RCE, Information Disclosure and XSS Flaws Found in PayPal

4/15/2014 cyb3r.gladiat0r 4

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuIwDgMNaan2uhQRa6VZRiUWTr7JTxgzIBKLz-HDBPC4RznLPMoODa6G5BeZfIo1MifcSy-nP72XWL_DHOY8DwNS8DiHOsRrkhGL1_ilr16MwDXTioCptQS659nbw7bwNvhKfBPK8iKaA/s1600/RCE-Information-Disclosure-and-XSS-Flaws-Found-in-PayPal-Partner-Program-Video.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="RCE, Information Disclosure and XSS Flaws Found in PayPal " border="0" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuIwDgMNaan2uhQRa6VZRiUWTr7JTxgzIBKLz-HDBPC4RznLPMoODa6G5BeZfIo1MifcSy-nP72XWL_DHOY8DwNS8DiHOsRrkhGL1_ilr16MwDXTioCptQS659nbw7bwNvhKfBPK8iKaA/s1600/RCE-Information-Disclosure-and-XSS-Flaws-Found-in-PayPal-Partner-Program-Video.jpg" title="RCE, Information Disclosure and XSS Flaws Found in PayPal " width="400" /></a></div>
<br />
A security expert has managed to identify three <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerabilities</a> on <a href="http://paypal-marketing.com/">paypal-marketing.com</a>, the website used by the payment processor for the <a href="http://www.hackerschronicle.com/search/label/PayPal">PayPal</a> Partner Program.<br />
<br />
Behrouz Sadeghipour has found and reported a <a href="http://www.hackerschronicle.com/search/label/XSS">cross-site scripting (XSS)</a> issue, a <a href="http://www.hackerschronicle.com/search/label/Remote%20Code%20Execution">remote code execution</a> flaw and an <a href="http://www.hackerschronicle.com/search/label/Information%20Disclosure">information disclosure vulnerability</a>.<br />
<br />
Initially, the researcher found the XSS flaw, which he reported to PayPal’s security team on March 19. The XSS was addressed on April 9.<br />
<br />
One day after the XSS was fixed, Sadeghipour identified an information disclosure issue, which he later leveraged for remote code execution. The expert said he was looking for an SQL Injection bug, but he found an RCE instead.<br />
<br />
To demonstrate the existence of the RCE to PayPal, he sent the company’s security team three links showing that he could retrieve the Process ID (PID), the script owner’s Group ID (GID) and the script owner’s User ID (UID) by replacing a parameter in the request with <a href="http://www.hackerschronicle.com/search/label/PHP">PHP</a> commands.<br />
<br />
By April 11, PayPal had addressed the vulnerability. The company has promised to reward the researcher in the next payment cycle.<br />
<br />
Sadeghipour highlights that the RCE he has found is a remote code execution, not a remote command execution bug. This vulnerability allows an attacker to run PHP functions. The flaw produces the same sort of results, but by leveraging PHP.<br />
<br />
Check out the proof-of-concept video for the PayPal Partner Program vulnerabilities. Additional technical details are available on <a href="http://nahamsec.com/2014/04/paypal-marketing-remote-code-execution/">Behrouz Sadeghipour's blog</a>.<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/BB3rSd_muBc" width="560"></iframe><br />
Source: <a href="http://softpedia.com/">Softpedia</a></div>

RCE, Information Disclosure and XSS Flaws Found in PayPal

A security expert has managed to identify three vulnerabilities on paypal-marketing.com , the website used by the payment processor for...

How to patch your server against The Heartbleed Bug

4/09/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3>
 <div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhF8F3vAwnst4IayJY5zYLxQJ_-NQBqWbNlmhPEVZiV0HJTJ7pQWu9FwtvAUEJYWLEIgX9_d9Bem64Sv5Fo31Sy3Gcm3fcavtdzOuyp0vG39gFf-122r39HWCB-2l_fR_VVjbFKISUwlYCg/s1600/How+to+patch+your+server+against+The+Heartbleed+Bug.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="How to patch your server against The Heartbleed Bug" border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhF8F3vAwnst4IayJY5zYLxQJ_-NQBqWbNlmhPEVZiV0HJTJ7pQWu9FwtvAUEJYWLEIgX9_d9Bem64Sv5Fo31Sy3Gcm3fcavtdzOuyp0vG39gFf-122r39HWCB-2l_fR_VVjbFKISUwlYCg/s1600/How+to+patch+your+server+against+The+Heartbleed+Bug.jpg" title="How to patch your server against The Heartbleed Bug" width="318" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</h3>
<h3>
What is the Heartbleed Bug?</h3>
<br />
The Heartbleed Bug is a serious <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerability</a> in the popular <a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).<br />
The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users. <br />
<br />
<h3>
Before you start</h3>
Check if your OpenSSL version is vulnerable to the <a href="http://www.hackerschronicle.com/search/label/Exploit">exploit</a>. You can check it by typing in your terminal: <span class="highlight pulse">openssl version</span><br />
The result should look something like this:<br />
<div class="command wobble-horizontal">
# openssl version<br />
OpenSSL 1.0.1g 7 Apr 2014  </div>
<br />
<br />
Since we at <a href="http://www.hackerschronicle.com/">Hackers Chronicle</a> already patched our systems at the time of writing this guide, your result will probably be different.<br />
<h3>
What versions are vulnerable?</h3>
Status of different versions:<br />
<ul>
<li>OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable</li>
<li>OpenSSL 1.0.1g is NOT vulnerable</li>
<li>OpenSSL 1.0.0 branch is NOT vulnerable</li>
<li><a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> 0.9.8 branch is NOT vulnerable</li>
</ul>
<br />
Bug was introduced to OpenSSL in December 2011 and has been out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug.<br />
<br />
Some operating system distributions that have shipped with potentially vulnerable OpenSSL version:<br />
<ul>
<li>Debian Wheezy (stable), OpenSSL 1.0.1e-2+deb7u4</li>
<li><a href="http://www.hackerschronicle.com/search/label/Ubuntu">Ubuntu</a> 12.04.4 LTS, OpenSSL 1.0.1-4ubuntu5.11</li>
<li><a href="http://www.hackerschronicle.com/search/label/CentOS">CentOS</a> 6.5, OpenSSL 1.0.1e-15</li>
<li>Fedora 18, OpenSSL 1.0.1e-4</li>
<li>OpenBSD 5.3 (OpenSSL 1.0.1c 10 May 2012) and 5.4 (OpenSSL 1.0.1c 10 May 2012)</li>
<li>FreeBSD 8.4 (OpenSSL 1.0.1e) and 9.1 (OpenSSL 1.0.1c)</li>
<li>NetBSD 5.0.2 (OpenSSL 1.0.1e)</li>
<li>OpenSUSE 12.2 (OpenSSL 1.0.1c)</li>
</ul>
Operating system distribution with versions that are not vulnerable:<br />
<ul>
<li>Debian Squeeze (oldstable), OpenSSL 0.9.8o-4squeeze14</li>
<li>SUSE Linux Enterprise Server</li>
</ul>
<h3>
Ubuntu</h3>
open your terminal and type in the following:<br />
<span class="command wobble-horizontal">#sudo apt-get update<br />
#sudo apt-get install -y libssl1.0.0 openssl<br />
#openssl version -a <br />
//confirm the "built on" date is >= 2014-04-07<br />
sudo lsof -n | grep ssl | grep DEL <br />
//restart all listed services. Repeat this until no results are returned</span><br />
<br />
<h3>
<a href="http://www.hackerschronicle.com/search/label/Debian">Debian</a></h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">#wget http://security.debian.org/pool/updates/main/o/openssl/libssl1.0.0-dbg_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/openssl_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/libssl1.0.0_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_1.0.1e-2+deb7u5_amd64.deb<br />
<br />
#dpkg -i openssl_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl1.0.0_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl1.0.0-dbg_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl-dev_1.0.1e-2+deb7u5_amd64.deb<br />
<br />
#/etc/init.d/apache2 restart<br />
#/etc/init.d/ssh restart</span><br />
<br />
<h3>
CentOS</h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">#yum clean all && yum update "openssl*"</span><br />
<br />
Take note and ensure that it’s specifically <span class="system push highlight">openssl-1.0.1e-16.el6_5.7 (or later)</span> being installed. As this update has just been released, your yum mirror may not have this package yet. If your yum mirror/repository does not yet have this update, you can download and install the RPMs manually from another CentOS yum repository.<br />
<br />
After updating the packages, run the following command to see what processes still have the old, deleted OpenSSL libraries open:<br />
<span class="command wobble-horizontal">#lsof -n | grep ssl | grep DEL</span><br />
<br />
You must restart each process that still has the old libraries open.<br />
<br />
Examples of processes that may still have the old libraries open:<br />
<ul>
<li>mysql</li>
<li>postfix</li>
<li>webmin</li>
<li>openvpn</li>
<li>osad</li>
<li>nrpe</li>
</ul>
<h3>
<a href="http://www.hackerschronicle.com/search/label/Red%20Hat">Fedora/Red Hat</a></h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">$ yum update openssl</span><br />
<br />
Restart services that rely on OpenSSL<br />
<span class="command wobble-horizontal">$ lsof | grep libssl | awk '{print $1}' | sort | uniq</span><br />
<br />
<h3>
Test your website against Heartbleed Bug</h3>
<a href="http://possible.lv/tools/hb">Heartbleed Test - provided by possible.lv</a><br />
<a href="http://filippo.io/Heartbleed/">Heartbleed Test - provided by filippo.io </a><br />
<br />
Source: <a href="http://scanarch.com/" target="_blank">Scan Arch</a> </div>

How to patch your server against The Heartbleed Bug

Bug Centos CVE-2014-0160 Debian Heartbleed Bug Linux Tutorials OS Patch Red Hat Ubuntu Vulnerability How to patch your server against The Heartbleed Bug

What is the Heartbleed Bug? The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software librar...

SQL Injection vulnerability in Yahoo

4/08/2014 The Hackers Chronicle 0

Hacking News News SQL Injection Vulnerability Yahoo SQL Injection vulnerability in Yahoo

Security researcher Behrouz Sadeghipour has identified several SQL Injection vulnerabilities in a Hong Kong subdomain of Yahoo . He...

