2014 | The Cyber Geeks - Hacking,Technology and Cyber Security News

Globe Telecom website hacked by Bloodsec International

Globe Telecom website hacked by Bloodsec International

Globe Telecom is one of the most popular Internet Service Provider (ISP) in Philippines.Hacker from the team BloodSec International defaced 4 subdomains of Globe telecom website. Hacker was unhappy …

30 Nov 2014

Firing Range- Open Source Vulnerability Scanner

Firing Range- Open Source Vulnerability Scanner

Google released a new security testing tool called Firing Range which help developers to evaluate Cross-site Scripting (XSS) and other vulnerabilities that are seen most frequently in web apps. Acco…

20 Nov 2014

Let's Encrypt To Provides Free SSL Certificate

Let's Encrypt To Provides Free SSL Certificate

The non-profit company Electronic Frontier Foundation (EFF) has partnered with Mozilla,Akamai,IdenTrust and Cisco to offer free SSL certificate for webmasters at the beginning of 2015. Until now,swit…

19 Nov 2014

Tor users can be easily de-anonymize

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNeqid-mJKNs6jCuEbeNRdFuF_StTdefhdt9oeuCEejSi7xTlPMCouinfCFPfsQl7wSuIuATxHU7HIOw3xzgezQHwNvwbuQm7fajnn5r-C1hk4Cs224PJpr-CrkQzs0rLyY4tRIo3gAsm_/s1600/Tor+users+can+be+easily+de-anonymize.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Tor users can be easily de-anonymize" border="0" height="299" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNeqid-mJKNs6jCuEbeNRdFuF_StTdefhdt9oeuCEejSi7xTlPMCouinfCFPfsQl7wSuIuATxHU7HIOw3xzgezQHwNvwbuQm7fajnn5r-C1hk4Cs224PJpr-CrkQzs0rLyY4tRIo3gAsm_/s1600/Tor+users+can+be+easily+de-anonymize.jpg" title="" width="400" /></a></div>
<br />
<br />
According to new report researchers found a way by which we can get real identity of Tor user by exploiting the traffic analysis software <b>Netflow</b> that Cisco has built in its router protocols.<br />
<br />
The research was conducted by Professor Sambuddho Chakravary,formal researcher at Columbia University's Network Security Lab and currently he is researching about Network Anonymity and Privacy at Indraprastha Institute of Information Technology,Delhi.</div>
<br />
<br />
Chakravarty used a technique,in order to determine the tor relays which involved a modified public Tor server running on Linux, accessed by the victim client, and modified Tor node that can form one-hop circuits with arbitrary legitimate nodes.
<br />
<blockquote class="tr_bq">
"The server modulates the data being sent back to the client, while the corrupt Tor node is used to measure delay between itself and Tor nodes," researchers wrote in PDF. "The correlation between the perturbations in the traffic exchanged with a Tor node, and the server stream helped identify the relays involved in a particular circuit."</blockquote>
According to the research, to carry out large-scale traffic analysis attacks in the Tor environment one would not necessarily need the resources of a nation state, even a single AS may observe a large fraction of entry and exit node traffic, as stated in the paper – a single AS (Autonomous System) could monitor more than 39% of randomly-generated Tor circuits.
<br />
<blockquote class="tr_bq">
It is not even essential to be a global adversary to launch such traffic analysis attacks," Chakravarty wrote. "A powerful, yet non- global adversary could use traffic analysis methods […] to determine the various relays participating in a Tor circuit and directly monitor the traffic entering the entry node of the victim connection."</blockquote>
The technique depends on injecting a repeating traffic pattern into the TCP connection that it observes as originating from the target exit node, and then correlating the server’s exit traffic for the Tor clients, as derived from the router’s flow records, to identify Tor client.
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-6FHK9hoJy8I/VGt6ftbhGrI/AAAAAAAADoU/GOj5HxfvZ9w/s1600/figure.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="350" src="http://4.bp.blogspot.com/-6FHK9hoJy8I/VGt6ftbhGrI/AAAAAAAADoU/GOj5HxfvZ9w/s1600/figure.png" width="400" /></a></div>
<br />
Tor is vulnerable to this kind of traffic analysis because it is designed as low-latency anonymous communication networks.<br />
<blockquote class="tr_bq">
"To achieve acceptable quality of service, [Tor attempts] to preserve packet interarrival characteristics, such as inter-packet delay. Consequently, a powerful adversary can mount traffic analysis attacks by observing similar traffic patterns at various points of the network, linking together otherwise unrelated network connections," Chakravarty explains.</blockquote>
This research does not need large scale resources.But this is good for law enforcement to stop illegal activities hiding behind the Tor network.<br />
<br />
However,one of the Tor Project member 'Arma' said they are already aware of this network analysis attack.<br />
<br />
<blockquote class="tr_bq">
"It's great to see more research on traffic correlation attacks, especially on attacks that don't need to see the whole flow on each side. But it's also important to realise that traffic correlation attacks are not a new area."said Arma on a blog post.</blockquote>
<blockquote class="tr_bq">
"The discussion of false positives is key to this new paper too: Sambuddho's paper mentions a false positive rate of 6%. That sounds like it means if you see a traffic flow at one side of the Tor network, and you have a set of 100000 flows on the other side and you're trying to find the match, then 6000 of those flows will look like a match. It's easy to see how at scale, this "base rate fallacy" problem could make the attack effectively useless."said Arma.
</blockquote>
</div>

Tor users can be easily de-anonymize

According to new report researchers found a way by which we can get real identity of Tor user by exploiting the traffic analysis software Netflow that Cisco has built in its router protocols. The res…

