE, Your service on your internet connection is not worthy what we pay for. Do something or expect the consequence. This is just the beginning. Expect Us!.All your Data Belongs to Us Now”. </blockquote> Globe confirmed that its 4 subdomains were defaced.These subdomains were hosted on third party hosting provider.<br /> <div> <ul style="text-align: left;"> <li>mybusiness.globe.com.ph</li> <li>payroll.globe-csme.com</li> <li>duointernational.globe-csme.com</li> <li>update.globe-csme.com</li> </ul> Globe Telecom said that these subdomains were used for promotional and advertising campaigns and is not connected with customers data.<br /> <blockquote class="tr_bq"> “The server where the four websites are hosted are managed by a third party partner and outside of the Globe Corporate and Enterprise Network, where appropriate preventive and detective controls are in place. The attack is isolated on their end and was brought about by an unpatched vulnerability which is currently being addressed. Rest assured, our security incident response teams are currently investigating and conducting forensics in various areas to make sure that the incident is properly managed.” said Globe Chief Information Security Officer Anton Bonifacio.</blockquote> Globe Telecom restored the website and currently it is showing maintenance page.<br /> <div class="separator" style="clear: both; text-align: center;"> </div> </div> </div> </div>

Globe Telecom website hacked by Bloodsec International

Globe Telecom is one of the most popular Internet Service Provider (ISP) in Philippines.Hacker from the team BloodSec International ...

Read more »

Firing Range- Open Source Vulnerability Scanner

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHaDRXUNiHi8zYNMtGNeBnP5Gz-ag-ML26RmUBgQqkheUWx8QhWzYOHFJj9av5OnpKEgD8qBLmyXCvfxXqJdeGkInsuNn70F_VQnaVVBvz5zQjbJYjkBlh-n8stGRu2OoibVmIST-CUNiL/s1600/Firing+Range-+Open+Source+Vulnerability+Scanner.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Firing Range- Open Source Vulnerability Scanner" border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHaDRXUNiHi8zYNMtGNeBnP5Gz-ag-ML26RmUBgQqkheUWx8QhWzYOHFJj9av5OnpKEgD8qBLmyXCvfxXqJdeGkInsuNn70F_VQnaVVBvz5zQjbJYjkBlh-n8stGRu2OoibVmIST-CUNiL/s1600/Firing+Range-+Open+Source+Vulnerability+Scanner.jpg" title="" width="400" /></a></div> <br /> <br /> Google released a new security testing tool called <b>Firing Range </b>which help developers to evaluate  Cross-site Scripting (XSS) and other vulnerabilities that are seen most frequently in web apps.</div> <br /> According to Claudio Criscione, Security Engineer at Google,70 percent of bugs in Google Bug Bounty Programme are cross-site scripting.<br /> <br /> Firing Range also scans for vulnerabilities like reverse clickjacking,flash injection and cross-origin resource sharing vulnerabilities.<br /> <br /> This tool was made by Google with the help of security researchers at Politecnico di Milano in an effort to build a test ground for automated scanners.<br /> <br /> Firing Range is a Java application built on Google App Engine and contains a wide range of XSS and, to a lesser degree, other web vulnerabilities.<br /> <br /> At the <a href="https://www.youtube.com/watch?v=rd5TZKRg-lc"><span style="color: red;">Google Testing Automation Conference (GTAC)</span></a> last year, Criscione said that detecting XSS vulnerabilities by hand “at Google scale” is like drinking the ocean. <br /> <blockquote class="tr_bq"> "Our testbed doesn’t try to emulate a real application, nor exercise the crawling capabilities of a scanner: it’s a collection of unique bug patterns drawn from vulnerabilities that we have seen in the wild, aimed at verifying the detection capabilities of security tools,"said Claudio Criscione.</blockquote> The scanner is built entirely on Google technologies like Chrome and Google Cloud Platform, with support for the latest HTML5 features, a low false positive rate and ease of use in mind. <br /> <br /> The open source tool is available at <a href="https://github.com/google/firing-range"><span style="color: red;">GitHub</span></a>, while deployed version is available at <a href="https://public-firing-range.appspot.com/"><span style="color: red;">Google App Engine</span></a>.</div>

Firing Range- Open Source Vulnerability Scanner

Google released a new security testing tool called Firing Range which help developers to evaluate  Cross-site Scripting (XSS) and ot...

Read more »

Let's Encrypt To Provides Free SSL Certificate

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0BgqaJ4gxz4F52IrTt2l6amvS9vrphUYc-LBiIBNNDvcyv3bKdkg4pECrqli7JEtGHjvxJpSv4vi63Z4LRa7LoWlcxX5vxum-xIVxega0koMhPm-gAGM9gHN0zmz22U3AsjeZrdJvmp_a/s1600/Let's%2BEncrypt%2BTo%2BProvides%2BFree%2BSSL%2BCertificate.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Let's Encrypt To Provides Free SSL Certificate" border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0BgqaJ4gxz4F52IrTt2l6amvS9vrphUYc-LBiIBNNDvcyv3bKdkg4pECrqli7JEtGHjvxJpSv4vi63Z4LRa7LoWlcxX5vxum-xIVxega0koMhPm-gAGM9gHN0zmz22U3AsjeZrdJvmp_a/s1600/Let's%2BEncrypt%2BTo%2BProvides%2BFree%2BSSL%2BCertificate.png" title="" width="400" /></a></div> <br /> <br /> The non-profit company Electronic Frontier Foundation (EFF) has partnered with Mozilla,Akamai,IdenTrust and Cisco to offer free SSL certificate for webmasters at the beginning of 2015.</div> Until now,switching from HTTP to HTTPS is quite a complicated and expensive process.After the launch of new Certificate Authority (CA) called Let's Encrypt,it will be more easier for webmasters to move from HTTP to HTTPS.<br /> <blockquote class="tr_bq"> "Let’s Encrypt is a new free certificate authority, built on a foundation of cooperation and openness, that lets everyone be up and running with basic server certificates for their domains through a simple one-click process," written on official website. "For many server operators, getting even a basic server certificate is just too much of a hassle. The application process can be confusing. It usually costs money. It’s tricky to install correctly. It’s a pain to update."</blockquote> Web Developer who want to test services can go to <a href="https://github.com/letsencrypt/lets-encrypt-preview"><span style="color: red;">Github</span></a> where its code is available publicly.<br /> <blockquote class="tr_bq"> "This project should boost everyday data protection for almost everyone who uses the Internet," EFF Technology Projects Director Peter Eckersley said in a statement.</blockquote> There is developer preview of Let's Encrypt just have a look.<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Gas_sSB-5SU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div> <br /></div>

Let's Encrypt To Provides Free SSL Certificate

The non-profit company Electronic Frontier Foundation (EFF) has partnered with Mozilla,Akamai,IdenTrust and Cisco to offer free SSL ...

Read more »

Tor users can be easily de-anonymize

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNeqid-mJKNs6jCuEbeNRdFuF_StTdefhdt9oeuCEejSi7xTlPMCouinfCFPfsQl7wSuIuATxHU7HIOw3xzgezQHwNvwbuQm7fajnn5r-C1hk4Cs224PJpr-CrkQzs0rLyY4tRIo3gAsm_/s1600/Tor+users+can+be+easily+de-anonymize.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Tor users can be easily de-anonymize" border="0" height="299" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNeqid-mJKNs6jCuEbeNRdFuF_StTdefhdt9oeuCEejSi7xTlPMCouinfCFPfsQl7wSuIuATxHU7HIOw3xzgezQHwNvwbuQm7fajnn5r-C1hk4Cs224PJpr-CrkQzs0rLyY4tRIo3gAsm_/s1600/Tor+users+can+be+easily+de-anonymize.jpg" title="" width="400" /></a></div> <br /> <br /> According to new report researchers found a way by which we can get real identity of Tor user by exploiting the traffic analysis software <b>Netflow</b> that Cisco has built in its router protocols.<br /> <br /> The research was conducted by Professor Sambuddho Chakravary,formal researcher at Columbia University's Network Security Lab and currently he is researching about Network Anonymity and Privacy at Indraprastha Institute of Information Technology,Delhi.</div> <br /> <br /> Chakravarty used a technique,in order to determine the tor relays which involved a modified public Tor server running on Linux, accessed by the victim client, and modified Tor node that can form one-hop circuits with arbitrary legitimate nodes. <br /> <blockquote class="tr_bq"> "The server modulates the data being sent back to the client, while the corrupt Tor node is used to measure delay between itself and Tor nodes," researchers wrote in PDF. "The correlation between the perturbations in the traffic exchanged with a Tor node, and the server stream helped identify the relays involved in a particular circuit."</blockquote> According to the research, to carry out large-scale traffic analysis attacks in the Tor environment one would not necessarily need the resources of a nation state, even a single AS may observe a large fraction of entry and exit node traffic, as stated in the paper – a single AS (Autonomous System) could monitor more than 39% of randomly-generated Tor circuits. <br /> <blockquote class="tr_bq"> It is not even essential to be a global adversary to launch such traffic analysis attacks," Chakravarty wrote. "A powerful, yet non- global adversary could use traffic analysis methods […] to determine the various relays participating in a Tor circuit and directly monitor the traffic entering the entry node of the victim connection."</blockquote> The technique depends on injecting a repeating traffic pattern into the TCP connection that it observes as originating from the target exit node, and then correlating the server’s exit traffic for the Tor clients, as derived from the router’s flow records, to identify Tor client. <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="http://4.bp.blogspot.com/-6FHK9hoJy8I/VGt6ftbhGrI/AAAAAAAADoU/GOj5HxfvZ9w/s1600/figure.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="350" src="http://4.bp.blogspot.com/-6FHK9hoJy8I/VGt6ftbhGrI/AAAAAAAADoU/GOj5HxfvZ9w/s1600/figure.png" width="400" /></a></div> <br /> Tor is vulnerable to this kind of traffic analysis because it is designed as low-latency anonymous communication networks.<br /> <blockquote class="tr_bq"> "To achieve acceptable quality of service, [Tor attempts] to preserve packet interarrival characteristics, such as inter-packet delay. Consequently, a powerful adversary can mount traffic analysis attacks by observing similar traffic patterns at various points of the network, linking together otherwise unrelated network connections," Chakravarty explains.</blockquote> This research does not need large scale resources.But this is good for law enforcement to stop illegal activities hiding behind the Tor network.<br /> <br /> However,one of the Tor Project member 'Arma' said they are already aware of this network analysis attack.<br /> <br /> <blockquote class="tr_bq"> "It's great to see more research on traffic correlation attacks, especially on attacks that don't need to see the whole flow on each side. But it's also important to realise that traffic correlation attacks are not a new area."said Arma on a blog post.</blockquote> <blockquote class="tr_bq"> "The discussion of false positives is key to this new paper too: Sambuddho's paper mentions a false positive rate of 6%. That sounds like it means if you see a traffic flow at one side of the Tor network, and you have a set of 100000 flows on the other side and you're trying to find the match, then 6000 of those flows will look like a match. It's easy to see how at scale, this "base rate fallacy" problem could make the attack effectively useless."said Arma. </blockquote> </div>

Tor users can be easily de-anonymize

According to new report researchers found a way by which we can get real identity of Tor user by exploiting the traffic analysis sof...

