The Cyber Geeks - Hacking,Technology and Cyber Security News: vulnerabilities

Tor users can be easily de-anonymize

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNeqid-mJKNs6jCuEbeNRdFuF_StTdefhdt9oeuCEejSi7xTlPMCouinfCFPfsQl7wSuIuATxHU7HIOw3xzgezQHwNvwbuQm7fajnn5r-C1hk4Cs224PJpr-CrkQzs0rLyY4tRIo3gAsm_/s1600/Tor+users+can+be+easily+de-anonymize.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Tor users can be easily de-anonymize" border="0" height="299" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNeqid-mJKNs6jCuEbeNRdFuF_StTdefhdt9oeuCEejSi7xTlPMCouinfCFPfsQl7wSuIuATxHU7HIOw3xzgezQHwNvwbuQm7fajnn5r-C1hk4Cs224PJpr-CrkQzs0rLyY4tRIo3gAsm_/s1600/Tor+users+can+be+easily+de-anonymize.jpg" title="" width="400" /></a></div>
<br />
<br />
According to new report researchers found a way by which we can get real identity of Tor user by exploiting the traffic analysis software <b>Netflow</b> that Cisco has built in its router protocols.<br />
<br />
The research was conducted by Professor Sambuddho Chakravary,formal researcher at Columbia University's Network Security Lab and currently he is researching about Network Anonymity and Privacy at Indraprastha Institute of Information Technology,Delhi.</div>
<br />
<br />
Chakravarty used a technique,in order to determine the tor relays which involved a modified public Tor server running on Linux, accessed by the victim client, and modified Tor node that can form one-hop circuits with arbitrary legitimate nodes.
<br />
<blockquote class="tr_bq">
"The server modulates the data being sent back to the client, while the corrupt Tor node is used to measure delay between itself and Tor nodes," researchers wrote in PDF. "The correlation between the perturbations in the traffic exchanged with a Tor node, and the server stream helped identify the relays involved in a particular circuit."</blockquote>
According to the research, to carry out large-scale traffic analysis attacks in the Tor environment one would not necessarily need the resources of a nation state, even a single AS may observe a large fraction of entry and exit node traffic, as stated in the paper – a single AS (Autonomous System) could monitor more than 39% of randomly-generated Tor circuits.
<br />
<blockquote class="tr_bq">
It is not even essential to be a global adversary to launch such traffic analysis attacks," Chakravarty wrote. "A powerful, yet non- global adversary could use traffic analysis methods […] to determine the various relays participating in a Tor circuit and directly monitor the traffic entering the entry node of the victim connection."</blockquote>
The technique depends on injecting a repeating traffic pattern into the TCP connection that it observes as originating from the target exit node, and then correlating the server’s exit traffic for the Tor clients, as derived from the router’s flow records, to identify Tor client.
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-6FHK9hoJy8I/VGt6ftbhGrI/AAAAAAAADoU/GOj5HxfvZ9w/s1600/figure.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="350" src="http://4.bp.blogspot.com/-6FHK9hoJy8I/VGt6ftbhGrI/AAAAAAAADoU/GOj5HxfvZ9w/s1600/figure.png" width="400" /></a></div>
<br />
Tor is vulnerable to this kind of traffic analysis because it is designed as low-latency anonymous communication networks.<br />
<blockquote class="tr_bq">
"To achieve acceptable quality of service, [Tor attempts] to preserve packet interarrival characteristics, such as inter-packet delay. Consequently, a powerful adversary can mount traffic analysis attacks by observing similar traffic patterns at various points of the network, linking together otherwise unrelated network connections," Chakravarty explains.</blockquote>
This research does not need large scale resources.But this is good for law enforcement to stop illegal activities hiding behind the Tor network.<br />
<br />
However,one of the Tor Project member 'Arma' said they are already aware of this network analysis attack.<br />
<br />
<blockquote class="tr_bq">
"It's great to see more research on traffic correlation attacks, especially on attacks that don't need to see the whole flow on each side. But it's also important to realise that traffic correlation attacks are not a new area."said Arma on a blog post.</blockquote>
<blockquote class="tr_bq">
"The discussion of false positives is key to this new paper too: Sambuddho's paper mentions a false positive rate of 6%. That sounds like it means if you see a traffic flow at one side of the Tor network, and you have a set of 100000 flows on the other side and you're trying to find the match, then 6000 of those flows will look like a match. It's easy to see how at scale, this "base rate fallacy" problem could make the attack effectively useless."said Arma.
</blockquote>
</div>

Tor users can be easily de-anonymize

According to new report researchers found a way by which we can get real identity of Tor user by exploiting the traffic analysis sof...