18 Nov 2014

OnionDuke APT Malware through Tor Nodes

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU7CDAYbSZGM_hEBaBiXrwFZ1n-i7GrVC1H63nOpBkVqmt85tsHeyAIc8JHDe8D8DiQHeTVItnGQ2-cFd0xCIdRp83W8HSdR0MYdNRVadiBo1R1gSUqrj9ZlveaGB73OIJPhzV9_1ckLoe/s1600/onionduke-17112014-big.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="OnionDuke APT Malware through Tor Nodes" border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU7CDAYbSZGM_hEBaBiXrwFZ1n-i7GrVC1H63nOpBkVqmt85tsHeyAIc8JHDe8D8DiQHeTVItnGQ2-cFd0xCIdRp83W8HSdR0MYdNRVadiBo1R1gSUqrj9ZlveaGB73OIJPhzV9_1ckLoe/s1600/onionduke-17112014-big.jpg" title="" width="400" /></a></div>
<br />
Security Researchers of Leviathan Security Group discovered a malicious Tor exit node that wraps Windows executable files inside a second, malicious Windows executable.When Artturi Lehtiö of F-secure made a deep research he found that the exit node was actually linked to the notorious Russian APT family MiniDuke.</div>
<br />
MiniDuke which previously infected government agencies and organisation in more than 20 countries through a modified PDF email attachment. MiniDuke malware is written in assembly language and usually it is very small in size.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
The rogue Russian exit node identified by Pitts was banned from the Tor network, but the new research carried out by F-Secure has revealed that the malicious Tor exit node is specifically being used to plant a new variant of the MiniDuke advanced persistent threat (APT) malware which the researcher has dubbed 'OnionDuke'.
<br />
<br />
However OnionDuke is completely different malware family from MiniDuke.The relation was found beacuse both seemed to use the same Command and Control (C&C) chain.
<br />
<blockquote class="tr_bq">
“This strongly suggests that although OnionDuke and MiniDuke are two separate families of malware, the actors behind them are connected through the use of shared infrastructure,” F-Secure researchers said in a blog post.</blockquote>
Malware has the ability to steal login credentials from the victim machine and components dedicated to gathering further information on the compromised system like the presence of antivirus software or a firewall.<br />
<blockquote class="tr_bq">
During our research, we have also uncovered strong evidence suggesting that OnionDuke has been used in targeted attacks against European government agencies, although we have so far been unable to identify the infection vector(s). Interestingly, this would suggest two very different targeting strategies. On one hand is the "shooting a fly with a cannon" mass-infection strategy through modified binaries and, on the other, the more surgical targeting traditionally associated with APT operations.</blockquote>
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
According to security researchers when victim attempts to download an executable via the malicious Tor exit node, what they actually receive is an executable "wrapper" that embeds both the original executable and a second, malicious executable.<br />
<br />
<blockquote class="tr_bq">
Upon execution, the wrapper will proceed to write to disk and execute the original executable, thereby tricking the user into believing that everything went fine. However, the wrapper will also write to disk and execute the second executable.</blockquote>
Those who use Tor anonymity network and download executable from an HTTPS-protected server and those using a virtual private network were not affected by the malware.
</div>

OnionDuke APT Malware through Tor Nodes

Security Researchers of Leviathan Security Group discovered a malicious Tor exit node that wraps Windows executable files inside a second, malicious Windows executable.When Artturi Lehtiö of F-secure…

18 Nov 2014

BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox

BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox

A new variant of BASHLITE malware targeting devices running on BusyBox was spotted by security researcher at Trend Micro shortly after the public disclosure of the Shellshock vulnerability. The mal…

17 Nov 2014

Spam mails may infect your device with malware

Spam mails may infect your device with malware

A hike in the volume of spammed messages that pretend to come for the messaging service Viber. Viber is a messaging app which is available for almost every platform that allows users to make free cal…

17 Nov 2014

US State Department Hacked

US State Department Hacked

According to a new report US State Department was hacked at the same time when hackers targeted unclassified White House computers but it was noticed last week. The state department has taken the unp…

17 Nov 2014

Anonymous launches #OpKKK and #HoodsOff

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBHiW1BuYKvF0BplZNg5rmREcTXtqiroAPAPjxxVTETn3sYCvqmf7AJJYjgYHVnYBi7sXV97ACtFvi203KWgcnlRviotU3VkI2qH37aCiz_6806-BTQqnDmEYq8NpuD2N7Wa1iA3DizSx1/s1600/Anonymous+launches+%23OpKKK+and+%23HoodsOff.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Anonymous launches #OpKKK and #HoodsOff" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBHiW1BuYKvF0BplZNg5rmREcTXtqiroAPAPjxxVTETn3sYCvqmf7AJJYjgYHVnYBi7sXV97ACtFvi203KWgcnlRviotU3VkI2qH37aCiz_6806-BTQqnDmEYq8NpuD2N7Wa1iA3DizSx1/s1600/Anonymous+launches+%23OpKKK+and+%23HoodsOff.png" title="" width="400" /></a></div>
<br />
<br />
After shooting of Mike Brown communal tension have occurred in certain parts of America.Taking advantage of this, the Klu Klux Klan better known as the KKK have risen back with the white supremist agenda.The hacktivist collective Anonymous has targeted the infamous Ku Klux Klan.</div>
<br />
Anonymous claims to have unmasked the top leadership of the Klu Klux Klan after the KKK threatened violence against the Ferguson protesters.
<br />
<br />
Anonymous called its members to strike down on KKK groups through #OpKKK and #HoodsOff. While announcing the launch of #OpKKK and #HoodsOff,hackers said they will launch DDoS attacks to take down KKK website.
<br />
<center>
<blockquote class="twitter-tweet" lang="en-gb">
<a href="https://twitter.com/hashtag/OpKKK?src=hash">#OpKKK</a> <a href="https://twitter.com/hashtag/HoodsOff?src=hash">#HoodsOff</a> This is a call to all <a href="https://twitter.com/hashtag/Anonymous?src=hash">#Anonymous</a> members. 
DDos all KKK sites ! The time for the Cyber War has come. <a href="http://t.co/7Hm4SkcU0b">pic.twitter.com/7Hm4SkcU0b</a><br />
— #OpKKK (@OperationKKK) <a href="https://twitter.com/OperationKKK/status/533804763553357824">November 16, 2014</a></blockquote>
<script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script>
</center>
<h3 style="text-align: left;">
First website targeted by Anonymous hackers.</h3>
<center>
<blockquote class="twitter-tweet" lang="en-gb">
<a href="https://twitter.com/hashtag/Anonymous?src=hash">#Anonymous</a> <a href="https://twitter.com/hashtag/OpKKK?src=hash">#OpKKK</a> <a href="https://twitter.com/hashtag/HoodsOff?src=hash">#HoodsOff</a> Cyber War - Day 1
Target #1: <a href="http://t.co/VOC8eu1iep">http://t.co/VOC8eu1iep</a>
IP: 72.167.191.69
FIRE<br />
— #OpKKK (@OperationKKK) <a href="https://twitter.com/OperationKKK/status/533809116859207681">November 16, 2014</a></blockquote>
<script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script>
</center>
<div style="text-align: left;">
The shooting of Mike Brown On August 9,2014 in Ferguson,Missouri,a suburb of St. Louis. Michael Brown was 18 year black man who was fatally shot by Darren Wilson a white police officer.It was then this incident was  converted into racial war both physically and on cyber space.</div>
<br />
<h3 style="text-align: left;">
Video given by Anonymous on the launch of #OpKKK and #HoodsOff .</h3>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/36085bv8ceY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div>
<br /></div>

Anonymous launches #OpKKK and #HoodsOff

After shooting of Mike Brown communal tension have occurred in certain parts of America.Taking advantage of this, the Klu Klux Klan better known as the KKK have risen back with the white supremist ag…

16 Nov 2014

RedHack Hacks into Turkey Electricity Transmission Company

RedHack Hacks into Turkey Electricity Transmission Company

Turkey Anonymous Hacking Team hacked and breached the official website of Turkish Electric Transmission Company.deleting 1.5 trillion Liras ($668.5 billion) worth debt of Soma region.this is a seriou…