Read more »

OnionDuke APT Malware through Tor Nodes

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU7CDAYbSZGM_hEBaBiXrwFZ1n-i7GrVC1H63nOpBkVqmt85tsHeyAIc8JHDe8D8DiQHeTVItnGQ2-cFd0xCIdRp83W8HSdR0MYdNRVadiBo1R1gSUqrj9ZlveaGB73OIJPhzV9_1ckLoe/s1600/onionduke-17112014-big.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="OnionDuke APT Malware through Tor Nodes" border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU7CDAYbSZGM_hEBaBiXrwFZ1n-i7GrVC1H63nOpBkVqmt85tsHeyAIc8JHDe8D8DiQHeTVItnGQ2-cFd0xCIdRp83W8HSdR0MYdNRVadiBo1R1gSUqrj9ZlveaGB73OIJPhzV9_1ckLoe/s1600/onionduke-17112014-big.jpg" title="" width="400" /></a></div> <br /> Security Researchers of Leviathan Security Group discovered a malicious Tor exit node that wraps Windows executable files inside a second, malicious Windows executable.When Artturi Lehtiö of F-secure made a deep research he found that the exit node was actually linked to the notorious Russian APT family MiniDuke.</div> <br /> MiniDuke which previously infected government agencies and organisation in more than 20 countries through a modified PDF email attachment. MiniDuke malware is written in assembly language and usually it is very small in size.<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> The rogue Russian exit node identified by Pitts was banned from the Tor network, but the new research carried out by F-Secure has revealed that the malicious Tor exit node is specifically being used to plant a new variant of the MiniDuke advanced persistent threat (APT) malware which the researcher has dubbed 'OnionDuke'. <br /> <br /> However OnionDuke is completely different malware family from MiniDuke.The relation was found beacuse both seemed to use the same Command and Control (C&C) chain. <br /> <blockquote class="tr_bq"> “This strongly suggests that although OnionDuke and MiniDuke are two separate families of malware, the actors behind them are connected through the use of shared infrastructure,” F-Secure researchers said in a blog post.</blockquote> Malware has the ability to steal login credentials from the victim machine and components dedicated to gathering further information on the compromised system like the presence of antivirus software or a firewall.<br /> <blockquote class="tr_bq"> During our research, we have also uncovered strong evidence suggesting that OnionDuke has been used in targeted attacks against European government agencies, although we have so far been unable to identify the infection vector(s). Interestingly, this would suggest two very different targeting strategies. On one hand is the "shooting a fly with a cannon" mass-infection strategy through modified binaries and, on the other, the more surgical targeting traditionally associated with APT operations.</blockquote> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> According to security researchers when victim attempts to download an executable via the malicious Tor exit node, what they actually receive is an executable "wrapper" that embeds both the original executable and a second, malicious executable.<br /> <br /> <blockquote class="tr_bq"> Upon execution, the wrapper will proceed to write to disk and execute the original executable, thereby tricking the user into believing that everything went fine. However, the wrapper will also write to disk and execute the second executable.</blockquote> Those who use Tor anonymity network and download executable from an HTTPS-protected server and those using a virtual private network were not affected by the malware. </div>

OnionDuke APT Malware through Tor Nodes

Security Researchers of Leviathan Security Group discovered a malicious Tor exit node that wraps Windows executable files inside a s...

Read more »

BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgcSpRr24DkSl1Qc24axouE8FiGp9RTvJoczVGA_N6rgNUSe5IjH1j4r0x9ykdzy8eb5PR4-0qLJ6Z5sjQIZ2xJTnd-9UYuuU7mpX_cVngIIhtv6KUyhVuCr6q2hDNwGB3IjEp3A4MEdvv/s1600/BASHLITE+Malware+leverages+ShellShock+to+Hijack+device+Running+BusyBox.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox" border="0" height="236" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgcSpRr24DkSl1Qc24axouE8FiGp9RTvJoczVGA_N6rgNUSe5IjH1j4r0x9ykdzy8eb5PR4-0qLJ6Z5sjQIZ2xJTnd-9UYuuU7mpX_cVngIIhtv6KUyhVuCr6q2hDNwGB3IjEp3A4MEdvv/s1600/BASHLITE+Malware+leverages+ShellShock+to+Hijack+device+Running+BusyBox.jpg" title="" width="400" /></a></div> <br /> <br /> A new variant of  BASHLITE malware targeting devices running on BusyBox  was spotted by security researcher at Trend Micro shortly after the public disclosure of the Shellshock vulnerability.<br /> <br /> <br /> The malware detected as <b>ELF_BASHLITE.A (ELF_FLODDER.W) </b>when executed on victim's machine it scans the network for devices/machines running on BusyBox,and attempts to access them using a predefined list of usernames and passwords.The list of usernames includes,,'root','admin' and 'support' and list of passwords include,'root','admin','12345','pass','password','support' and '123456' and so on.Once connection is established,it runs the command to download and run bin.sh and bin2.sh scripts to gain control over the Busybox system.Therefore,this new version of Bashlite is designed not only to identify systems running BusyBox, but to also hijack them.<br /> <br /> <blockquote class="tr_bq"> "Remote attackers can possibly maximize their control on affected devices by deploying other components or malicious software into the system depending on their motive,"said threat response engineer Rhena Inocencio (Trend Micro) "As such, a remote attacker can issue commands or download other files on the devices thus compromising its security." </blockquote> Trend Micro advised users to change the default usernames and passwords and disable remote shell if possible to these devices.<br /> <br /> Bashlite malware includes the payload of the Shellshock exploit code and threat actors have used this critical ShellShock bash command vulnerability (CVE-2014-6271) that have been used to build botnets from hijacked devices,used to launch Distributed Denial of Service (DDoS) attack. <br /> <br /> The ShellShock vulnerability was disclosed on September 24 and by September 30 security firms estimated that attacks using the exploit could top 1 billion, and more than 1000 organizations patched the ShellShock bug as fixes became available.</div>

BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox

A new variant of  BASHLITE malware targeting devices running on BusyBox  was spotted by security researcher at Trend Micro shortly af...

Read more »

Spam mails may infect your device with malware

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjo1MnZKGCndySftk750u2DJiBWmwiQD-XROrxPy5MC8oDvBPByoZ8SApHDPU7sWVhLJbT2SDhq0w_BXoVHqDyT3zivT3SwA0MOabZMRW2E5IUDIGrnnv_32rrpHselvd8TU5x2S3qc6wgQ/s1600/Spam+mails+may+infect+your+device+with+malware.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Spam mails may infect your device with malware " border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjo1MnZKGCndySftk750u2DJiBWmwiQD-XROrxPy5MC8oDvBPByoZ8SApHDPU7sWVhLJbT2SDhq0w_BXoVHqDyT3zivT3SwA0MOabZMRW2E5IUDIGrnnv_32rrpHselvd8TU5x2S3qc6wgQ/s1600/Spam+mails+may+infect+your+device+with+malware.jpg" title="" width="400" /></a></div> <br /> <br /> A hike in the volume of spammed messages that pretend to come for the messaging service Viber. Viber is a messaging app which is available for almost every platform that allows users to make free calls and send messages.The spam starts when victim receives a  voice mail.<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> If you click on the link using a pc,link redirects you to download a backdoor malware detected as <b>BKDR_KULUOZ.VLU</b>,once infected attacker can remotely access you system any time.</div> <br /> <br /> Mobile users sometimes redirects to a streaming site or registration site.For example,site covertly charges the credit card number users must give during registration.Some users were redirected to the site by clicking a "Flash Player" update advertisement.<br /> <br /> <br /> Android users sometimes redirected to Go launcher app on the play store.Redirections based on platform are not limited to official app stores.Android users who click the link were sometimes redirected to what appears to be a blank page. After checking the source code of the page, we found that it contains links that lead to a URL with an .APK file, detected as ANDROIDOS_PAWEN.HBT.<br /> <br /> This app contains links to various adult sites. In addition, it also monitors the user’s incoming and outgoing calls, taking note of any numbers and sending it to a URL hardcoded in the app. The purpose of these URLs is patently clear from their URLs:<br /> <br /> <ul style="text-align: left;"> <li>http://{malicious domain}/scripts/app_tracking_manager.php</li> <li>http://{malicious domain}/scripts/app_call_tracking_manager.php</li> </ul> <div> Apple users were redirected to a Chinese gaming app on the iTunes site.Both Golauncher and gaming app are not malicious. Sometimes users redirected to adult website.</div> <h3 style="text-align: left;"> Precautions</h3> <div> Messaging services are a common social engineering lure for attacks such as this one. Perhaps what makes this one more plausible than others is that Viber does have a desktop client. For users who receive the email, it wouldn’t be a far stretch for a recipient to assume that the voice mail exists.We advise users to be cautious when opening emails. Emails can be easily spoofed by spammers and other cybercrooks. Clicking links in emails should be avoided as much as possible. It’s far better for users to directly type the URL of the site on the address bar than rely on the embedded link.</div> </div>

Spam mails may infect your device with malware

A hike in the volume of spammed messages that pretend to come for the messaging service Viber. Viber is a messaging app which is a...

Read more »

US State Department Hacked

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiM31YOtNml4lBXTcUUQ71gq2_ZjLU3Vcs20wYIRo7jCdgfTims7tXdzf1KGnzuWGF72XDdZ9PuRWHIl4oF70DBiGQtTLp2JSizwIz-8cuOdOZ3MBpu-BYuBtifPXW6MKQVOtk1zrINBXOT/s1600/US+State+Department+Hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="US State Department Hacked" border="0" height="203" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiM31YOtNml4lBXTcUUQ71gq2_ZjLU3Vcs20wYIRo7jCdgfTims7tXdzf1KGnzuWGF72XDdZ9PuRWHIl4oF70DBiGQtTLp2JSizwIz-8cuOdOZ3MBpu-BYuBtifPXW6MKQVOtk1zrINBXOT/s1600/US+State+Department+Hacked.jpg" title="" width="320" /></a></div> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> <br /> According to a new report US State Department was hacked at the same time when hackers targeted <a href="http://www.trickbug.com/2014/10/white-house-computers-breached-by-hackers.html"><span style="color: red;">unclassified White House computers</span></a> but it was noticed last week. The state department has taken the unprecedented step of shutting down its entire unclassified email system as technicians repair possible damage from a hacker attack.</div> <div style="float: left; padding-right: 10px;"> <br /> A senior department official said on Sunday that "activity of concern" was detected in the system around the same time as a previously reported incident that targeted the White House computer network.However,there was no breach in any of the classified areas. <br /> <br /> <br /> The official said the state department shut down the email late on Friday as part of a scheduled outage of some of its internet-linked systems to make security improvements to its main unclassified computer network. The official was not authorized to speak about the matter by name and spoke on condition of anonymity. <br /> <br /> <br /> The official said the department expects that all of its systems will be operating as normal in the near future, but would not discuss who might be responsible for the breach. Earlier attacks have been blamed on Russian or Chinese attackers, although their origin has never been publicly confirmed. <br /> <br /> The State Department is expected to address the shutdown once the security improvements have been completed on Monday or Tuesday. </div> </div>

US State Department Hacked

According to a new report US State Department was hacked at the same time when hackers targeted unclassified White House computer...