OnionDuke APT Malware through Tor Nodes

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU7CDAYbSZGM_hEBaBiXrwFZ1n-i7GrVC1H63nOpBkVqmt85tsHeyAIc8JHDe8D8DiQHeTVItnGQ2-cFd0xCIdRp83W8HSdR0MYdNRVadiBo1R1gSUqrj9ZlveaGB73OIJPhzV9_1ckLoe/s1600/onionduke-17112014-big.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="OnionDuke APT Malware through Tor Nodes" border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU7CDAYbSZGM_hEBaBiXrwFZ1n-i7GrVC1H63nOpBkVqmt85tsHeyAIc8JHDe8D8DiQHeTVItnGQ2-cFd0xCIdRp83W8HSdR0MYdNRVadiBo1R1gSUqrj9ZlveaGB73OIJPhzV9_1ckLoe/s1600/onionduke-17112014-big.jpg" title="" width="400" /></a></div>
<br />
Security Researchers of Leviathan Security Group discovered a malicious Tor exit node that wraps Windows executable files inside a second, malicious Windows executable.When Artturi Lehtiö of F-secure made a deep research he found that the exit node was actually linked to the notorious Russian APT family MiniDuke.</div>
<br />
MiniDuke which previously infected government agencies and organisation in more than 20 countries through a modified PDF email attachment. MiniDuke malware is written in assembly language and usually it is very small in size.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
The rogue Russian exit node identified by Pitts was banned from the Tor network, but the new research carried out by F-Secure has revealed that the malicious Tor exit node is specifically being used to plant a new variant of the MiniDuke advanced persistent threat (APT) malware which the researcher has dubbed 'OnionDuke'.
<br />
<br />
However OnionDuke is completely different malware family from MiniDuke.The relation was found beacuse both seemed to use the same Command and Control (C&C) chain.
<br />
<blockquote class="tr_bq">
“This strongly suggests that although OnionDuke and MiniDuke are two separate families of malware, the actors behind them are connected through the use of shared infrastructure,” F-Secure researchers said in a blog post.</blockquote>
Malware has the ability to steal login credentials from the victim machine and components dedicated to gathering further information on the compromised system like the presence of antivirus software or a firewall.<br />
<blockquote class="tr_bq">
During our research, we have also uncovered strong evidence suggesting that OnionDuke has been used in targeted attacks against European government agencies, although we have so far been unable to identify the infection vector(s). Interestingly, this would suggest two very different targeting strategies. On one hand is the "shooting a fly with a cannon" mass-infection strategy through modified binaries and, on the other, the more surgical targeting traditionally associated with APT operations.</blockquote>
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
According to security researchers when victim attempts to download an executable via the malicious Tor exit node, what they actually receive is an executable "wrapper" that embeds both the original executable and a second, malicious executable.<br />
<br />
<blockquote class="tr_bq">
Upon execution, the wrapper will proceed to write to disk and execute the original executable, thereby tricking the user into believing that everything went fine. However, the wrapper will also write to disk and execute the second executable.</blockquote>
Those who use Tor anonymity network and download executable from an HTTPS-protected server and those using a virtual private network were not affected by the malware.
</div>

OnionDuke APT Malware through Tor Nodes

Security Researchers of Leviathan Security Group discovered a malicious Tor exit node that wraps Windows executable files inside a s...

BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox

BASHLITE Malware leverages ShellShock to Hijack device Running BusyBox

A new variant of BASHLITE malware targeting devices running on BusyBox was spotted by security researcher at Trend Micro shortly af...