15 Nov 2014

WireLurker Creator and Distributer Arrested in China

WireLurker Creator and Distributer Arrested in China

Beijing Municipal Public Security Bureau along with cyber security company Qihoo 360 arrested Chen, Lee and Wang suspected of creating and distributing WireLurker malware.WireLurker which infected iO…

15 Nov 2014

US Government using Spy Planes to Collect Mobile Phone Data

US Government using Spy Planes to Collect Mobile Phone Data

The United States government is using spy planes equipped with Dirtbox to collect mobile phone information in US. Dirtbox is a small device which is used to mimic mobile phone tower transmissions fro…

15 Nov 2014

Federal Transit Administration Website Hacked by Chinese Hacker

Federal Transit Administration Website Hacked by Chinese Hacker

Chinese hacker with code name "M4ix#4s" from 1937 CN Team defaced the official website of Federal Transit Administration (FAT) of US department of Transportation.Hacker left the note in Chinese langu…

14 Nov 2014

Google Launches Underwater Street View

<br />
<br />
Google took this step to gave people a chance to experience the natural wonder.You can access Street View of Great Barrier Reef through <a href="https://www.google.com/maps/views/streetview/oceans"><span style="color: red;">Google Maps</span></a>.</div>

Google Launches Underwater Street View

Google Inc. launched the first underwater Street View of Great Barrier Reef.Catlin Seaview Survey teamed up with Google to create world's First underwater Street View.The site will also log how the r…

14 Nov 2014

Microsoft Patches 19 year Old Bug

Microsoft Patches 19 year Old Bug

Microsoft Corporation has released an update to patch a security flaw in Windows that remained unnoticed for 19 years.This vulnerability was present in all versions of Windows since Windows 95 that a…

13 Nov 2014

Chinese Hackers Hacked US Weather Systems

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Chinese Hackers Hacked US Weather Systems" border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" title="" width="640" /></a></div>
<br />
<br />
Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,aviation,shipping and scores of other crucial uses,official said.The intrusion occurred in late September but officials gave no hint they had a problem until October 20.<br />
<div style="float: left; padding: 10px;">
<br />
The <b>National Oceanic and Atmospheric Administration (NOAA)</b>, which includes National Weather Service,did not say its system were compromised.Some reports also says that agency did not notify the proper authorities when it learned of the attack.
<br />
<br />
NOAA officials declined to discuss the suspected source of the attack, whether it affected classified data and the delay in notification.In a statement released Wednesday, NOAA spokesman Scott Smullen acknowledged the hacks and said “incident response began immediately.” He said all systems were working again and that forecasts were accurately delivered to the public. Smullen declined to answer questions beyond his statement, citing an investigation into the attack.
<br />
<br />
But NOAA confirmed to U.S. Rep. Frank Wolf,  that China was behind the attack, the Republican Congressman from Virginia said in a separate interview.Wolf has a long-standing interest in cybersecurity and asked NOAA about the incident.“NOAA told me it was a hack and it was China,” said Wolf, who also scolded the agency for not disclosing the attack “and deliberately misleading the American public in its replies.”
<br />
<br />
Wolf said "A hack could steal technical insights or cull isolated information that may not look significant until they’re put with something else and then they become valuable. The Chinese are stealing us blind.”
<br />
<br />
Commerce Department Inspector General Todd Zinser said his office was not notified of the breach until Nov. 4, well after he believes the hack occurred. He said that is a violation of agency policy requiring any security incident to be reported to his office within two days of discovering the problem.<br />
<blockquote class="tr_bq">
“We’re in the process of looking into the matter, including why NOAA did not comply with the requirements to notify law enforcement about the incident,” Zinser said.</blockquote>
NOAA officials also would not say whether the attack removed material or inserted malicious software in its system, which is used by civilian and military forecasters in the United States and also feeds weather models at the main centers for Europe and Canada.The attack on NOAA joins a spate of cyber-espionage on federal systems revealed recently, including an attack suspected from Russia that breached unclassified <a href="http://www.trickbug.com/2014/10/white-house-computers-breached-by-hackers.html"><span style="color: red;">White House Computer Networks</span></a>.
<br />
<br />
NOAA’s National Ice Center Web site also was down for a week in late October. The center is a partnership with the Navy and Coast Guard to monitor conditions for navigation.The two-day outage skewed the accuracy of National Weather Service long-range forecasts slightly, according to NOAA.Security experts compares the security used by NOAA to secure their system with an example of house protected by just a screen door.
<br />
<br />
Weather satellites orbit hundreds to thousands of miles above Earth and offer continuous views of weather systems, such as hurricanes, thunderstorms and cold fronts, while also measuring temperature and moisture at different altitudes — all crucial bits that feed prediction models. To get that information to the public, NOAA makes satellite data and imagery publicly available through the Web, as well as file-transfer networks for downloads.NOAA satellites “provide critical data for forecasts and warnings that are vital to every citizen and to our economy as a whole,” NOAA Administrator Kathryn D. Sullivan said a year ago.
<br />
<br />
“The bad guys are increasingly having a hard time getting in the front of these agencies,”said Jacob Olcott, a cybersecurity consultant. “So they figure if I can’t get in the front door, I’d ride along in with someone who has trusted access and maybe ride that connection to bigger agencies.”<br />
<br />
“All the operational data sent via NOAA, which is normally an excellent service, was lost,” said Stephen English, head of the satellite section at the European Centre for Medium-Range Weather Forecasts in Reading, England. The center is renowned for running a highly advanced global weather prediction model that during Hurricane Sandy, for example, aided evacuations and preparations in the United States when it signaled that the superstorm would hit land rather than hook out to sea.
<br />
<br />
This is the 8th incident in recent weeks which has China's involvement in the attacks.
<br />
<center>

</center>
</div>
</div>

Chinese Hackers Hacked US Weather Systems

Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,aviation,shipping and scores of other crucial uses,official said.The i…