Read more »

Anonymous launches #OpKKK and #HoodsOff

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBHiW1BuYKvF0BplZNg5rmREcTXtqiroAPAPjxxVTETn3sYCvqmf7AJJYjgYHVnYBi7sXV97ACtFvi203KWgcnlRviotU3VkI2qH37aCiz_6806-BTQqnDmEYq8NpuD2N7Wa1iA3DizSx1/s1600/Anonymous+launches+%23OpKKK+and+%23HoodsOff.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Anonymous launches #OpKKK and #HoodsOff" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBHiW1BuYKvF0BplZNg5rmREcTXtqiroAPAPjxxVTETn3sYCvqmf7AJJYjgYHVnYBi7sXV97ACtFvi203KWgcnlRviotU3VkI2qH37aCiz_6806-BTQqnDmEYq8NpuD2N7Wa1iA3DizSx1/s1600/Anonymous+launches+%23OpKKK+and+%23HoodsOff.png" title="" width="400" /></a></div> <br /> <br /> After shooting of Mike Brown communal tension have occurred in certain parts of America.Taking advantage of this, the Klu Klux Klan better known as the KKK have risen back with the white supremist agenda.The hacktivist collective Anonymous has targeted the infamous Ku Klux Klan.</div> <br /> Anonymous claims to have unmasked the top leadership of the Klu Klux Klan after the KKK threatened violence against the Ferguson protesters. <br /> <br /> Anonymous called its members to strike down on KKK groups through #OpKKK and #HoodsOff. While announcing the launch of #OpKKK and #HoodsOff,hackers said they will launch DDoS attacks to take down KKK website. <br /> <center> <blockquote class="twitter-tweet" lang="en-gb"> <a href="https://twitter.com/hashtag/OpKKK?src=hash">#OpKKK</a> <a href="https://twitter.com/hashtag/HoodsOff?src=hash">#HoodsOff</a> This is a call to all <a href="https://twitter.com/hashtag/Anonymous?src=hash">#Anonymous</a> members. DDos all KKK sites ! The time for the Cyber War has come. <a href="http://t.co/7Hm4SkcU0b">pic.twitter.com/7Hm4SkcU0b</a><br /> — #OpKKK (@OperationKKK) <a href="https://twitter.com/OperationKKK/status/533804763553357824">November 16, 2014</a></blockquote> <script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script> </center> <h3 style="text-align: left;"> First website targeted by Anonymous hackers.</h3> <center> <blockquote class="twitter-tweet" lang="en-gb"> <a href="https://twitter.com/hashtag/Anonymous?src=hash">#Anonymous</a> <a href="https://twitter.com/hashtag/OpKKK?src=hash">#OpKKK</a> <a href="https://twitter.com/hashtag/HoodsOff?src=hash">#HoodsOff</a> Cyber War - Day 1 Target #1: <a href="http://t.co/VOC8eu1iep">http://t.co/VOC8eu1iep</a> IP: 72.167.191.69 FIRE<br /> — #OpKKK (@OperationKKK) <a href="https://twitter.com/OperationKKK/status/533809116859207681">November 16, 2014</a></blockquote> <script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script> </center> <div style="text-align: left;"> The shooting of Mike Brown On August 9,2014 in Ferguson,Missouri,a suburb of St. Louis. Michael Brown was 18 year black man who was fatally shot by Darren Wilson a white police officer.It was then this incident was  converted into racial war both physically and on cyber space.</div> <br /> <h3 style="text-align: left;"> Video given by Anonymous on the launch of #OpKKK and #HoodsOff .</h3> <br /> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/36085bv8ceY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div> <br /></div>

Anonymous launches #OpKKK and #HoodsOff

After shooting of Mike Brown communal tension have occurred in certain parts of America.Taking advantage of this, the Klu Klux Klan ...

Read more »

RedHack Hacks into Turkey Electricity Transmission Company

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkhIA6h257UzRlWLHkxLomfRLOT8Y6Y_P8j6Aa6bIH65CuxErAkTXYH_xU6mbz9wKFB6rN3NbLUjK9PXt7Aynn4IZO7MhIr3Ykd89hgn_KdjsRhiKE3LiTilxtedU4oCjexhyB_x8x_1qI/s1600/RedHack+Hacks+into+Turkey+Electricity+Transmission+Company.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="RedHack Hacks into Turkey Electricity Transmission Company" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkhIA6h257UzRlWLHkxLomfRLOT8Y6Y_P8j6Aa6bIH65CuxErAkTXYH_xU6mbz9wKFB6rN3NbLUjK9PXt7Aynn4IZO7MhIr3Ykd89hgn_KdjsRhiKE3LiTilxtedU4oCjexhyB_x8x_1qI/s1600/RedHack+Hacks+into+Turkey+Electricity+Transmission+Company.jpg" title="" width="400" /></a></div> <br /> Turkey Anonymous Hacking Team hacked and breached the official website of Turkish Electric Transmission Company.deleting 1.5 trillion Liras ($668.5 billion) worth debt of Soma region.this is a serious loss for the Turkey Electricity Transmission Company.Hackers also leaked usernames and password belonging to company's administration system users.</div> <br /> RedHack hacked some high profile Turkish website like Council of Higher Education,Turkish Police Forces,Turkish Army,Türk Telekom and National Intelligence Organisation and many other website. RedHack is currently under world's 5 most wanted hacking group.<br /> <br /> RedHack also posted a video as a proof and showing how they deleted the debt.<br /> <br /> <center> <iframe allowfullscreen="" frameborder="0" height="301" mozallowfullscreen="" src="//player.vimeo.com/video/111586164" webkitallowfullscreen="" width="500"></iframe> </center> <br /> <br /> Leaked data of Turkey Electricity Transmission Company can be found on this <a href="http://pasteht.ml/r4EPV"><span style="color: red;"><b>link</b></span></a>.<br /> <br /> <center> <blockquote class="twitter-tweet" lang="en-gb"> Türkiye Elektrik İletim A.Ş. <a href="http://t.co/XfzvGAk0od">http://t.co/XfzvGAk0od</a> tarafımızca hacklenmiştir Şifreler: <a href="http://t.co/j4vdW8wPQA">http://t.co/j4vdW8wPQA</a> Kapanmadan girin BORÇ silin:)<br /> — RedHack_EN ★ (@RedHack_EN) <a href="https://twitter.com/RedHack_EN/status/533247883815178240">November 14, 2014</a></blockquote> <script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script> </center> <br /></div>

RedHack Hacks into Turkey Electricity Transmission Company

Turkey Anonymous Hacking Team hacked and breached the official website of Turkish Electric Transmission Company.deleting 1.5 trillio...

Read more »

WireLurker Creator and Distributer Arrested in China

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiw9vQ3FM4i5lCOByAn2c2Xg7ObNweOoeKZ3dIm-TnRpYfNea7wa7vRK8XDl0L06wUWS1S8XurJNwlXtfLyGvlk__GQVmLdt5w7yGM3ulKc0MuHcNP0ZRaCsxfR1stAqIG-5Px0RqlEqIrw/s1600/WireLurker+Creator+and+Distributer+Arrested+in+China.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WireLurker Creator and Distributer Arrested in China" border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiw9vQ3FM4i5lCOByAn2c2Xg7ObNweOoeKZ3dIm-TnRpYfNea7wa7vRK8XDl0L06wUWS1S8XurJNwlXtfLyGvlk__GQVmLdt5w7yGM3ulKc0MuHcNP0ZRaCsxfR1stAqIG-5Px0RqlEqIrw/s1600/WireLurker+Creator+and+Distributer+Arrested+in+China.jpg" title="" width="400" /></a></div> <br /> <br /> Beijing Municipal Public Security Bureau along with cyber security company Qihoo 360 arrested Chen, Lee and Wang suspected of creating and distributing WireLurker malware.WireLurker which infected iOS and Mac users using OS X application,infecting hundreds of Apple users.<br /> <br /> <a href="http://www.thecybergeeks.net/2014/11/wirelurker-malware-infecting-ios-and-os-x.html"><span style="color: red;"><b>WireLurker</b></span></a> is a new bug found in Apple's Operating System and considered as a big threat.Palo Alto Network security researchers said "The discovery of Wirelurker poses a new era of malware".The malware collects data from the infected device and send it to its creator using command & control server on Miyadi App Store.<br /> <br /> The Suspects were charged of writing and distributing the malicious program illegally for their personal benefits. Miyadi App Store which was used to distribute the malware has also been shut down. At present , the suspect Chen,Lee has been under criminal detention.</div> </div>

WireLurker Creator and Distributer Arrested in China

Beijing Municipal Public Security Bureau along with cyber security company Qihoo 360 arrested Chen, Lee and Wang suspected of creati...

Read more »

US Government using Spy Planes to Collect Mobile Phone Data

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjtEIpCzn122ZQpyIdND33XnhVJNfqhIN9pNdvSqjQNfzfoGkr2K3r9u1jcRtTy-iWlXen1rrOMz-ynHLz6y2gB-jtWNMnZ_-YQccS9Lio848RA6uGfV7cAot7LUm6YyDKNntpUCu52YB2/s1600/US+Government+using+Spy+Planes+to+Collect+Mobile+Phone+Data.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="US Government using Spy Planes to Collect Mobile Phone Data" border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjtEIpCzn122ZQpyIdND33XnhVJNfqhIN9pNdvSqjQNfzfoGkr2K3r9u1jcRtTy-iWlXen1rrOMz-ynHLz6y2gB-jtWNMnZ_-YQccS9Lio848RA6uGfV7cAot7LUm6YyDKNntpUCu52YB2/s1600/US+Government+using+Spy+Planes+to+Collect+Mobile+Phone+Data.jpg" title="" width="400" /></a></div> <br /> <br /> The United States government is using spy planes equipped with <b>Dirtbox</b> to collect mobile phone information in US.<br /> <br /> Dirtbox is a small device which is used to mimic mobile phone tower transmissions from the sky and collect data from millions of smartphone users.The purpose of device is to track a specific target ,but if active,all mobile phone in a particular area will respond to the signal.<br /> <div style="float: left; padding-right: 10px;"> <br /> According to reports this is not a new technique to snoop Americans.The operation began in 2007 according to Wall Street Journal, a source familiar with the program said these devices are fitted onto Cessna Aircraft and fly from at least five metropolitan airports in the US, covering most of the US population. <br /> <br /> Dirtbox operate on the same way as International Mobile Subscriber Identity (IMSI) catcher or Stringray tool works.<br /> <br /> Stringray are common surveillance device that allows military or intelligence agencies to mimic a cell phone tower and track user's position,intercept data and sometimes Internet traffic,send fake texts and installs spyware on mobile.The IMSI catcher runs a Man In the Middle (MITM) attack that could not be detected by the users.<br /> <br /> Both Stringray and Dirtbox make use of "off-the-shell" component to collect cell phone's International Mobile Subscriber Identity (IMSI) which differ device to device.IMSS can be used to track movements of mobile phone users.<br /> <br /> The US Department of Justice has neither confirmed nor denied the existence of the Dirtbox program, but anonymous sources familiar with their use said the flying spies-in-the-sky were technically above board. </div> </div>

US Government using Spy Planes to Collect Mobile Phone Data

The United States government is using spy planes equipped with Dirtbox to collect mobile phone information in US. Dirtbox is a sma...