Microsoft Patches 19 year Old Bug

Microsoft Patches 19 year Old Bug

Microsoft Corporation has released an update to patch a security flaw in Windows that remained unnoticed for 19 years.This vulnerabil...

Masque Attack bigger threat than WireLurker

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFt-fQa4pcVMSiWcyT3VlrDL_WxJlxnCYTlNp-oeqwCkZQKGZ6wL2_RbNPsD2txaOA3e07Yl-3RsQsHS0EkF5yCZKeknQ7YsrVKdOjwPw0bbjqdf3Wo9m81ghDExwp2eSoO1q1-noH-dc/s1600/Masque+Attack+bigger+threat+than+WireLurker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Masque Attack bigger threat than WireLurker" border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFt-fQa4pcVMSiWcyT3VlrDL_WxJlxnCYTlNp-oeqwCkZQKGZ6wL2_RbNPsD2txaOA3e07Yl-3RsQsHS0EkF5yCZKeknQ7YsrVKdOjwPw0bbjqdf3Wo9m81ghDExwp2eSoO1q1-noH-dc/s1600/Masque+Attack+bigger+threat+than+WireLurker.jpg" title="" width="400" /></a></div>
<br />
.<br />
Apple always says that finding vulnerability in their mobile operating system is quite difficult.But this time iOS users is targeting most than android users by attacks.According to report Masque pses bigger threat than <a href="http://www.thecybergeeks.net/2014/11/wirelurker-malware-infecting-ios-and-os-x.html"><span style="color: red;">WireLurker</span></a>.A number of vulnerabilities discovered in Apple's iOS made iPhone and iPad vulnerable to cyber attacks and stealing sensitive information.Security Researchers at FireEye discovered a new vulnerability by which attacker can replace a genuine app with malware one.<br />
<div style="float: left; padding: 10px;">
<br />
"This vulnerability exists because iOS doesn't enforce matching certificates for apps with the same bundle identifier,"FireEye security researchers said on the blog. "An attacker can leverage this vulnerability both through wireless networks and USB."
<br />
<br />
“After looking into WireLurker, we found that it started to utilize a limited form of Masque Attacks to attack iOS devices through USB,” researchers said. “Masque Attacks can pose much bigger threats than WireLurker. Masque Attacks can replace authentic apps,such as banking and email apps, using attacker’s malware through the Internet. That means the attacker can steal user’s banking credentials by replacing an authentic banking app with an malware that has identical UI. Surprisingly, the malware can even access the original app’s local data, which wasn’t removed when the original app was replaced. These data may contain cached emails, or even login-tokens which the malware can use to log into the user’s account directly."<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://2.bp.blogspot.com/-L6KGfiAUQq4/VGIZ4Kg-XsI/AAAAAAAADiI/p_NLLNwpx7M/s1600/masque%2Battack.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Masque Attack" border="0" height="612" src="https://2.bp.blogspot.com/-L6KGfiAUQq4/VGIZ4Kg-XsI/AAAAAAAADiI/p_NLLNwpx7M/s640/masque%2Battack.jpg" title="" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Example of Masque Attack</td></tr>
</tbody></table>
<br />
Researchers tested this vulnerability on iOS 7.1.1,7.1.2,8.0,8.1 and 8.1.1 beta for both jailbroken and non-jailbroken devices.<br />
<br />
According to FireEye 95 percent of iOS are vulnerable to this attack.FireEye also posted a demo video.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/3VEQ-bJUhPw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div>
<br />
<h3 style="text-align: left;">
Steps To Protect Yourself From Masque Attack</h3>
<div>
<ul style="text-align: left;">
<li>Don't install third party apps.</li>
<li>Don't install app offered on pop-ups on third party website.</li>
<li>If iOS shows an alert with Untrusted App Developer click on “Don’t Trust” and uninstall the app immediately</li>
</ul>
</div>
</div>
</div>

Masque Attack bigger threat than WireLurker

. Apple always says that finding vulnerability in their mobile operating system is quite difficult.But this time iOS users is targeti...