13 Nov 2014

Firefox Developer Edition

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRzFWdPtS0fUzFjZBCn-AoOfkHG6WpxWXDxMemQQoqZoCVQBPiBnqQm4RAQ6t9nTLnqC6wO1RkvS-OkqPNuYtFy79RgC4r7HRsnjHEbGKOgaxn3wUAfEcKbfe9ajcLhlxegbJ0qMgmd1ac/s1600/Firefox+Developer+Edition.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Firefox Developer Edition" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRzFWdPtS0fUzFjZBCn-AoOfkHG6WpxWXDxMemQQoqZoCVQBPiBnqQm4RAQ6t9nTLnqC6wO1RkvS-OkqPNuYtFy79RgC4r7HRsnjHEbGKOgaxn3wUAfEcKbfe9ajcLhlxegbJ0qMgmd1ac/s1600/Firefox+Developer+Edition.jpg" title="" width="320" /></a></div>
Mozilla Firefox released Firefox Developer Edition on its 10th anniversary as a gift for all developers.New Firefox developer edition uses the slogan "Built for those who built the Web".Mozilla Developer Edition is not aimed for developers only but also aimed privacy concerns.<br />
<div style="float: left; padding: 10px;">
Firefox developer edition is having dark colour theme.Mozilla added two new feature in developer edition ,"Valence and WebIDE".<br />
Valence enables you to debug you app on different browsers and devices including Chrome on Android and Safari on iOS.WebIDE enables you to run and debug Firefox OS apps using the Firefox OS simulator or a real Firefox OS device.Mozilla also added JavaScript Debugger,Network Monitor,Style Editor,Web Console,Page Inspector,Responsive Design View and Web Audio Editor.<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
Firefox added DuckDuckGo as pre-installed search options in Firefox.DuckDuckGo gives you search results without tracking you search results and other personal identity.Firefox Developer Edition comes with "Forget the Last" button which enables users to clear recent history and cookie in just one click.<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<blockquote class="tr_bq">
“Ten years ago, we built Firefox for early adopters and developers to give them more choice and control. Firefox integrated WebAPIs and Add-ons to enable people to get the most out of the Web. Now we’re giving developers the whole browser as a hard-hat area, allowing us to bring front and center the features most relevant to them. Having a dedicated developer browser means we can tailor the browsing experience to what developers do every day.”</blockquote>
Download <a href="https://www.mozilla.org/en-US/firefox/developer/"><span style="color: red;">Firefox Developer Edition</span></a> now. </div>
</div>

Firefox Developer Edition

Mozilla Firefox released Firefox Developer Edition on its 10th anniversary as a gift for all developers.New Firefox developer edition uses the slogan "Built for those who built the Web".Mozilla Devel…

12 Nov 2014

United Nation website hacked by AnonGhost

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJbMOFYSOXxqR4qVWqdJa0Mpu3ihsXDfbvYVhTgZI9tpY1v9YWcb7fAflwa-mxRQkkOXlPn1UIZ9bchI1Ij248nZZ3N_vnXileE5o9i6OiIirLLO6uuNs1Lv8rsgqHG7nAF2POlYN6tNh8/s1600/images.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="AnonGhost defaced Unite Nation website" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJbMOFYSOXxqR4qVWqdJa0Mpu3ihsXDfbvYVhTgZI9tpY1v9YWcb7fAflwa-mxRQkkOXlPn1UIZ9bchI1Ij248nZZ3N_vnXileE5o9i6OiIirLLO6uuNs1Lv8rsgqHG7nAF2POlYN6tNh8/s1600/images.jpg" title="" width="400" /></a></div>
<br />
<br />
AnonGhost defaced United Nation website which is used by officials to promote international co-operation.AnonGhost is defaced the website in the support of Palestine.Recently AnonGhost defaced <a href="http://www.trickbug.com/2014/11/anonghost-defaced-nottinghamshire-police-website.html"><span style="color: red;">Nottinghamshire website</span></a>.<br />
<div style="float: left; padding: 10px;">
<br />
AnonGhost posted the following message on the deface page.
<br />
<br />
We are the sound of the forgotten people, the freedom fighter in the cyberworld and our main target is Sionisme and israhell, if you are asking why your website got hacked by us, its basically because we want to share our message and show the world who we are, we are not looking for fame but we have a goal to achieve we supporte all hackers teams and we supporte all the freedom mouvement in the world. #OpSaveAlAqsa decided , Expect us!
<br />
<br />
This defacement was carried out under the mission <a href="http://www.trickbug.com/2014/10/anonghost-launches-opsavealaqsa.html"><span style="color: red;">#OpSaveAlAqsa</span></a>.<br />
<br />
Official Website of United Nations<br />
Link: <a href="http://sites.un.org/" rel="nofollow nofollow" style="background-color: white; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank"><span style="color: red;">http://sites.un.org/</span></a><br />
Mirror:<span style="color: red;"><a href="http://www.aljyyosh.org/mirror.php?id=190909">http://www.aljyyosh.org/mirror.php?id=190909</a></span><br />
<br />
AnonGhost defaced hundreds of website under the mission #OpSaveAlAqsa.List of some website hacked by AnonGhost.<br />
<br />
<ul style="text-align: left;">
<li>http://results.ed.gov/</li>
<li>http://www.judicialethicsopinions.ca.gov/</li>
<li>http://www.mmse.gov.mm/</li>
<li>http://www.ecd.gov.mm/</li>
<li>http://www.fdmoecaf.gov.mm/</li>
<li>http://www.ic4barolini.gov.it/</li>
<li>http://www.iahealthlink.gov/</li>
<li>http://www.txep.uscourts.gov</li>
<li>http://www.moep.gov.mm/index.php</li>
<li>http://www.libyanembassy-italy.gov.ly/ </li>
<li>http://eadp.westerncape.gov.za/</li>
<li>http://www.slims.gov.za/robots.txt</li>
<li>http://depts.washington.edu/nwmrc/node/50</li>
<li>http://kagizmangth.gov.tr/</li>
<li>http://www.asianpanorama.net/</li>
<li>http://www.swc-aleppo.gov.sy/</li>
<li>http://pers.nmis.gov.ph/</li>
<li>http://www.lga.gov.ph/</li>
<li>http://kalibo.gov.ph/</li>
<li>http://www.favicon.co.il/</li>
<li>http://caamt.gob.mx/</li>
<li>http://www.hoopa-nsn.gov/</li>
<li>http://sonoivu.caobang.gov.vn</li>
<li>http://bandantoc.caobang.gov.vn</li>
<li>http://www.rheacountytn.gov</li>
<li>http://www.clintonok.gov</li>
<li>http://cca.gov.in</li>
<li>http://www.sba.gov/</li>
<li>http://www.saee.gov.ua/</li>
<li>http://avokaturashtetit.gov.al/index.html</li>
<li>http://www.egy-mhe.gov.eg/</li>
<li>http://testdomain.edostate.gov.ng/index.php</li>
</ul>
You can check the mirror of all website at <a href="http://zone-h.org/archive/special=1/notifier=AnonGhost"><span style="color: red;">zone-h</span></a>.Everyday AnonGhost is adding more website in the list of hacked website under the mission #OpSaveAlqsa.<br />
<br /></div>
</div>

United Nation website hacked by AnonGhost

AnonGhost defaced United Nation website which is used by officials to promote international co-operation.AnonGhost is defaced the website in the support of Palestine.Recently AnonGhost defaced Nottin…