Read more »

Federal Transit Administration Website Hacked by Chinese Hacker

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE325LwlA3ipfWMX0cTgASFqRFyGC-AeQDj26RrmGqBbO_BAGMom4at25Oj1rvorA-bYS-1nKA9rwsYvJDMeaEXyT3Sn7Wr9HhFGIZSxhFaXJCV1SWRM4fJ-GEdPRotuZY6WS5QyR43zno/s1600/US+Government+using+Spy+Planes+to+Collect+Mobile+Phone+Data.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Federal Transit Administration Website Hacked by Chinese Hacker" border="0" height="224" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE325LwlA3ipfWMX0cTgASFqRFyGC-AeQDj26RrmGqBbO_BAGMom4at25Oj1rvorA-bYS-1nKA9rwsYvJDMeaEXyT3Sn7Wr9HhFGIZSxhFaXJCV1SWRM4fJ-GEdPRotuZY6WS5QyR43zno/s1600/US+Government+using+Spy+Planes+to+Collect+Mobile+Phone+Data.jpg" title="" width="400" /></a></div> <br /> Chinese hacker with code name "M4ix#4s" from 1937 CN Team defaced the official website of Federal Transit Administration (FAT) of US department of Transportation.Hacker left the note in Chinese language and reason for hacking website was not specified in the deface page.<br /> <div style="float: left; padding: 10px;"> <br /> Hacker left the following message in the deface page.<br /> <br /> Hey， 这是我们第一次公开的行动，因为我们活在黑暗之中太久。 我们并没有什么为了世界上某个地方或者某个种族的人宣扬正义的崇高思想， 也没有为了国家而做出什么贡献的爱国情怀。 今天，你们看到的，只是一次很单纯的渗透。 就这样，Hacked by M4ix#4s。<br /> <br /> The above message is written in Chinese,below is the message in English as translated by Google Translate.<br /> <br /> Hey, this is our first public action , because we live in the dark for too long. We do not have anything for the world somewhere or some races to promote the lofty idea of justice , nor to make any contribution to the national and patriotic feelings . Today, you see, just a very simple penetration. Thus , Hacked by M4ix#4s. <br /> <br /> Federal Transit Administration<br /> Website:<a href="http://www.fta.dot.gov/"><span style="color: red;">http://www.fta.dot.gov/</span></a></div> Mirror:<a href="http://www.zone-h.org/mirror/id/23255087"><span style="color: red;">http://www.zone-h.org/mirror/id/23255087</span></a> <br /> <br /> It is still unclear that whether hacker works for government or not.United States blamed Chinese government for conducting attacks on big website/servers including attacks on <a href="http://www.trickbug.com/2014/11/chinese-hackers-hacked-us-weather.html"><span style="color: red;">United Nation weather system</span></a> and <span style="color: red;">United States Postal Service</span>.</div> </div>

Federal Transit Administration Website Hacked by Chinese Hacker

Chinese hacker with code name "M4ix#4s" from 1937 CN Team defaced the official website of Federal Transit Administration (...

Read more »

Google Launches Underwater Street View

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7Qb_sZ3PJJQcQDTt38unGk_Z3M1n_ZXGAOKyFqo5A7i9m3EE4I-6pXqouiCdbTyWpj7_8cNW5dymXEreRfs8dtVRhzJay9FwoAxsAqQxOvdLSw7aH8SlbdyvLaODfH8-6bqKsA9eoeoDk/s1600/Google+Launches+Underwater+Street+View.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Google Launches Underwater Street View" border="0" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7Qb_sZ3PJJQcQDTt38unGk_Z3M1n_ZXGAOKyFqo5A7i9m3EE4I-6pXqouiCdbTyWpj7_8cNW5dymXEreRfs8dtVRhzJay9FwoAxsAqQxOvdLSw7aH8SlbdyvLaODfH8-6bqKsA9eoeoDk/s1600/Google+Launches+Underwater+Street+View.jpg" title="" width="400" /></a></div> <br /> <br /> Google Inc. launched the first underwater Street View of Great Barrier Reef.Catlin Seaview Survey teamed up with Google to create world's First underwater Street View.The site will also log how the reef currently looks to compare it after threats like cyclone or global warming.<br /> <div style="float: left; padding: 10px;"> </div> <br /> Catlin Seaview Survey executive director Richard Vevers said researchers used a special camera to collect hundreds of under water pictures.<br /> <br /> "The camera used for the survey is something that was specifically designed for this project only.It allows us to take full 360° images every three seconds as we're travelling along reef environment.",Richard said.<br /> <br /> "They can go jump in the water,go on a virtual dive and see how different the reef is along the 2300 kilometres", Richard said. <br /> <br /> "To be able to Street View underwater to a place where very few people can visit allows people to understand how beautiful these locations are, not just here in Australia but all across the world,"Google spokesman Shane Treeves said."All you have to do is drag your peg man and you can swim virtually underwater from your own home to explore 360 degree images of these locations." <br /> <br /> Google took this step to gave people a chance to experience the natural wonder.You can access Street View of Great Barrier Reef through <a href="https://www.google.com/maps/views/streetview/oceans"><span style="color: red;">Google Maps</span></a>.</div>

Google Launches Underwater Street View

Google Inc. launched the first underwater Street View of Great Barrier Reef.Catlin Seaview Survey teamed up with Google to create wor...

Read more »

Microsoft Patches 19 year Old Bug

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq_NpzNOECfmjcbMqC_S65iiQngx9bi66NDC7Yy1mH7p1IQUkmEpnbkjjiwuKFIS9jR0ScK-Gk4Euiu2XqCqJlbXHybJjGTNGAKK-7qmeTEtZYtBYlxAZMnYmH5qxy961jTqObIzd9sToD/s1600/Microsoft+Patches+19+year+Old+Bug.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Microsoft Patches 19 year Old Bug" border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq_NpzNOECfmjcbMqC_S65iiQngx9bi66NDC7Yy1mH7p1IQUkmEpnbkjjiwuKFIS9jR0ScK-Gk4Euiu2XqCqJlbXHybJjGTNGAKK-7qmeTEtZYtBYlxAZMnYmH5qxy961jTqObIzd9sToD/s1600/Microsoft+Patches+19+year+Old+Bug.jpg" title="" width="400" /></a></div> <br /> <br /> Microsoft Corporation has released an update to patch a security flaw in Windows that remained unnoticed for 19 years.This vulnerability was present in all versions of Windows since Windows 95 that allows attacker to take control of any computer remotely after sending them to a malicious website.<br /> <div style="float: left; padding-right: 10px;"> </div> <br /> IBM's security researchers discovered this flaw earlier this year and reported this bug privately in May.IBM security researchers named this bug as "Significant Bug".IBM says the exploit can be triggered on Internet Explorer 3.0 onwards,and every currently supported version of Windows is affected. <br /> <br /> "This vulnerability has been sitting in plain sight for a long time despite many other bugs being discovered and patched in the same Windows library," says IBM researcher Robert Freeman.<br /> <br /> “This is a “rare”, ‘unicorn-like’ bug found in code that IE relies on but doesn’t necessarily belong to. The erroneous code existed for at least 19 years and was remotely usable over the past 18 years.” Robert said. <br /> <br /> Microsoft provided patches for Windows 8.1,Window 7 and Windows Vista and various server releases.Microsoft stopped supporting Windows XP earlier this year so Windows XP users will not be protected if attacker tries to exploit the bug.The bug has a rating of 9.3 out of 10 on Common Vulnerability Scoring System (CVSS).</div>

Microsoft Patches 19 year Old Bug

Microsoft Corporation has released an update to patch a security flaw in Windows that remained unnoticed for 19 years.This vulnerabil...

Read more »

Chinese Hackers Hacked US Weather Systems

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Chinese Hackers Hacked US Weather Systems" border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" title="" width="640" /></a></div> <br /> <br /> Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,aviation,shipping and scores of other crucial uses,official said.The intrusion occurred in late September but officials gave no hint they had a problem until October 20.<br /> <div style="float: left; padding: 10px;"> <br /> The <b>National Oceanic and Atmospheric Administration (NOAA)</b>, which includes National Weather Service,did not say its system were compromised.Some reports also says that agency did not notify the proper authorities when it learned of the attack. <br /> <br /> NOAA officials declined to discuss the suspected source of the attack, whether it affected classified data and the delay in notification.In a statement released Wednesday, NOAA spokesman Scott Smullen acknowledged the hacks and said “incident response began immediately.” He said all systems were working again and that forecasts were accurately delivered to the public. Smullen declined to answer questions beyond his statement, citing an investigation into the attack. <br /> <br /> But NOAA confirmed to U.S. Rep. Frank Wolf, that China was behind the attack, the Republican Congressman from Virginia said in a separate interview.Wolf has a long-standing interest in cybersecurity and asked NOAA about the incident.“NOAA told me it was a hack and it was China,” said Wolf, who also scolded the agency for not disclosing the attack “and deliberately misleading the American public in its replies.” <br /> <br /> Wolf said "A hack could steal technical insights or cull isolated information that may not look significant until they’re put with something else and then they become valuable. The Chinese are stealing us blind.” <br /> <br /> Commerce Department Inspector General Todd Zinser said his office was not notified of the breach until Nov. 4, well after he believes the hack occurred. He said that is a violation of agency policy requiring any security incident to be reported to his office within two days of discovering the problem.<br /> <blockquote class="tr_bq"> “We’re in the process of looking into the matter, including why NOAA did not comply with the requirements to notify law enforcement about the incident,” Zinser said.</blockquote> NOAA officials also would not say whether the attack removed material or inserted malicious software in its system, which is used by civilian and military forecasters in the United States and also feeds weather models at the main centers for Europe and Canada.The attack on NOAA joins a spate of cyber-espionage on federal systems revealed recently, including an attack suspected from Russia that breached unclassified <a href="http://www.trickbug.com/2014/10/white-house-computers-breached-by-hackers.html"><span style="color: red;">White House Computer Networks</span></a>. <br /> <br /> NOAA’s National Ice Center Web site also was down for a week in late October. The center is a partnership with the Navy and Coast Guard to monitor conditions for navigation.The two-day outage skewed the accuracy of National Weather Service long-range forecasts slightly, according to NOAA.Security experts compares the security used by NOAA to secure their system with an example of house protected by just a screen door. <br /> <br /> Weather satellites orbit hundreds to thousands of miles above Earth and offer continuous views of weather systems, such as hurricanes, thunderstorms and cold fronts, while also measuring temperature and moisture at different altitudes — all crucial bits that feed prediction models. To get that information to the public, NOAA makes satellite data and imagery publicly available through the Web, as well as file-transfer networks for downloads.NOAA satellites “provide critical data for forecasts and warnings that are vital to every citizen and to our economy as a whole,” NOAA Administrator Kathryn D. Sullivan said a year ago. <br /> <br /> “The bad guys are increasingly having a hard time getting in the front of these agencies,”said Jacob Olcott, a cybersecurity consultant. “So they figure if I can’t get in the front door, I’d ride along in with someone who has trusted access and maybe ride that connection to bigger agencies.”<br /> <br /> “All the operational data sent via NOAA, which is normally an excellent service, was lost,” said Stephen English, head of the satellite section at the European Centre for Medium-Range Weather Forecasts in Reading, England. The center is renowned for running a highly advanced global weather prediction model that during Hurricane Sandy, for example, aided evacuations and preparations in the United States when it signaled that the superstorm would hit land rather than hook out to sea. <br /> <br /> This is the 8th incident in recent weeks which has China's involvement in the attacks. <br /> <center> </center> </div> </div>

Chinese Hackers Hacked US Weather Systems

Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,avia...

Read more »

Firefox Developer Edition

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRzFWdPtS0fUzFjZBCn-AoOfkHG6WpxWXDxMemQQoqZoCVQBPiBnqQm4RAQ6t9nTLnqC6wO1RkvS-OkqPNuYtFy79RgC4r7HRsnjHEbGKOgaxn3wUAfEcKbfe9ajcLhlxegbJ0qMgmd1ac/s1600/Firefox+Developer+Edition.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Firefox Developer Edition" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRzFWdPtS0fUzFjZBCn-AoOfkHG6WpxWXDxMemQQoqZoCVQBPiBnqQm4RAQ6t9nTLnqC6wO1RkvS-OkqPNuYtFy79RgC4r7HRsnjHEbGKOgaxn3wUAfEcKbfe9ajcLhlxegbJ0qMgmd1ac/s1600/Firefox+Developer+Edition.jpg" title="" width="320" /></a></div> Mozilla Firefox released Firefox Developer Edition on its 10th anniversary as a gift for all developers.New Firefox developer edition uses the slogan "Built for those who built the Web".Mozilla Developer Edition is not aimed for developers only but also aimed privacy concerns.<br /> <div style="float: left; padding: 10px;"> Firefox developer edition is having dark colour theme.Mozilla added two new feature in developer edition ,"Valence and WebIDE".<br /> Valence enables you to debug you app on different browsers and devices including Chrome on Android and Safari on iOS.WebIDE enables you to run and debug Firefox OS apps using the Firefox OS simulator or a real Firefox OS device.Mozilla also added JavaScript Debugger,Network Monitor,Style Editor,Web Console,Page Inspector,Responsive Design View and Web Audio Editor.<br /> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> Firefox added DuckDuckGo as pre-installed search options in Firefox.DuckDuckGo gives you search results without tracking you search results and other personal identity.Firefox Developer Edition comes with "Forget the Last" button which enables users to clear recent history and cookie in just one click.<br /> <div class="separator" style="clear: both; text-align: center;"> </div> <blockquote class="tr_bq"> “Ten years ago, we built Firefox for early adopters and developers to give them more choice and control. Firefox integrated WebAPIs and Add-ons to enable people to get the most out of the Web. Now we’re giving developers the whole browser as a hard-hat area, allowing us to bring front and center the features most relevant to them. Having a dedicated developer browser means we can tailor the browsing experience to what developers do every day.”</blockquote> Download <a href="https://www.mozilla.org/en-US/firefox/developer/"><span style="color: red;">Firefox Developer Edition</span></a> now. </div> </div>

Firefox Developer Edition

Mozilla Firefox released Firefox Developer Edition on its 10th anniversary as a gift for all developers.New Firefox developer edition ...

