The Cyber Geeks - Hacking,Technology and Cyber Security News: china

Federal Transit Administration Website Hacked by Chinese Hacker

Federal Transit Administration Website Hacked by Chinese Hacker

Chinese hacker with code name "M4ix#4s" from 1937 CN Team defaced the official website of Federal Transit Administration (...

Chinese Hackers Hacked US Weather Systems

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Chinese Hackers Hacked US Weather Systems" border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" title="" width="640" /></a></div>
<br />
<br />
Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,aviation,shipping and scores of other crucial uses,official said.The intrusion occurred in late September but officials gave no hint they had a problem until October 20.<br />
<div style="float: left; padding: 10px;">
<br />
The <b>National Oceanic and Atmospheric Administration (NOAA)</b>, which includes National Weather Service,did not say its system were compromised.Some reports also says that agency did not notify the proper authorities when it learned of the attack.
<br />
<br />
NOAA officials declined to discuss the suspected source of the attack, whether it affected classified data and the delay in notification.In a statement released Wednesday, NOAA spokesman Scott Smullen acknowledged the hacks and said “incident response began immediately.” He said all systems were working again and that forecasts were accurately delivered to the public. Smullen declined to answer questions beyond his statement, citing an investigation into the attack.
<br />
<br />
But NOAA confirmed to U.S. Rep. Frank Wolf,  that China was behind the attack, the Republican Congressman from Virginia said in a separate interview.Wolf has a long-standing interest in cybersecurity and asked NOAA about the incident.“NOAA told me it was a hack and it was China,” said Wolf, who also scolded the agency for not disclosing the attack “and deliberately misleading the American public in its replies.”
<br />
<br />
Wolf said "A hack could steal technical insights or cull isolated information that may not look significant until they’re put with something else and then they become valuable. The Chinese are stealing us blind.”
<br />
<br />
Commerce Department Inspector General Todd Zinser said his office was not notified of the breach until Nov. 4, well after he believes the hack occurred. He said that is a violation of agency policy requiring any security incident to be reported to his office within two days of discovering the problem.<br />
<blockquote class="tr_bq">
“We’re in the process of looking into the matter, including why NOAA did not comply with the requirements to notify law enforcement about the incident,” Zinser said.</blockquote>
NOAA officials also would not say whether the attack removed material or inserted malicious software in its system, which is used by civilian and military forecasters in the United States and also feeds weather models at the main centers for Europe and Canada.The attack on NOAA joins a spate of cyber-espionage on federal systems revealed recently, including an attack suspected from Russia that breached unclassified <a href="http://www.trickbug.com/2014/10/white-house-computers-breached-by-hackers.html"><span style="color: red;">White House Computer Networks</span></a>.
<br />
<br />
NOAA’s National Ice Center Web site also was down for a week in late October. The center is a partnership with the Navy and Coast Guard to monitor conditions for navigation.The two-day outage skewed the accuracy of National Weather Service long-range forecasts slightly, according to NOAA.Security experts compares the security used by NOAA to secure their system with an example of house protected by just a screen door.
<br />
<br />
Weather satellites orbit hundreds to thousands of miles above Earth and offer continuous views of weather systems, such as hurricanes, thunderstorms and cold fronts, while also measuring temperature and moisture at different altitudes — all crucial bits that feed prediction models. To get that information to the public, NOAA makes satellite data and imagery publicly available through the Web, as well as file-transfer networks for downloads.NOAA satellites “provide critical data for forecasts and warnings that are vital to every citizen and to our economy as a whole,” NOAA Administrator Kathryn D. Sullivan said a year ago.
<br />
<br />
“The bad guys are increasingly having a hard time getting in the front of these agencies,”said Jacob Olcott, a cybersecurity consultant. “So they figure if I can’t get in the front door, I’d ride along in with someone who has trusted access and maybe ride that connection to bigger agencies.”<br />
<br />
“All the operational data sent via NOAA, which is normally an excellent service, was lost,” said Stephen English, head of the satellite section at the European Centre for Medium-Range Weather Forecasts in Reading, England. The center is renowned for running a highly advanced global weather prediction model that during Hurricane Sandy, for example, aided evacuations and preparations in the United States when it signaled that the superstorm would hit land rather than hook out to sea.
<br />
<br />
This is the 8th incident in recent weeks which has China's involvement in the attacks.
<br />
<center>

</center>
</div>
</div>

Chinese Hackers Hacked US Weather Systems

Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,avia...

