Free Download Full Version Software: Hacking News

Showing posts with label Hacking News. Show all posts

WhatsApp For Windows? Naaa.. Hackers Are Spamming Malware As WhatsApp Software

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-vSkgXB4IPVE/UuKElJ9m1KI/AAAAAAAAFKI/hdbkp9ClX_Q/s1600/WhatsApp+for+windows.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-vSkgXB4IPVE/UuKElJ9m1KI/AAAAAAAAFKI/hdbkp9ClX_Q/s1600/WhatsApp+for+windows.png" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div dir="ltr" style="text-align: left;">
<div style="text-align: justify;">
Cyber criminals are taking advantage of the widespread popularity of the mobile messaging app 'WhatsApp'. A malware expert at the <a href="http://www.securelist.com/en/blog/208214225/WhatsApp_for_PC_a_guaranteed_Trojan_banker" rel="nofollow" target="_blank">Kaspersky Lab</a> revealed a large-scale spamming campaign, advertising a fake PC version of the <i>WhatsApp</i>, to spread a banking trojan. </div>
<div style="text-align: justify;">
</div>
</div>
<div style="float: left; margin: 15px 15px 0 10px;">

</div>
<div id="aim27897164997862349916">
<br />
<div style="text-align: justify;">
According to the report, unaware users have received an email written in <i>Portuguese language</i>,
 it also tries to deceive the recipient with a social engineering tactic
 in which cyber criminals composed the malicious email informing that 
victims already have 11 pending friend invitations. </div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
If users click on the “<i>Baixar </i><i>Agora</i>” (Download Now) link in the spam email, they will be redirected to a <i>Hightail.com</i> URL to download the Trojan. Hightail is a cloud storage service, the malicious component deployed on it then downloads the malware via a server in Brazil.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
The file stored on Hightail server looks like a 64-bit installation file
 bundled with 2.5 megabyte MP3 file. According to Virus Total engine, 
only 3 out of 49 anti-malware softwares are able to detect it.</div>
<div style="text-align: justify;">
<blockquote class="tr_bq">
“<i>This Downloader has some anti-debugging features like: UnhandledExceptionFilter<span class="GINGER_SOFTWARE_mark" id="459806eb-8378-454b-b039-a8ffc3e1c54d"><span class="GINGER_SOFTWARE_mark" id="015ba9d6-d473-4e35-aa3c-4e351d90299c">(</span></span>) and RaiseException<span class="GINGER_SOFTWARE_mark" id="f7f074d8-f6c4-4452-bae4-26d29560ee23"><span class="GINGER_SOFTWARE_mark" id="66f4d150-c72a-4387-8f97-8e5d925fa6b5">(</span></span>)
 and once running, it downloads a new Trojan that is banker itself. This
 time the malware comes from a server in Brazil and has a low VT 
detection 3 of 49. The recently downloaded banker has the icon of an mp3
 file. Most users would click on it, especially after seeing it is about
 2.5MB in its weight.</i>”</blockquote>
</div>
<div style="text-align: justify;">
During execution of the malicious code, it communicates with the command
 & control servers to provide infection statistics and system 
console through the local port <i>1157. </i>The Malware sends back the 
stolen information in the Oracle DB format. The malicious code is also 
able to download another payload on the infected system.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
There are some interesting consideration to do:</div>
<ul style="text-align: justify;">
<li>The technique used by the attacker could result very effective in 
areas where the application is mostly used i.e. Latin America and 
Europe. The WhatsApp has more than 430 million users and 30 million 
added in just the last month. </li>
<li>Researchers identified a “classic style of a Brazilian-created 
malware” pattern, the malicious agent targeted Brazilian population much
 inclined to the use of WhatsApp. The language used and the fact that 
the Trojan is downloaded from a Brazilian server confirm the hypothesis.</li>
</ul>
<div style="text-align: justify;">
This isn’t the first spam email campaign that abused the WhatsApp brand,
 cyber criminals leveraged the service in the past November to push 
malware via email by tricking users into thinking they had a new 
voicemail message. </div>
<div style="text-align: justify;">
<br />
This week Symantec antivirus firm also identified a Windows Malware that can hack your Android Mobile. Please Pay attention to the url you click! Stay Secure.</div>
</div>
</div>

WhatsApp For Windows? Naaa.. Hackers Are Spamming Malware As WhatsApp Software

Cyber criminals are taking advantage of the widespread popularity of the mobile messaging app 'WhatsApp'. A ma...

8:21:00 PM

CNN's Twitter, Facebook And Website Hacked by Syrian Electronic Army

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-veJLja-pOqA/UuKC5xfjALI/AAAAAAAAFJ4/Uwq2SzjV2Ls/s1600/CNN+website+hacked+by+SEA.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="301" src="http://3.bp.blogspot.com/-veJLja-pOqA/UuKC5xfjALI/AAAAAAAAFJ4/Uwq2SzjV2Ls/s1600/CNN+website+hacked+by+SEA.png" width="400" /></a></div>
<div dir="ltr" style="text-align: left;">
<div style="text-align: justify;">
A well-known pro-Syrian hacker group known as <b>Syrian Electronic Army (SEA)</b>, aligned with President <i>Bashar al-</i>Assad, who successfully attacked <i>The New York Times, Huffington Post, and Twitter, BBC, National Public Radio, Al-Jazeera, Microsoft, Xbox, Skype</i> and responsible for cyber-attacks against various other U.S media companies in the past.</div>
</div>
<div style="float: left; margin: 15px 15px 0 10px;">

</div>
<div id="aim26433778826107721427">
<br />
<div style="text-align: justify;">
Last evening, the Group claimed the responsibility for hacking another big media outlet “<b>CNN</b>”, compromised their Twitter, Facebook account and the website.</div>
<div style="text-align: justify;">
<br />
</div>
<div style="text-align: justify;">
CNN’s twitter profile with 11.6 
million followers saw a number of fake tweets from hackers, including 
allegations that the Central Intelligence Agency (CIA) is behind the 
Al-Qaida network.</div>
<div style="text-align: justify;">
<br />
</div>
<div style="text-align: justify;">
Hackers <a href="https://twitter.com/Official_SEA16/statuses/426517095229042688" rel="nofollow" target="_blank">Tweeted,</a> "<i>Tonight, the #SEA decided to retaliate against #CNN's viciously lying reporting aimed at prolonging the suffering in #Syria.</i>" </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-26NmuWNEDpE/UuKDAUuEtWI/AAAAAAAAFKA/zewC81JHFsM/s1600/syrian+Army+hack+cnn+website.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-26NmuWNEDpE/UuKDAUuEtWI/AAAAAAAAFKA/zewC81JHFsM/s1600/syrian+Army+hack+cnn+website.png" /></a></div>
<div style="text-align: justify;">
 <div style="text-align: justify;">
ollowing fake tweets were posted:</div>
<blockquote class="tr_bq">
<div style="text-align: justify;">
“<i>Syrian Electronic Army Was Here<span class="GINGER_SOFTWARE_mark" id="eb5496c3-6c03-471b-82ca-e47957f2ed17"> …</span> Stop lying<span class="GINGER_SOFTWARE_mark" id="bdc59997-af9b-4429-8361-948e331d1dca"> …</span> All your reports are fake!</i>”  </div>
</blockquote>
<blockquote class="tr_bq">
<div style="text-align: justify;">
"<i>Obama Bin Laden the lord of terror is brewing lies that the Syrian state controls Al Qaeda.</i>"</div>
</blockquote>
<div style="text-align: justify;">
They also hacked into CNN's "<i>Security Clearance</i>" blog, and posted a new fake article, titled "<i>US declares a state of national emergency, State Department reportedly out of reach.</i>"</div>
<div style="text-align: justify;">
<br />
</div>
<div style="text-align: justify;">
Within 5 minutes, CNN took control back and deleted all the fake contents. CNN <a href="https://twitter.com/CNNPR/statuses/426494337426673664" rel="nofollow" target="_blank">confirmed</a> that some of their social media account were compromised via third-party social publishing platform. "<i>We have secured those accounts and are working to remedy the issue."</i> they said.</div>
</div>
</div>
</div>

CNN's Twitter, Facebook And Website Hacked by Syrian Electronic Army

A well-known pro-Syrian hacker group known as Syrian Electronic Army (SEA) , aligned with President Bashar al- Assad, who successfully ...