Syrian cyber space attacked, 60,000 accounts leaked

4/07/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" title="60,000 Personal Credentials Leaked From Syrian Sites" width="320" /></a></div>
<br />
<div dir="ltr" style="text-align: left;" trbidi="on">
Today a hacker from the European Cyber Army going by the handle <a href="https://twitter.com/Zer0Pwn" target="_blank">@Zer0Pwn</a> has announced a leak of data from two syrian based websites job.sy, realestate.sy.<br />
<br />
<a href="http://pastebin.com/7Y13ULux">The leak</a> which is titled “ECA vs. Assad | Part 1″ was posted to <a href="http://pastebin.com/7Y13ULux">pastebin</a> with a preview of some of the users data and a link to <a href="http://www.sendspace.com/file/tqa737">sendspace</a>. The attack is apart of a bigger operation that is going on towards what the hackers are claim are pro-assad targets.<br />
<br />
The data leak has resulted in over 60,000 Accounts being dumped online and between the two databases are users credentials which have encrypted passwords for job.sy but plaintext for realestate.sy. Both databases have full user details such as full names, contact phone numbers and home addresses. On the march 30th career-sy.com appears to of been breached and <a href="http://pastebin.com/wLJhHNd8">posted to pastebin</a> as well with 3 administrator credentials as well as the vuln entry point and link for the control panel login which is located on the job.sy server which career-sy.com redirects to now.<br />
<br />
Some attacks by other ECA members have been carried out and posted to twitter by <a href="https://twitter.com/ECA_Legion">@ECA_Legion</a> with data being leaked from syrianmonster.com, a syrian hosting website, ddos attacks on sites like syria-courts.com, sana.sy and moj.gov.sy. banquecentrale.gov.sy. The leak of data from the realestate.sy database appears to have plaintext passwords to accounts linked to www.scs-net.org which is one of the job.sy official partners to making all three sites linked together or even owned and operated by the same people possibly.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="65" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" title="60,000 Personal Credentials Leaked From Syrian Sites" width="400" /></a></div>
<br />
Full dump info<br />
<br />
<a href="http://realestate.sy/">http://realestate.sy/</a><br />
<br />
File realestate.sy_users.sql<br />
File Contents:  3,257 Emails that are unique out of 3,517 Total emails Found.<br />
Information: Contains user names,email addresses, clear text passwords, full names, phone numbers, locations and site related information.<br />
<br />
File realestate.sy.sql<br />
File Contents: 4,912 Emails that are unique out of 13,223 Total emails Found.<br />
Information: Complete internal messaging system, site logs and administrator login logs with ips and cookie information.<br />
<br />
<a href="http://job.sy/">http://job.sy/</a><br />
<br />
File job.sy_users.sql<br />
File Contents: 50,017 Emails that are unique out of 52,483 Total emails Found. Included in the job.sy.sql file as well.<br />
Information: Contains user names, encrypted MD5 passwords, email addresses, home addresses and contact numbers and full names as well as other site related information.<br />
<br />
File job.sy.sql<br />
File Contents: 59,575 Emails that are unique out of 84,343 Total emails Found.<br />
Information: Contains logs with ip addresses and browser information, messages between job seekers and employees between, min resumes, job comments<br />
<br />
<a href="http://syrianmonster.com/">http://syrianmonster.com</a><br />
Only contains 1 administrator account with username and password.<br />
<br />
<a href="http://career-sy.com/">http://career-sy.com/</a><br />
3 administrator credentials with user names and encrypted passwords.</div>
</div>

Data Leak European Cyber Army Hacking News News Syrian cyber space attacked, 60,000 accounts leaked

Today a hacker from the European Cyber Army going by the handle @Zer0Pwn has announced a leak of data from two syrian based websites j...

Enable HAProxy stats in Cent OS

3/30/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipybvTyxMYGeHrvEwrVBcT-kUT58xnUwFzVVC3e0NsVS6_nizojFEnAcCpx9taJFEKFTlWxwdhkBAtm7J_Ew69rq4XOyKayQLdg0hli6nDuGc3zA-oJBTDuHL8Ty2gZKpkKMHtPGpqmBE/s1600/haproxy-stats-hackerschronicle-com.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Enable HAProxy stats in Cent OS" border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipybvTyxMYGeHrvEwrVBcT-kUT58xnUwFzVVC3e0NsVS6_nizojFEnAcCpx9taJFEKFTlWxwdhkBAtm7J_Ew69rq4XOyKayQLdg0hli6nDuGc3zA-oJBTDuHL8Ty2gZKpkKMHtPGpqmBE/s1600/haproxy-stats-hackerschronicle-com.png" title="Enable HAProxy stats in Cent OS" width="400" /></a></div>
<br />
HAProxy Stats provides a lot of information about data transfer, total connection, server state etc. After installing HAProxy if you want to view HAProxy stats in your web browser, You can easily configure it by making few changes in your <a href="http://www.hackerschronicle.com/search/label/HAProxy" target="_blank">HAProxy</a> configuration using following steps.<br />
<br />
<h3>
1: Enable Stats in HAProxy</h3>
To enable stats edit your haproxy configuration file(<span class="highlight">/etc/haproxy/haproxy.cfg</span>) and add below entry after defaults section.<br />
<div class="content shadow-radial">
listen  stats   192.168.10.10:1936<br />
mode            http<br />
log             global<br />
<br />
maxconn 10<br />
<br />
clitimeout      100s<br />
srvtimeout      100s<br />
contimeout      100s<br />
timeout queue   100s<br />
<br />
stats enable<br />
stats hide-version<br />
stats refresh 30s<br />
stats show-node<br />
stats auth admin:password<br />
stats uri  /haproxy?stats</div>
<br />
<br />
<h3>
2: Access HAProxy Stats</h3>
<br />
Your can access HAProxy stats using following url. Change ip with your haproxy server ip address.<br />
<div class="command wobble-horizontal">
URL: http://192.168.10.10:1936/haproxy?stats<br />
Login user: admin<br />
Login password: password</div>
<br />
<br />
<br />
<h3>
3: Change Login Details</h3>
<br />
If you want to changed login details of HAProxy stats, edit your configuration and update “stats auth” value like below<br />
<br />
<div class="command wobble-horizontal">
stats auth  username:password</div>
<br />
<br />
Save configuration file and restart HAProxy to update service.<br />
<br />
<h3>
4: Change HAProxy Stats URL</h3>
<br />
To change url of haproxy stats edit configuration file and update following value.<br />
<div class="command wobble-horizontal">
stats uri  /ha-stats<br />
or<br />
stats uri  /stats</div>
<br />
<br />
Save configuration file and restart HAProxy to update service.<br />
<div class="command wobble-horizontal">
service haproxy restart </div>
<br />
Now you can access url like <span class="system pop">http://192.168.10.10:1936/ha-stats</span> or <span class="system pop">http://192.168.10.10:1936/stats</span>.<br />
<br />
<b>Congratulation’s!</b> HAProxy stats configuration has been completed successfully. Read next article to <a href="http://www.hackerschronicle.com/search/label/HAProxy">setup ACL in HAProxy</a>.</div>

Centos HAProxy Linux Tutorials Load Balancing Enable HAProxy stats in Cent OS

HAProxy Stats provides a lot of information about data transfer, total connection, server state etc. After installing HAProxy if you wan...

New Security Operating System Released, Developed by US Airforce

3/23/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjr43MJcQ_RoAdlfakQeAvIMG1ZENb1OCxor6wM6h2HIKfD2ODbHIG_isrDEdwh07fKzDVjB5al-rDssdqDpmDb97MOdt3U_vbwgiawSz1oZS1xFgdKVyOuvqE3KWKETsYR6rENnN8H-ggN/s1600/Lightweight-Portable-Security.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Lightweight Portable Security (LPS) 1.5.0" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjr43MJcQ_RoAdlfakQeAvIMG1ZENb1OCxor6wM6h2HIKfD2ODbHIG_isrDEdwh07fKzDVjB5al-rDssdqDpmDb97MOdt3U_vbwgiawSz1oZS1xFgdKVyOuvqE3KWKETsYR6rENnN8H-ggN/s1600/Lightweight-Portable-Security.jpg" title="Lightweight Portable Security (LPS) 1.5.0" width="400" /></a></div>
<br />
Lightweight Portable Security (LPS) 1.5.0, a thin <a href="http://www.hackerschronicle.com/search/label/Linux" target="_blank">Linux</a> <a href="http://www.hackerschronicle.com/search/label/OS">operating system</a> that creates a secure end node from trusted media on almost any Intel-based computer (PC or <a href="http://www.hackerschronicle.com/search/label/Apple">Mac</a>), is now available for download.<br />
<br />
LPS 1.5.0 is a different kind of operating system, although it's still based on Linux <a href="http://www.hackerschronicle.com/search/label/Kernel">kernel</a>, like most of the distros out there. Unlike established OSes, this is more like a thin client than anything else and it practically boots from a CD or USB flash stick without mounting a local hard drive. Users don't even need to have root access for this to work, because nothing is actually installed.<br />
<br />
The distribution has been developed by the <a href="http://www.hackerschronicle.com/search/label/USA">US</a> Air Force Research Laboratory, as part of its Software Protection Initiative project, and can be used as a completely secure environment, mostly because the user can't install it and the outside world can't interact with anything.<br />
<br />
“LPS-Public allows general web browsing and connecting to remote networks. It includes a smart card-enabled Firefox browser supporting CAC and PIV cards, a PDF and text viewer, <a href="http://www.hackerschronicle.com/search/label/Java">Java</a>, and <a href="http://www.hackerschronicle.com/search/label/Encryption">Encryption</a> Wizard - Public. LPS-Public turns an untrusted system (such as a home computer) into a trusted network client,” reads the official website.<br />
<br />
The best thing about it is that no trace of the user activity is ever registered on the computer, which also means that no malware can affect the operating system. The developers say that any malware that might infect a computer can only run within a session, so, in theory, a user can improve the system's security by rebooting between sessions.<br />
<br />
A number of very important changes and updates have been implemented. For example, Linux Kernel has been updated to version 3.10.22 (not the latest build, but it's new enough), USB interface libraries <span class="highlight pop">libusbx</span> has been updated to version 1.0.16, libusb-compat has been updated to version 0.1.5, and PCSC-Lite has been updated to version 1.8.10 (CCID 1.4.14). <br />
<br />
Also, the desktop is now using <a href="http://www.hackerschronicle.com/search/label/Xfce">Xfce</a>, numerous user experience utilities have been added, a number of <a href="http://www.hackerschronicle.com/search/label/Browser">Browser</a> Bookmark updates have been added, <span class="highlight pop">FreeRDP</span> has been updated to version 1.1, the <a href="http://www.hackerschronicle.com/search/label/VMware">VMware</a> View Client has been updated to version 2.2, Mozilla <a href="http://www.hackerschronicle.com/search/label/Firefox">Firefox</a> has been updated to version24.3.0 ESR, <a href="http://www.hackerschronicle.com/search/label/Adobe">Adobe Flash Player</a> has been updated to version 11.2.202.346, <a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> has been updated to version 1.0.0l/0.9.8y, and LibreOffice has been updated to version 4.1.5.<br />
<br />
A complete backlog of improvements and fixes can be found in the <a href="http://spi.dod.mil/CHANGES.html" target="_blank">official changelog</a>. <span class="highlight pop">Download</span> <a href="http://spi.dod.mil/docs/LPS-1.5.0_public_deluxe.iso" target="_blank">Lightweight Portable Security</a> (LPS) 1.5.0</div>

New Security Operating System Released, Developed by US Airforce

Distro Download Lightweight Portable Security Lightweight Portable Security (LPS)1.5.0 Linux OS USA New Security Operating System Released, Developed by US Airforce

Lightweight Portable Security (LPS) 1.5.0, a thin Linux operating system that creates a secure end node from trusted media on almost a...