Read more »

United Nation website hacked by AnonGhost

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJbMOFYSOXxqR4qVWqdJa0Mpu3ihsXDfbvYVhTgZI9tpY1v9YWcb7fAflwa-mxRQkkOXlPn1UIZ9bchI1Ij248nZZ3N_vnXileE5o9i6OiIirLLO6uuNs1Lv8rsgqHG7nAF2POlYN6tNh8/s1600/images.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="AnonGhost defaced Unite Nation website" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJbMOFYSOXxqR4qVWqdJa0Mpu3ihsXDfbvYVhTgZI9tpY1v9YWcb7fAflwa-mxRQkkOXlPn1UIZ9bchI1Ij248nZZ3N_vnXileE5o9i6OiIirLLO6uuNs1Lv8rsgqHG7nAF2POlYN6tNh8/s1600/images.jpg" title="" width="400" /></a></div> <br /> <br /> AnonGhost defaced United Nation website which is used by officials to promote international co-operation.AnonGhost is defaced the website in the support of Palestine.Recently AnonGhost defaced <a href="http://www.trickbug.com/2014/11/anonghost-defaced-nottinghamshire-police-website.html"><span style="color: red;">Nottinghamshire website</span></a>.<br /> <div style="float: left; padding: 10px;"> <br /> AnonGhost posted the following message on the deface page. <br /> <br /> We are the sound of the forgotten people, the freedom fighter in the cyberworld and our main target is Sionisme and israhell, if you are asking why your website got hacked by us, its basically because we want to share our message and show the world who we are, we are not looking for fame but we have a goal to achieve we supporte all hackers teams and we supporte all the freedom mouvement in the world. #OpSaveAlAqsa decided , Expect us! <br /> <br /> This defacement was carried out under the mission <a href="http://www.trickbug.com/2014/10/anonghost-launches-opsavealaqsa.html"><span style="color: red;">#OpSaveAlAqsa</span></a>.<br /> <br /> Official Website of United Nations<br /> Link: <a href="http://sites.un.org/" rel="nofollow nofollow" style="background-color: white; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank"><span style="color: red;">http://sites.un.org/</span></a><br /> Mirror:<span style="color: red;"><a href="http://www.aljyyosh.org/mirror.php?id=190909">http://www.aljyyosh.org/mirror.php?id=190909</a></span><br /> <br /> AnonGhost defaced hundreds of website under the mission #OpSaveAlAqsa.List of some website hacked by AnonGhost.<br /> <br /> <ul style="text-align: left;"> <li>http://results.ed.gov/</li> <li>http://www.judicialethicsopinions.ca.gov/</li> <li>http://www.mmse.gov.mm/</li> <li>http://www.ecd.gov.mm/</li> <li>http://www.fdmoecaf.gov.mm/</li> <li>http://www.ic4barolini.gov.it/</li> <li>http://www.iahealthlink.gov/</li> <li>http://www.txep.uscourts.gov</li> <li>http://www.moep.gov.mm/index.php</li> <li>http://www.libyanembassy-italy.gov.ly/ </li> <li>http://eadp.westerncape.gov.za/</li> <li>http://www.slims.gov.za/robots.txt</li> <li>http://depts.washington.edu/nwmrc/node/50</li> <li>http://kagizmangth.gov.tr/</li> <li>http://www.asianpanorama.net/</li> <li>http://www.swc-aleppo.gov.sy/</li> <li>http://pers.nmis.gov.ph/</li> <li>http://www.lga.gov.ph/</li> <li>http://kalibo.gov.ph/</li> <li>http://www.favicon.co.il/</li> <li>http://caamt.gob.mx/</li> <li>http://www.hoopa-nsn.gov/</li> <li>http://sonoivu.caobang.gov.vn</li> <li>http://bandantoc.caobang.gov.vn</li> <li>http://www.rheacountytn.gov</li> <li>http://www.clintonok.gov</li> <li>http://cca.gov.in</li> <li>http://www.sba.gov/</li> <li>http://www.saee.gov.ua/</li> <li>http://avokaturashtetit.gov.al/index.html</li> <li>http://www.egy-mhe.gov.eg/</li> <li>http://testdomain.edostate.gov.ng/index.php</li> </ul> You can check the mirror of all website at <a href="http://zone-h.org/archive/special=1/notifier=AnonGhost"><span style="color: red;">zone-h</span></a>.Everyday AnonGhost is adding more website in the list of hacked website under the mission #OpSaveAlqsa.<br /> <br /></div> </div>

United Nation website hacked by AnonGhost

AnonGhost defaced United Nation website which is used by officials to promote international co-operation.AnonGhost is defaced the...

Read more »

Masque Attack bigger threat than WireLurker

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFt-fQa4pcVMSiWcyT3VlrDL_WxJlxnCYTlNp-oeqwCkZQKGZ6wL2_RbNPsD2txaOA3e07Yl-3RsQsHS0EkF5yCZKeknQ7YsrVKdOjwPw0bbjqdf3Wo9m81ghDExwp2eSoO1q1-noH-dc/s1600/Masque+Attack+bigger+threat+than+WireLurker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Masque Attack bigger threat than WireLurker" border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFt-fQa4pcVMSiWcyT3VlrDL_WxJlxnCYTlNp-oeqwCkZQKGZ6wL2_RbNPsD2txaOA3e07Yl-3RsQsHS0EkF5yCZKeknQ7YsrVKdOjwPw0bbjqdf3Wo9m81ghDExwp2eSoO1q1-noH-dc/s1600/Masque+Attack+bigger+threat+than+WireLurker.jpg" title="" width="400" /></a></div> <br /> .<br /> Apple always says that finding vulnerability in their mobile operating system is quite difficult.But this time iOS users is targeting most than android users by attacks.According to report Masque pses bigger threat than <a href="http://www.thecybergeeks.net/2014/11/wirelurker-malware-infecting-ios-and-os-x.html"><span style="color: red;">WireLurker</span></a>.A number of vulnerabilities discovered in Apple's iOS made iPhone and iPad vulnerable to cyber attacks and stealing sensitive information.Security Researchers at FireEye discovered a new vulnerability by which attacker can replace a genuine app with malware one.<br /> <div style="float: left; padding: 10px;"> <br /> "This vulnerability exists because iOS doesn't enforce matching certificates for apps with the same bundle identifier,"FireEye security researchers said on the blog. "An attacker can leverage this vulnerability both through wireless networks and USB." <br /> <br /> “After looking into WireLurker, we found that it started to utilize a limited form of Masque Attacks to attack iOS devices through USB,” researchers said. “Masque Attacks can pose much bigger threats than WireLurker. Masque Attacks can replace authentic apps,such as banking and email apps, using attacker’s malware through the Internet. That means the attacker can steal user’s banking credentials by replacing an authentic banking app with an malware that has identical UI. Surprisingly, the malware can even access the original app’s local data, which wasn’t removed when the original app was replaced. These data may contain cached emails, or even login-tokens which the malware can use to log into the user’s account directly."<br /> <br /> <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody> <tr><td style="text-align: center;"><a href="https://2.bp.blogspot.com/-L6KGfiAUQq4/VGIZ4Kg-XsI/AAAAAAAADiI/p_NLLNwpx7M/s1600/masque%2Battack.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Masque Attack" border="0" height="612" src="https://2.bp.blogspot.com/-L6KGfiAUQq4/VGIZ4Kg-XsI/AAAAAAAADiI/p_NLLNwpx7M/s640/masque%2Battack.jpg" title="" width="640" /></a></td></tr> <tr><td class="tr-caption" style="text-align: center;">Example of Masque Attack</td></tr> </tbody></table> <br /> Researchers tested this vulnerability on iOS 7.1.1,7.1.2,8.0,8.1 and 8.1.1 beta for both jailbroken and non-jailbroken devices.<br /> <br /> According to FireEye 95 percent of iOS are vulnerable to this attack.FireEye also posted a demo video.<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/3VEQ-bJUhPw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div> <br /> <h3 style="text-align: left;"> Steps To Protect Yourself From Masque Attack</h3> <div> <ul style="text-align: left;"> <li>Don't install third party apps.</li> <li>Don't install app offered on pop-ups on third party website.</li> <li>If iOS shows an alert with Untrusted App Developer click on “Don’t Trust” and uninstall the app immediately</li> </ul> </div> </div> </div>

Masque Attack bigger threat than WireLurker

. Apple always says that finding vulnerability in their mobile operating system is quite difficult.But this time iOS users is targeti...

Read more »