8:14:00 PM

Facebook Hacker Received $33,500 Reward For Remote Code Execution Vulnerability

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-pQYZIPN9jf8/UuE3dboN5UI/AAAAAAAAFIw/yDHBc0pDThY/s1600/Facebook+Hacker+received+reward+for+Remote+code+execution+vulnerability.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="226" src="http://1.bp.blogspot.com/-pQYZIPN9jf8/UuE3dboN5UI/AAAAAAAAFIw/yDHBc0pDThY/s1600/Facebook+Hacker+received+reward+for+Remote+code+execution+vulnerability.jpg" width="400" /></a></div>
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">Facebook has paid out its largest
Bug Bounty ever of $33,500 to a Brazilian security researcher for discovering
and reporting a critical Remote code execution vulnerability, which potentially
allows the full control of a server.</span><br />
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">In September, '<i>Reginaldo Silva' </i>found
an <i>XML External Entity Expansion</i> vulnerability affecting the part of
Drupal that handled OpenID, which allows attacker to read any files on the
webserver.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">As a feature, Facebook allows users
to access their accounts using OpenID in which it receives an XML document from
3rd service and parse it to verify that it is indeed the correct provider or
not i.e. Receives at<i> https://www.facebook.com/openid/receiver.php </i></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">In November 2013, while testing
Facebook's '<i>Forgot your password</i>' functionality, he found that the
OpenID process could be manipulated to execute any command on the Facebook
server remotely and also allows to read arbitrary files on the webserver.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">In a <a href="http://www.ubercomp.com/posts/2014-01-16_facebook_remote_code_execution" target="_blank"><span style="color: blue;">Proof-of-Concept</span></a>, he
demonstrated that how an attacker can read the content of '<b>etc/passwd</b>'
file from Facebook's server just by manipulating the OpenID request with
malicious XML code, and in order to extract the essential login information
such as system administrator data and user IDs.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: 5.0pt; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">"<i>Since I didn't want to
cause the wrong impressions, I decided I would report the bug right away, ask
for permission to try to escalate it to a [remote code execution] and then work
on it while it was being fixed</i>," he said.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">After receiving bug reports from
Silva, the Facebook Security team immediately <a href="https://www.facebook.com/BugBounty/posts/778897822124446" target="_blank"><span style="color: blue;">released</span></a> a short term patch within 3.5 hours,
described as: </span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: 5.0pt; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">"<i>We use a tool called
Takedown for this sort of task because it runs on a low level, before much of
the request processing happens. It allows engineers to define rules to block,
log and modify requests. Takedown helped us ensure this line of code ran before
anything else for any requests hitting /openid/receiver.php.</i>"</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; mso-fareast-font-family: "Times New Roman";">The Facebook team determined that
the issue could have been escalated to a remote code execution issue, and
rewarded Silva accordingly after patching the flaw.</span></div>
</div>

Facebook Hacker Received $33,500 Reward For Remote Code Execution Vulnerability

Facebook has paid out its largest Bug Bounty ever of $33,500 to a Brazilian security researcher for discovering and reporting a critical ...

8:40:00 PM

Exclusive - openSUSE Forum Hacked; 79500 Users' Data Compromised

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-fT0VoZRZoIA/Us0VRngHW-I/AAAAAAAAE9Q/AeIKJmZ6zs0/s1600/OpenSuse+Forum+Hacked1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="155" src="http://4.bp.blogspot.com/-fT0VoZRZoIA/Us0VRngHW-I/AAAAAAAAE9Q/AeIKJmZ6zs0/s1600/OpenSuse+Forum+Hacked1.jpg" width="400" /></a></div>
<span class="main-article-info">After <i>Snapchat </i>hack, this can be another worst data breach of the new year. A Pakistani hacker '<i>H4x0r HuSsY</i>' has successfully compromised the official Forum of '<i><b>openSUSE</b></i>', a Linux distro developed, sponsored & supported by SUSE.</span><br />
<span class="main-article-info"><span class="main-article-info"></span></span><br />
<div style="text-align: justify;">
RexHacker managed to deface the Forum and uploaded its custom message page 
as shown and account information of 79,500 registered users' may have 
been compromised. (The forum was defaced at the time of writing - <a href="http://forums.opensuse.org/vbseo_sitemap/">Check Here</a>)</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The popular website MacRumors's Forum was compromised in last November using an alleged zero day exploit, which is based on <span class="GINGER_SOFTWARE_mark" id="b2fc3a4d-d8dc-4578-9cfc-6e926483d3c1">vBulletin</span>, a famous forum software. The openSUSE Forum is also based upon <i><span class="GINGER_SOFTWARE_mark" id="47f596c0-e166-4cba-8614-1da727c6734f">vBulletin</span>.</i></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Another interesting fact is that openSUSE is still using <b><span class="GINGER_SOFTWARE_mark" id="67b798ee-dfe4-44cb-9de3-0f1be2987117">vBulletin</span> 4.2.1</b>, which is vulnerable to <span style="text-align: left;">inject rogue administrator accounts flaw. Whereas,</span> the latest patched <span class="GINGER_SOFTWARE_mark" id="f2d8f156-ba3a-4340-9dac-4e264b084ec0">vBulletin</span> 5.0.5 is available. Possibly, Hacker exploits same or another known <span class="GINGER_SOFTWARE_mark" id="ca9ecedd-6515-4c66-8b2f-dadd3d54ca55">vBulletin</span> version 4.2.1 vulnerability to access the website's administrative panel.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-t3GZIXaxlkk/Us0VfezY80I/AAAAAAAAE9Y/yOAcY5ZXTug/s1600/openSUSE+vBulletin+hacked2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="136" src="http://2.bp.blogspot.com/-t3GZIXaxlkk/Us0VfezY80I/AAAAAAAAE9Y/yOAcY5ZXTug/s1600/openSUSE+vBulletin+hacked2.png" width="400" /></a></div>
<div style="text-align: justify;">
<br />
<div style="text-align: justify;">
<b>Zone-H Mirror of the defaced page: </b><a href="http://zone-h.org/mirror/id/21473823">http://zone-h.org/mirror/id/21473823</a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
It seems that openSUSE team is even not aware about the data breach, but we have informed them and also trying to contact RexHacker for further information on this.<br />
<br />
<b>Update (7:00 PM Tuesday, January 7, 2014 GMT):</b> The Pakistani Hacker confirmed is that has uploaded a PHP shell on the forum server using his own Private <span class="GINGER_SOFTWARE_mark" id="62a9c552-6ccd-419c-8965-89a19cfdd134"><span class="GINGER_SOFTWARE_mark" id="a8bba46e-c694-40e2-bd25-d6583f01da66">vBulletin's</span></span> zero-day exploit, that allows him to browse, read or write/overwrite any file on the Forum server without root privileges.<br />
<br />
There are a few screenshots shared by hacker with us:</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-JdQRnBgC4hg/Us0VsKuIBmI/AAAAAAAAE9g/Iwm-NLIpsTk/s1600/opensuse+server+hacked3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="36" src="http://2.bp.blogspot.com/-JdQRnBgC4hg/Us0VsKuIBmI/AAAAAAAAE9g/Iwm-NLIpsTk/s1600/opensuse+server+hacked3.jpg" width="400" /></a></div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-7Pb8_1lXE98/Us0V0ttUcWI/AAAAAAAAE9o/YPEgOAvXtk8/s1600/openSUSE+Forum+Hacked4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="267" src="http://3.bp.blogspot.com/-7Pb8_1lXE98/Us0V0ttUcWI/AAAAAAAAE9o/YPEgOAvXtk8/s1600/openSUSE+Forum+Hacked4.png" width="400" /> </a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-AqsGQQKkpBE/Us0WD6aVt4I/AAAAAAAAE9w/mlf8fqDpCVo/s1600/openSUSE+Forum+Hacked+5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="213" src="http://2.bp.blogspot.com/-AqsGQQKkpBE/Us0WD6aVt4I/AAAAAAAAE9w/mlf8fqDpCVo/s1600/openSUSE+Forum+Hacked+5.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
 <span class="main-article-info">He also claimed to have the full access 
to the user's database, however he has promised not to disclose the 
database dump because the purpose of the hack is only to highlight the 
security weakness.<br />
<br />
Another important claim by RexHacker that <span class="GINGER_SOFTWARE_mark" id="38cb359d-5adb-41c0-a153-e49942f14719">vBulletin</span>
 5.0.5 latest version is also vulnerable to his zero-day exploit and 
there is no patch yet available to fix it. He noticed that after our 
news report, the Server administrator has removed the defaced page, but 
to proof his <span class="GINGER_SOFTWARE_mark" id="07b194f9-8713-40c0-8a19-9d567462e806">exploit</span> he has uploaded another file on the server again:</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-whyDMP78LVc/Us0WOS7xlRI/AAAAAAAAE94/ZQtJaeDuEfg/s1600/server+hacked6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="117" src="http://4.bp.blogspot.com/-whyDMP78LVc/Us0WOS7xlRI/AAAAAAAAE94/ZQtJaeDuEfg/s1600/server+hacked6.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<span class="main-article-info"> </span><span class="main-article-info">There are thousands of Forums using <span class="GINGER_SOFTWARE_mark" id="732cc4cf-a6d2-4d75-8853-f10c8d4ea5a3">vBulletin</span>
 software and many of them are huge huge.. Well hacker has not shared 
any information about the vulnerability, but we are sure that official <span class="GINGER_SOFTWARE_mark" id="db56149d-cbcf-4b5c-966a-7e45b2add4b8">vBulletin</span> team will consider this critical threat to fix with high priority.<br />
<br />
<b>Update</b><b> (7:24 PM Tuesday, January 7, 2014 GMT)</b><b>:</b> openSUSE team has informed the users' via <a href="https://twitter.com/openSUSE">tweets</a> about the breach,"<i>Warning: Our forums are down because they were defaced. We're currently investigating what exactly has happened</i>."</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-3aFpJM-jjS4/Us0WmuGeaKI/AAAAAAAAE-A/N8NujDHBMUs/s1600/Opensuse+twitter7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="233" src="http://1.bp.blogspot.com/-3aFpJM-jjS4/Us0WmuGeaKI/AAAAAAAAE-A/N8NujDHBMUs/s1600/Opensuse+twitter7.jpg" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<span class="main-article-info"> </span><span class="main-article-info">But they have mentioned that, "<i>Rest 
assured, no user credentials have been leaked as we use a single sign on
 system for our services. Note that we use SSO so we don't think we lost
 any account data."</i></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-hv1w8z8xhiw/Us0WuDkKGJI/AAAAAAAAE-I/-kSzAFIU1Q8/s1600/opensuse+Database+hacked8.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="246" src="http://2.bp.blogspot.com/-hv1w8z8xhiw/Us0WuDkKGJI/AAAAAAAAE-I/-kSzAFIU1Q8/s1600/opensuse+Database+hacked8.jpg" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<span class="main-article-info"></span>After openSUSE's tweet, RexHacker has shared some sample database screenshots on his Facebook 
account to prove the database hack. We have partially blur the 
screenshot before sharing, to keep sensitive data secure, as shown 
above.