GitHub under DDoS Attack

3/21/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4SJuTIBKWzzZyeE5rY1q-3V4zHR4PZ_xFuFmlaaG_TXzX6WCRrV6TBaYCEUY5Z1XDfOrGJM3tbmUCjWPZ2gb6cs-0dm-fusgc1yl7LGRgHjB4SYFYKAGitVKgsSimsmx-bPffRg-udhFy/s1600/github+under+ddos+attack.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="GitHub under DDoS Attack" border="0" height="153" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4SJuTIBKWzzZyeE5rY1q-3V4zHR4PZ_xFuFmlaaG_TXzX6WCRrV6TBaYCEUY5Z1XDfOrGJM3tbmUCjWPZ2gb6cs-0dm-fusgc1yl7LGRgHjB4SYFYKAGitVKgsSimsmx-bPffRg-udhFy/s1600/github+under+ddos+attack.png" title="GitHub under DDoS Attack" width="400" /></a></div>
It’s pretty clear that <a href="https://github.com/" target="_blank">GitHub</a> is one of the favorite targets for <a href="http://www.hackerschronicle.com/search/label/DDoS">distributed denial-of-service</a> (DDOS) attacks. The service is currently facing another attack wave. <br />
<br />
“We are currently working to mitigate an incoming DDoS attack. We’ll provide additional information as it becomes available,” GitHub <a href="https://status.github.com/messages" target="_blank">wrote</a> just a few minutes ago.<br />
<br />
The code repository hasn’t shared any additional details in the meantime and may not even do so if the attack isn’t much more serious than the regular DDOS attacks targeting it.<br />
<br />
GitHub handles such situations so often that it has gotten so accustomed to mitigating them that access to the service is usually restored within about 20 minutes.<br />
<br />
The service is armed with enough weapons to handle volumetric and complex attacks, so everything should be back to normal in no time.<br />
<br />
Last week, they faced one of the biggest attacks in recent months and, as a result, GitHub started working on ways to improve its DDOS mitigating capabilities to make sure that even uncommon operations could be blocked quickly, so that users could get their service back.<br />
<br />
On March 11, the attack was so wide that GitHub went down for 2 hours, a lot more than the regular 20 minutes that people are used to.<br />
<br />
<strong>[UPDATE 1:]</strong> The efforts to reduce the number of legitimate users who are flagged as attack traffic continues.<br />
<br />
<strong>[UPDATE 2:]</strong> GitHub is back to working order. </div>

Cyber Crime DDoS GitHub Hacking News News GitHub under DDoS Attack

It’s pretty clear that GitHub is one of the favorite targets for distributed denial-of-service (DDOS) attacks. The service is currently...

New Exploits for Old PHP Vulnerability

3/21/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeGG4lt7wUJNvQFm-0o7PNWDCPIOWcdPtbdayQk8XXU_7X894V9XrXXZFZbCyf01xJDedbxeILXYJhMs3hvFtGa2aigOY3ciQ2wukeyTA387SDs8QVtbTD6S13wko308hpID3t4-WrS2x4/s1600/new+php+exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="New Exploits for Old PHP Vulnerability" border="0" height="238" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeGG4lt7wUJNvQFm-0o7PNWDCPIOWcdPtbdayQk8XXU_7X894V9XrXXZFZbCyf01xJDedbxeILXYJhMs3hvFtGa2aigOY3ciQ2wukeyTA387SDs8QVtbTD6S13wko308hpID3t4-WrS2x4/s1600/new+php+exploit.png" title="New Exploits for Old PHP Vulnerability" width="400" /></a></div>
Close to two years ago, a serious vulnerability in <a href="http://www.hackerschronicle.com/search/label/PHP">PHP</a> was accidentally disclosed after it was discovered months prior during a hacking contest. A patch was released in relatively short order, and one would assume that given PHP’s prevalence as a web development framework, the fix would have been applied just as quickly.<br />
<br />
But given the discovery last October of a new set of exploits for <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823" target="_blank">CVE-2012-1823</a>, that assumption may not be correct.<br />
<br />
Researchers at <a href="http://blog.imperva.com/2014/03/threat-advisory-php-cgi-at-your-command.html" target="_blank">Imperva</a> have been watching since Oct. 29 attacks exploiting the PHP bug. Attackers were using the new <a href="http://www.hackerschronicle.com/search/label/Exploit">exploit</a> to deliver arbitrary code to websites running <span class="higlight">PHP 5.4.x, 5.3.x before 5.4.2 or 5.3.12</span>; those vulnerable versions account for about 16 percent of the sites on the web according to director of security research <span class="higlight">Barry Shteiman</span>.<br />
<br />
The new exploits were dangerous in that they allowed hackers to abuse an old vulnerability to not only run arbitrary code, but also adapt techniques found in <a href="http://www.hackerschronicle.com/search/label/Botnets">botnets</a> and crimeware kits to inject <a href="http://www.hackerschronicle.com/search/label/Malwares">malware</a>, steal credentials or system data from the server, or move laterally within the data center.<br />
<br />
“Not only are we seeing a vulnerability used after it was released so long ago, but what we’re seeing is attackers and professional hackers understanding what vendors understand—people just don’t patch,” Shteiman said. “They can’t or won’t or are not minded to fix these problems.”<br />
<br />
PHP is found on nearly 82 percent of websites today; these attacks target sites where PHP is running with CGI as an option, creating a condition that allows for code execution from the outside. Shteiman said the vulnerability affects a built-in mechanism in PHP that protects itself from exposing files and commands. A configuration flaw allows hackers to first disable the security mechanism, which in turn allows a hacker to run remote code or arbitrarily inject code.<br />
<br />
“With the new exploit, it’s the same relative technique, but what we’ve seen is a lot of automation,” Shteiman said. “The tool that attacked these systems is running an interesting subset of dictionaries that requires an attacker know where PHP is installed on the server. We’ve seen attackers trying different paths to see which backend contains the [PHP] executable.”<br />
<br />
The big-picture problem is the number of PHP websites still running vulnerable code despite the availability of a patch for close to two years now.<br />
<br />
“PHP is installed as an interpreter,” Shteiman said. “Replacing the existing instance of PHP with a new one means downtime. Sometimes you may have to change applications because some things that are now deprecated may require application changes. For that reason, sometimes organizations don’t patch or go a different route. They might use a new framework instead.”<br />
<br />
Original reports on the vulnerability triggered advisories from a number of organizations, including <span class="highlight">US-CERT</span>. The bug is a relatively simple one; researchers found that when they passed a specific query string that contained the -s command to PHP in a CGI setup, PHP would interpret the <span class="highlight">-s</span> as the command line argument and result in the disclosure of the source code for the application. They extended their testing and found they could pass whatever command-line arguments they wanted to the PHP binary.<br />
<br />
“You’d think these bugs would be long forgotten, but it isn’t so; they’re like the undead. Vulnerabilities never die,” Shteiman said. “They don’t die and we realize if we see this executed by botnets trying to onboard servers and by crimeware kits being sold, that means attackers understand they can rely on old problems because people won’t fix them and attackers don’t have to work too hard.”
</div>

Exploit PHP Programming Vulnerability Web Development New Exploits for Old PHP Vulnerability

Close to two years ago, a serious vulnerability in PHP was accidentally disclosed after it was discovered months prior during a hacking ...

One Billion Android Devices Vulnerable to Privilege Escalation

3/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCiKD_FEhu-RQVAa_lJ175vL01h9hBVKcmksZDJLCNNost1SUk2Mb4fOMJXs7a5tTxpzmB8x46z9taLlE9PjL1holFpeN3qdVlDF5z2Du49R-I_DiGlo_8J20Wi4vHFhnpZw0lswFNmGVU/s1600/android+vulnerability.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="One Billion Android Devices Vulnerable to Privilege Escalation" border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCiKD_FEhu-RQVAa_lJ175vL01h9hBVKcmksZDJLCNNost1SUk2Mb4fOMJXs7a5tTxpzmB8x46z9taLlE9PjL1holFpeN3qdVlDF5z2Du49R-I_DiGlo_8J20Wi4vHFhnpZw0lswFNmGVU/s1600/android+vulnerability.png" title="One Billion Android Devices Vulnerable to Privilege Escalation" width="400" /></a></div>
<br />
The first deep look into the security of the <a href="http://www.hackerschronicle.com/search/label/Android">Android</a> patch installation process, specifically its Package Management Service (PMS), has revealed a weakness that puts potentially every Android device at risk for <a href="http://www.hackerschronicle.com/search/label/Privilege%20Escalation">privilege escalation attacks</a>.<br />
<br />
 Researchers from Indiana University and <a href="http://www.hackerschronicle.com/search/label/Microsoft">Microsoft</a> published a paper that describes a new set of Android vulnerabilities they call Pileup flaws, and also introduces a new scanner called SecUP that detects <a href="http://www.hackerschronicle.com/search/label/Malwares">malicious</a> apps already on a device lying in wait for elevated privileges.<br />
<br />
 The vulnerability occurs in the way PMS handles updates to the myriad flavors of Android in circulation today. The researchers say PMS improperly vets apps on lower versions of Android that request OS or app privileges that may not exist on the older Android version, but are granted automatically once the system is updated.<br />
<br />
 The researchers said they found a half-dozen different Pileup flaws within Android’s Package Management Service, and confirmed those vulnerabilities are present in all Android <a href="http://www.hackerschronicle.com/search/label/Open%20Source">Open Source</a> Project versions and more than <span class="highlight pop">3,500</span> customized versions of Android developed by handset makers and carriers; more than one billion Android devices are likely impacted, they said.<br />
<br />
 An attacker could use a malicious application to <a href="http://www.hackerschronicle.com/search/label/Exploit">exploit</a> this situation to access data on the device such as user credentials, activity logs, SMS data. The researchers also said a successful attack could also give a hacker control of new signature and system permission, leading to a deeper level of trouble.<br />
<br />
 The paper, “<a href="http://www.informatics.indiana.edu/xw7/papers/privilegescalationthroughandroidupdating.pdf" target="_blank">Upgrading Your Android, Elevating My Malware: Privilege Escalation Through Mobile OS Updating</a>,” was written by Luyi Xing, Xiaorui Pan, Kan Yuan and XiaoFeng Wang of Indiana University Bloomington and Rui Wang of Microsoft. The frequency of Android updates—estimated to be on average of every 3½ months— and the fragmentation of the Android market make it close to impossible to adequately secure devices, the researchers said.  “Every few months, an update is released, which causes replacement and addition of tens of thousands of files on a live system. Each of the new apps being installed needs to be carefully configured to set its attributes within its own sandboxes and its privileges in the system, without accidentally damaging existing apps and the user data they keep,” the researchers wrote. “This complicates the program logic for installing such mobile updates, making it susceptible to security-critical flaws.”<br />
<br />
 Pileup flaws, short for privilege escalation through updating, ramp up the permissions given to malicious apps once Android is updated without raising an alarm to the user. “Through the app running on a lower version of Android, the adversary can strategically claim a set of carefully selected privileges or attributes only available on the higher OS version,” the researchers wrote.<br />
<br />
 The paper said customized versions of Android, such as those developed by device makers and carriers, are especially vulnerable to Pileup attacks. The researchers said manufacturers are purposely conservative with regard to updates so as not to interfere with the user experience. Users who have apps currently installed, for example, expect them to work seamlessly after OS updates and upgrades; that means data and features must transfer. An attacker can get a seemingly benign app on a device that requests privileges not present on the lower OS version. Generally, the Package Management Service must compare the privileges present between updates and will generally grandfather in existing permission requests so as not to interfere with functionality.<br />
<br />
 “A third-party package attribute or property, which bears the name of its system counterpart, can be elevated to a system one during the updating shuffle-up where all apps are installed or reinstalled, and all system configurations are reset,” the paper said. “Also, when two apps from old and new systems are merged as described above, security risks can also be brought in when the one on the original system turns out to be malicious.”<br />
<br />
 Upon an <a href="http://www.hackerschronicle.com/search/label/OS">OS</a> upgrade, the PMS will install new and existing system apps, including third-party apps, and will register the permissions they declare. That means for a malicious app, the PMS recognizes all the permissions it requests and those are silently granted because it supposes that permissions with an existing app have already been approved by the user.<br />
<br />
 All of the issues have been reported to <a href="http://www.hackerschronicle.com/search/label/Google">Google</a>, the researchers said; Google has already patched one of the six vulnerabilities.<br />
<br />
 As for the team’s SecUP scanner, it inspects Android APKs already installed on a device, identifying those that are likely to cause privilege escalations during an update, the paper said. SecUP is made up of a number of components, including a vulnerability detector, exploit opportunity analyzer and a risk database, in addition to the scanner app, the paper said.<br />
<br />
 “The detector verifies the source code of PMS (from different Android versions) to identify any violation of a set of security constraints, in which we expect that the attributes, properties (name, permission, UID, etc.) and data of a third-party app will not affect the installation and configurations of system apps during an update,” the researchers wrote. “A Pileup flaw is detected once any of those constraints are breached.”<br />
<br />
 The analyzer then kicks in and searches Android factory images for places where privilege escalation could happen; that information is stored in the risk database. The scanner app uses that database to check third-party apps and alerts the user to any potential risks. </div>

Android Mobile Privilege Escalation Vulnerability One Billion Android Devices Vulnerable to Privilege Escalation

The first deep look into the security of the Android patch installation process, specifically its Package Management Service (PMS), h...