Browser Stack Data Breach

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgsJD540xDtxoitWKoZE08O4_uspACQUOi1_idXp7gFghKzU-4xqgK2SUfkZuj74lQ5vP9T107NiNZF3eBS3R7iZhQ_CZNg1ImqH52fTe_LagviS2YmKZx0ofbkF-AEAFFZqMY76x_-5Mc/s1600/Browser+Stack+Data+Breach.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Browser Stack Data Breach" border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgsJD540xDtxoitWKoZE08O4_uspACQUOi1_idXp7gFghKzU-4xqgK2SUfkZuj74lQ5vP9T107NiNZF3eBS3R7iZhQ_CZNg1ImqH52fTe_LagviS2YmKZx0ofbkF-AEAFFZqMY76x_-5Mc/s1600/Browser+Stack+Data+Breach.png" title="" width="640" /></a></div> <br /> <br /> BrowserStack is a cross-browser testing tool,to test public websites and protected servers,on a cloud infrastructure of desktop and mobile devices.BrowserStack on November 9,2014 at 23:30 GMT suffers a data breach.Currently comapany does not know how many user accounts have been compromised.<br /> <div style="float: left; padding: 10px;"> <br /> BrowserStack responded with the following statement this morning.<br /> <br /> BrowserStack is not shutting down. An attacker gained access to a list of user email addresses on BrowserStack on 9 November, 2014 at 23:30 GMT.<br /> <br /> We deeply apologise for the concerns that our users have been experiencing due to the attack on BrowserStack. We have determined that the hacker’s access was restricted solely to that list of email addresses. As a precaution, we recommend changing your BrowserStack password.<br /> <br /> We are still in the process of sanitisation, and making doubly sure this situation never reoccurs. We are on top of it, and will post updates as they happen.<br /> <br /> Thank you for your patience. BrowserStack will be back up in a few hours.<br /> Regards,<br /> Adithya Chadalawada<br /> <blockquote class="twitter-tweet" lang="en"> We did get hacked. Currently sanitising entire BrowserStack, so service will be down for a while. We're on top of it & will keep you posted.<br /> — BrowserStack (@browserstack) <a href="https://twitter.com/browserstack/status/531631012493524992">November 10, 2014</a></blockquote> <script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script> An Anonymous user said that he have received the following mail from BrowserStack customer care.He posted the following mail on pastebin.<br /> <blockquote class="tr_bq"> Dear BrowserStack User,<br /> We are unfortunately displeased to announce that BrowserStack will be shutting down. After much consideration on our part, we have realized we were negligent in the services we claimed to offer. In our terms of service, we state the following:<br /> [...] after the restoration process is complete, the virtual machines are guaranteed to be tamper-proof.<br /> [...] The machines themselves are in a secure network, and behind strong firewalls to present the safest environment possible.<br /> [...] At any given time, you have sole access to a virtual machine. Your testing session cannot be seen or accessed by other users, including BrowserStack administrators. Once you release a virtual machine, it is taken off the grid, and restored to its initial settings. All your data is destroyed in this process.<br /> Unfortunately, we have blatantly lied. Not only do all of our administrators have access, but so does the general public. We have no firewalls in place, and our password policies are atrocious. All virtual machines launched are open to the public, accessible to anyone with the alpha password "nakula" on port 5901, a password which is stored in plaintext on every VM. As well, our infrastructure uses the same root passwords on all machines, which is also stored in plaintext on every VM launched ("c0stac0ff33").<br /> Given the propensity for cyber criminals to target infrastructure services such as ours, it is almost certain all of your data has been compromised. These passwords take no less than 15 minutes to find for anyone who is looking.<br /> We hope we have not caused you too much trouble, and to our enterprise customers who signed deals contracts based on a fabrication, we are equally sorry.<br /> Sincerely,<br /> The BrowserStack Team</blockquote> Today morning BrowserStack website was gone offline and showing a site maintenance message.  </div> </div> </div>

Browser Stack Data Breach

BrowserStack is a cross-browser testing tool,to test public websites and protected servers,on a cloud infrastructure of desktop and ...

Read more »

FBI Seize Silk Road 2.0 Admin Arrested

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidLTDNs8auNLMVQZqxvuMgezheWK381Tm8iXUCUiX-ZDQe6Hhkw9JWb_GvYhIK1vzsEdJoCv_iLK_QZ8FyUrEvSI_1Z-wnMYbVoNkhReQyaOBhFyM-naJsbtwOYKHepXLgqEFF3xJCKx02/s1600/FBI+Seize+Silk+Road+2.0+Admin+Arrested.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="FBI Seize Silk Road 2.0 Admin Arrested" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidLTDNs8auNLMVQZqxvuMgezheWK381Tm8iXUCUiX-ZDQe6Hhkw9JWb_GvYhIK1vzsEdJoCv_iLK_QZ8FyUrEvSI_1Z-wnMYbVoNkhReQyaOBhFyM-naJsbtwOYKHepXLgqEFF3xJCKx02/s1600/FBI+Seize+Silk+Road+2.0+Admin+Arrested.jpg" title="" width="400" /></a></div> <br /> Federal Bureau of Investigation (FBI) said that they have arrested the Silk Road admin Blake Benthall,who uses the alias <b>Defcon</b> on Wednesday.FBI along with Department of Homeland Security and European law enforcement seized Silk Road 2.0.Silk Road is an online marketplace for selling illegal drugs.<br /> <div style="float: left; padding: 10px;"> <br /> In 2013 FBI arrested Ross William Ulbricht also known as "Dread Pirate Roberts" founder of online drug bazzar "Silk Road" that generated $8 million in monthly sales,that attracted 150,000 customers.FBI seized the website but next month new identical website Silk Road 2.0 opened.<br /> <br /> The FBI and Us department of Justice claims that Blake Benthall launched the notorious Silk Road 2.0 on November 6,2013.<br /> <br /> Benthall charged with conspiring to commit narcotics trafficking,conspiring to commit computer hacking.conspiring to traffic fraudulent identification documents  and money laundering.<br /> <br /> <blockquote class="tr_bq"> “As alleged, Blake Benthall attempted to resurrect Silk Road, a secret website that law enforcement seized last year, by running Silk Road 2.0, a nearly identical criminal enterprise. Let’s be clear—this Silk Road, in whatever form, is the road to prison. Those looking to follow in the footsteps of alleged cybercriminals should understand that we will return as many times as necessary to shut down noxious online criminal bazaars. We don’t get tired.”</blockquote> Silk Road 2.0 sold its illegal goods on Tor network and generates millions of dollar daily.In order to maintain anonymity of its users Silk Road 2.0 offers transaction to be made in Bitcoin only.<br /> <br /> Silk Road 2.0 had over 13,000 listing for controlled substances. </div> </div>

FBI Seize Silk Road 2.0 Admin Arrested

Federal Bureau of Investigation (FBI) said that they have arrested the Silk Road admin Blake Benthall,who uses the alias Defcon on We...

Read more »

AnonGhost defaced Nottinghamshire Police Website

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-92RO6E-tNQTHE5geKXh1xilNwISOwx55cVROVkKu_Kg2KB-STxkhaLq5TH9KPWcxdfw1a_FW1ooUqYLkqFae6B1sE1gdAJP5E3X_heOHLV8Dvy85tuCNO-dPbNX_R0v83blBAKwN2CF6/s1600/AnonGhost+defaced+Nottinghamshire+Police+Website.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="AnonGhost defaced Nottinghamshire Police Website" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-92RO6E-tNQTHE5geKXh1xilNwISOwx55cVROVkKu_Kg2KB-STxkhaLq5TH9KPWcxdfw1a_FW1ooUqYLkqFae6B1sE1gdAJP5E3X_heOHLV8Dvy85tuCNO-dPbNX_R0v83blBAKwN2CF6/s1600/AnonGhost+defaced+Nottinghamshire+Police+Website.jpg" title="" width="400" /></a></div> <br /> <br /> AnonGhost world's famous hacking group defaced Nottinghamshire Police official website.AnonGhost is launching missions against Israel and claims to defend Palestine.Recently AnonGhost launched <a href="http://www.trickbug.com/2014/10/anonghost-launches-opsavealaqsa.html"><span style="color: red;">#OpSaveAlAqsa</span></a> against Israel.</div> <br /> <center> </center> <br /> Nottinghamshire police website's was left defaced for more than 45 minutes.Hacker posted the following message on the deface page.<br /> <blockquote class="tr_bq"> <h1> <span style="font-size: small;"> Hello United Kingdoom Police</span></h1> Hacked by AnonGhost<br /> Hi Uk police,where is your security bitchs?<br /> We are here to punish you! since you have been supporting israel<br /> Because we are the voice of Palestine and we will not remain silent !<br /> Muslims are everywhere - We will enter to Palestine soon :) remember this :D</blockquote> Nottinghamshire website<br /> Link-<a href="http://www.nottinghamshire.police.uk/"><span style="color: red;">http://www.nottinghamshire.police.uk</span></a><br /> Mirror- <a href="http://zone-h.org/mirror/id/23233042"><span style="color: red;">http://zone-h.org/mirror/id/23233042</span></a></div>

AnonGhost defaced Nottinghamshire Police Website

AnonGhost world's famous hacking group defaced Nottinghamshire Police official website.AnonGhost is launching missions against I...

Read more »

Indian Government Websites Hacked by Team Madleets

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjK9QlaWOscphf3vEO1sZPHq6yFoKhgi8880gZJYud-hSJSic3aM6OGVlrFTuATmRgflVRoIvV0NO86gacfVz5Z41yadQ_Sn6wNy9wPdhBkYecZpSIOi6TPDnFd5_-gfy_wfDfETAjM4w8V/s1600/Indian+Government+Websites+Hacked+by+Team+Madleets.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Indian Government Websites Hacked by Team Madleets" border="0" height="249" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjK9QlaWOscphf3vEO1sZPHq6yFoKhgi8880gZJYud-hSJSic3aM6OGVlrFTuATmRgflVRoIvV0NO86gacfVz5Z41yadQ_Sn6wNy9wPdhBkYecZpSIOi6TPDnFd5_-gfy_wfDfETAjM4w8V/s1600/Indian+Government+Websites+Hacked+by+Team+Madleets.png" title="" width="640" /></a></div> <br /> <br /> Madleets one of the most famous hacking group of Pakistan.This time 1337 and r00x from team Madleets defaced 22 (National Informatics Centre) nic domains.Hacker defaced these website not for asking Kashmir from India but for asking Peace in Kashmir.<br /> <br /> <center> </center> <br /> The hacker said that the hack has nothing to do with Cyber War between India and Pakistan.<br /> <blockquote class="tr_bq"> "Stamped by 1337 & r00x for our brothers and sisters in Kashmir.We care for Humanity.This has nothing related to cyber war crap.We are not asking for Kashmir.We ask for Peace ! ",hacker said on Facebook.</blockquote> <h3 style="text-align: left;"> List of Website Hacked by Team Madleets</h3> <div style="text-align: left;"> </div> <ul style="text-align: left;"> <li>http://www.oscw.nic.in</li> <li>http://www.ophwc.nic.in</li> <li>http://www.scpdodisha.nic.in</li> <li>http://www.tgahd.nic.in</li> <li>http://www.tsbocwwboard.nic.in</li> <li>http://www.gssaap-cag.nic.in/ </li> <li>http://www.apbocwwboard.ap.nic.in/settings.php </li> <li>http://www.rys.ap.nic.in/ </li> <li>http://www.apfdc.tg.nic.in/ </li> <li>http://www.aplwb.ap.nic.in/About </li> <li>http://www.apfdc.ap.nic.in/ </li> <li>http://www.agri.tg.nic.in/ </li> <li>http://www.cdm.telangana.nic.in/ </li> <li>http://www.bdl.gov.in/Companys-Profile-Company/ </li> <li>http://www.apbocwwboard.tg.nic.in/ </li> <li>http://www.dca.tg.nic.in/ </li> <li>http://www.rys.tg.nic.in/ </li> <li>http://www.tglwb.tg.nic.in/ </li> <li>http://www.apfdc.gov.in/ </li> <li>http://www.labdirodisha.gov.in/ </li> <li>http://www.pheoodisha.gov.in/ </li> <li>http://www.cdodisha.gov.in/</li> </ul> You can also the mirror of these websites at <a href="http://zone-h.com/archive/published=0/notifier=1337"><span style="color: red;">zone-h</span></a>. Madleets is famous for hacking top-levels domains.Recently Madleets defaced <a href="http://www.trickbug.com/2014/10/google-indonesia-hacked-by-1337.html"><span style="color: red;">Google Indonesia domain</span></a>.</div>

Indian Government Websites Hacked by Team Madleets

Madleets one of the most famous hacking group of Pakistan.This time 1337 and r00x from team Madleets defaced 22 (National Informatics...