Update (4:00 AM Wednesday, January 8, 2014 GMT): In a blog post, 
openSUSE team confirmed that their website and database have been 
hacked, but users' passwords are not compromised.

A cracker managed to exploit a vulnerability in the forum software 
which made it possible to upload files and gave access to the forum 
database.

The team explained, they are using single-sign-on system (Access Manager
 from NetIQ) that manage the real passwords.

Credentials for your openSUSE login are not saved in our application
 databases as we use a single-sign-on system (Access Manager from NetIQ)
 for all our services. This is a completely separate system and it has 
not been compromised by this crack. What the cracker reported as 
compromised passwords where indeed random, automatically set strings 
that are in no way connected to your real password.</div>
<div style="left: -99999px; position: absolute;">
: <a href="http://thehackernews.com/2014/01/openSUSE-Forum-Hacked-by-Pakistani-hacker.html#">http://thehackernews.com/2014/01/openSUSE-Forum-Hacked-by-Pakistani-hacker.html#</a></div>
<div style="left: -99999px; position: absolute;">
<br />
Read more: <a href="http://thehackernews.com/2014/01/openSUSE-Forum-Hacked-by-Pakistani-hacker.html#">http://thehackernews.com/2014/01/openSUSE-Forum-Hacked-by-Pakistani-hacker.html#</a></div>
</div>
</div>
</div>

Exclusive - openSUSE Forum Hacked; 79500 Users' Data Compromised

After Snapchat hack, this can be another worst data breach of the new year. A Pakistani hacker ' H4x0r HuSsY ' has successfully c...

2:16:00 PM

Shophive.com is Hacked!

<div dir="ltr" style="text-align: left;" trbidi="on">
Shophive.com, one of country’s leading ecommerce website, was hacked and defaced earlier today.<br />

A message pasted on website reveals that PakCyber Army, Madleets , 
The Hackers Army , Pak Haxor Crew was involved in the hacking.<br />

While there has been no apparent reason for the hacking, it is still 
unclear that how deep the hackers were able to penetrate into the 
website.<br />

We are also unclear about the magnitude of damage to website and user data has been done.<br />
Mostly these hackings are done for fun and without any financial 
gains. However, such incidents do impact the webmasters and website 
owners by a great deal.<br />

Its about time that our local hackers stop these meaningless defacements and move on to more constructive work.<br />

Below is the defaced screen of the website:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-DKpLDjdhFMw/UsuoLWuWQsI/AAAAAAAAE7o/QtjFUzcdozs/s1600/Shophive.com+hacked+by+PCA.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="344" src="http://1.bp.blogspot.com/-DKpLDjdhFMw/UsuoLWuWQsI/AAAAAAAAE7o/QtjFUzcdozs/s1600/Shophive.com+hacked+by+PCA.jpg" width="400" /></a></div>
</div>

Shophive.com is Hacked!

Shophive.com, one of country’s leading ecommerce website, was hacked and defaced earlier today. A message pasted on website reveals that ...

12:10:00 PM

Cryptolocker: The Most Destructive and Rapidly Growing Trojan Yet!

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-FSPFRy5FtCw/UsFF5gSFFMI/AAAAAAAAExU/BLtBYpvvB_g/s1600/Cryptolocker1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-FSPFRy5FtCw/UsFF5gSFFMI/AAAAAAAAExU/BLtBYpvvB_g/s1600/Cryptolocker1.jpg" /></a></div>
If by any chance you are in the cyber security, then you must have overheard about this <a href="http://www.blogger.com/null" name="_GoBack"></a>freshest and most fierce piece of computer Trojan ever developed, called CryptoLocker.<br />

Unlike other computer malwares and Trojans which performs unusual 
type of activities on the victim machine, such as stealing private data,
 gaining access to personal information, garbling files, or to advertise
 political or humorous messages on the user’s screen; CryptoLocker uses 
entirely offbeat strategy to destroy your data and which makes your data
 recovery impossible.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-2kUJnj1BwAI/UsFGDsCtKmI/AAAAAAAAExc/GZjgljIMRf0/s1600/2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-2kUJnj1BwAI/UsFGDsCtKmI/AAAAAAAAExc/GZjgljIMRf0/s1600/2.jpg" /></a></div>
So, what exactly is CryptoLocker and how does it works?<br />

First reported in September 2013, a CryptoLocker is a ransomware 
trojan that expertly targets Windows based PC (including latest version 
of Windows 8), and annihilate stored data beyond the proficiency of any 
data recovery process.<br />

In case if you don’t know, “Ransomware is a kind of malware which 
limits your access to your own computer, or your certain files, and asks
 some sort of ransom to be paid in order to unlock your PC.”<br />

What it really does is that, it securely encrypts the data including 
documents, photos and videos in the victim’s machine using RSA-2048 
security algorithms which is almost un-breakable.<br />

Once the encryption is done, it uncovers itself, demanding the 
infected user to pay the ransom in order to gain their sensitive data 
back. It also forewarns the user to not try to get rid of the 
CryptoLocker program as it will enduringly obliterate their personal 
data by razing the secret-key from the server.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-bfXFmwI5BEY/UsFGImeLK1I/AAAAAAAAExk/9QMyiD3apQE/s1600/3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-bfXFmwI5BEY/UsFGImeLK1I/AAAAAAAAExk/9QMyiD3apQE/s1600/3.jpg" /></a></div>
Considering that CryptoLocker employs RSA for data encryption, It 
merits mentioning here that RSA uses public-key cryptography, which 
means that user’s data is encrypted using the single public-key and for 
each unique public-key, there is a private-key; the encrypted data could
 only be recovered when the private-key is provided to the CryptoLocker 
program.<br />

This private-key is only available on the CryptoLocker secret server 
on the Internet which will be provided to the sufferer if he pays the 
demanding amount in a given time frame, if a user fall short to pay the 
requested amount in the defined time, his private-key will be 
exterminated on the server and there will be no way left to restore his 
data again.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-U3OCJrLiVxg/UsFGQZxwl_I/AAAAAAAAExs/Lf0np7DUdFk/s1600/4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-U3OCJrLiVxg/UsFGQZxwl_I/AAAAAAAAExs/Lf0np7DUdFk/s1600/4.jpg" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-72d3ogG3tN8/UsFGTqPk1_I/AAAAAAAAEx0/SJuMMtc_6so/s1600/5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-72d3ogG3tN8/UsFGTqPk1_I/AAAAAAAAEx0/SJuMMtc_6so/s1600/5.jpg" /></a></div>
While on the other hand, paying the required fee doesn’t guarantee 
that your infected data will be decrypted and restored to you. So 
concisely, if you’re infected by CryptoLocker, you’re totally screwed.<br />

The attacks of CryptoLocker could come from various distinct sources,
 including USB drives, social networks, and spam e-mails etcetera.<br />

In one strategy, it disguises itself as a genuine email attachment 
that asks the user to click on a zip file. It also spreads as an e-mail 
attachment claiming that there had been a problem clearing a cheque, and
 clicking the associated link downloads a Trojan called Gameover Zeus, 
which in turn installs Cryptolocker onto the victim’s PC.<br />

Ever since CryptoLocker surfaces on the Internet, there have been 
diverse incidents where organizations and professionals have become the 
prey, and have paid a ransom to revive their sensitive data.<br />

Dell Secureworks had said that, between 200,000 to 250,000 computers 
had been infected by CryptoLocker so far. It is essentially well-known 
because of it use of robust encryption, a countdown timer and an 
entangled monetization scheme.<br />

Security researchers have been digging hard to break the CryptoLocker
 Trojan, on the side note; one of the most efficient ways to dwindle the
 influence of CryptoLocker is to abstain from reading emails from an 
unfamiliar sender, or by creating routinely backups of your personal and
 sensitive data.<br />

One other way is to keep your Antivirus up-to-date; It is always a 
good idea to pay few bucks to buy the premium Antivirus service, than 
installing the Free trial versions.</div>

Cryptolocker: The Most Destructive and Rapidly Growing Trojan Yet!

If by any chance you are in the cyber security, then you must have overheard about this freshest and most fierce piece of computer Trojan...

3:10:00 PM

Stealing Computer Data through Speakers is Possible Now!