WireLurker Malware Infecting iOS and OS X

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WireLurker Malware Infecting iOS and OS X" border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivIxtWQ0uR_sBnpYipjojBuibvNGfca11DsQfL0yLIdROTJJoIdKJshfrAQSFLXnmCdIEJrCGjQ1iGKfcL_PYD2115Ke83TKVDPR-UJUjmB_uyqaAybZiE7yQ1mo-bxD4v0ffaX4n-vhEP/s1600/WireLurker+Malware+Infecting+iOS+and+OS+X.jpg" title="" width="400" /></a></div>
<br />
<b><br /></b>
<b>WireLurker </b>a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networks security researchers says that it is the biggest in scale within the malware family.The researcher said "The Discovery of WireLurker poses a new Era of Malware".</div>
<br />
WireLurker is the second known malware family that infect iOS devices through OS X vis USB.It the first malware to automate generation of malicious iOS applications through binary file replacement also the first malware that can infect iOS applications similare to the traditional virus.This malware can install third-party applications on non-jailbroken iOS devices through enterprising provisioning.<br />
<br />
"Wirelurker is unlike anything we have ever seen in terms of Apple iOS and OS X malware.The techniques in use suggest that bad actors are getting more sophisticated when it comes to exploiting some of the world's best known desktop and mobile platforms.",said Ryan Olson(Company's intelligence director).<br />
<br />
<h3 style="text-align: left;">
How it works</h3>
<div>
<br /></div>
<div>
This type of malware is very unique.It infect iOS devices via Apple's OS X.When users download a Wirelurker affected app its start waiting for user to attach a iOS device.Once connected it try to find whether the device is jailbroken or not.If its is jailbroken,If its is jail broken,Wirelurker backup the device's apps to the Mac where it repackages them with malware and then installs the infected the infected versions on the devices.If its is non-jailbroken,Wirelurker takes advantage of the method created by Apple which allow them to install special software on the staff's devices.This involved placing infected apps on the devices that has been signed by a bogus "enterprise certificate",a code is added to the product to prove that this app is from an trustworthy source.To ensure that the device has accepted this certificate, a permissions request was  pop up on the targeted iOS device. It asked permission to run the app, but if the user clicked “continue” it installed code called a “provisioning profile”.Once user clicked on continue iOS device will accept any app that has been signed with the same enterprise certificate.</div>
<br />
WireLurker was used to trojanize 467 OS X applications on the Maiyadi App Store (third-party Mac applications store in China).<br />
<br />
In the past 6 months ,these 467 infected applications were downloaded over 356,104 times and it has infected more than thousand of users.Recently a new flaw was discovered in <a href="http://www.trickbug.com/2014/11/rootpipe-critical-security-flaw-in-mac-os-x-yosemite.html"><span style="color: red;">Mac OS X by a security researcher Emil</span></a>.<br />
<br />
<blockquote class="tr_bq">
WireLurker monitors any iOS device connected via USB with an infected computer and installs downloaded third-party applications or automatically generated malicious applications onto the device,regardless of whether its is jailbroken.This is the reason why call it "WireLurker".Researchers have demonstrated similar methods to attack non-jalibroken device before..However,this malware combines a number of techniques to successfully realize a new brand of threat to all iOS devices.</blockquote>
In statement Apple said that "We are aware of malicious software available from a download site aim at users in China,and we've blocked the identified apps to prevent them for launching.As always,we recommend that users download and install software from a trusted sources."<br />
<br />
We recommend our users to take some safety tips mention below.<br />
<br />
<ul style="text-align: left;">
<li>Don't download apps from third-party store.</li>
<li>Don't jailbreak iOS devices.</li>
<li>Don't connect your devices to untrusted computers.</li>
<li>Keep iOS version up-to-date.</li>
<li>Do not accept any unknown enterprise provisioning profile unless an authorised ,trusted party instruct you to do so.</li>
<li>You can also use this tool to detect the Wirelurker malware family on OS X.This tool is available on <a href="https://github.com/PaloAltoNetworks-BD/WireLurkerDetector"><span style="color: red;">github</span></a> and tool is made by Palo Alto Networks.</li>
</ul>
</div>

WireLurker Malware Infecting iOS and OS X

WireLurker a new form of malware is infecting Apple operating system for the past 6 months.According to a report by Palo Alto Networ...