Read more »

WireLurker Malware Infecting iOS and OS X

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WireLurker Malware Infecting iOS and OS X" border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" title="" width="400" /></a></div> <br /> <b><br /></b> <b>WireLurker </b>a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networks security researchers says that it is the biggest in scale within the malware family.The researcher said "The Discovery of WireLurker poses a new Era of Malware".</div> <br /> WireLurker is the second known malware family that infect iOS devices through OS X vis USB.It the first malware to automate generation of malicious iOS applications through binary file replacement also the first malware that can infect iOS applications similare to the traditional virus.This malware can install third-party applications on non-jailbroken iOS devices through enterprising provisioning.<br /> <br /> "Wirelurker is unlike anything we have ever seen in terms of Apple iOS and OS X malware.The techniques in use suggest that bad actors are getting more sophisticated when it comes to exploiting some of the world's best known desktop and mobile platforms.",said Ryan Olson(Company's intelligence director).<br /> <br /> <h3 style="text-align: left;"> How it works</h3> <div> <br /></div> <div> This type of malware is very unique.It infect iOS devices via Apple's OS X.When users download a Wirelurker affected app its start waiting for user to attach a iOS device.Once connected it try to find whether the device is jailbroken or not.If its is jailbroken,If its is jail broken,Wirelurker backup the device's apps to the Mac where it repackages them with malware and then installs the infected the infected versions on the devices.If its is non-jailbroken,Wirelurker takes advantage of the method created by Apple which allow them to install special software on the staff's devices.This involved placing infected apps on the devices that has been signed by a bogus "enterprise certificate",a code is added to the product to prove that this app is from an trustworthy source.To ensure that the device has accepted this certificate, a permissions request was  pop up on the targeted iOS device. It asked permission to run the app, but if the user clicked “continue” it installed code called a “provisioning profile”.Once user clicked on continue iOS device will accept any app that has been signed with the same enterprise certificate.</div> <br /> WireLurker was used to trojanize 467 OS X applications on the Maiyadi App Store (third-party Mac applications store in China).<br /> <br /> In the past 6 months ,these 467 infected applications were downloaded over 356,104 times and it has infected more than thousand of users.Recently a new flaw was discovered in <a href="http://www.trickbug.com/2014/11/rootpipe-critical-security-flaw-in-mac-os-x-yosemite.html"><span style="color: red;">Mac OS X by a security researcher Emil</span></a>.<br /> <br /> <blockquote class="tr_bq"> WireLurker monitors any iOS device connected via USB with an infected computer and installs downloaded third-party applications or automatically generated malicious applications onto the device,regardless of whether its is jailbroken.This is the reason why call it "WireLurker".Researchers have demonstrated similar methods to attack non-jalibroken device before..However,this malware combines a number of techniques to successfully realize a new brand of threat to all iOS devices.</blockquote> In statement Apple said that "We are aware of malicious software available from a download site aim at users in China,and we've blocked the identified apps to prevent them for launching.As always,we recommend that users download and install software from a trusted sources."<br /> <br /> We recommend our users to take some safety tips mention below.<br /> <br /> <ul style="text-align: left;"> <li>Don't download apps from third-party store.</li> <li>Don't jailbreak iOS devices.</li> <li>Don't connect your devices to untrusted computers.</li> <li>Keep iOS version up-to-date.</li> <li>Do not accept any unknown enterprise provisioning profile unless an authorised ,trusted party instruct you to do so.</li> <li>You can also use this tool to detect the Wirelurker malware family on OS X.This tool is available on <a href="https://github.com/PaloAltoNetworks-BD/WireLurkerDetector"><span style="color: red;">github</span></a> and tool is made by Palo Alto Networks.</li> </ul> </div>

WireLurker Malware Infecting iOS and OS X

WireLurker a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networ...

Read more »

Google Announces Nogotofail - A Network Traffic Security Testing Tool

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhydaHzMHltmDS5ktgt0XQFAwis3WY0o-9_Q6SrzOJ7rB3qPXCq-pPcKbttrW2lgv6SwPEUjvbYdJg9FeFIXO-y3vOUXPF7JJrsPG0zLnfTo_ilEtw0qlGEaG8_nhHePq8R6lRjotnTP_c4/s1600/Google+Announces+Nogotofail+-+A+Network+Traffic+Security+Testing+Tool.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Google Announces Nogotofail - A Network Traffic Security Testing Tool" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhydaHzMHltmDS5ktgt0XQFAwis3WY0o-9_Q6SrzOJ7rB3qPXCq-pPcKbttrW2lgv6SwPEUjvbYdJg9FeFIXO-y3vOUXPF7JJrsPG0zLnfTo_ilEtw0qlGEaG8_nhHePq8R6lRjotnTP_c4/s1600/Google+Announces+Nogotofail+-+A+Network+Traffic+Security+Testing+Tool.jpg" title="" width="400" /></a></div> <br /> <br /> Google announces a new security tool that help developers to detect security bugs in their applications.<br /> <br /> The Android Security Team has made a new tool,know as "<b>Nogotofail</b>",that provides an easy way to confirm that device that you are using are safe against TLS/SSL vulnerabilities.Recently Google security researchers discovered a new bug in SSL 3.0 which was dubbed as <a href="http://www.trickbug.com/2014/10/ssl-30-vulnerability-in-design.html"><span style="color: red;">"<b>POODLE</b>"</span></a>.</div> <div div="" id="ad3" style="float: left; padding: 10px;"> <br /> The open source tool is available on <a href="https://github.com/google/nogotofail"><span style="color: red;">Github</span></a>so that anybody can use this tool to check their applications,contribute new features..This tool works on almost every device running on Android,iOS,Linux,Windows,Chrome OS,OS X,in fact any device you use to connect to the Internet.<br /> <br /> "Google is committed to increasing the use of TLS/SSL in all applications and services.But HTTPS everywhere is not enough: it also need to be used correctly.Most platforms and devices have secure defaults,but some applications and libraries override the defaults for the worse,and in some instances we've seen platforms make mistakes as well.As application get more complex,connect to more services,and use more third party libraries,it become easier to introduce these type of mistakes.",said Chad Brubaker (Android Security Engineer).<br /> <br /> Chad also says that it is using this tool internally for some time and have worked with many web developer to improve the security of their apps.<br /> <br /> Nogotofail tool require Python 2.7 and pyOpenSSL>=0.13.Nogotofail tool is composed of an on-path network Man in The Middle (MiTM) and optional clients for the devices being tested.</div> </div>

Google Announces Nogotofail - A Network Traffic Security Testing Tool

Google announces a new security tool that help developers to detect security bugs in their applications. The Android Security Team...

Read more »

Indian Hacker defaces 2 Pakistan Government Website

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHz-2OsCBm3gqpklU0hh-K2Svivor5bErgb1cbIS2TxN1HzdidXv64yCKuvyMcoVP6i7W2VTPtkYk0ewYeGJ2r1v72upW2HOe7IB3WjF6_hjTfFVifbOJQMi_HFXKdJfkLQxmmUujmWMGn/s1600/Indian+Hacker+defaces+2+Pakistan+Government+Website.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Indian Hacker defaces 2 Pakistan Government Website" border="0" height="160" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHz-2OsCBm3gqpklU0hh-K2Svivor5bErgb1cbIS2TxN1HzdidXv64yCKuvyMcoVP6i7W2VTPtkYk0ewYeGJ2r1v72upW2HOe7IB3WjF6_hjTfFVifbOJQMi_HFXKdJfkLQxmmUujmWMGn/s1600/Indian+Hacker+defaces+2+Pakistan+Government+Website.jpg" title="" width="400" /></a></div> <br /> <br /> Indian Hacker known as "<b>SaHoo</b>" hacked and Defaced 2 Pakistani Official Government Websites as a Payback for Hacking Indian Websites by Pakistani Hackers who recently hacked some Indian Websites. An image of Indian National Flag has also been posted with Indian National Anthem (as background music). The Hacker posted the following message on the hacked websites:<br /> <center> </center> <br /> <blockquote class="tr_bq"> "#Payback for Hacking Indian Websites <br /> Pakistani hackers, Stop Hacking Indian Websites or else you will see some more high profile hacks...!<br /> <br /> THIS IS JUST A WARNING!!!<br /> <br /> STAY AWAY FROM INDIAN CYBERSPACE<br /> <br /> You wont get Kashmir. KASHMIR belongs to INDIA and no one can separate it from us.<br /> <br /> Laughing at your security since, 1947.<br /> <br /> Indian Hacker ~SaHoo~ was here!!!<br /> <br /> Remember my name, I will be back soon...:D"</blockquote> <br /> <h3 style="text-align: left;"> Website hacked by SaHoo:</h3> <br /> Trade Development Authority of Pakistan -<br /> Link: <a href="http://www.tdap.gov.pk/">www.tdap.gov.pk</a><br /> Mirror: <a href="http://www.zone-h.com/mirror/id/23225376">http://www.zone-h.com/mirror/id/23225376</a><br /> <br /> <br /> FATA Education Foundation -<br /> Link: <a href="http://www.fef.gov.pk/">www.fef.gov.pk</a><br /> Mirror: <a href="http://www.zone-h.com/mirror/id/23225371">http://www.zone-h.com/mirror/id/23225371</a><br /> <br /> <br /> The cyber war between Indian and Pakistani hackers is unlikely to stop any time soon. There are several groups on both sides that continue to hack the other country's websites in an effort to show their superiority.</div> </div>

Indian Hacker defaces 2 Pakistan Government Website

Indian Hacker known as " SaHoo " hacked and Defaced 2 Pakistani Official Government Websites as a Payback for Hacking Indi...

Read more »

Hackers can steal $999,999 from Visa Contactless Payment Card

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJPhmQMXCFMYMzYB_FaTel9QbvWBQrTF89PhWYXwdT9GHWLhDP9hxzs4q0W-SNTudaFkFSWqHBIAia6I-yYGvc0onuBzxvqjSicBd6zYOumHH-DfknJyHJL-zrAh9aWmxlrPo1MZ2tFkvG/s1600/Hackers+can+steal+$999,999+from+Visa+Contactless+Payment+Card.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hackers can steal $999,999 from Visa Contactless Payment Card" border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJPhmQMXCFMYMzYB_FaTel9QbvWBQrTF89PhWYXwdT9GHWLhDP9hxzs4q0W-SNTudaFkFSWqHBIAia6I-yYGvc0onuBzxvqjSicBd6zYOumHH-DfknJyHJL-zrAh9aWmxlrPo1MZ2tFkvG/s1600/Hackers+can+steal+$999,999+from+Visa+Contactless+Payment+Card.jpg" title="" width="400" /></a></div> A recent security research has found potential flaw in Visa's contactless payment card.Security researchers from Newcastle University in UK have found a new way to steal large amount to money.<br /> <br /> Contactless payment cards are meant to have a limit of £20 per purchase in UK,without typing their PIN.By exploiting this vulnerability<br /> <div style="float: right; padding: 10px;"> </div> attacker can make a transfer of $999,999 by converting local currency into foreign currency.<br /> <br /> "With just a mobile phone we created a POS terminal that could read a card through a wallet,All the checks are carried out on the card rather than the terminal so at the point of transaction,there is nothing to raise suspicious.By pre-setting the amount you want to transfer,you can bump your mobile against someone's pocket or swipe your phone over a wallet left on a table and approve a transaction.In our test,it took less than a second for the transaction to be approved.",said Martin Emms(lead researcher of the project).<br /> <br /> Security experts are worried about the security weakness in Visa's contactless payment cards.<br /> <br /> <blockquote class="tr_bq"> "Our research has identified a real vulnerability in the payment protocol,which could open the door to potential fraud by criminals who are constantly looking for ways to breach the system",Emms said.</blockquote> Visa Europe said that they have reviewed the report submitted by Newcastle and now it is updating its protection to make transaction more safer. </div>

Hackers can steal $999,999 from Visa Contactless Payment Card

A recent security research has found potential flaw in Visa's contactless payment card.Security researchers from Newcastle Univer...