12 Nov 2014

Masque Attack bigger threat than WireLurker

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFt-fQa4pcVMSiWcyT3VlrDL_WxJlxnCYTlNp-oeqwCkZQKGZ6wL2_RbNPsD2txaOA3e07Yl-3RsQsHS0EkF5yCZKeknQ7YsrVKdOjwPw0bbjqdf3Wo9m81ghDExwp2eSoO1q1-noH-dc/s1600/Masque+Attack+bigger+threat+than+WireLurker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Masque Attack bigger threat than WireLurker" border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFt-fQa4pcVMSiWcyT3VlrDL_WxJlxnCYTlNp-oeqwCkZQKGZ6wL2_RbNPsD2txaOA3e07Yl-3RsQsHS0EkF5yCZKeknQ7YsrVKdOjwPw0bbjqdf3Wo9m81ghDExwp2eSoO1q1-noH-dc/s1600/Masque+Attack+bigger+threat+than+WireLurker.jpg" title="" width="400" /></a></div>
<br />
.<br />
Apple always says that finding vulnerability in their mobile operating system is quite difficult.But this time iOS users is targeting most than android users by attacks.According to report Masque pses bigger threat than <a href="http://www.thecybergeeks.net/2014/11/wirelurker-malware-infecting-ios-and-os-x.html"><span style="color: red;">WireLurker</span></a>.A number of vulnerabilities discovered in Apple's iOS made iPhone and iPad vulnerable to cyber attacks and stealing sensitive information.Security Researchers at FireEye discovered a new vulnerability by which attacker can replace a genuine app with malware one.<br />
<div style="float: left; padding: 10px;">
<br />
"This vulnerability exists because iOS doesn't enforce matching certificates for apps with the same bundle identifier,"FireEye security researchers said on the blog. "An attacker can leverage this vulnerability both through wireless networks and USB."
<br />
<br />
“After looking into WireLurker, we found that it started to utilize a limited form of Masque Attacks to attack iOS devices through USB,” researchers said. “Masque Attacks can pose much bigger threats than WireLurker. Masque Attacks can replace authentic apps,such as banking and email apps, using attacker’s malware through the Internet. That means the attacker can steal user’s banking credentials by replacing an authentic banking app with an malware that has identical UI. Surprisingly, the malware can even access the original app’s local data, which wasn’t removed when the original app was replaced. These data may contain cached emails, or even login-tokens which the malware can use to log into the user’s account directly."<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://2.bp.blogspot.com/-L6KGfiAUQq4/VGIZ4Kg-XsI/AAAAAAAADiI/p_NLLNwpx7M/s1600/masque%2Battack.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Masque Attack" border="0" height="612" src="https://2.bp.blogspot.com/-L6KGfiAUQq4/VGIZ4Kg-XsI/AAAAAAAADiI/p_NLLNwpx7M/s640/masque%2Battack.jpg" title="" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Example of Masque Attack</td></tr>
</tbody></table>
<br />
Researchers tested this vulnerability on iOS 7.1.1,7.1.2,8.0,8.1 and 8.1.1 beta for both jailbroken and non-jailbroken devices.<br />
<br />
According to FireEye 95 percent of iOS are vulnerable to this attack.FireEye also posted a demo video.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/3VEQ-bJUhPw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div>
<br />
<h3 style="text-align: left;">
Steps To Protect Yourself From Masque Attack</h3>
<div>
<ul style="text-align: left;">
<li>Don't install third party apps.</li>
<li>Don't install app offered on pop-ups on third party website.</li>
<li>If iOS shows an alert with Untrusted App Developer click on “Don’t Trust” and uninstall the app immediately</li>
</ul>
</div>
</div>
</div>

Masque Attack bigger threat than WireLurker

. Apple always says that finding vulnerability in their mobile operating system is quite difficult.But this time iOS users is targeting most than android users by attacks.According to report Masque p…

11 Nov 2014

Browser Stack Data Breach

An Anonymous user said that he have received the following mail from BrowserStack customer care.He posted the following mail on pastebin.<br />
<blockquote class="tr_bq">
Dear BrowserStack User,<br />
We are unfortunately displeased to announce that BrowserStack will be shutting down. After much consideration on our part, we have realized we were negligent in the services we claimed to offer.  In our terms of service, we state the following:<br />
[...] after the restoration process is complete, the virtual machines are guaranteed to be tamper-proof.<br />
[...] The machines themselves are in a secure network, and behind strong firewalls to present the safest environment possible.<br />
[...] At any given time, you have sole access to a virtual machine. Your testing session cannot be seen or accessed by other users, including BrowserStack administrators. Once you release a virtual machine, it is taken off the grid, and restored to its initial settings. All your data is destroyed in this process.<br />
Unfortunately, we have blatantly lied. Not only do all of our administrators have access, but so does the general public. We have no firewalls in place, and our password policies are atrocious. All virtual machines launched are open to the public, accessible to anyone with the alpha password "nakula" on port 5901, a password which is stored in plaintext on every VM. As well, our infrastructure uses the same root passwords on all machines, which is also stored in plaintext on every VM launched ("c0stac0ff33").<br />
Given the propensity for cyber criminals to target infrastructure services such as ours, it is almost certain all of your data has been compromised. These passwords take no less than 15 minutes to find for anyone who is looking.<br />
We hope we have not caused you too much trouble, and to our enterprise customers who signed deals contracts based on a fabrication, we are equally sorry.<br />
Sincerely,<br />
The BrowserStack Team</blockquote>
Today morning BrowserStack website was gone offline and showing a site maintenance message.  </div>
</div>
</div>

Browser Stack Data Breach

BrowserStack is a cross-browser testing tool,to test public websites and protected servers,on a cloud infrastructure of desktop and mobile devices.BrowserStack on November 9,2014 at 23:30 GMT suffers…

10 Nov 2014

FBI Seize Silk Road 2.0 Admin Arrested

FBI Seize Silk Road 2.0 Admin Arrested

Federal Bureau of Investigation (FBI) said that they have arrested the Silk Road admin Blake Benthall,who uses the alias Defcon on Wednesday.FBI along with Department of Homeland Security and Europea…

09 Nov 2014

AnonGhost defaced Nottinghamshire Police Website

</center>
<br />
Nottinghamshire police website's was left defaced for more than 45 minutes.Hacker posted the following message on the deface page.<br />
<blockquote class="tr_bq">
<h1>
<span style="font-size: small;">
Hello United Kingdoom Police</span></h1>
Hacked by AnonGhost<br />
Hi Uk police,where is your security bitchs?<br />
We are here to punish you! since you have been supporting israel<br />
Because we are the voice of Palestine and we will not remain silent !<br />
Muslims are everywhere - We will enter to Palestine soon :) remember this :D</blockquote>
Nottinghamshire website<br />
Link-<a href="http://www.nottinghamshire.police.uk/"><span style="color: red;">http://www.nottinghamshire.police.uk</span></a><br />
Mirror- <a href="http://zone-h.org/mirror/id/23233042"><span style="color: red;">http://zone-h.org/mirror/id/23233042</span></a></div>

AnonGhost defaced Nottinghamshire Police Website

AnonGhost world's famous hacking group defaced Nottinghamshire Police official website.AnonGhost is launching missions against Israel and claims to defend Palestine.Recently AnonGhost launched #OpSav…