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-bU41ybNZqFo/UqKCxbm5W3I/AAAAAAAAEi8/0XuUawMY3zU/s1600/Security.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-bU41ybNZqFo/UqKCxbm5W3I/AAAAAAAAEi8/0XuUawMY3zU/s1600/Security.jpg" /></a></div>
“Your digital data can now be filched from your computer in a form of
 Audio Signals.” Does this appear to be a dialogue from a science 
fiction movie? Because I can vouch for it to become the reality anytime 
soon.<br />

The Security researchers from Germany have developed a new sort of 
computer malware that can steal your passwords, login information or any
 other data from a PC and can transfer it in a form of an audio signal 
to the PC nearby; these audio signals are not even audible to humans as 
its frequency is outside the human hearing range.<br />

The research had published in the <a href="http://www.jocm.us/index.php?m=content&c=index&a=show&catid=124&id=600" target="_blank">Journal of Communications</a> which was led by a team from <a href="http://www.fkie.fraunhofer.de/en.html" target="_blank">Germany’s Fraunhofer Institute for Communication, Information Processing, and Ergonomics.</a><br />

Researchers Michael Hanspach and Michael Goetz managed to use the 
built-in speakers and microphones of computer to transmit passwords and 
other data at a rate of 20 bits per second over a distance of almost 20 
meters, allowing the malware to privately ooze critical data to the 
outer world.<br />

According to the Abstract part of their research paper,<br />

<blockquote>
“We construct a covert channel between different 
computing systems that utilizes audio modulation/demodulation to 
exchange data between the computing systems over the air medium. “</blockquote>
In case you don’t know, a covert channel is a way to transfer 
information between processes that are not authorized to communicate.<br />
<div class="adsxpls" id="adsxpls1" style="display: block; margin-left: auto; margin-right: auto; padding: 0px; text-align: center;">
</div>
Furthermore, the researchers wrote,<br />

<blockquote>
“If we want to exploit a rigorously hardened and tested 
type of computing system or networks of this type of computing system, 
we have to break new ground”.</blockquote>
Oftentimes, Speakers and microphones are disregarded in security 
planning, and by availing frequencies outside the human hearing range it
 is apparent that such data could escape detection even when they are 
transmitted across a crowded workplace.<br />

The analysis used five Lenovo T400 laptops running Debian 7.1, and 
was performed in a standard computer lab with no particularly unusual 
audio characteristics. Transmissions were sent at around 20 kHz and were
 found to be totally inaudible to humans during the experiment. The 
paper suggests that this frequency could be even higher, to make it even
 less probable to be caught, but this would lessen the broadcast range.<br />

During the experiment the researchers were able to covertly log the 
keystrokes made by a user at one computer and broadcast them over audio 
through a chain of other computers until the message was eventually 
passed to a machine connected to the internet, and sent back to a 
malicious attacker despite the fact that the transmission rate is too 
slow.<br />

“Alongside keystroke information it would also be possible to forward
 other security critical data such as private encryption keys or 
small-sized text files with classified information from the infected 
victim to the covert network,” said researchers.<br />

Now there is a good reason for you to disconnect your built-in mics 
and speakers. Although it is pretty impractical, it might be worth doing
 on a governmental level.<br />

We already train dogs to sniff for bombs and drugs. Clearly, the time
 is not very far when we shall be training them to hear the Malwares 
too.<br />

On a related noted, NSA would be considering to implement this new technique somewhere in the world. So watch out!</div>

Stealing Computer Data through Speakers is Possible Now!

“Your digital data can now be filched from your computer in a form of Audio Signals.” Does this appear to be a dialogue from a science ...

7:08:00 AM

Pakistan is Finally Preparing to Formulate Cyber Laws in the Country

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-EGx2uXwDUH4/UpYJa96MTnI/AAAAAAAAEac/mSj2mwM2FDg/s1600/cyber-laws.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-EGx2uXwDUH4/UpYJa96MTnI/AAAAAAAAEac/mSj2mwM2FDg/s1600/cyber-laws.jpg" /></a></div>
Ministry of Information Technology and Telecommunication, on the 
directions of Prime Minister of Pakistan, has taken up the long-pending 
Cyber Crime Bill to finally finalize it with-in days.<br />

A press statement issued by MoiTT has said that State Minister 
yesterday chaired a meeting regarding Draft Prevention of E-Crimes Bill 
2013.<br />

Statement said that all stake holders are being taken on-board for 
the finalization of the Cyber Crime Bill before tabling it in National 
Assembly for approval.<br />

Mr. Akhlaq A. Tarrar, Secretary IT, Dr. Ismail Shah, Chairman PTA, 
Mr. Kamran Ali Khattak, Member (Legal), Mr. Yasir Qadir, Member 
(Telecom) and representatives from FIA and IT Industry were present in 
the meeting.<br />
<div class="adsxpls" id="adsxpls1" style="display: block; margin-left: auto; margin-right: auto; padding: 0px; text-align: center;">
</div>
A high level committee has been constituted headed by Senior 
Legislative Advisor to Ministry of Law, Justice and Human Rights. The 
other members of the committee includes Member (Legal), MoIT and 
Director (IT), MoIT, a representative from IT Industry, PTA and FIA 
respectively. The committee has been assigned the task to review the 
Draft Bill within one week time period and submit its report to Ministry
 of IT.<br />

Ministry has said that finalization of draft of cyber crime bill will be completed with-in days.<br />

Pakistan is functioning without any cyber laws. Meaning that one can’t be prosecuted for committing any kind of cyber crimes. FIA (Federal Investigation Authority) has openly said in the past that it can’t investigate any cyber crimes since there is no law in the country to keep check on cyber offenses.<br />

Absence of Cyber Crime Laws have not only resulted into increased cyber crimes but it is also the sole reason for non-establishment of e-commerce and internet payment gateways in the country.<br />

The Electronic Crimes Ordinance initially discussed and deliberated
 in the last Legislative Assembly which was eventually resulted in the 
form of Draft Prevention of Electronic Crimes Bill, 2013, prepared in 
consultation with all relevant stakeholders.<br />

Here is the copy of the draft for Cyber Crime Laws, a finalized form of which will tabled in National Assembly soon.</div>

Pakistan is Finally Preparing to Formulate Cyber Laws in the Country

Ministry of Information Technology and Telecommunication, on the directions of Prime Minister of Pakistan, has taken up the long-pending...

8:03:00 PM

Central Bank of India and Several Other Indian Websites Hacked by Pakistani Hackers

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-bEWzVK5-20o/UpS1wMCFvDI/AAAAAAAAEZ4/RdJvAxxRvi4/s1600/Indian-Central-Bank.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="339" src="http://4.bp.blogspot.com/-bEWzVK5-20o/UpS1wMCFvDI/AAAAAAAAEZ4/RdJvAxxRvi4/s1600/Indian-Central-Bank.jpg" width="400" /></a></div>
Indian Hackers, today morning, <a href="http://rexhacker.blogspot.com/2013/11/2611-anniversary-indian-cyber-army.html" target="_blank">hacked Pakistani websites</a> to mark the anniversary of 26/11 incident.<br />
In response, Pakistani Hackers retaliated without sparing anything 
and hacked several Indian websites including the official website of 
Central Bank of India, state-owned and one of the oldest and largest 
commercial banks of the country.<br />
Here’s the defaced page: <a href="https://www.centralbankofindia.co.in/site/" rel="nofollow" target="_blank">https://www.centralbankofindia.co.in/site/</a><br />
Pakistani and Indian hackers keep on defacing cross-country websites 
to apparently show patriotism. It won’t be out of place to mention here 
that websites on both side of borders are largely notorious for lack of 
security.<br />
Pakistan Cyber Army and MadLeets, claiming the responsibility for 
defacement, warned Indian hackers to stay away from Pakistani websites. 
On defaced page, the PCA said that their action is in response to the 
Pakistani websites hacked by “Indian Cyber Army”.<br />
Here’s the complete message pasted on Central Bank of India:<br />
<blockquote>
Oooopsss ! WTF ? Central Bank of India HaCked ?<br />
This attempt is in response to the Pakistani websites hacked by “Indian Cyber Army”.<br />
We told you before too .. We are sleeping but NOT dead ! Remember PCA (Pakistan Cyber Army) !<br />
Back off kids or we will smoke yOur doors off like we did before..<br />
Calling Jihad shit ? What do you know about Jihad ? If you have no 
idea what Jihad is, I would recommend you ICA retards not to talk crap 
about it !<br />
Jihad does NOT mean war !<br />
Jihad means “to struggle in the way of Allah”. Watering a plant is a Jihad ! So don’t be fooled by the media<br />
Stop crying over 26/11, go and pray for those who died instead of defacing sites.<br />
Stop complaining about Pakistani websites security, secure you own ass first. Thats what intelligent people do ;D<br />
A message by Pakistan Cyber Army and Team MaDLeeTs<br />
Pakistan Zindabad !<br />
<div class="adsxpls" id="adsxpls1" style="display: block; margin-left: auto; margin-right: auto; padding: 0px; text-align: center;">
</div>
www.MaDLeeTs.com</blockquote>
Another Hacking group from Pakistan, “The Hackers’ Army”, has 
notified RexHacker about over a dozen defacements. Here’s the list:<br />
<blockquote>
http://upgfc.com/<br />
http://mandotsecurities.com/<br />
http://jeetenterprise.com/<br />
http://ieoninternational.com/<br />
http://friendscoal.com/<br />
http://drbrijmohansharma.com/<br />
http://dewashydroquip.com/<br />
http://archdent.org/<br />
http://nacoopindia.com/<br />
http://starentertainments.net/home.php<br />
http://starentertainmentsindia.com/index.htm<br />
http://khandelwalsamaj.in/<br />
http://siddhantitikota.in/index.htm<br />
http://skyfeast.in/index.htm<br />
http://bowlers.in/<br />
http://iplindia.co.in/<br />
http://skenterprise.in/</blockquote>
</div>

Central Bank of India and Several Other Indian Websites Hacked by Pakistani Hackers

Indian Hackers, today morning, hacked Pakistani websites to mark the anniversary of 26/11 incident. In response, Pakistani Hackers reta...