Read more »

Rootpipe critical security flaw in Mac OS X Yosemite

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <br /> <br /> <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody> <tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj25xnMGu9bmh7lkLvxzSbQr9Q3SS4-fYXjkE1tpGuKRKFJNmvYcGMJSwqFF21NvHLSJYIGHH6zFIVZYaoYiTx6y45jbJr3xxoclVXRaJUOvFwNgWFU4q_ifyXGARsguq6qlzS2BAjIg0nk/s1600/Rootpipe+critical+security+flaw+in+Mac+OS+X+Yosemite.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Rootpipe critical security flaw in Mac OS X Yosemite" border="0" height="273" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj25xnMGu9bmh7lkLvxzSbQr9Q3SS4-fYXjkE1tpGuKRKFJNmvYcGMJSwqFF21NvHLSJYIGHH6zFIVZYaoYiTx6y45jbJr3xxoclVXRaJUOvFwNgWFU4q_ifyXGARsguq6qlzS2BAjIg0nk/s1600/Rootpipe+critical+security+flaw+in+Mac+OS+X+Yosemite.jpg" title="" width="400" /></a></td></tr> <tr><td class="tr-caption" style="text-align: center;">Rootpipe critical security flaw in Mac OS X Yosemite</td></tr> </tbody></table> Swedish security researcher Emil Kvarnhammar from Truesec has discovered a critical vulnerability in Apple's Mac OS X 10.10 Yosemite,dubbed as "<b>Rootpipe</b>".By this vulnerability attacker can escalate administrative privileges on a infected computer and can gain root access.<br /> <center> <blockquote class="twitter-tweet" lang="en"> Details on the <a href="https://twitter.com/hashtag/rootpipe?src=hash">#rootpipe</a> exploit will be presented, but not now. Let's just give Apple some time to roll out a patch to affected users.<br /> — Emil Kvarnhammar (@emilkvarnhammar) <a href="https://twitter.com/emilkvarnhammar/status/522646505128480768">October 16, 2014</a></blockquote> <script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script> </center> <div style="float: left; padding: 10px;"> <br /> Once hacker exploited this bug on a compromised machine he can install malicious software,steal sensitive information or make changes to your system without the need of password.<br /> <br /> "It all started in when I was preparing for two security events, one in Stockholm and one in Malmö," Emil says. "I wanted to show a flaw in Mac OS X,but relatively few have been published.There are few 'proof-of-concepts' online,but the latest I found affected the older 10.8.5 version of OS X.I couldn't find anything similar for 10.9 or 10.10."<br /> <br /> He tested the vulnerability on 10.8,10.9 and 10.10 version of  OS X.He also said that this vulnerability is existed since 2012.<br /> <br /> Mac users keep their system more updated than Windows users,Emil says and he wanted to find a vulnerability that would affect current users of OS X.<br /> <br /> "I started looking at admin operations and found a way to create a shell with root privileges.It took a few days of binary analysis to find the flaw,and I was pretty surprised when I found it.",Emil said.<br /> <br /> <h3 style="text-align: left;"> Apple's Response</h3> <div> Emil already informed Apple about this vulnerability.Apple asked him for more details about the bug and said not to disclose this until January 2015.</div> <blockquote class="tr_bq"> "The current agreement with Apple is to disclose all details in mid-January 2015.This might sound like a long wait,but hey time flies.It's important that they have time to patch,and that the patch is not available for some time.",Emil said.</blockquote> Emil also uploaded a demo video of this vulnerability.Just have a look.<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/fCQg2I_pFDk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div> <br /></div> </div>

Rootpipe critical security flaw in Mac OS X Yosemite

Rootpipe critical security flaw in Mac OS X Yosemite Swedish security researcher Emil Kvarnhammar from Truesec has discovered a cri...

Read more »

The Pirate Bay co-founder Fredrik Neij arrested in Asia

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBIx7dydbXF06VBkrPybochrqnW_kroQJTA3Xx2ZQFDKQK15d-fyTbRgHKuJjdXPUtYZfV1Psrt2LrKH09Wd8OpwiyqnXbkod6yWJUXgsU1srkwGz9aTKasUGcYb6N6an3lUl1oT-Ifafs/s1600/The+Pirate+Bay+co-founder+Fredrik+Neij+arrested+in+Asia.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="The Pirate Bay co-founder Fredrik Neij arrested in Asia" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBIx7dydbXF06VBkrPybochrqnW_kroQJTA3Xx2ZQFDKQK15d-fyTbRgHKuJjdXPUtYZfV1Psrt2LrKH09Wd8OpwiyqnXbkod6yWJUXgsU1srkwGz9aTKasUGcYb6N6an3lUl1oT-Ifafs/s1600/The+Pirate+Bay+co-founder+Fredrik+Neij+arrested+in+Asia.jpg" title="" width="400" /></a></div> <br /> <br /> Fredrik Neij,alias TiAMO, is the co-founder of The Pirate Bay has been arrested in Asia.Neij had moved to Laos to avoid jail sentenced for his involvement in The Pirate Bay.While driving accross the border from Laos into Thailand,Neij was arrested by Thailand border police under an Interpol warrant.</div> <div div="" id="ad3" style="float: left; padding: 10px;"> <br /> All Pirate Bay co-founders went their separate ways with Peter Sunde in Europe,Gottfrid Svartholm in Cambodia and Fredrik Neij moved to Asia.<br /> <br /> In 2009,Swedish Court imprisoned Neij and other Pirate Bay co-founders for aiding copyright infringement.He migrated the counter after being released on bail.<br /> <br /> According to Thai authorities Neij and his family members had crossed the border nearly 30 times before being caught.<br /> <br /> Peter Sunde is also in custody when he was arrested on May 31,2014 on a farm in Sweden.Pirate Bay co-founder Gottfrid Svartholm also <a href="http://www.thecybergeeks.net/2014/10/the-pirate-bay-co-founder-found-guilty-in-hacking-case.html"><span style="color: red;">arrested in a hacking case</span></a>.<br /> <br /> Police Major General Chartchai Eimsaeng said,"Hans Fredrik Lennart Neij, whol uses the alias TiAMO, was detained by immigration police at a checkpoint in Thailand's north-eastern province of Nong Khai."</div> </div>

The Pirate Bay co-founder Fredrik Neij arrested in Asia

Fredrik Neij,alias TiAMO, is the co-founder of The Pirate Bay has been arrested in Asia.Neij had moved to Laos to avoid jail sentenc...

Read more »

Nigerian Cyber Army defaced Indiana Department of Education website

<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizWHigfsNll0TLdjUFUVvAe8ZzXgg6aLoO-3dMmZRJgGzLH7YLiT2uFcad8Xr3o8ORNTAtMPPipnL3jW2t-hF21sQDJT3T2-SA_Ik6RKUWkcVp1yjRsoPEzc5WpqQEI5fB0ou9tnmkeNyV/s1600/Nigerian+Cyber+Army+defaced+Indiana+Department+of+Education+website.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Nigerian Cyber Army defaced Indiana Department of Education website" border="0" height="167" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizWHigfsNll0TLdjUFUVvAe8ZzXgg6aLoO-3dMmZRJgGzLH7YLiT2uFcad8Xr3o8ORNTAtMPPipnL3jW2t-hF21sQDJT3T2-SA_Ik6RKUWkcVp1yjRsoPEzc5WpqQEI5fB0ou9tnmkeNyV/s1600/Nigerian+Cyber+Army+defaced+Indiana+Department+of+Education+website.PNG" title="" width="400" /></a></div> <br /> Group of hackers who call themselves Nigerian Cyber Army (NCA) defaced official website of Indiana Department of Education on Monday morning.The website has been hacked due to an apparent Drupal vulnerability.</div> <div style="float: left; padding: 10px;"> <br /> But Department of Education refused that there is no sign that any data hosted on the website was compromised.After the defacement Department's technological staff has taken the website down temporarily. <br /> <br /> Hacker named cY63r M4R$#4L is responsible for this defacement as mentioned in the deface page. <br /> <br /> Recently Pak Cyber Mafia Hackers <a href="http://www.thecybergeeks.net/2014/11/pak-cyber-mafia-hackers-defaces-2-gujarat-government-websites.html">defaced two Indian government website</a>. <br /> The website was offline on Monday .However,website is currently working properly. <br /> <br /> Targeted website<br /> <a href="http://www.doe.in.gov/">www.doe.in.gov</a><br /> Mirror<br /> <a href="http://www.zone-h.org/mirror/id/23216751">http://www.zone-h.org/mirror/id/23216751</a></div> </div>

Nigerian Cyber Army defaced Indiana Department of Education website

Group of hackers who call themselves Nigerian Cyber Army (NCA) defaced official website of Indiana Department of Education on Monday ...

Read more »

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijHFeimvJgQlzofUtPy1Ef8i72Sr_PV1Z5eZGczPKFhj-aA5pVxziyPJ3nD_P47IDdsfcQ30jrDy73KCdUfOJw3SlyvMsOI23jMJVVzoz03ZPYnMclHK6ApWz2srzJVnDirrwJgFxPDB_F/s1600/Pak+Cyber+Mafia+Hackers+defaces+2+Gujarat+Government+Websites.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijHFeimvJgQlzofUtPy1Ef8i72Sr_PV1Z5eZGczPKFhj-aA5pVxziyPJ3nD_P47IDdsfcQ30jrDy73KCdUfOJw3SlyvMsOI23jMJVVzoz03ZPYnMclHK6ApWz2srzJVnDirrwJgFxPDB_F/s1600/Pak+Cyber+Mafia+Hackers+defaces+2+Gujarat+Government+Websites.jpg" title="" width="400" /></a></div> <br /> <b><br /></b> <b>Pak Cyber Mafia Hackers (PCMH)</b>,Pakistan based hackers group defaced two Gujarat Government Websites as well as three other Indian websites yesterday and wrote about Prime Minister Narendra Modi on their home pages. <b> </b><br /> <div align="center"> <br /> <b><u>List of 5 website hacked by the Group</u></b><br /> <ul style="text-align: left;"> <li><a href="http://www.egyan.org.in/">www.egyan.org.in</a>   Mirror-<a href="http://zone-h.org/mirror/id/23203353" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23203353</a></li> <li><a href="http://www.apmcahmedabad.com/">www.apmcahmedabad.com</a>  Mirror-<a href="http://zone-h.org/mirror/id/23203388" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px; text-decoration: none;" target="_blank">http://zone-h.org/mirror/id/23203388</a></li> <li><a href="http://www.listtopcolleges.in/">www.listtopcolleges.in</a>  Mirror-<a href="http://zone-h.org/mirror/id/23203372" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23203372</a></li> <li><a href="http://www.delhi-pharma.com/">www.delhi-pharma.com</a>  Mirror-<a href="http://zone-h.org/mirror/id/23202977" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23202977</a></li> <li><a href="http://www.atnnetwork.in/">www.atnnetwork.in</a>  Mirror-<a href="http://zone-h.org/mirror/id/23202733" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px; text-decoration: none;" target="_blank">http://zone-h.org/mirror/id/23202733</a></li> </ul> The hacker named Pk_Robot from PCMH is responsible for this defacement.<br /> <div> After Gujarat government and APMC authorities came to know about the defacement,authorities made their website offline and is currently under maintenance..<br /> <div> <br /></div> <div> <blockquote class="tr_bq"> "As soon as we learned about the hacking of our website,we have shut it down for maintenance.We have removed the material posted by hackers.On Monday,we will call a meeting and lodge an FIR. "said Ketan Patel APMC official.</blockquote> However,Gujarat government immediately removed the deface page after it was hacked by hackers.<br /> <blockquote class="tr_bq"> We removed the page uploaded by hackers to our website yesterday itself.We have also relaunched the website after thorough maintenance.We will do an internal inquiry and decide about filling a police complaint."said Bhupendrasinh Chudasama (State Education Minister).</blockquote> <ul style="text-align: left;"> </ul> <br /></div> </div> </div> </div>

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

Pak Cyber Mafia Hackers (PCMH) ,Pakistan based hackers group defaced two Gujarat Government Websites as well as three other Indian we...

Read more »