Beware of fake TOR Browser

3/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiBt1QSL4HNFa20maeD7wyQDw2r2V4OHLUj5f8HZFqobA9UOzm1cs5sK2XQY5LjYLr0yRTjR3rmAHmXEZgZC4M374lwKSPLPDWMAeYjI3MKtAZdb9EtYBhMOkviwmdrVFwVTWCKM5OFj-k/s1600/fake+tor+browser.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="207" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiBt1QSL4HNFa20maeD7wyQDw2r2V4OHLUj5f8HZFqobA9UOzm1cs5sK2XQY5LjYLr0yRTjR3rmAHmXEZgZC4M374lwKSPLPDWMAeYjI3MKtAZdb9EtYBhMOkviwmdrVFwVTWCKM5OFj-k/s1600/fake+tor+browser.png" width="320" /></a></div>
Members of the Tor anonymity service are warning that a <a href="http://www.hackerschronicle.com/search/label/Tor">Tor</a> iOS app available in Apple's highly curated App Store since November is a fake that is laced with adware and spyware.<br />
<br />
"Tor Browser in the <a href="http://www.hackerschronicle.com/search/label/Apple">Apple</a> App Store is fake," a <a href="https://trac.torproject.org/projects/tor/ticket/10549">report ticket published two months ago</a> on the Tor website by high-ranking volunteer Phobos stated. "It's full of adware and spyware. Two users have called to complain. We should have it removed."<br />
<br />
The ticket went on to say that Tor officials notified Apple of the <a href="https://itunes.apple.com/us/app/tor-browser/id712805884?mt=8">fake Tor Browser app</a> in December. In the intervening time, the app has remained available, touching off a series of exchanges among Tor members about how to respond. Ars was unable to confirm the claims of <a href="http://www.hackerschronicle.com/search/label/Malware">adware</a> or spyware. Still, the incident highlights the lack of transparency in the way that Apple vets the reliability of security apps and responds to complaints of rogue titles.<br />
<br />
"Apple responded today with chance for author to defend their app," one volunteer wrote shortly after the ticket was opened. "Sent another email to appstorenotices@," Phobos replied a few weeks later.<br />
Early Wednesday, some two months later, yet another Tor member wrote: "I think naming and shaming is now in order. Apple has been putting users at risk for months now." Another member quickly replied: "I mailed Window Snyder and Jon Callas to see if they can get us past the bureaucracy. Otherwise I guess plan C is to get high-profile people on Twitter to ask Apple why it likes harming people who care about privacy. (I hope plan B works.)"<br />
<br />
(Window Snyder and Jon Callas are both highly respected security researchers who have worked for Apple in the past. Callas has since left the company and is an executive with Silent Circle. <strong>Update:</strong> Snyder still works for the Cupertino company. In the past, she has worked for both <a href="http://www.hackerschronicle.com/search/label/Microsoft" target="_blank">Microsoft</a> and <a href="http://www.hackerschronicle.com/search/label/Mozilla" target="_blank">Mozilla</a>.)<br />
<h3>
Secret garden</h3>
Apple's App Store has long been referred to by critics and fans alike as a walled garden. The metaphor is used to describe the highly controlled environment of the official iOS app bazaar. Presumably, apps submitted by third-party developers are carefully scrutinized before they become available. That's in sharp contrast to the official Google Play store for Android, which is much less selective and where rogue or malicious apps regularly slip through the vetting process.<br />
<br />
Apple has never described exactly what its process is for ensuring the titles in its App Store are safe. Although the comparatively fewer reports of rogue apps for iOS suggest that the review process is more stringent than Google's, the report ticket from Tor's high-ranking members suggests that Apple may not be doing everything it can or should do to protect iPhone and iPad users.<br />
<br />
Fortunately, the <a href="http://www.hackerschronicle.com/search/label/Tor%20Browser">Tor Browser</a> app at issue has been downloaded a relatively small number of times, and so far there are no reports one way or the other that its behavior represents a serious threat to the people who have installed it. Still, its availability raises questions about exactly what Apple does to ensure the security and authenticity of other apps it hosts on its own servers. This article will be updated if Apple officials, who are routinely silent on such matters, respond to our request for comment.</div>

Fake Tools Tor Tor Browser Beware of fake TOR Browser

Members of the Tor anonymity service are warning that a Tor iOS app available in Apple's highly curated App Store since November is ...

Remote Code Execution vulnerability in Yahoo

3/19/2014 The Hackers Chronicle 0

Remote Code Execution Vulnerability XSS Yahoo Remote Code Execution vulnerability in Yahoo

Security researcher Behrouz Sadeghipour has identified a number of vulnerabilities on a Hong Kong subdomain of Yahoo ( hk.yahoo.net )....

Now Test your eyesight with your smatphone

3/19/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBpZPEs_4lySm95h_0ctfxcFyp0sypCOg5m8ZKYau_UDhgAvyXKuVmOZM1h3KXZ4tsOChZRMWRJk2si7O38spTIa08M6OKiWXZJuWSRHq4EpD2-wJrLGFdZ73y0iaZcIrc7s8GkZXS0IeT/s1600/smartphone+eye+testing.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBpZPEs_4lySm95h_0ctfxcFyp0sypCOg5m8ZKYau_UDhgAvyXKuVmOZM1h3KXZ4tsOChZRMWRJk2si7O38spTIa08M6OKiWXZJuWSRHq4EpD2-wJrLGFdZ73y0iaZcIrc7s8GkZXS0IeT/s1600/smartphone+eye+testing.jpg" width="252" /></a></div>
Apps and downloads are old hat. The <a href="http://www.hackerschronicle.com/search/label/Mobile">smartphone</a> can now be adapted to test a person's eyes, and is claimed to be India's first mobile phone <a href="http://en.wikipedia.org/wiki/Ophthalmoscopy">ophthalmoscope</a>.<br />
<br />
The phone-cum-scope can capture high-quality photographs of the retina in the eye to detect defects. Converting the smartphone to an ophthalmoscope is quick and easy: fix an LED bulb near the camera of the mobile, a connecting wire and battery. It costs not more than Rs 35-50. The device was invented by ophthalmologists of <a href="http://www.sankaraeye.com/">Sankara Eye Hospital</a>. These pictures can then be sent to doctors for diagnosis.<br />
<br />
"We aren't sure if patients can use it themselves. But it helps eye specialists in rural areas who probably don't have high-end ophthalmoscopes. We are networking with doctors in rural areas who can send us photographs of patients' eyes taken through a mobile phone, that can help evaluate the disorder. We've had cases of eye tumours, glaucoma and other disorders related to the optic nerve, detected through photos taken from mobile phones with a minimum 5-mega pixel camera," said <span class="highlight pop">Dr Divyansh K Mishra</span>, retina fellow, Sankara Eye Hospital, who was one among the doctors who invented the new technique.<br />
<br />
A team of ophthalmologists consisting of <span class="highlight pop">Dr Mishra</span>, <span class="highlight pop">Dr Madhu Kumar</span>, <span class="highlight pop">Dr Rajesh R</span> , <span class="highlight pop">Dr Srinivasulu Reddy</span> and <span class="highlight pop">Dr Gladys Rodregues</span>, led by <span class="highlight pop">Dr Mahesh P Shanmugam</span>, is the think-tank behind this innovation.<br />
<br />
Back in 2002, <span class="highlight pop">Dr Shanmugam</span> had tried taking pictures of eyes through a handycam. "Technology is now advanced and some cell phones have 21 pixels. We won't stop using ophthalmoscopes but this is an added advantage. Eye care field technicians can now immediately diagnose a serious eye condition as they're able to instantly send images of the patient's retina to doctors in the city, via social networking sites," said Dr Mishra.<br />
<h3>
MIT's mobile gadget</h3>
In 2010, a team of students from <a href="http://web.mit.edu/" target="_blank">Massachusetts Institute of Technology</a> came up with a device to be attached to a mobile phone that can test the visibility of eyes and find out the refractive errors. It was called <a href="http://en.wikipedia.org/wiki/DRDO_Netra" target="_blank">NETRA</a> (Near-Eye Tool for Refractive Assessment). The user has to place the device in front of the eye and look into the lens attached to the phone. While pressing the arrow keys, the user can see green and red lines which overlap. The same process is repeated eight times, with the formation of green and red lines on the screen at different angles. The assessment of the eyes is done based on the visual index and prescriptions are made based on the same.
<br />
Source: <a href="http://timesofindia.indiatimes.com/" rel="nofollow" target="_blank">TOI</a></div>

Gadgets Mobile NETRA ophthalmoscope Technology Now Test your eyesight with your smatphone

Apps and downloads are old hat. The smartphone can now be adapted to test a person's eyes, and is claimed to be India's first mo...