08 Nov 2014

Indian Government Websites Hacked by Team Madleets

</center>
<br />
The hacker said that the hack has nothing to do with Cyber War between India and Pakistan.<br />
<blockquote class="tr_bq">
"Stamped by 1337 & r00x for our brothers and sisters in Kashmir.We care for Humanity.This has nothing related to cyber war crap.We are not asking for Kashmir.We ask for Peace ! ",hacker said on Facebook.</blockquote>
<h3 style="text-align: left;">
List of Website Hacked by Team Madleets</h3>
<div style="text-align: left;">
</div>
<ul style="text-align: left;">
<li>http://www.oscw.nic.in</li>
<li>http://www.ophwc.nic.in</li>
<li>http://www.scpdodisha.nic.in</li>
<li>http://www.tgahd.nic.in</li>
<li>http://www.tsbocwwboard.nic.in</li>
<li>http://www.gssaap-cag.nic.in/ </li>
<li>http://www.apbocwwboard.ap.nic.in/settings.php </li>
<li>http://www.rys.ap.nic.in/ </li>
<li>http://www.apfdc.tg.nic.in/ </li>
<li>http://www.aplwb.ap.nic.in/About </li>
<li>http://www.apfdc.ap.nic.in/ </li>
<li>http://www.agri.tg.nic.in/ </li>
<li>http://www.cdm.telangana.nic.in/ </li>
<li>http://www.bdl.gov.in/Companys-Profile-Company/ </li>
<li>http://www.apbocwwboard.tg.nic.in/ </li>
<li>http://www.dca.tg.nic.in/ </li>
<li>http://www.rys.tg.nic.in/ </li>
<li>http://www.tglwb.tg.nic.in/ </li>
<li>http://www.apfdc.gov.in/ </li>
<li>http://www.labdirodisha.gov.in/ </li>
<li>http://www.pheoodisha.gov.in/ </li>
<li>http://www.cdodisha.gov.in/</li>
</ul>
You can also the mirror of these websites at <a href="http://zone-h.com/archive/published=0/notifier=1337"><span style="color: red;">zone-h</span></a>. Madleets is famous for hacking top-levels domains.Recently Madleets defaced <a href="http://www.trickbug.com/2014/10/google-indonesia-hacked-by-1337.html"><span style="color: red;">Google Indonesia domain</span></a>.</div>

Indian Government Websites Hacked by Team Madleets

Madleets one of the most famous hacking group of Pakistan.This time 1337 and r00x from team Madleets defaced 22 (National Informatics Centre) nic domains.Hacker defaced these website not for asking K…

07 Nov 2014

WireLurker Malware Infecting iOS and OS X

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WireLurker Malware Infecting iOS and OS X" border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" title="" width="400" /></a></div>
<br />
<b><br /></b>
<b>WireLurker </b>a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networks security researchers says that it is the biggest in scale within the malware family.The researcher said "The Discovery of WireLurker poses a new Era of Malware".</div>
<br />
WireLurker is the second known malware family that infect iOS devices through OS X vis USB.It the first malware to automate generation of malicious iOS applications through binary file replacement also the first malware that can infect iOS applications similare to the traditional virus.This malware can install third-party applications on non-jailbroken iOS devices through enterprising provisioning.<br />
<br />
"Wirelurker is unlike anything we have ever seen in terms of Apple iOS and OS X malware.The techniques in use suggest that bad actors are getting more sophisticated when it comes to exploiting some of the world's best known desktop and mobile platforms.",said Ryan Olson(Company's intelligence director).<br />
<br />
<h3 style="text-align: left;">
How it works</h3>
<div>
<br /></div>
<div>
This type of malware is very unique.It infect iOS devices via Apple's OS X.When users download a Wirelurker affected app its start waiting for user to attach a iOS device.Once connected it try to find whether the device is jailbroken or not.If its is jailbroken,If its is jail broken,Wirelurker backup the device's apps to the Mac where it repackages them with malware and then installs the infected the infected versions on the devices.If its is non-jailbroken,Wirelurker takes advantage of the method created by Apple which allow them to install special software on the staff's devices.This involved placing infected apps on the devices that has been signed by a bogus "enterprise certificate",a code is added to the product to prove that this app is from an trustworthy source.To ensure that the device has accepted this certificate, a permissions request was  pop up on the targeted iOS device. It asked permission to run the app, but if the user clicked “continue” it installed code called a “provisioning profile”.Once user clicked on continue iOS device will accept any app that has been signed with the same enterprise certificate.</div>
<br />
WireLurker was used to trojanize 467 OS X applications on the Maiyadi App Store (third-party Mac applications store in China).<br />
<br />
In the past 6 months ,these 467 infected applications were downloaded over 356,104 times and it has infected more than thousand of users.Recently a new flaw was discovered in <a href="http://www.trickbug.com/2014/11/rootpipe-critical-security-flaw-in-mac-os-x-yosemite.html"><span style="color: red;">Mac OS X by a security researcher Emil</span></a>.<br />
<br />
<blockquote class="tr_bq">
WireLurker monitors any iOS device connected via USB with an infected computer and installs downloaded third-party applications or automatically generated malicious applications onto the device,regardless of whether its is jailbroken.This is the reason why call it "WireLurker".Researchers have demonstrated similar methods to attack non-jalibroken device before..However,this malware combines a number of techniques to successfully realize a new brand of threat to all iOS devices.</blockquote>
In statement Apple said that "We are aware of malicious software available from a download site aim at users in China,and we've blocked the identified apps to prevent them for launching.As always,we recommend that users download and install software from a trusted sources."<br />
<br />
We recommend our users to take some safety tips mention below.<br />
<br />
<ul style="text-align: left;">
<li>Don't download apps from third-party store.</li>
<li>Don't jailbreak iOS devices.</li>
<li>Don't connect your devices to untrusted computers.</li>
<li>Keep iOS version up-to-date.</li>
<li>Do not accept any unknown enterprise provisioning profile unless an authorised ,trusted party instruct you to do so.</li>
<li>You can also use this tool to detect the Wirelurker malware family on OS X.This tool is available on <a href="https://github.com/PaloAltoNetworks-BD/WireLurkerDetector"><span style="color: red;">github</span></a> and tool is made by Palo Alto Networks.</li>
</ul>
</div>

WireLurker Malware Infecting iOS and OS X

WireLurker a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networks security researchers says that it is the biggest in scale within…

07 Nov 2014

Google Announces Nogotofail - A Network Traffic Security Testing Tool

Google Announces Nogotofail - A Network Traffic Security Testing Tool

Google announces a new security tool that help developers to detect security bugs in their applications. The Android Security Team has made a new tool,know as "Nogotofail",that provides an easy way t…