7:55:00 PM

26/11 Anniversary: Indian Cyber Army Hacks Pakistan’s Top Military Blog

<div dir="ltr" style="text-align: left;" trbidi="on">
Country’s top Military blog, PakSoldiers.com has been hacked by 
Indian Cyber Army, apparently to commemorate the anniversary of Mumbai 
Attacks.<br />
Hackers, claiming the responsibility of the hack said that they are 
part of Indian Cyber Army and defacement of PakSoldiers is a tribute to 
solders and citizens who lost their lives during 26/11 incident in 
Mumbai.<br />
This has happened despite the fact that Indian Government was exposed
 for allegedly staging the Mumbai Incident to formulate anti-terrorism 
laws.<br />
PakSoldiers is an award winning platform for Military affairs and related resources.<br />
<div class="adsxpls" id="adsxpls1" style="display: block; margin-left: auto; margin-right: auto; padding: 0px; text-align: center;">
</div>
Ghulam Sarwar, the Editor and Found of PakSoldiers confirmed RexHacker that they are in process of restoring the website. It is 
still unclear if any data is lost or not.<br />
It is assumed that Hackers exploited a notorious bug in VBulletin to get into the servers.<br />
Here is the defaced screen:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-QLelYHxd3fw/UpSzpvD6zBI/AAAAAAAAEZc/fo_MF3qmB9Y/s1600/PakSoldiers.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="327" src="http://4.bp.blogspot.com/-QLelYHxd3fw/UpSzpvD6zBI/AAAAAAAAEZc/fo_MF3qmB9Y/s1600/PakSoldiers.jpg" width="400" /></a></div>
</div>

26/11 Anniversary: Indian Cyber Army Hacks Pakistan’s Top Military Blog

Country’s top Military blog, PakSoldiers.com has been hacked by Indian Cyber Army, apparently to commemorate the anniversary of Mumbai At...

7:44:00 PM

Brit Spies Spoof LinkedIn Pages to Track Targets

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-5JXZMVX7CAY/UpNp9Yf2CSI/AAAAAAAAEZA/fQHLGUkH5ys/s1600/snowden.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-5JXZMVX7CAY/UpNp9Yf2CSI/AAAAAAAAEZA/fQHLGUkH5ys/s1600/snowden.jpg" /></a></div>
<div class="story-summary">
Officially, no one knows anything, but if the 
latest revelations from Edward Snowden's storehouse of inside 
information on global surveillance activities can be believed, then it's
 highly likely Britain's counterpart to the NSA has been hacking into 
telecoms. GCHQ apparently redirected network engineers to spoofed 
LinkedIn pages and loaded their computers with malware to gain access.</div>
<div class="story-body">
British intelligence agency 
<a href="http://www.gchq.gov.uk/Pages/homepage.aspx" target="_blank">GCHQ</a>
 (Government Communications Headquarters) has spoofed LinkedIn profiles 
of employees at mobile communications companies and mobile billing firms
 to gain access to their corporate networks, <em>Der Spiegel</em> reported.</div>
The first known attack was on Belgacom, a telecom firm partly owned 
by the Belgian government, according to a top secret GCHQ presentation 
revealed by NSA whistleblower Edward Snowden. That attack was among 
projects launched by GCHQ to infiltrate foreign networks.<br />

The British intelligence agency also targeted international mobile 
billing clearinghouses, which process international payment transactions
 between wireless companies.

</div>
<h2 class="subhead">
Hitting US Companies
</h2>
<a href="http://www.syniverse.com/home" target="_blank">Syniverse</a> 
and Mach, a company it acquired in July, are high on the list of 
clearinghouses GCHQ has targeted for such penetration, according to <em>Der Spiegel</em>.<br />

GCHQ  apparently has targeted three network engineers at Mach, using the Quantum Insert method.<br />

Syniverse provides solutions that let different mobile technologies 
interoperate around the world. With its acquisition of Mach, it serves 
more than 1,500 mobile service providers, enterprises, ISPs and app 
providers in nearly 200 countries.<br />

"There have been no known breaches of the Syniverse or Mach data 
centers by any government agency," Syniverse spokesperson Bobby Eagle 
told TechNewsWorld. "Privacy and confidentiality are essential 
priorities for Syniverse, and we take these matters very seriously."

<br />

<h2 class="subhead">
The Essence of GCHQ's Attack
</h2>
The British intelligence service is, basically, redirecting traffic to 
and from targets to a server between them so it can intercept 
communications.<br />

This is known as a "man in the middle" attack.<br />

Such attacks are commonly used on the banking sector. iMessages 
<a href="http://www.technewsworld.com/story/79230.html" target="_blank">are vulnerable to MITM</a>, Quarkslab disclosed in October.<br />

"Man-in-the-middle attacks are one of the oldest kinds of attacks out there," Daniel Castro, senior analyst at the 
<a href="http://www.itif.org/" target="_blank">Information Technology and Innovation Foundation</a>, told TechNewsWorld.

<br />

<h2 class="subhead">
We Are the (Tainted) World
</h2>
GCHQ's techniques are strikingly similar to the ones used by 
cybercriminals when they launch targeted attacks, such as spearphishing.<br />

The agency first determines who works for a target company using 
publicly available data such as the victim's LinkedIn profile. It 
apparently focuses on IT personnel and network admins because they have 
extensive access privileges on their computers.<br />

The agency then gathers all available information about its victim --
 in one case, even gaining access to cookies on a victim's PCs -- then 
develops what are essentially viruses in payloads customized for the 
victim's computers.<br />

One method of attack involved concealing the malware payloads on 
spoofed versions of victims' LinkedIn pages. Pulling up the fake profile
 would launch the malware into the victim's computer.<br />

"We have never cooperated with any government agency, nor we have any
 knowledge, with regard to these actions," LinkedIn spokesperson Julie 
Inouye told TechNewsWorld.<br />

"To date, we have not detected any of the spoofing activity that is 
being reported," she said. "LinkedIn takes the privacy and security of 
our members very seriously, and when we're made aware of any activity 
that may be considered problematic, we work to quickly shut it down."

<br />

<h2 class="subhead">
The Sincerest Form of Flattery
</h2>
It appears that GCHQ borrowed heavily from the United States' National Security Agency.<br />

The NSA 
<a href="https://www.schneier.com/blog/archives/2013/10/how_the_nsa_att.html" target="_blank">places secret servers</a>,
 codenamed "Quantum," at key places on the Internet backbone as part of 
its so-called "Turmoil" system, according to security specialist Bruce 
Schneier.<br />

Turmoil is part of the NSA's 
<a href="http://en.wikipedia.org/wiki/Turbulence_%28NSA%29" target="_blank">Turbulence</a> program.<br />

Once the Quantum servers are in place, a query to a website they are 
spoofing hits them before it hits the legitimate site. The query is then
 redirected to another set of secret Internet servers, codenamed 
"FoxAcid," Schneier said.<br />

The FoxAcid servers then inject malware into victims' PCs to compromise them.<br />

It's not clear whether the UK agency is using the same technology as the NSA, although <em>Der Spiegel</em> uses the term "Quantum Insert" in its description of the GCHQ attacks.<br />

"Capturing large amounts of Internet traffic and redirecting it like that should be off limits," the ITIF's Castro remarked.</div>

Brit Spies Spoof LinkedIn Pages to Track Targets

Officially, no one knows anything, but if the latest revelations from Edward Snowden's storehouse of inside information on global ...

8:18:00 PM

NSA Infected 50,000 Computer Networks With Malicious Software

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-f4j-tfdjckI/UpHlRX1kZ4I/AAAAAAAAEXk/jzIkUNc4Flo/s1600/NSA.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="http://1.bp.blogspot.com/-f4j-tfdjckI/UpHlRX1kZ4I/AAAAAAAAEXk/jzIkUNc4Flo/s320/NSA.jpeg" width="316" /></a></div>
<div class="eerste">
The American intelligence service - NSA - infected 
more than 50,000 computer networks worldwide with malicious software 
designed to steal sensitive information. Documents provided by former 
NSA-employee Edward Snowden and seen by this newspaper, prove this.</div>
A
 management presentation dating from 2012 explains how the NSA collects 
information worldwide. In addition, the presentation shows that the 
intelligence service uses ‘Computer Network Exploitation’ (CNE) in more 
than 50,000 locations. CNE is the secret infiltration of computer 
systems achieved by installing malware, malicious software.<br />