Toyota, Renault and Chevrolet Hacked by Pakistani Hackers

3/19/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLm9kPncC30uf-n5pYPDb6Ub7tND2BmIeLKF9N69iYIY1FpKrSdsx76uKYg-dPLG1lwaf1Nf3XbG4yWyS3FdmMyLnRHS9_CwOy524PJ7hSUi-5uUOj6bC_eZYwJkFu2-NXuug907s7Gxmr/s1600/Toyota+hacked.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="131" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLm9kPncC30uf-n5pYPDb6Ub7tND2BmIeLKF9N69iYIY1FpKrSdsx76uKYg-dPLG1lwaf1Nf3XbG4yWyS3FdmMyLnRHS9_CwOy524PJ7hSUi-5uUOj6bC_eZYwJkFu2-NXuug907s7Gxmr/s1600/Toyota+hacked.PNG" width="320" /></a></div>
<em><a href="http://zone-h.com/archive/notifier=Algeriano" target="_blank">Algeriano</a></em> a hacker from Team Cyber Criminals a group of <a href="http://www.hackerschronicle.com/search/label/Pakistani%20Hackers" target="_blank">Pakistani hackers</a> hacked worlds leading automobile companies domains reserved for Guatemala including <a href="http://www.toyota.com.gt/" target="_blank">Toyota</a> , <a href="http://www.renault.com.gt/" target="_blank">Renault</a> and <a href="http://www.chevrolet.com.gt/" target="_blank">Chevrolet</a> , Attacker didn't mention any reason to deface websites. <br />
<br />
“Hacked by Algeriano. TOYOTA & RENAULT & CHEVROLET Guatemala hacked. Cyber Criminals Was Here,” the attacker wrote on the defaced websites.<br />
<br />
This message indicates that the hacker simply wanted to show off. The sites don’t appear to be storing any sensitive customer information. However, such an attack can still impact a company’s image.<br />
<br />
At the time of writing, all of the websites have been restored. They appear to have been restored within 24 hours after the breach took place. <a href="http://zone-h.com/mirror/id/22028173" target="_blank">Mirrors of the defacements</a> are available on Algeriano’s zone-h.org page. <br />
In this case, all of the three websites appear to have been developed by the same company for a car distributor. The most likely scenario is that the sites have been plagued by the same <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerability</a>, which the hacker easily exploited to deface them. <br />
<br />
Hopefully, the company that manages the sites has addressed the security holes, but it’s unlikely. The <a href="http://zone-h.com/archive/domain=www.toyota.com.gt" target="_blank">Toyota Guatemala website was previously defaced</a> back in 2009, 2011 and 2013 by various hackers.
</div>

Defacement Hacking News News Pakistani Hackers Toyota, Renault and Chevrolet Hacked by Pakistani Hackers

Algeriano a hacker from Team Cyber Criminals a group of Pakistani hackers hacked worlds leading automobile companies domains reserved f...

Anti-Virus Killer Android Virus, Detected

3/18/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
A new variation of mobile <a href="http://www.hackerschronicle.com/search/label/Malwares">malware</a> that affects <a href="http://www.hackerschronicle.com/search/label/Android">Android</a> based devices has been detected by the <a href="http://quickheal.com/">Quick Heal Labs</a>. An innovative feature of this malware is that it detects certain mobile security applications on the device and modifies their databases in order to avoid detection.
<br />
<h3>
Quick Heal Detection: Android.AVPasser.A</h3>
As all other forms of Android malware, this variant too has the capability to modify certain system files and steal private data and information, and then broadcast the same to remote servers.
<br />
<h3>
Dynamic Analysis of the Malware</h3>
Once the <b>Android.AVPasser.A</b> malware enters an Android device, it creates multiple icons in the Application Tray of the device. The screenshots below show the icons that are created by the malware.<br />
<br />
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitXv_WA-ZpYVSC7JfArb2scRnmIIUX9EnPZ4o4z2JK8czLJmHTXUJNKjc28rbOZVABW0UDRZGJ4e_4vip3xp5EnoGGlQtBUVuyo244kUupKIwtccDsqvIrGgYyu8xj_foTzqkSKHfKUM9y/s1600/001.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitXv_WA-ZpYVSC7JfArb2scRnmIIUX9EnPZ4o4z2JK8czLJmHTXUJNKjc28rbOZVABW0UDRZGJ4e_4vip3xp5EnoGGlQtBUVuyo244kUupKIwtccDsqvIrGgYyu8xj_foTzqkSKHfKUM9y/s1600/001.png" width="240" /></a></div>
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBjit_c2yjLQx_9UlvppANvdN6OA_n4fcCI9x3VJJdz8n91RMlHbKH_5L4fXI9iwxSNRg49j_G87lL_nRL2MPKq4CtBhjL8v3bP102Et-i3uVpKbg883z3M35AzjTHGPWC7P9LRgZ7gZUs/s1600/002.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBjit_c2yjLQx_9UlvppANvdN6OA_n4fcCI9x3VJJdz8n91RMlHbKH_5L4fXI9iwxSNRg49j_G87lL_nRL2MPKq4CtBhjL8v3bP102Et-i3uVpKbg883z3M35AzjTHGPWC7P9LRgZ7gZUs/s1600/002.png" width="242" /></a></div>
<br />
<div dir="ltr" style="text-align: left;" trbidi="on">
If the user clicks on any of these icon shortcuts, the icons vanish from the Application Tray. However, upon viewing the Active Applications window one can still see the <i>SystemService.class</i> running in the background. This can be viewed in the screenshot below.<br />
<br />
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOIHsstwP4PYwGdOYFAqdW_3nPDyvoIFBdEpDOKwgbsNvE2YAZlsNglJ6SH82MYObs8PJDa0hKsP__TXSvDX7tdtKy_brrN-LqFObP-GvEs9ZtnmP6rKpR-ncJTwyp9XgGpBFb8UwysOPu/s1600/003.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOIHsstwP4PYwGdOYFAqdW_3nPDyvoIFBdEpDOKwgbsNvE2YAZlsNglJ6SH82MYObs8PJDa0hKsP__TXSvDX7tdtKy_brrN-LqFObP-GvEs9ZtnmP6rKpR-ncJTwyp9XgGpBFb8UwysOPu/s1600/003.png" width="192" /></a></div>
<br />
<h3>
What this Malware Does</h3>
Upon installation, this malware has the capability of stealing the following data from the compromised device:

<br />
<ul>
<li>Photos</li>
<li>SMS messages</li>
<li>Contacts</li>
<li>Call history</li>
<li>Videos recorded by the front and rear cameras</li>
<li>GPS location and history of the device</li>
<li>Device specific data such as:</li>
<ul>
<li>Build version</li>
<li>Device ID</li>
<li>IMEI (International Mobile Station Equipment Identity)</li>
<li>IMSI (International Mobile Subscriber Identity)</li>
<li>MDN (Mobile Directory Number)</li>
</ul>
<li>Additionally, the application also gains control over the network activity and visits a malicious URL as shown below:</li>
</ul>
<br />
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeAH-7znkJo7Dvd-by4_C1NthxOpoiW0b34uiTs9FVKohtntU1bFoWsT8YVDAgIS6sDKXe1gIFABdzGyGBExv-8h2THYaaudS1BBIbRtScqoAuz0l0YUhIbmwxX7Z_y9bqGbhrO-BsRKYj/s1600/004.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="20" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeAH-7znkJo7Dvd-by4_C1NthxOpoiW0b34uiTs9FVKohtntU1bFoWsT8YVDAgIS6sDKXe1gIFABdzGyGBExv-8h2THYaaudS1BBIbRtScqoAuz0l0YUhIbmwxX7Z_y9bqGbhrO-BsRKYj/s1600/004.png" width="400" /></a></div>
<br />
<h3>
Other Activities by the Malware:</h3>
<b>#1</b> Once it enters an Android device, the malware checks for the existence of a config.txt file at a preset location on the device. If found, the malware deletes the file and creates a malicious file of its own.</div>
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQf1PqtGZloPUMHrwrDS5I9tgE9H4P2nmS4exr8cuQ80ZsXFHGyd_oTCIQdgL_BDNPlGFs9mf-4BBV6LtGpjJneUChsRRraszzi1Zq57N6MtoOEn2prc0PSg8aZhahsXCV_WgNz2DeZ3PO/s1600/005.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="78" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQf1PqtGZloPUMHrwrDS5I9tgE9H4P2nmS4exr8cuQ80ZsXFHGyd_oTCIQdgL_BDNPlGFs9mf-4BBV6LtGpjJneUChsRRraszzi1Zq57N6MtoOEn2prc0PSg8aZhahsXCV_WgNz2DeZ3PO/s1600/005.png" width="200" /></a></div>
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguPNcdqpGfFgSpBIiSZyzZaQdgNuLhWGSmtmQpmSGfEu8BTdRDfO9RSZIfp3WY1oNzv6aTLjw-PcYKbrkgDDIOwOF6c7gqFCWVUwbRkVEDFpxnn69byfUJ3W-qhjiIiZkow61Xq8Qu7FZm/s1600/006.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="239" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguPNcdqpGfFgSpBIiSZyzZaQdgNuLhWGSmtmQpmSGfEu8BTdRDfO9RSZIfp3WY1oNzv6aTLjw-PcYKbrkgDDIOwOF6c7gqFCWVUwbRkVEDFpxnn69byfUJ3W-qhjiIiZkow61Xq8Qu7FZm/s1600/006.png" width="320" /></a></div>
<div dir="ltr" style="text-align: left;" trbidi="on">
<b>#2</b> The malware broadcasts the information that it collects in the following conditions:

<br />
<ul>
<li>When any SMS is received by the device</li>
<li>When any media connection is mounted or unmounted</li>
<li>When the device screen goes ON or OFF</li>
</ul>
<b>#3</b> The malware calls CameraPicService from the SystemService.class and then runs a thread at an interval of 2 minutes to check the number of cameras connected to the device.<br />
<br />
<b>#4</b> Lastly, the malware collects and analyzes all the packages that are installed on the compromised device and matches them to see if any of them is a mobile security application. Once an application is confirmed to be a mobile security application, the malware modifies the database of the security application in order to to avoid detection.<br />
Source: <a href="http://quickheal.com/" target="_blank">Quickheal</a> </div>
</div>

Android Malwares Anti-Virus Killer Android Virus, Detected

A new variation of mobile malware that affects Android based devices has been detected by the Quick Heal Labs . An innovative feature of ...

Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked

3/13/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSc38Udf3xr3eXGsPIfcHYsnwXkWGpSjIKk7zEtBgsPUMf0OYq9HBSke737pUoIo_O1FCoIvO6rrmjxw7uwvGyFmNvLnK6MYLt0noFVK_XHTvr3zzfARvFo7560r1kTZiNPcYqNUhBaaxi/s1600/russian+intel+&+spy+hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked" border="0" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSc38Udf3xr3eXGsPIfcHYsnwXkWGpSjIKk7zEtBgsPUMf0OYq9HBSke737pUoIo_O1FCoIvO6rrmjxw7uwvGyFmNvLnK6MYLt0noFVK_XHTvr3zzfARvFo7560r1kTZiNPcYqNUhBaaxi/s1600/russian+intel+&+spy+hacked.png" title="Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked" width="320" /></a></div>
<br />
Today Russian hacktivist <a href="https://twitter.com/Rucyborg" target="_blank">@Rucyborg</a> has announced a leak of data from Searchinform and sent a message out to its director.<br />
The leak was <a href="https://twitter.com/Rucyborg/status/443468396068610050" target="_blank">announced</a> a couple of hours ago via twitter and posted to <a href="http://cyberguerrilla.org/" target="_blank">cyberguerrilla.org</a> with a message which states that the hackers have had access to <a href="http://searchinform.ru/" target="_blank">searchinform.ru</a> since as far back as 2012 and that they have infected  download links. The leak was uploaded to <a href="http://bayfiles.net/file/18L8Z/dICvHg/sinformru.rar" target="_blank">bayfiles</a> and is part 2 of an <a href="http://www.hackerschronicle.com/2014/03/cyber-attacks-on-ukraine.html" target="_blank">on going assault on Russia</a> in relation to the recent drama that putin has been creating.<br />
<a href="http://searchinform.com/about/full-text-search-company.html" target="_blank">Searchinform</a> is one of them sneaky company’s with an even more sneaky product which allows snooping on others, while in this day and age is not so surprising but the extent which they do go to is pretty extensive and really does pose a huge security risk to one if the wrong person was to be using it. They offer work time monitors, full-on network sniffers designed at modern day communications over social medias, microphone sniffers for recording employees and a <a href="http://searchinform.com/main/full-text-search-information-security-product.html" target="_blank">whole range of other products</a>.<br />
Data leaked is in a 382MB compressed file that contains well over 3000 files which include instructions and usage information, also it appears to have copies of searchinform for clients and basic new client setup information. In normal fashion there has been a <a href="http://searchinform.com/main/full-text-search-information-security-product.html" target="_blank">imgur gallery</a> created with a preview of the contents of this leak which can be found below, i have also added a couple of screen shots of the contents of the uncompressed leak data.<br />
The message on  <a href="http://cyberguerrilla.org/" target="_blank">cyberguerrilla.org</a> also has a direct message for the CEO of SearchInform.<br />
<div class="content shadow-radial">
Our message to SearchInform.ru – director Ozhegov – you are a bunch of FSB bastadz – leaking information to all the counterparts and outsiders – you provide so called CONTUR of Security to main russian corps – and keep control of all the clients for the SORM needs – nonight – the stars – revolt- and this is your downfall.<br />
<br /></div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierGuWF0ZT_jlPTTeEtxfBHmbTDCQ30xJ1_shNlryML2vBgzJcTvAg11PWsRaNSim_o8sOvfMad2HYnMYDyUqfo-_9gVEtv5RD_7aZw4FS5N71u6N5x3aZmGt0fXSAEGrWYhsBE8oEWmy2/s1600/russian+intel+hacked.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierGuWF0ZT_jlPTTeEtxfBHmbTDCQ30xJ1_shNlryML2vBgzJcTvAg11PWsRaNSim_o8sOvfMad2HYnMYDyUqfo-_9gVEtv5RD_7aZw4FS5N71u6N5x3aZmGt0fXSAEGrWYhsBE8oEWmy2/s320/russian+intel+hacked.jpg" width="131" /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEpVyw59Ltm0ePqb65Zo4axd_qtlVrhoDMo58LX6pKo3Ba3qUuvggz4hxocgD42AuCPFSWgbB-5fztsvwXksPJp0nulc-1z4hrc9jq3KC1jaLd4SUWhqrL9SWgEVMmiZZNkc-tSCPuQIQb/s1600/russian+spy+hacked.jpg" imageanchor="1" style="clear: right; display: inline !important; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="183" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEpVyw59Ltm0ePqb65Zo4axd_qtlVrhoDMo58LX6pKo3Ba3qUuvggz4hxocgD42AuCPFSWgbB-5fztsvwXksPJp0nulc-1z4hrc9jq3KC1jaLd4SUWhqrL9SWgEVMmiZZNkc-tSCPuQIQb/s320/russian+spy+hacked.jpg" width="400" /></a></div>
</div>

Data Leak Hacking News News Rucyborg Russian Hackers Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked

Today Russian hacktivist @Rucyborg has announced a leak of data from Searchinform and sent a message out to its director. The leak wa...

New Vulnerability found in WhatsApp, read private chats

3/13/2014 The Hackers Chronicle 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMV7ZNbCJBEVMViXjnvDdTZLvS_yxGYsRM-ueqmB8PvuVWfgEtxy0IKs39CXiTkStUIoRE8sn6PWwb1VcWL7k19RwSkZkIkIkiPEJm3jDSHkCgpUjAWVheakIS437iPbWkYbBnlsmTMFba/s1600/new-vulnerability+in+whatsapp.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="New Vulnerability found in WhatsApp" border="0" height="167" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMV7ZNbCJBEVMViXjnvDdTZLvS_yxGYsRM-ueqmB8PvuVWfgEtxy0IKs39CXiTkStUIoRE8sn6PWwb1VcWL7k19RwSkZkIkIkiPEJm3jDSHkCgpUjAWVheakIS437iPbWkYbBnlsmTMFba/s1600/new-vulnerability+in+whatsapp.jpg" title="New Vulnerability found in WhatsApp" width="320" /></a></div>
<br />
A security consultant has uncovered a <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">security hole</a> in <a href="http://www.hackerschronicle.com/search/label/WhatsApp" target="_blank">WhatsApp</a>, the instant messaging platform recently acquired by <a href="http://www.hackerschronicle.com/search/label/Facebook" target="_blank">Facebook</a>. The flaw can be leveraged to gain access to the private chats of Android device owners.<br />
Many people are concerned with the <a href="http://www.hackerschronicle.com/search/label/Privacy" target="_blank">privacy</a> implications that come with Facebook’s acquisition of WhatsApp. However, as Bas Bosschert, the man who identified the vulnerability, highlights, Facebook didn’t need to buy the company if all it wanted to do was read users’ chats.<br />
The expert has found that any Android app that’s allowed access to the SD card installed on the device can easily access private conversations. <br />
All chats are saved in a database file (msgstore.db) that’s stored on the SD card. Bosschert has developed a <a href="http://bas.bosschert.nl/steal-whatsapp-database/#more-1" target="_blank">proof-of-concept</a> which demonstrates that any app that’s granted permission to access the card can easily retrieve the database and upload it to a remote server.<br />
According to Bosschert, in newer versions of <a href="http://www.whatsapp.com/%E2%80%8E" target="_blank">WhatsApp</a>, the database file is encrypted. However, this doesn’t mean that users’ private chats are secure. It simply means that an attacker would have to decrypt the database file to gain access to its contents.<br />
The decryption key can be found in WhatsApp Xtract, an app that allows users to create backups of WhatsApp conversations.<br />
The POC developed by the expert is designed so that when the database is retrieved, the victim only sees a simple loading screen. Cybercriminals could combine the data-stealing code with a popular application to harvest a large number of databases. <br />
In February, security researchers from Praetorian revealed finding a number of SSL-related vulnerabilities in WhatsApp. Most of them were fixed almost immediately by the company.
<br />
Source: <a href="http://www.softpedia.com/" rel="nofollow" target="_blank">Softpedia</a></div>

Mobile Vulnerability WhatsApp New Vulnerability found in WhatsApp, read private chats

A security consultant has uncovered a security hole in WhatsApp , the instant messaging platform recently acquired by Facebook . The fl...

Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

3/11/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
I've got so many queries about installing <a href="http://www.hackerschronicle.com/search/label/Aircrack" target="_blank">Aircrack</a> suite on <a href="http://www.hackerschronicle.com/search/label/Centos">CentOS</a> or Ubuntu. Today I will show you how to install Wi-Fi cracking suite on both CentOS 6.3 and <a href="http://www.hackerschronicle.com/search/labels/Ubuntu" target="_blank">Ubuntu</a> 13.10<br />
<h3>
Introduction</h3>
<div class="define border-fade">
Aircrack-ng is an 802.11 <a href="http://www.hackerschronicle.com/search/label/WEP" target="_blank">WEP</a> and <a href="http://www.hackerschronicle.com/search/label/WPA" target="_blank">WPA-PSK</a> keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools. In fact, Aircrack-ng is a set of tools for auditing wireless networks.</div>
<div class="highlight pop">
Note:</div>
Click on the pics to view screenshots in higher resolution.<br />
<h3>
Ubuntu 13.10</h3>
I've installed Ubuntu 13.10 on my system, Step required to install Aircrack are as follows.<br />
<ol>
<li>Check your system architecture.<br />
 <br /><div class="command wobble-horizontal">
# #uname -ni</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mWxZ3-23U_ObCR3IfbBRzDASuEV0yNgXbM60Jc-YsNjDMwjHyd-K8d4c3RJy1kKydvxD4WY0fZR5EOznYF3S2e3RJlBGDlQupOguKzeA2HgX8TtW-dbjyn62ztx7bVzq3iOOIjXqI-3h/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Installing Aircrack" border="0" height="209" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mWxZ3-23U_ObCR3IfbBRzDASuEV0yNgXbM60Jc-YsNjDMwjHyd-K8d4c3RJy1kKydvxD4WY0fZR5EOznYF3S2e3RJlBGDlQupOguKzeA2HgX8TtW-dbjyn62ztx7bVzq3iOOIjXqI-3h/s1600/1.png" title="Installing Aircrack" width="320" /></a></div>
<li>Switch to root account <br /><div class="command wobble-horizontal">
# sudo su</div>
</li>
<br />
<li>Install gcc, Kernel headers and make <br /><div class="command wobble-horizontal">
# apt-get install build-essential</div>
</li>
<br />2<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkylUlwOUZJiMuAgUvnhxuYI7v-xvfmUaxZfAxjtV9UzmSUoT1Wsi37OPIKxiRLojtNJl6ypZdnrsiQy9I6TgRx_XFOUiwNJCVzILg7t_syVJMDDb5HQYP7FHqmqYtFlAhhPC6Ga0wXlXC/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="66" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkylUlwOUZJiMuAgUvnhxuYI7v-xvfmUaxZfAxjtV9UzmSUoT1Wsi37OPIKxiRLojtNJl6ypZdnrsiQy9I6TgRx_XFOUiwNJCVzILg7t_syVJMDDb5HQYP7FHqmqYtFlAhhPC6Ga0wXlXC/s1600/2.png" width="320" /></a></div>
<li>Install OpenSSl development <br /><div class="command wobble-horizontal">
# apt-get install libssl-dev</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8kBgbhA28zdZhkQJszjVO34K-9snGWLrJ76sRBoYxCtU9h5zMzAdpTZBPOXsgmC3muMOa_E1pCbgrNz9h6f4Qss6UNTgoCMrred_qWA0oskacN6PO31ew_yF562LYmAceE3eA3mWzNgd4/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="132" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8kBgbhA28zdZhkQJszjVO34K-9snGWLrJ76sRBoYxCtU9h5zMzAdpTZBPOXsgmC3muMOa_E1pCbgrNz9h6f4Qss6UNTgoCMrred_qWA0oskacN6PO31ew_yF562LYmAceE3eA3mWzNgd4/s1600/3.png" width="320" /></a></div>
<li>Download the source of Aircrack-ng <br /><div class="command wobble-horizontal">
# wget http://download.aircrack-ng.org/aircrack-ng-1.2-beta2.tar.gz</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiVNBT3lp6YxIi6o4BoMN0ZAhTxQKfLixIHqhIFPisF2oWP3oVsbPn4zkoVGqYPqfRQ8zOW6SI4TAEnKWqLzlmKR5Gchq96gvW_8-SWRal8nmjP-uS2Y40KbeMBXYOJjW6ZlPtLybmvtfO/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="107" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiVNBT3lp6YxIi6o4BoMN0ZAhTxQKfLixIHqhIFPisF2oWP3oVsbPn4zkoVGqYPqfRQ8zOW6SI4TAEnKWqLzlmKR5Gchq96gvW_8-SWRal8nmjP-uS2Y40KbeMBXYOJjW6ZlPtLybmvtfO/s1600/4.png" width="320" /></a></div>
<li>Untar the tar file <br /><div class="command wobble-horizontal">
# tar -zxvf aircrack-ng-1.2-beta2.tar.gz</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAe_K4HuXn5zjVOmA2-eRvYa7iiS9GwBINKB1C3vfuXAfBLLKDk0PEz8zQFm9F69Vj4UbFvl1Ja8Ckt23aM_e3FKh61AD9B4_Ouc8gO6e65p35G7xjyS4p_o8GHRum4hlrS-XeuMfs1oKR/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="42" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAe_K4HuXn5zjVOmA2-eRvYa7iiS9GwBINKB1C3vfuXAfBLLKDk0PEz8zQFm9F69Vj4UbFvl1Ja8Ckt23aM_e3FKh61AD9B4_Ouc8gO6e65p35G7xjyS4p_o8GHRum4hlrS-XeuMfs1oKR/s1600/5.png" width="320" /></a></div>
<li>Move to aircrack directory and edit common.mak file. <br /><div class="command wobble-horizontal">
# cd aircrack-ng-1.2-beta2<br />
nano common.mak</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtqOkah3b8ro6HDKcsPnRHnoLYxPq4TbNVal4yhyphenhyphen7-U06pjHl-mQTicf1S25Obrc5wOt63lemMMW8Nt4dN_nXOBRyKd_q2uZCXF8WPgzZY-Th8fZCVezymbl0faKlreT5oF2M8fRL91hFE/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="45" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtqOkah3b8ro6HDKcsPnRHnoLYxPq4TbNVal4yhyphenhyphen7-U06pjHl-mQTicf1S25Obrc5wOt63lemMMW8Nt4dN_nXOBRyKd_q2uZCXF8WPgzZY-Th8fZCVezymbl0faKlreT5oF2M8fRL91hFE/s1600/6.png" width="320" /></a></div>
<li>Find CFLAGS line, it should look like CFLAGS ?= -g -W -Wall -O3</li>
<br />
<li>Save and exit</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNs6YZwb8iiLLnLHe7R9oiq27fSlBsqBIT6swgZIHalVgaITbiCTiCPiQRbc3lwhhR5-IEQLJC9X36FPlUtyL0rE39xxZK18fzIPmAd9WenKJxc6HxQQ4C7-rhLuC7hAoNez2sNcIc1v8g/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNs6YZwb8iiLLnLHe7R9oiq27fSlBsqBIT6swgZIHalVgaITbiCTiCPiQRbc3lwhhR5-IEQLJC9X36FPlUtyL0rE39xxZK18fzIPmAd9WenKJxc6HxQQ4C7-rhLuC7hAoNez2sNcIc1v8g/s1600/7.png" width="320" /></a></div>
<li>Compile and install the source <br /><div class="command wobble-horizontal">
# make install</div>
</li>
<br />
<li>Update Aircrack Suite <br /><div class="command wobble-horizontal">
# airodump-ng-oui-update</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrPgHvIz59d-nQoFN_ISjVr1O5h6Cu40mRj50kE0A7HgI31vDYgNlZni96xQplYpLj03z1zKiYz4J4uCORnu21qblK98Dl-z7B7amlq3wG3rwVFYsuTw80KnkpqfIMN2Pzz-aaxORPr6J4/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="49" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrPgHvIz59d-nQoFN_ISjVr1O5h6Cu40mRj50kE0A7HgI31vDYgNlZni96xQplYpLj03z1zKiYz4J4uCORnu21qblK98Dl-z7B7amlq3wG3rwVFYsuTw80KnkpqfIMN2Pzz-aaxORPr6J4/s1600/8.png" width="320" /></a></div>
</ol>
Congrats, Aircrack suite is now installed.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfvH85Uz1QkcZK-wC-o5amh9mnm6STjpyo_pAg2bypbNALbgvFQEldqf2TjFUvlPIBXF1i2NKbx3GIj8B2O79zMAnasW8hDLcgTeBD_56Z-CNzuhnghdIXxiv2PuOZrdQSij5A6wAl0vq/s1600/9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="74" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfvH85Uz1QkcZK-wC-o5amh9mnm6STjpyo_pAg2bypbNALbgvFQEldqf2TjFUvlPIBXF1i2NKbx3GIj8B2O79zMAnasW8hDLcgTeBD_56Z-CNzuhnghdIXxiv2PuOZrdQSij5A6wAl0vq/s1600/9.png" width="320" /></a></div>
<br />
<h3>
CentOS 6.4</h3>
<ol>
<li>Check your system architecture <br /><div class="command wobble-horizontal">
# uname -ni</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXj1gfbpV87Li960jkTZR3tnakWDWSgXBq5nrpC0VC7G9b1M_kJalTxt9IEKYqHNw7oTOF5GVVzuZ2UqSykGFs0S8slQHUYYHLQnHlqjLLza-KWD1NROozepxZAWKT4j0Kg5u6wsTO5H6G/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXj1gfbpV87Li960jkTZR3tnakWDWSgXBq5nrpC0VC7G9b1M_kJalTxt9IEKYqHNw7oTOF5GVVzuZ2UqSykGFs0S8slQHUYYHLQnHlqjLLza-KWD1NROozepxZAWKT4j0Kg5u6wsTO5H6G/s1600/1.png" width="320" /></a></div>
<li>Open Browser and check for appropriate RPM package from<div class="system pop">
http://pkgs.repoforge.org/aircrack-ng/</div>
</li>
<br />
<li>Copy the link for RPM package and download that package <br /><div class="command wobble-horizontal">
# wget http://pkgs.repoforge.org/aircrack-ng/aircrack-ng-0.9.3-1.el5.rf.i386.rpm</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA8Q_hGimI4oLuT36T1Z0vhKtLa2NfUBBhQRNftYYnFvuHicCMcOCIabzO7z4pbWROMwWiWkpNHYuwOjbe5ZfpoSSUuvHQQS-ojgRFHQ3GsFavaffPXgmlfRwcZ5VizM1YMCcErgPtkqJg/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="237" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA8Q_hGimI4oLuT36T1Z0vhKtLa2NfUBBhQRNftYYnFvuHicCMcOCIabzO7z4pbWROMwWiWkpNHYuwOjbe5ZfpoSSUuvHQQS-ojgRFHQ3GsFavaffPXgmlfRwcZ5VizM1YMCcErgPtkqJg/s1600/2.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1t1ScgXAHosovv87fhkUM5MxsVfR2YwloaOFdeCOIiXjxerBTc3hkeixQFmLqS47W5Y1MB__segnGz4Mo8wGop4pbDne6HZ8GcGEPv3OI-lbkRkCy5rXnxRqfGZ4ziLw4ZdIjoL70Hx-F/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1t1ScgXAHosovv87fhkUM5MxsVfR2YwloaOFdeCOIiXjxerBTc3hkeixQFmLqS47W5Y1MB__segnGz4Mo8wGop4pbDne6HZ8GcGEPv3OI-lbkRkCy5rXnxRqfGZ4ziLw4ZdIjoL70Hx-F/s1600/3.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<li>Install the package <br /><div class="command wobble-horizontal">
# rpm -ivh aircrack-ng-0.9.3-1.el5.rf.i386.rpm</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_jLNg3lQIhiJJdo0hGu8LPO1ZqLxaKsyojiNSlUEFbWaCALD8Hzl0cQ2nh7KWUUk67l4MhmaRz23-x-I0_8f3HnnlVcnJ8niJurH1FHACHgM4dmDfpvKlnYmgW4jIrh9FK5p2leqwLWGS/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_jLNg3lQIhiJJdo0hGu8LPO1ZqLxaKsyojiNSlUEFbWaCALD8Hzl0cQ2nh7KWUUk67l4MhmaRz23-x-I0_8f3HnnlVcnJ8niJurH1FHACHgM4dmDfpvKlnYmgW4jIrh9FK5p2leqwLWGS/s1600/4.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</ol>
<div class="highlight">
<strong>Congrats</strong></div>
Aircrack Suite has been installed on your Machine.<br />
We will soon post about cracking Wi-Fi with CentOS/Ubuntu</div>

Aircrack Centos Hacking Tools Linux Tutorials Ubuntu Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

I've got so many queries about installing Aircrack suite on CentOS or Ubuntu. Today I will show you how to install Wi-Fi cracking sui...

DAVOSET, most powerfull DDoS Tool released

3/10/2014 The Hackers Chronicle 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZlFYyQfV_YUTteFhVKASM96_VEWfcndjgzi3bHx9kgZxtnjDRzrIpEXqTDWwcVXf12_gIS-moq1ryaSJLREpCBL7Pkr-WpjLUWxEMa466G5qCr5G8cOOkhUcygzt1T112nudcQMan8LMh/s1600/davoset.PNG" imageanchor="1"><img alt="DAVOSET, most powerfull DDoS Tool released" border="0" height="106" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZlFYyQfV_YUTteFhVKASM96_VEWfcndjgzi3bHx9kgZxtnjDRzrIpEXqTDWwcVXf12_gIS-moq1ryaSJLREpCBL7Pkr-WpjLUWxEMa466G5qCr5G8cOOkhUcygzt1T112nudcQMan8LMh/s1600/davoset.PNG" title="DAVOSET, most powerfull DDoS Tool released" width="400" /></a></div>
<br />
DDoS attacks via other sites execution tool (<a href="http://www.hackerschronicle.com/search/label/DAVOSET" target="_blank">DAVOSET</a>) - a tool for use by Abuse of Functionality and XML External Entities <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerabilities</a> at some sites for attacks on other sites (including <a href="http://www.hackerschronicle.com/search/label/DOS" target="_blank">DoS</a> and <a href="http://www.hackerschronicle.com/search/label/DDoS" target="_blank">DDoS</a> attacks). <br />
In new version there were added support of security bypass in plugin Google Maps, added new services into full list of zombies and removed non-working services from lists of zombies.<br />
Also there was added BYPASS method into the format of the list of zombie-servers. It allows to bypass protection of web applications, such as domain restriction in Google Maps.<br />
In total there are 170 zombie-services in the list, which are ready to strike against any website.<br />
<div class="highlight">
<b>Download: </b><a href="http://websecurity.com.ua/uploads/2014/DAVOSET_v.1.1.8.rar" target="_blank">websecurity.com.ua</a></div>
<div class="highlight">
<b>Video Demonstration:</b></div>
<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/RKi35-f346I" width="420"></iframe><br /></div>

DAVOSET DDoS DOS Hacking Tools DAVOSET, most powerfull DDoS Tool released

DDoS attacks via other sites execution tool ( DAVOSET ) - a tool for use by Abuse of Functionality and XML External Entities vulnerabili...