06 Nov 2014

Indian Hacker defaces 2 Pakistan Government Website

</center>
<br />
<blockquote class="tr_bq">
"#Payback for Hacking Indian Websites
<br />
Pakistani hackers, Stop Hacking Indian Websites or else you will see some more high profile hacks...!<br />
<br />
THIS IS JUST A WARNING!!!<br />
<br />
STAY AWAY FROM INDIAN CYBERSPACE<br />
<br />
You wont get Kashmir. KASHMIR belongs to INDIA and no one can separate it from us.<br />
<br />
Laughing at your security since, 1947.<br />
<br />
Indian Hacker ~SaHoo~ was here!!!<br />
<br />
Remember my name, I will be back soon...:D"</blockquote>
<br />
<h3 style="text-align: left;">
Website hacked by SaHoo:</h3>
<br />
Trade Development Authority of Pakistan -<br />
Link: <a href="http://www.tdap.gov.pk/">www.tdap.gov.pk</a><br />
Mirror: <a href="http://www.zone-h.com/mirror/id/23225376">http://www.zone-h.com/mirror/id/23225376</a><br />
<br />
<br />
FATA Education Foundation -<br />
Link: <a href="http://www.fef.gov.pk/">www.fef.gov.pk</a><br />
Mirror: <a href="http://www.zone-h.com/mirror/id/23225371">http://www.zone-h.com/mirror/id/23225371</a><br />
<br />
<br />
The cyber war between Indian and Pakistani hackers is unlikely to stop any time soon. There are several groups on both sides that continue to hack the other country's websites in an effort to show their superiority.</div>
</div>

Indian Hacker defaces 2 Pakistan Government Website

Indian Hacker known as "SaHoo" hacked and Defaced 2 Pakistani Official Government Websites as a Payback for Hacking Indian Websites by Pakistani Hackers who recently hacked some Indian Websites. An i…

05 Nov 2014

Hackers can steal $999,999 from Visa Contactless Payment Card

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJPhmQMXCFMYMzYB_FaTel9QbvWBQrTF89PhWYXwdT9GHWLhDP9hxzs4q0W-SNTudaFkFSWqHBIAia6I-yYGvc0onuBzxvqjSicBd6zYOumHH-DfknJyHJL-zrAh9aWmxlrPo1MZ2tFkvG/s1600/Hackers+can+steal+$999,999+from+Visa+Contactless+Payment+Card.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hackers can steal $999,999 from Visa Contactless Payment Card" border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJPhmQMXCFMYMzYB_FaTel9QbvWBQrTF89PhWYXwdT9GHWLhDP9hxzs4q0W-SNTudaFkFSWqHBIAia6I-yYGvc0onuBzxvqjSicBd6zYOumHH-DfknJyHJL-zrAh9aWmxlrPo1MZ2tFkvG/s1600/Hackers+can+steal+$999,999+from+Visa+Contactless+Payment+Card.jpg" title="" width="400" /></a></div>
A recent security research has found potential flaw in Visa's contactless payment card.Security researchers from Newcastle University in UK have found a new way to steal large amount to money.<br />
<br />
Contactless payment cards are meant to have a limit of £20 per purchase in UK,without typing their PIN.By exploiting this vulnerability<br />
<div style="float: right; padding: 10px;">
</div>
attacker can make a transfer of $999,999 by converting local currency into foreign currency.<br />
<br />
"With just a mobile phone we created a POS terminal that could read a card through a wallet,All the checks are carried out on the card rather than the terminal so at the point of transaction,there is nothing to raise suspicious.By pre-setting the amount you want to transfer,you can bump your mobile against someone's pocket or swipe your phone over a wallet left on a table and approve a transaction.In our test,it took less than a second for the transaction to be approved.",said Martin Emms(lead researcher of the project).<br />
<br />
Security experts are worried about the security weakness in Visa's contactless payment cards.<br />
<br />
<blockquote class="tr_bq">
"Our research has identified a real vulnerability in the payment protocol,which could open the door to potential fraud by criminals who are constantly looking for ways to breach the system",Emms said.</blockquote>
Visa Europe said that they have reviewed the report submitted by Newcastle and now it is updating its protection to make transaction more safer. </div>

Hackers can steal $999,999 from Visa Contactless Payment Card

A recent security research has found potential flaw in Visa's contactless payment card.Security researchers from Newcastle University in UK have found a new way to steal large amount to money. Contac…

05 Nov 2014

Rootpipe critical security flaw in Mac OS X Yosemite

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj25xnMGu9bmh7lkLvxzSbQr9Q3SS4-fYXjkE1tpGuKRKFJNmvYcGMJSwqFF21NvHLSJYIGHH6zFIVZYaoYiTx6y45jbJr3xxoclVXRaJUOvFwNgWFU4q_ifyXGARsguq6qlzS2BAjIg0nk/s1600/Rootpipe+critical+security+flaw+in+Mac+OS+X+Yosemite.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Rootpipe critical security flaw in Mac OS X Yosemite" border="0" height="273" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj25xnMGu9bmh7lkLvxzSbQr9Q3SS4-fYXjkE1tpGuKRKFJNmvYcGMJSwqFF21NvHLSJYIGHH6zFIVZYaoYiTx6y45jbJr3xxoclVXRaJUOvFwNgWFU4q_ifyXGARsguq6qlzS2BAjIg0nk/s1600/Rootpipe+critical+security+flaw+in+Mac+OS+X+Yosemite.jpg" title="" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Rootpipe critical security flaw in Mac OS X Yosemite</td></tr>
</tbody></table>
Swedish security researcher Emil Kvarnhammar from Truesec has discovered a critical vulnerability in Apple's Mac OS X 10.10 Yosemite,dubbed as "<b>Rootpipe</b>".By this vulnerability attacker can escalate administrative privileges on a infected computer and can gain root access.<br />
<center>
<blockquote class="twitter-tweet" lang="en">
Details on the <a href="https://twitter.com/hashtag/rootpipe?src=hash">#rootpipe</a> exploit will be presented, but not now. Let's just give Apple some time to roll out a patch to affected users.<br />
— Emil Kvarnhammar (@emilkvarnhammar) <a href="https://twitter.com/emilkvarnhammar/status/522646505128480768">October 16, 2014</a></blockquote>
<script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script>
</center>
<div style="float: left; padding: 10px;">
<br />
Once hacker exploited this bug on a compromised machine he can install malicious software,steal sensitive information or make changes to your system without the need of password.<br />
<br />
"It all started in when I was preparing for two security events, one in Stockholm and one in Malmö," Emil says. "I wanted to show a flaw in Mac OS X,but relatively few have been published.There are few 'proof-of-concepts' online,but the latest I found affected the older 10.8.5 version of OS X.I couldn't find anything similar for 10.9 or 10.10."<br />
<br />
He tested the vulnerability on 10.8,10.9 and 10.10 version of  OS X.He also said that this vulnerability is existed since 2012.<br />
<br />
Mac users keep their system more updated than Windows users,Emil says and he wanted to find a vulnerability that would affect current users of OS X.<br />
<br />
"I started looking at admin operations and found a way to create a shell with root privileges.It took a few days of binary analysis to find the flaw,and I was pretty surprised when I found it.",Emil said.<br />
<br />
<h3 style="text-align: left;">
Apple's Response</h3>
<div>
Emil already informed Apple about this vulnerability.Apple asked him for more details about the bug and said not to disclose this until January 2015.</div>
<blockquote class="tr_bq">
"The current agreement with Apple is to disclose all details in mid-January 2015.This might sound like a long wait,but hey time flies.It's important that they have time to patch,and that the patch is not available for some time.",Emil said.</blockquote>
Emil also uploaded a demo video of this vulnerability.Just have a look.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/fCQg2I_pFDk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div>
<br /></div>
</div>