</div>
</div>
One example of this type of hacking was discovered in September 
2013 at the Belgium telecom provider Belgacom. For a number of years the
 British intelligence service - GCHQ – has been installing this 
malicious software in the Belgacom network in order to tap their 
customers’ telephone and data traffic. The Belgacom network was 
infiltrated by GCHQ through a process of luring employees to a false 
Linkedin page.<br />
 <h2>
NSA special department employs more than a thousand hackers</h2>
The
 NSA computer attacks are performed by a special department called TAO 
(Tailored Access Operations). Public sources show that this department 
employs more than a thousand hackers. As recently as August 2013, the <em>Washington Post</em>
 published articles about these NSA-TAO cyber operations. In these 
articles The Washington Post reported that the NSA installed an 
estimated 20,000 ‘implants’ as early as 2008. These articles were based 
on a secret budget report of the American intelligence services. By 
mid-2012 this number had more than doubled to 50,000, as is shown in the
 presentation <em>NRC Handelsblad</em> laid eyes on.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-6UlkSE9jEnk/UpHl7_g5RyI/AAAAAAAAEXs/eXr2WCRhMKc/s1600/nsa1024.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="478" src="http://1.bp.blogspot.com/-6UlkSE9jEnk/UpHl7_g5RyI/AAAAAAAAEXs/eXr2WCRhMKc/s640/nsa1024.jpg" width="640" /></a></div>
Cyber operations are increasingly important for the NSA. Computer 
hacks are relatively inexpensive and provide the NSA with opportunities 
to obtain information that they otherwise would not have access to. The 
NSA-presentation shows their CNE-operations in countries such as 
Venezuela and Brazil. The malware installed in these countries can 
remain active for years without being detected.<br />
 <h2>
‘Sleeper cells’ can be activated with a single push of a button</h2>
The
 malware can be controlled remotely and be turned on and off at will. 
The ‘implants’ act as digital ‘sleeper cells’ that can be activated with
 a single push of a button. According to the <em>Washington Post</em>, the NSA has been carrying out this type of cyber operation since 1998.<br />
 The
 Dutch intelligence services - AIVD and MIVD – have displayed interest 
in hacking. The Joint Sigint Cyber Unit – JSCU – was created early in 
2013. The JSCU is an inter-agency unit drawing on experts with a range 
of IT skills. This new unit is prohibited by law from performing the 
type of operations carried out by the NSA as Dutch law does not allow 
this type of internet searches.<br />
 The NSA declined to comment and 
referred to the US Government. A government spokesperson states that any
 disclosure of classified material is harmful to our national security.</div>

NSA Infected 50,000 Computer Networks With Malicious Software

The American intelligence service - NSA - infected more than 50,000 computer networks worldwide with malicious software designed to st...

4:42:00 PM

Websites of Tamil TV Channels Hacked

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-rvSaKnNdwmk/UoiZnzuXiwI/AAAAAAAAEQo/nCoRtIrgJDE/s1600/hasnain+haxor.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="309" src="http://1.bp.blogspot.com/-rvSaKnNdwmk/UoiZnzuXiwI/AAAAAAAAEQo/nCoRtIrgJDE/s400/hasnain+haxor.jpg" width="400" /></a></div>
<div class="body">
The websites of two popular Tamil television channels, including ‘<a href="http://rexhacker.blogspot.com/2013/11/puthiyathalaimurai-website-hacked-by.html" target="_blank">Puthiya Thalaimurai</a>,’ were hacked on Saturday.</div>
<div class="body">
Pakistan
 Haxors Crew (PHC), the group that allegedly hacked the AIADMK party 
website on November 2, has claimed responsibility for this as well in a 
posting made on the defaced homepages.</div>
<div class="body">
The management of ‘Puthiya Thalaimurai’ channel has lodged a complaint with the Chennai Police.</div>
<div class="body">
When
 this reporter visitedwww.sunnetwork.in, the homepage of the Sun Group 
was also found defaced (photo). The homepage of all the three websites 
looked similar, giving room to suspicion that the same group was 
involved.</div>
<div class="body">
The suspects said on the defaced homepage 
that they wanted justice and peace. They also wanted the release of the 
“innocent kid,” in an apparent reference to P. Eswaran (27) of Bangalore
 who was arrested by the Central Crime Branch (CCB) of the Chennai 
Police, on charges of attempting to hack into the AIADMK party website.</div>
<div class="body">
Additional
 Commissioner of Police (CCB) R.S. Nallasivam said Eswaran was not the 
real hacker. But he had made at least 300 attempts to enter the 
administrator’s account of the AIADMK party website.</div>
<div class="body">
“He
 admitted to have made several attempts to hack into the party website. 
We seized the laptop and other tools used to commit the offence. Efforts
 are on to apprehend the suspects who actually hacked these websites…we 
have sought the assistance of Anna University, National Informatics 
Centre and others in the investigation,” he told
<i>The Hindu</i>
. Hours after their website was hacked, ‘Puthiya Thalaimurai’ put up a 
homepage saying that the portal was undergoing technical upgrade and 
would be back soon.</div>
<div class="body">
The AIADMK website, police sources said, was managed by a team based at Ambattur here.</div>
<div class="body">
“They
 did not have adequate security systems to prevent hackers…but the fact 
that the websites of two leading media houses have also been hacked is 
worrisome. We are following some specific clues that may lead to the 
arrest of the suspects soon,” a police official said.</div>
</div>

Websites of Tamil TV Channels Hacked

The websites of two popular Tamil television channels, including ‘ Puthiya Thalaimurai ,’ were hacked on Saturday. Pakistan Haxors Cr...

3:28:00 PM

Puthiyathalaimurai Website Hacked by Same Hacker As JavaTV And AIADMAK

<div dir="ltr" style="text-align: left;" trbidi="on">
A Pakistani hacker by name "H4$N4!N H4XOR" belonging  to "Pakistan Haxors
 Crew" who hacked the JayaTV website and AIADMAK site before has now 
hacked the Puthiyathalaimurai website again and left the following 
message.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-xUpnAw_NcM4/UobqCMA4A2I/AAAAAAAAEO8/vAKi8s8v79Y/s1600/rex+hacker.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="356" src="http://4.bp.blogspot.com/-xUpnAw_NcM4/UobqCMA4A2I/AAAAAAAAEO8/vAKi8s8v79Y/s640/rex+hacker.png" width="640" /></a></div>
" Security Breach!<br />Hello Admin, I Hack AIADMAK website & jaya Tv So Kick Out That Innocent Kid From The Jail.<br />Your Site Security Is 0% And Easy To F***k,<br />PATCH YOUR SECURITY! "<br /><br />He was talking about the recent arrest of  P. Eswaran by Central Crime Branch whom they arrested on suspicion of hacking the AIADMAK site. Eswaran said that he was only trying to fix the vulnerability and this hack seems to also  suggest that also. The pakistani hacker who initially posted  about the defaces is still active.<br /><br />Though Eswaran was only trying to protect the website what he did is still illegal under section 66 of the IT Act . It would be very interesting to see how this case would play in court since it is the first of its kind.</div>

Puthiyathalaimurai Website Hacked by Same Hacker As JavaTV And AIADMAK

A Pakistani hacker by name "H4$N4!N H4XOR" belonging to "Pakistan Haxors Crew" who hacked the JayaTV website and AIAD...

8:46:00 AM

MacRumors Forums hacked, 860,000+ users data compromised

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-X0yVeHwsXcU/UoRoV5m5-xI/AAAAAAAAEKE/UwIZs52mtMA/s1600/macrumors-forums-hacked-database-stolen.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-X0yVeHwsXcU/UoRoV5m5-xI/AAAAAAAAEKE/UwIZs52mtMA/s1600/macrumors-forums-hacked-database-stolen.jpg" /></a></div>
MacRumors forums have been breached by hackers who managed to obtain the information belonging to 860106 users that includes hashed passwords.<br /><br />"In situations like this, it's best to assume that your MacRumors Forum username, email address and (hashed) password is now known." Editorial Director Arnold Kim wrote.<br /><br />The hacker who behind the attack also made a post in MacRumors forum regarding the breach saying "We're not 'mass cracking' the hashes. It doesn't take long whatsoever to run a hash through hashcat with a few dictionaries and salts, and get results."<br /><br />Hackers also claimed that they are not going to use the compromised credentials to log into gmail, apple accounts or any other accounts unless they target users specifically for some reason.<br /><br />"Stop worrying, and stop blaming it on Macrumors when it was your own fault for reusing passwords in the first place." the hacker added.<br /><br />It appears hackers have gained access to the database by logging into the forum with the stolen credentials of a single moderator.<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
MacRumors forums have been breached by hackers who managed to obtain the information belonging to 860106 users that includes hashed passwords.<br /><br />"In situations like this, it's best to assume that your MacRumors Forum username, email address and (hashed) password is now known." Editorial Director Arnold Kim wrote.<br /><br />The hacker who behind the attack also made a post in MacRumors forum regarding the breach saying "We're not 'mass cracking' the hashes. It doesn't take long whatsoever to run a hash through hashcat with a few dictionaries and salts, and get results."<br /><br />Hackers also claimed that they are not going to use the compromised credentials to log into gmail, apple accounts or any other accounts unless they target users specifically for some reason.<br /><br />"Stop worrying, and stop blaming it on Macrumors when it was your own fault for reusing passwords in the first place." the hacker added.<br /><br />It appears hackers have gained access to the database by logging into the forum with the stolen credentials of a single moderator.ns like this, it's best to assume that your MacRumors Forum 
username, email address and (hashed) password is now known." Editorial 
Director Arnold Kim <a href="http://www.macrumors.com/2013/11/12/macrumors-forums-security-leak/" rel="nofollow" target="_blank">wrote</a>.<br />
<br />
The hacker who behind the attack also made a post in MacRumors forum regarding the breach <a href="http://forums.macrumors.com/showpost.php?p=18355633&postcount=518" rel="nofollow" target="_blank">saying</a>
 "We're not 'mass cracking' the hashes. It doesn't take long whatsoever 
to run a hash through hashcat with a few dictionaries and salts, and get
 results."<br />
<br />
Hackers also claimed that they are not going to use the compromised 
credentials to log into gmail, apple accounts or any other accounts 
unless they target users specifically for some reason.<br />
<br />
"Stop worrying, and stop blaming it on Macrumors when it was your own 
fault for reusing passwords in the first place." the hacker added.<br />
<br />
It appears hackers have gained access to the database by logging into 
the forum with the stolen credentials of a single moderator. - See more 
at: 
http://www.ehackingnews.com/2013/11/macrumors-hacked-data-stolen.html#sthash.djSkbfiX.dpuf</div>
<div class="separator" style="clear: both; text-align: left;">
</div>
</div>

MacRumors Forums hacked, 860,000+ users data compromised

MacRumors forums have been breached by hackers who managed to obtain the information belonging to 860106 users that includes hashed passw...