Hackers can steal $999,999 from Visa Contactless Payment Card

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJPhmQMXCFMYMzYB_FaTel9QbvWBQrTF89PhWYXwdT9GHWLhDP9hxzs4q0W-SNTudaFkFSWqHBIAia6I-yYGvc0onuBzxvqjSicBd6zYOumHH-DfknJyHJL-zrAh9aWmxlrPo1MZ2tFkvG/s1600/Hackers+can+steal+$999,999+from+Visa+Contactless+Payment+Card.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hackers can steal $999,999 from Visa Contactless Payment Card" border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJPhmQMXCFMYMzYB_FaTel9QbvWBQrTF89PhWYXwdT9GHWLhDP9hxzs4q0W-SNTudaFkFSWqHBIAia6I-yYGvc0onuBzxvqjSicBd6zYOumHH-DfknJyHJL-zrAh9aWmxlrPo1MZ2tFkvG/s1600/Hackers+can+steal+$999,999+from+Visa+Contactless+Payment+Card.jpg" title="" width="400" /></a></div>
A recent security research has found potential flaw in Visa's contactless payment card.Security researchers from Newcastle University in UK have found a new way to steal large amount to money.<br />
<br />
Contactless payment cards are meant to have a limit of £20 per purchase in UK,without typing their PIN.By exploiting this vulnerability<br />
<div style="float: right; padding: 10px;">
</div>
attacker can make a transfer of $999,999 by converting local currency into foreign currency.<br />
<br />
"With just a mobile phone we created a POS terminal that could read a card through a wallet,All the checks are carried out on the card rather than the terminal so at the point of transaction,there is nothing to raise suspicious.By pre-setting the amount you want to transfer,you can bump your mobile against someone's pocket or swipe your phone over a wallet left on a table and approve a transaction.In our test,it took less than a second for the transaction to be approved.",said Martin Emms(lead researcher of the project).<br />
<br />
Security experts are worried about the security weakness in Visa's contactless payment cards.<br />
<br />
<blockquote class="tr_bq">
"Our research has identified a real vulnerability in the payment protocol,which could open the door to potential fraud by criminals who are constantly looking for ways to breach the system",Emms said.</blockquote>
Visa Europe said that they have reviewed the report submitted by Newcastle and now it is updating its protection to make transaction more safer. </div>

Hackers can steal $999,999 from Visa Contactless Payment Card

A recent security research has found potential flaw in Visa's contactless payment card.Security researchers from Newcastle Univer...