WireLurker Malware Infecting iOS and OS X

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WireLurker Malware Infecting iOS and OS X" border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" title="" width="400" /></a></div>
<br />
<b><br /></b>
<b>WireLurker </b>a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networks security researchers says that it is the biggest in scale within the malware family.The researcher said "The Discovery of WireLurker poses a new Era of Malware".</div>
<br />
WireLurker is the second known malware family that infect iOS devices through OS X vis USB.It the first malware to automate generation of malicious iOS applications through binary file replacement also the first malware that can infect iOS applications similare to the traditional virus.This malware can install third-party applications on non-jailbroken iOS devices through enterprising provisioning.<br />
<br />
"Wirelurker is unlike anything we have ever seen in terms of Apple iOS and OS X malware.The techniques in use suggest that bad actors are getting more sophisticated when it comes to exploiting some of the world's best known desktop and mobile platforms.",said Ryan Olson(Company's intelligence director).<br />
<br />
<h3 style="text-align: left;">
How it works</h3>
<div>
<br /></div>
<div>
This type of malware is very unique.It infect iOS devices via Apple's OS X.When users download a Wirelurker affected app its start waiting for user to attach a iOS device.Once connected it try to find whether the device is jailbroken or not.If its is jailbroken,If its is jail broken,Wirelurker backup the device's apps to the Mac where it repackages them with malware and then installs the infected the infected versions on the devices.If its is non-jailbroken,Wirelurker takes advantage of the method created by Apple which allow them to install special software on the staff's devices.This involved placing infected apps on the devices that has been signed by a bogus "enterprise certificate",a code is added to the product to prove that this app is from an trustworthy source.To ensure that the device has accepted this certificate, a permissions request was  pop up on the targeted iOS device. It asked permission to run the app, but if the user clicked “continue” it installed code called a “provisioning profile”.Once user clicked on continue iOS device will accept any app that has been signed with the same enterprise certificate.</div>
<br />
WireLurker was used to trojanize 467 OS X applications on the Maiyadi App Store (third-party Mac applications store in China).<br />
<br />
In the past 6 months ,these 467 infected applications were downloaded over 356,104 times and it has infected more than thousand of users.Recently a new flaw was discovered in <a href="http://www.trickbug.com/2014/11/rootpipe-critical-security-flaw-in-mac-os-x-yosemite.html"><span style="color: red;">Mac OS X by a security researcher Emil</span></a>.<br />
<br />
<blockquote class="tr_bq">
WireLurker monitors any iOS device connected via USB with an infected computer and installs downloaded third-party applications or automatically generated malicious applications onto the device,regardless of whether its is jailbroken.This is the reason why call it "WireLurker".Researchers have demonstrated similar methods to attack non-jalibroken device before..However,this malware combines a number of techniques to successfully realize a new brand of threat to all iOS devices.</blockquote>
In statement Apple said that "We are aware of malicious software available from a download site aim at users in China,and we've blocked the identified apps to prevent them for launching.As always,we recommend that users download and install software from a trusted sources."<br />
<br />
We recommend our users to take some safety tips mention below.<br />
<br />
<ul style="text-align: left;">
<li>Don't download apps from third-party store.</li>
<li>Don't jailbreak iOS devices.</li>
<li>Don't connect your devices to untrusted computers.</li>
<li>Keep iOS version up-to-date.</li>
<li>Do not accept any unknown enterprise provisioning profile unless an authorised ,trusted party instruct you to do so.</li>
<li>You can also use this tool to detect the Wirelurker malware family on OS X.This tool is available on <a href="https://github.com/PaloAltoNetworks-BD/WireLurkerDetector"><span style="color: red;">github</span></a> and tool is made by Palo Alto Networks.</li>
</ul>
</div>

WireLurker Malware Infecting iOS and OS X

WireLurker a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networ...

The Cyber Geeks - Hacking,Technology and Cyber Security News

Adsense

Federal Transit Administration Website Hacked by Chinese Hacker

Chinese Hackers Hacked US Weather Systems

WireLurker Malware Infecting iOS and OS X

Popular Posts

Blog Archive