11:09:00 AM

Indian Hacker Arrested For Restoring Hacked Site

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-4f7AEa6INYk/UoEBMIqSXwI/AAAAAAAAEHo/VMr_pv_Ppg0/s1600/Indian-hacker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-4f7AEa6INYk/UoEBMIqSXwI/AAAAAAAAEHo/VMr_pv_Ppg0/s1600/Indian-hacker.jpg" /></a></div>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
Indian Police has arrested Indian Hacker says to be involved in hacking 
into www.aiadmkallindia.org, The Official Website of the AIADMK.</div>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
The Cyber Crime team of the Central Crime Branch on Saturday arrested a 
23-year-old software professional on the charge of hacking into 
www.aiadmkallindia.org, the official website of the AIADMK. The website 
was hacked on November 2 by individual/individuals claiming to be the<strong> Pakistan Haxors Crew (PHC)</strong>.</div>
<h2 style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 31.5px; font-weight: normal; line-height: 40px; margin: 10px 0px; text-align: center; text-rendering: optimizelegibility;">
Indian Hacker</h2>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
Indian Police officials said Hacker <strong>Mr. Eswaran</strong> had on 
many occasions entered the administrative pages of the party site 
illegally. However, it is yet to be confirmed whether Eswaran had 
actually defaced the site on Deepavali day, claiming to be the PHC and 
posting its logo and pro-Pakistani slogans.</div>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
Last week, after the hack, representatives from the AIADMK party office 
on Lloyds Road, Royapettah, lodged a complaint with the Office of the 
Commissioner of Police and a case was registered by the Cyber crime team
 of the Central Crime Branch. Police sources said the hackers had 
defaced only the homepage but did not tamper with any other part of the 
portal. The site has been blocked now and a special team is conducting 
the probe.</div>
The news sounds odd, Indian hacker, hacking Indian website and placing Pakistan Haxors Crew ( PHC ) Mark there.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-u3VrbzAyA7I/UoEBXLtC5kI/AAAAAAAAEHw/RjEU7VakEJ8/s1600/PHC.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-u3VrbzAyA7I/UoEBXLtC5kI/AAAAAAAAEHw/RjEU7VakEJ8/s1600/PHC.jpg" /></a></div>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
Indian Police officials said with the preliminary information provided 
by C- DAC, they had tracked down Eswaran, who had unlawfully logged in 
as an administrator on the party website.</div>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
Yet Indian Police ” Cyber Crime Team has not finalized the situation but
 there is a reason to believe that,  Mr. Eswaran involved in illegal 
activities and log files detected his activity.</div>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
The Cyber warfare has entered in a new phrase, after this news – 
Pakistani and Indian hackers attack each other’s website on daily basis 
and most of them are Official sites but never before such arrest been 
made by India nor Pakistan.</div>
<div style="background-color: white; color: #333333; font-family: 'Open Sans', 'Droid Arabic Kufi', Helvetica, Georgia, serif; font-size: 13px; line-height: 24px; margin-bottom: 10px; text-align: justify;">
very unusual for Indian hackers counterparts to know that, their own 
hacker involved in activities and supporting PHC Pakistani hackers.</div>
</div>

Indian Hacker Arrested For Restoring Hacked Site

Indian Police has arrested Indian Hacker says to be involved in hacking into www.aiadmkallindia.org, The Official Website of the AIADMK...

9:11:00 PM

Google Bolivia Domain Hacked and Defaced by Turkish Hacker

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-mAds5qmEuAQ/UoD-ynVxc8I/AAAAAAAAEHU/cMtXl7lu0ss/s1600/Google-Bolivia.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="300" src="http://4.bp.blogspot.com/-mAds5qmEuAQ/UoD-ynVxc8I/AAAAAAAAEHU/cMtXl7lu0ss/s640/Google-Bolivia.jpg" width="640" /></a></div>
<span style="color: black;">A <strong>Turkish</strong>
 hacker going with the handle of Misafir has hacked and defaced official
 Google Bolivia domain on 30th Oct 2013 along with 7 other Google 
domains such as Google Translator, Maps, SMS, News, ID, Labs and Google 
Images domain.</span><br />

<span style="color: black;">Misafir left a deface page along with a message on all defaced Google domains, expressed in following words.</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-XlDtd3Wm8ZI/UoD_CD-6LLI/AAAAAAAAEHc/boYlS4KSXd0/s1600/Google+Bolivia+Domain+Hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="254" src="http://2.bp.blogspot.com/-XlDtd3Wm8ZI/UoD_CD-6LLI/AAAAAAAAEHc/boYlS4KSXd0/s640/Google+Bolivia+Domain+Hacked.png" width="640" /></a></div>
<span style="color: black;">by misafir! The names can be faked but the abilities never… See you soon</span><br />

<span style="color: black;">The attack appears to have been of the 
DNS poisoning variety, in which a hacker gained access to the Bolivian 
Network Information Center and changed the DNS records of Google’s site 
to a page owned by Misafir himself.</span><br />

<span style="color: black;">Links of al 8 hacked domains along with their mirrors are available on the Pastebin link given below:</span><br />

<strong><a href="http://pastebin.com/ZNNvuSQJ" target="_blank">http://pastebin.com/ZNNvuSQJ</a></strong><br />

<span style="color: black;">Hacking <a href="http://hackread.com/tag/Google/" target="_blank" title="Google"><span style="color: black;">Google</span></a> domains is a now a story of everyday. In past </span><strong>Google Images and Google Plus Malaysia Domains, Google Video Costa Rica Domain, Google Palestine, Google Kenya, Malawi’s Google, San Marino’s Google, Google Morocco and Google Saint Helena, Official Google Pakistan, Google Images and Google Translator Domain for Burundi </strong><span style="color: black;">were hacked and defaced by different hackers from all over the world.</span><br />

<span style="color: black;">At the time of publishing this article, Google Labs domain was offline while other 7 domains were restored and working online.</span><span style="color: black;"></span></div>

Google Bolivia Domain Hacked and Defaced by Turkish Hacker

A Turkish hacker going with the handle of Misafir has hacked and defaced official Google Bolivia domain on 30th Oct 2013 along with 7 ...