Rootpipe critical security flaw in Mac OS X Yosemite

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj25xnMGu9bmh7lkLvxzSbQr9Q3SS4-fYXjkE1tpGuKRKFJNmvYcGMJSwqFF21NvHLSJYIGHH6zFIVZYaoYiTx6y45jbJr3xxoclVXRaJUOvFwNgWFU4q_ifyXGARsguq6qlzS2BAjIg0nk/s1600/Rootpipe+critical+security+flaw+in+Mac+OS+X+Yosemite.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Rootpipe critical security flaw in Mac OS X Yosemite" border="0" height="273" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj25xnMGu9bmh7lkLvxzSbQr9Q3SS4-fYXjkE1tpGuKRKFJNmvYcGMJSwqFF21NvHLSJYIGHH6zFIVZYaoYiTx6y45jbJr3xxoclVXRaJUOvFwNgWFU4q_ifyXGARsguq6qlzS2BAjIg0nk/s1600/Rootpipe+critical+security+flaw+in+Mac+OS+X+Yosemite.jpg" title="" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Rootpipe critical security flaw in Mac OS X Yosemite</td></tr>
</tbody></table>
Swedish security researcher Emil Kvarnhammar from Truesec has discovered a critical vulnerability in Apple's Mac OS X 10.10 Yosemite,dubbed as "<b>Rootpipe</b>".By this vulnerability attacker can escalate administrative privileges on a infected computer and can gain root access.<br />
<center>
<blockquote class="twitter-tweet" lang="en">
Details on the <a href="https://twitter.com/hashtag/rootpipe?src=hash">#rootpipe</a> exploit will be presented, but not now. Let's just give Apple some time to roll out a patch to affected users.<br />
— Emil Kvarnhammar (@emilkvarnhammar) <a href="https://twitter.com/emilkvarnhammar/status/522646505128480768">October 16, 2014</a></blockquote>
<script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script>
</center>
<div style="float: left; padding: 10px;">
<br />
Once hacker exploited this bug on a compromised machine he can install malicious software,steal sensitive information or make changes to your system without the need of password.<br />
<br />
"It all started in when I was preparing for two security events, one in Stockholm and one in Malmö," Emil says. "I wanted to show a flaw in Mac OS X,but relatively few have been published.There are few 'proof-of-concepts' online,but the latest I found affected the older 10.8.5 version of OS X.I couldn't find anything similar for 10.9 or 10.10."<br />
<br />
He tested the vulnerability on 10.8,10.9 and 10.10 version of  OS X.He also said that this vulnerability is existed since 2012.<br />
<br />
Mac users keep their system more updated than Windows users,Emil says and he wanted to find a vulnerability that would affect current users of OS X.<br />
<br />
"I started looking at admin operations and found a way to create a shell with root privileges.It took a few days of binary analysis to find the flaw,and I was pretty surprised when I found it.",Emil said.<br />
<br />
<h3 style="text-align: left;">
Apple's Response</h3>
<div>
Emil already informed Apple about this vulnerability.Apple asked him for more details about the bug and said not to disclose this until January 2015.</div>
<blockquote class="tr_bq">
"The current agreement with Apple is to disclose all details in mid-January 2015.This might sound like a long wait,but hey time flies.It's important that they have time to patch,and that the patch is not available for some time.",Emil said.</blockquote>
Emil also uploaded a demo video of this vulnerability.Just have a look.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="300" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/fCQg2I_pFDk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="400"></iframe></div>
<br /></div>
</div>

Rootpipe critical security flaw in Mac OS X Yosemite

Rootpipe critical security flaw in Mac OS X Yosemite Swedish security researcher Emil Kvarnhammar from Truesec has discovered a cri...

SSL 3.0 vulnerability in the design

SSL 3.0 vulnerability in the design

Google security researchers have discovered a new vulnerability in SSL 3.0.This vulnerability allows the plaintext of secure connecti...

Russian hackers target Nato,Ukraine using zero-day exploit

Russian hackers target Nato,Ukraine using zero-day exploit

Russian hackers have exploited a bug in Microsoft Windows operating system and targeting computer used by Nato, The European Union...

Tyupkin Malware Infected Atm

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiolePERHnPIvofuH2g8Hw9MYW1NNcKdFZCU0uCKwgcOOEg6nVlf8_t8ktLgsH2Gdz_eswVt_dF0bCs7wUCT-4mNJbQxnQZ3fcmjIThcLotRLRKm7p1O62Jcu6D63NyXKEx693zuptrccPK/s1600/Tyupkin+Malware+Infected+Atm.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Tyupkin Malware Infected Atm" border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiolePERHnPIvofuH2g8Hw9MYW1NNcKdFZCU0uCKwgcOOEg6nVlf8_t8ktLgsH2Gdz_eswVt_dF0bCs7wUCT-4mNJbQxnQZ3fcmjIThcLotRLRKm7p1O62Jcu6D63NyXKEx693zuptrccPK/s1600/Tyupkin+Malware+Infected+Atm.jpg" title="" width="400" /></a></div>
<br />
Hackers have made millions of dollar by using tyupkin malware. Interpol and security company Kaspersky already warned.More than 50 Windows based ATMs in Eastern Europe has been infected by Tyupkin Malware.<br />
<div align="center" id="ad2">
</div>
<br />
"This attack work in two stages. First they access physical access to the (Automatic Teller Machine)ATM and insert a bootable CD to install the malware-code name Tyupkin by Kaspersky Lab.After that they reboot the system, the infected ATM is under their control.",according to Kaspersky. </div>

Tyupkin Malware Infected Atm

Hackers have made millions of dollar by using tyupkin malware. Interpol and security company Kaspersky already warned.More than 50 W...

The Cyber Geeks - Hacking,Technology and Cyber Security News

Adsense