Rootpipe critical security flaw in Mac OS X Yosemite

Rootpipe critical security flaw in Mac OS X Yosemite Swedish security researcher Emil Kvarnhammar from Truesec has discovered a critical vulnerability in Apple's Mac OS X 10.10 Yosemite,dubbed as "Ro…

04 Nov 2014

The Pirate Bay co-founder Fredrik Neij arrested in Asia

The Pirate Bay co-founder Fredrik Neij arrested in Asia

Fredrik Neij,alias TiAMO, is the co-founder of The Pirate Bay has been arrested in Asia.Neij had moved to Laos to avoid jail sentenced for his involvement in The Pirate Bay.While driving accross the …

04 Nov 2014

Nigerian Cyber Army defaced Indiana Department of Education website

Nigerian Cyber Army defaced Indiana Department of Education website

Group of hackers who call themselves Nigerian Cyber Army (NCA) defaced official website of Indiana Department of Education on Monday morning.The website has been hacked due to an apparent Drupal vuln…

04 Nov 2014

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijHFeimvJgQlzofUtPy1Ef8i72Sr_PV1Z5eZGczPKFhj-aA5pVxziyPJ3nD_P47IDdsfcQ30jrDy73KCdUfOJw3SlyvMsOI23jMJVVzoz03ZPYnMclHK6ApWz2srzJVnDirrwJgFxPDB_F/s1600/Pak+Cyber+Mafia+Hackers+defaces+2+Gujarat+Government+Websites.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijHFeimvJgQlzofUtPy1Ef8i72Sr_PV1Z5eZGczPKFhj-aA5pVxziyPJ3nD_P47IDdsfcQ30jrDy73KCdUfOJw3SlyvMsOI23jMJVVzoz03ZPYnMclHK6ApWz2srzJVnDirrwJgFxPDB_F/s1600/Pak+Cyber+Mafia+Hackers+defaces+2+Gujarat+Government+Websites.jpg" title="" width="400" /></a></div>
<br />
<b><br /></b>
<b>Pak Cyber Mafia Hackers (PCMH)</b>,Pakistan based hackers group defaced two Gujarat Government Websites as well as three other Indian websites yesterday and wrote about Prime Minister Narendra Modi on their home pages. <b> </b><br />
<div align="center">
<br />
<b><u>List of 5 website hacked by the Group</u></b><br />
<ul style="text-align: left;">
<li><a href="http://www.egyan.org.in/">www.egyan.org.in</a>   Mirror-<a href="http://zone-h.org/mirror/id/23203353" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23203353</a></li>
<li><a href="http://www.apmcahmedabad.com/">www.apmcahmedabad.com</a>  Mirror-<a href="http://zone-h.org/mirror/id/23203388" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px; text-decoration: none;" target="_blank">http://zone-h.org/mirror/id/23203388</a></li>
<li><a href="http://www.listtopcolleges.in/">www.listtopcolleges.in</a>  Mirror-<a href="http://zone-h.org/mirror/id/23203372" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23203372</a></li>
<li><a href="http://www.delhi-pharma.com/">www.delhi-pharma.com</a>  Mirror-<a href="http://zone-h.org/mirror/id/23202977" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23202977</a></li>
<li><a href="http://www.atnnetwork.in/">www.atnnetwork.in</a>  Mirror-<a href="http://zone-h.org/mirror/id/23202733" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px; text-decoration: none;" target="_blank">http://zone-h.org/mirror/id/23202733</a></li>
</ul>
The hacker named Pk_Robot from PCMH is responsible for this defacement.<br />
<div>
After Gujarat government and APMC authorities came to know about the defacement,authorities made their website offline and is currently under maintenance..<br />
<div>
<br /></div>
<div>
<blockquote class="tr_bq">
"As soon as we learned about the hacking of our website,we have shut it down for maintenance.We have removed the material posted by hackers.On Monday,we will call a meeting and lodge an FIR. "said Ketan Patel APMC official.</blockquote>
However,Gujarat government immediately removed the deface page after it was hacked by hackers.<br />
<blockquote class="tr_bq">
We removed the page uploaded by hackers to our website yesterday itself.We have also relaunched the website after thorough maintenance.We will do an internal inquiry and decide about filling a police complaint."said Bhupendrasinh Chudasama (State Education Minister).</blockquote>
<ul style="text-align: left;">
</ul>
<br /></div>
</div>
</div>
</div>

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

Pak Cyber Mafia Hackers (PCMH),Pakistan based hackers group defaced two Gujarat Government Websites as well as three other Indian websites yesterday and wrote about Prime Minister Narendra Modi on th…

03 Nov 2014

Load more posts

The Cyber Geeks - Hacking,Technology and Cyber Security News

Adsense

Globe Telecom website hacked by Bloodsec International

Firing Range- Open Source Vulnerability Scanner

Let's Encrypt To Provides Free SSL Certificate

Tor users can be easily de-anonymize

OnionDuke APT Malware through Tor Nodes

BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox

Spam mails may infect your device with malware

US State Department Hacked

Anonymous launches #OpKKK and #HoodsOff

RedHack Hacks into Turkey Electricity Transmission Company

WireLurker Creator and Distributer Arrested in China

US Government using Spy Planes to Collect Mobile Phone Data

Federal Transit Administration Website Hacked by Chinese Hacker

Google Launches Underwater Street View

Microsoft Patches 19 year Old Bug

Chinese Hackers Hacked US Weather Systems

Firefox Developer Edition

United Nation website hacked by AnonGhost

Masque Attack bigger threat than WireLurker

Browser Stack Data Breach

FBI Seize Silk Road 2.0 Admin Arrested

AnonGhost defaced Nottinghamshire Police Website

Indian Government Websites Hacked by Team Madleets

WireLurker Malware Infecting iOS and OS X

Google Announces Nogotofail - A Network Traffic Security Testing Tool

Indian Hacker defaces 2 Pakistan Government Website

Hackers can steal $999,999 from Visa Contactless Payment Card

Rootpipe critical security flaw in Mac OS X Yosemite

The Pirate Bay co-founder Fredrik Neij arrested in Asia

Nigerian Cyber Army defaced Indiana Department of Education website

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

Popular Posts

Blog Archive