9:02:00 PM

FBI offering $100,000 reward for information on Most Wanted Cyber Criminals

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-wRUY14HZAF0/Unr1ZKbJv1I/AAAAAAAAEAo/a2bVQWkLjJY/s1600/FBI+offering+100000+reward+for+information+on+Most+Wanted+Hackers.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="406" src="http://1.bp.blogspot.com/-wRUY14HZAF0/Unr1ZKbJv1I/AAAAAAAAEAo/a2bVQWkLjJY/s640/FBI+offering+100000+reward+for+information+on+Most+Wanted+Hackers.jpg" width="640" /></a></div>
<div class="google-src-active-text" style="direction: ltr; line-height: 19px; text-align: left;">
The US Federal Bureau of Investigation has added five new hackers to its Cyber most wanted list and is seeking information from the public regarding their whereabouts.</div>
<div class="google-src-active-text" style="direction: ltr; line-height: 19px; text-align: left;">
The new fugitives on the FBI's Cyber Most Wanted list are:<br />
<ul>
<li>Pakistani nationals Farhan Arshad and Noor Aziz Uddin, wanted for 
their alleged involvement in an international telecommunications hacking
 scheme. Between 2008 and 2012, the pair gained unauthorized access to 
business telephone systems, resulting in losses exceeding $50 million. 
Arshad and Uddin are part of an international criminal ring that the FBI
 believes extends into Pakistan, the Philippines, Saudi Arabia, 
Switzerland, Spain, Singapore, Italy, Malaysia and elsewhere.</li>
</ul>
<ul class="unIndentedList">
<li> Carlos Perez-Melara, wanted for a variety of cyber crimes-including
 running a fraudulent website in 2003 that offered customers a way to 
"catch a cheating lover." Those who took the bait downloaded spyware 
that secretly installed a program on their computers that allowed 
scammers to steal the victims' identities and personal information.</li>
<li> Syrian national Andrey Nabilevich Taame, wanted for his alleged 
role in Operation Ghost Click, a malware scheme that compromised more 
than four million computers in more than 100 countries between 2007 and 
October 2011; there were at least 500,000 victims in the United States 
alone.</li>
<li> Russian national Alexsey Belan, wanted for allegedly remotely 
accessing the computer networks of three U.S.-based companies in 2012 
and 2013 and stealing sensitive data as well as employees' identities.</li>
</ul>
Others already on the FBI's list include:<br />
<ul>
<li>Peteris Sahurovs is wanted for his alleged involvement in an 
international cybercrime scheme that took place from February of 2010 to
 September of 2010. The scheme utilized a computer virus that involved 
the online sale of fraudulent computer security programs that defrauded 
Internet users of more than $2 million.</li>
</ul>
<ul class="unIndentedList">
<li> Artem Semenov is wanted for his alleged participation in an Eastern
 European cyber crime ring, operating out of New York, which is known 
for recruiting money mules to open bank accounts, cashing out money 
received through unauthorized money transfers, and then transferring the
 money overseas. An arrest warrant was issued for Semenov in the 
Southern District of New York on September 29, 2010, after he was 
charged with conspiracy to commit bank fraud; conspiracy to possess 
false identification documents; and false use of passport.</li>
<li> Shaileshkumar P. Jain, along with his co-conspirator, <a href="http://www.fbi.gov/wanted/cyber/bjorn-daniel-sundin/view">Bjorn Daniel Sundin</a>,
 is wanted for his alleged involvement in an international cybercrime 
scheme that caused internet users in more than 60 countries to purchase 
more than one million bogus software products, resulting in consumer 
loss of more than $100 million. It is alleged that from December 2006 to
 October 2008, through fake advertisements placed on legitimate 
companies' websites, Jain and his accomplices deceived internet users 
into believing that their computers were infected with "malware" or had 
other critical errors in order to encourage them to purchase "scareware"
 software products that had limited or no ability to remedy the 
purported defects.</li>
<li> Alexandr Sergeyevich Bobnev was indicted in the Southern District 
of New York on November 26, 2008, on one count of conspiracy to commit 
wire fraud and one count of conspiracy to commit money laundering. 
Bobnev was indicted for his alleged participation in a money laundering 
scheme involving unauthorized access to the accounts of a major provider
 of investment services. Bobnev allegedly accessed compromised accounts 
and wire transferred funds out of these accounts to money mules in the 
United States. These mules were then responsible for transferring the 
money back to Bobnev. Between June of 2007 and August of 2007, Bobnev 
allegedly wired or attempted to wire over $350,000 from compromised 
accounts.</li>
</ul>
</div>
</div>

FBI offering $100,000 reward for information on Most Wanted Cyber Criminals

The US Federal Bureau of Investigation has added five new hackers to its Cyber most wanted list and is seeking information from the publ...

7:31:00 AM

Google Malaysia Gets Hacked by Pakistani Hackers

<div dir="ltr" style="text-align: left;" trbidi="on">
Google’s homepage for its Malaysian ccTLD  (Country-code Top Level 
Domain), i.e. google.com.my and google.my got hacked today by Pakistani 
hackers.<br />
The group called MadLeets has accepted the responsibility of this 
major defacement through a message shown on Google’s home page for 
Malaysia.<br />
Apparently the hackers DNS poisoned the domains and redirected them 
to their own web-server. Both the domains were hacked till the filing of
 this report.<br />
Google hadn’t updated the DNS for the domains till the filing of this
 report. After DNS updation, domains will still remain inaccessible (or 
defaced) as name server propagation takes some time (from few minutes to
 24 hours).<br />
Both the websites are to remain defaced till the original DNS are 
propogated across the web, which is likely to take at least 10-12 hours.<br />
It maybe recalled that a Turkish hacker had hacked Google Pakistan and 300 other Pakistani domains using the same technique.<br />
Here is the message left on defaced page:<br />
<blockquote>
<div style="text-align: center;">
Google Malaysia STAMPED by PAKISTANI LEETS</div>
<div style="text-align: center;">
We are TeaM MADLEETS</div>
<div style="text-align: center;">
H4x0r HuSY – KhantastiC HaXor – H4x0rL1f3 – InvectuS – Shadow008 – r00x – Don – MindCracker – Dr.Z0mbie – phpBuGz – MaD GirL<br />
MaDCoDe – Sn!p3r_GS – DeXter – Neo Haxor – Darksnipper – Pain006 – b0x –
 R3DL0F – Sahrawi – 3thicaln00b – Hmei7 – MakMan – Sniffer – AL.MaX 
HaCkEr – Ch3rn0by1<br />
=======================<br />
www.MaDLeeTs.com<br />
| LeeTHaXor@Y7mail.com |<br />
=======================</div>
<div style="text-align: center;">
Pakistan Zindabad</div>
</blockquote>
Check below the screenshot of hacked Google Malaysia:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-15OMdPduhSU/UldfDtQRqiI/AAAAAAAADvg/vOQrjNn35qY/s1600/Google-Malaysia.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-15OMdPduhSU/UldfDtQRqiI/AAAAAAAADvg/vOQrjNn35qY/s1600/Google-Malaysia.jpg" /></a></div>
</div>

Google Malaysia Gets Hacked by Pakistani Hackers

Google’s homepage for its Malaysian ccTLD (Country-code Top Level Domain), i.e. google.com.my and google.my got hacked today by Pakistani...

7:16:00 AM

Official Website of NADRA E-Sahulat Gets Hacked, User Data Compromised

<div dir="ltr" style="text-align: left;" trbidi="on">
Official website of E-Sahulat – financial services platform offering 
online payment solution for individuals and business – from NADRA was 
hacked and defaced by Xploiter today.<br />
Instead of defacing the main page, hacker injected a page on server at following locations:<br />
<ul>
<li><a href="http://www.esahulat.org/x.html" rel="nofollow" target="_blank">http://www.esahulat.org/x.html</a></li>
<li><a href="http://www.esahulat.com.pk/x.html" rel="nofollow" target="_blank">http://www.esahulat.com.pk/x.html</a></li>
</ul>
Mirrors:<br />
<ul>
<li><a href="http://www.zone-h.com/mirror/id/20786269" rel="nofollow" target="_blank">http://www.zone-h.com/mirror/id/20786269</a></li>
<li><a href="http://www.zone-h.com/mirror/id/20786270" rel="nofollow" target="_blank">http://www.zone-h.com/mirror/id/20786270</a></li>
</ul>
A screenshot uploaded by Hacker on his Facebook page hints that he had access to critical financial database on the server.<br />
Here is the screenshot that has critical financial information of E-Sahulat users:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-d-Yq_84H82w/Uje-gJl_iyI/AAAAAAAADZg/WWO8HMrKSPQ/s1600/NADRA-E-Sahulat-Hacked1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-d-Yq_84H82w/Uje-gJl_iyI/AAAAAAAADZg/WWO8HMrKSPQ/s1600/NADRA-E-Sahulat-Hacked1.jpg" /></a></div>
We are still unclear about the intents behind the defacement as there
 was no clear message left by hackers on the defaced page, however, it 
is likely that hackers are hacking and defacing websites to gain 
attention.<br />
Trend has only worsen with recent hackings of Banks and Financial Institutions. Previously, Soneri Bank, Habib Bank Limited, Allied Bank Limited, Muslim Commercial Bank, Burj Bank and Tameer Bank had been hacked by local hackers.<br />
Here is the screenshot of defaced page of E-Sahulat website:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-M8YF57Q85ow/Uje-uWhrf9I/AAAAAAAADZo/w2ic2ZY0uhY/s1600/Nadra-E-Sahulat-hacked2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="http://4.bp.blogspot.com/-M8YF57Q85ow/Uje-uWhrf9I/AAAAAAAADZo/w2ic2ZY0uhY/s640/Nadra-E-Sahulat-hacked2.png" width="622" /></a></div>
</div>

Official Website of NADRA E-Sahulat Gets Hacked, User Data Compromised

Official website of E-Sahulat – financial services platform offering online payment solution for individuals and business – from NADRA was...

7:31:00 AM

Subscribe to: Posts ( Atom )

WhatsApp For Windows? Naaa.. Hackers Are Spamming Malware As WhatsApp Software

CNN's Twitter, Facebook And Website Hacked by Syrian Electronic Army

Facebook Hacker Received $33,500 Reward For Remote Code Execution Vulnerability

Exclusive - openSUSE Forum Hacked; 79500 Users' Data Compromised

Shophive.com is Hacked!

Cryptolocker: The Most Destructive and Rapidly Growing Trojan Yet!

Stealing Computer Data through Speakers is Possible Now!

Pakistan is Finally Preparing to Formulate Cyber Laws in the Country

Central Bank of India and Several Other Indian Websites Hacked by Pakistani Hackers

26/11 Anniversary: Indian Cyber Army Hacks Pakistan’s Top Military Blog

Brit Spies Spoof LinkedIn Pages to Track Targets

NSA Infected 50,000 Computer Networks With Malicious Software

Websites of Tamil TV Channels Hacked

Puthiyathalaimurai Website Hacked by Same Hacker As JavaTV And AIADMAK

MacRumors Forums hacked, 860,000+ users data compromised

Indian Hacker Arrested For Restoring Hacked Site

Google Bolivia Domain Hacked and Defaced by Turkish Hacker

FBI offering $100,000 reward for information on Most Wanted Cyber Criminals

Google Malaysia Gets Hacked by Pakistani Hackers

Official Website of NADRA E-Sahulat Gets Hacked, User Data Compromised

Popular Posts

Comments

Archive