Russia attacks Ukraine with cyber weapon, Snake

3/09/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkufqwMk63tMR0xjp5-I1wm07WieL4DbAf_bk96E2khr9KyudVRIG7ss6m8pp6AECyuICHtMbzZBnTJbC5evBnEdcvHbONe8w43iifpTms1XeWoqt4R9GKYc86CVdIlOg_6VrCfI6cXJ36/s1600/Ukraine-cyber-attack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ukraine's Computers attcked with a Virus, Snake similar to Stuxnet" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkufqwMk63tMR0xjp5-I1wm07WieL4DbAf_bk96E2khr9KyudVRIG7ss6m8pp6AECyuICHtMbzZBnTJbC5evBnEdcvHbONe8w43iifpTms1XeWoqt4R9GKYc86CVdIlOg_6VrCfI6cXJ36/s1600/Ukraine-cyber-attack.jpg" title="Ukraine's Computers attcked with a Virus, Snake similar to Stuxnet" width="320" /></a></div>
<br />
Dozens of computer networks in Ukraine have been infected by an aggressive new cyber weapon called <a href="http://www.hackerschronicle.com/search/label/Snake" target="_blank">Snake</a>, according to expert analysis.<br />
 The cyber weapon has been increasingly used since the start of this year, even before protests that led to the overthrow of president Viktor Yanukovych, British-based <a href="http://en.wikipedia.org/wiki/BAE_Systems" rel="nofollow" target="_blank">BAE Systems</a> said in a report published Friday.<br />
 The complex composition of <a href="http://www.hackerschronicle.com/search/label/Snake" target="_blank">Snake</a> bears similarities with <a href="http://www.hackerschronicle.com/search/label/Stuxnet" target="_blank">Stuxnet</a>, the <a href="http://www.hackerschronicle.com/search/label/Malwares" target="_blank">malware</a> that disrupted Iran's nuclear facilities in 2010.<br />
Snake—also known as Ouroboros after the serpent in Greek mythology—gives remote attackers "full remote access to the compromised system", BAE said.<br />
Because it can stay inactive for a number of days, it is extremely hard to detect.
Although its origins are unclear, its developers appear to operate it in the same timezone as Moscow—GMT plus four hours—and some <a href="http://www.hackerschronicle.com/search/label/Russian%20Hackers" target="_blank">Russian</a> text is embedded into the code, BAE says.
BAE has identified 14 cases of Snake in Ukraine since the start of 2014, compared to eight cases in the whole of 2013. In all there have been 32 reported cases in <a href="http://www.hackerschronicle.com/search/label/Ukraine" target="_blank">Ukraine</a> since 2010, out of 56 worldwide.<br />
 Nigel Inkster, who until 2006 was the head of operations and intelligence at Britain's MI6 foreign intelligence agency, said Russia was most likely behind the cyber-attacks on Ukraine.<br />
"If you look at it in probabilistic terms... then the list of suspects boils down to one, he told the Financial Times.
"Until recently the Russians have kept a low profile, but there's no doubt in my mind that they can do the full scope of cyber attacks, from denial of service to the very, very sophisticated."</div>

Hacking News Malwares News Russian Hackers Snake Stuxnet Ukraine Russia attacks Ukraine with cyber weapon, Snake

Dozens of computer networks in Ukraine have been infected by an aggressive new cyber weapon called Snake , according to expert analysis....

Personal info of 12 million KT customers Leaked

3/08/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Personal info of 12 million KT customers Leaked" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" title="Personal info of 12 million KT customers Leaked" width="320" /></a></div>
<br />
Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial information of some 12 million customers of the South Korean telecom giant.<br />
According to the <a href="http://edition.cnn.com/2014/03/06/business/south-korea-telecoms-hackers" target="_blank">CNN</a>, one of the arrested men, a 29-year-old surnamed Kim, was a hacker who broke into the company's computer system with customized hacking software and extracted customer information such as names, resident registration numbers and bank account information.<br />
The initial breach apparently happened in February 2013, and he has been extracting the data ever since. He allegedly sold it to a 37-year-old man surnamed Park, a telemarketing business owner that used the information to credibly impersonate a KT Corp. employee in order to sell cell phones.<br />
Another man has been arrested but almost immediately released.<br />
Apparently, in the last year, they managed to earn themselves nearly $11 million through this scheme.<br />
KT is cooperating with the police as the investigation continues, and will be forced to set up a website its users can visit to check whether their information has been compromised, the Yonhap News Agency <a href="http://english.yonhapnews.co.kr/business/2014/03/07/17/0501000000AEN20140307000900320F.html" target="_blank">reported</a>.<br />
The South Korean Ministry of Science, ICT and Future Planning is warning potentially affected users to be on the lookout for phishing emails impersonating the company and taking advantage of the situation to make them share more personal details.
</div>

Cyber Crime Data Leak Hacking News Korean Hackers News Privacy Personal info of 12 million KT customers Leaked

Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial info...

Russian Defence Hacked, 500+MB Data Leaked

3/06/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Russian Defence Export Hacked" border="0" height="71" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" title="Russian Defence Hacked" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
Today Russian hacktivist <a href="https://twitter.com/Rucyborg" target="_blank">Rucyborg</a> has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT (<a href="http://www.roe.ru/" target="_blank">http://www.roe.ru/</a>).<br />
The leak was announced just a short time ago from twitter and has been posted to <a href="https://www.cyberguerrilla.org/blog/?p=17581" target="_blank">cyberguerrilla</a>. The leaked files are just the first part of a few to come from the Russian government.<br />
The attacks have been carried out due to the recent drama Putin is causing and the Russian hackers have stated they do not want any war all they want to do is expose Putin and his government for what they are.<br />
they have also stated that leaks from <a href="https://en.wikipedia.org/wiki/Sukhoi" target="_blank">Sukhoi</a>, <a href="https://en.wikipedia.org/wiki/Oboronprom" target="_blank">Oboronprom</a>, <a href="http://eng.gazflot.ru/" target="_blank">Gazflot</a>, <a href="http://eng.gazflot.ru/" target="_blank">Rusal</a> and others.<br />
The leaked data has been uploaded to <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar" target="_blank">bayfiles</a> as a 488MB rar file and a <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar">preview</a> of the leaked documents has also been provided.<br />
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" width="229" /></a></div>
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" width="320" /></a></div>
<br /><br /><br /><br /></div>

Anonymous Data Leak Hacking News News Russian Hackers Russian Defence Hacked, 500+MB Data Leaked

Today Russian hacktivist Rucyborg has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT ( http://www.roe.ru/ )...

Bitcoin Bank Hacked, Theft of $6,20,000

3/04/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqrBYVYzRsfVnaUNr447VTqFtwzKDZUNcHJocKWkQNtZ8KpPCHCykPNCC3c7qhrtW8-6iSe2wkHrqQlrUmXalRzjg02z5mPShMs1qQUbx3BBnMJTaUE_JmKor5wZMN-9_bo7jtvuaQohGm/s1600/bitcoin-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Bitcoin Bank Hacked, Theft of $6,20,000" border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqrBYVYzRsfVnaUNr447VTqFtwzKDZUNcHJocKWkQNtZ8KpPCHCykPNCC3c7qhrtW8-6iSe2wkHrqQlrUmXalRzjg02z5mPShMs1qQUbx3BBnMJTaUE_JmKor5wZMN-9_bo7jtvuaQohGm/s1600/bitcoin-hacked.png" title="Bitcoin Bank Hacked, Theft of $6,20,000" width="400" /></a></div>
<br />
Flexcoin, famous for making <a href="http://www.hackerschronicle.com/search/label/Bitcoin" target="_blank">bitcoin</a> banking as easy as regular banking, is no more. The company shut its doors on Tuesday morning after hackers stole 896 bitcoins (nearly $620,000) from its vault on Sunday. And the most unsettling thing? That wasn't even the only bitcoin heist last weekend.<br />
To <a href="https://en.bitcoin.it/wiki/Flexcoin" target="_blank">Flexcoin's</a> credit, it wasn't completely cleaned out by hackers. Hackers did clean out Flexcoin's hot wallet, but an undisclosed number of bitcoins in cold storage were untouched. "Cold storage" simply means that the bitcoins were kept in computers <a href="https://en.bitcoin.it/wiki/Cold_storage" target="_blank">not connected to the internet</a>, an extra level of security for which customers pay an extra 0.5 percent. Flexcoin will give those bitcoins back to customers. Those whose bitcoins were stolen are, well, they're shit out of luck because bitcoins aren't insured like good ol' greenbacks are in most banks.<br />
If this sounds like a familiar story, that's because it is. On Tuesday, another bitcoin firm called <a href="https://bitcointalk.org/index.php?topic=499580" target="_blank">Polonix</a> also admitted that hackers broke in and stole 12.5 percent of its reserves, though it plans on replenishing the lost 'coin itself. And who could forget the infamous implosion of Mt.Gox, the Japan-based bitcoin exchange that filed for bankruptcy last week and announced that $424 million worth of cryptocurrency was lost and gone forever. Those just a couple of the major heists and boondoggles on a growing list of heists and boondoggles.<br />
But what do you expect. The burgeoning bitcoin industry is famously unstable and <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerable</a>. Sure, it's an exciting idea for the sake of liberty and anarchy and whatever! It's just not the safest way to store your money right now, is all.</div>

Bitcoin Cyber Crime Hacking News News Russian Hackers Source Code Bitcoin Bank Hacked, Theft of $6,20,000

Flexcoin, famous for making bitcoin banking as easy as regular banking, is no more. The company shut its doors on Tuesday morning after...

Vulnerability in Android Jelly Bean and Kitkat

3/04/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgB64JLSeKK-sFwz5fG7fHovaSqZY48Pba15HVzbNxSVHCFJ7Q0VhN45sZIUks8aXkdDj31eaKvDVwZSzcAKnxR1hpHGzGiF9LNVVutYHrGx6PcYzWFdBTULGYn8pWzh73_9anxFQ9xZa-z/s1600/android-kitkat-vulnerability.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Vulnerability in Android Jelly Bean and Kitkat" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgB64JLSeKK-sFwz5fG7fHovaSqZY48Pba15HVzbNxSVHCFJ7Q0VhN45sZIUks8aXkdDj31eaKvDVwZSzcAKnxR1hpHGzGiF9LNVVutYHrGx6PcYzWFdBTULGYn8pWzh73_9anxFQ9xZa-z/s1600/android-kitkat-vulnerability.png" title="Vulnerability in Android Jelly Bean and Kitkat" width="320" /></a></div>
<br />
The researchers at <a href="http://en.wikipedia.org/wiki/Indian_Computer_Emergency_Response_Team" target="_blank">CERT-IN</a>, the Indian governments agency that monitors cyber threats, issued the advisory about the <a href="http://en.wikipedia.org/wiki/Vpn" target="_blank">VPN</a> flaw a few days ago.<br />
A critical flaw has been detected in the virtual private network offered by <a href="http://www.hackerschronicle.com/search/label/Android">Android</a> operating systems in the Indian cyberspace leading to hijack of personal data of users.<br />
Internet security sleuths have alerted consumers of this web-based service to guard against the spread of this <a href="http://www.hackerschronicle.com/search/label/Malwares" target="_blank">virus</a> which affects computer systems and mobile phones using the Android system.<br />
The suspicious activity has been noticed in two Android versions: 4.3 known as '<a href="http://en.wikipedia.org/wiki/Android_Jelly_Bean#Android_4.1_Jelly_Bean_.28API_level_16.29" target="_blank">Jelly Bean</a>' and the latest version 4.4 called '<a href="http://en.wikipedia.org/wiki/Android_Jelly_Bean#Android_4.4_KitKat_.28API_level_19.29" target="_blank">KitKat</a>'.<br />
"A critical flaw has been reported in Android's (<a href="http://www.hackerschronicle.com/search/label/VPN" target="_blank">virtual private network</a>) VPN implementation, affecting Android version 4.3 and 4.4 which could allow an attacker to bypass active VPN configuration to redirect secure VPN communications to a third party server or disclose or hijack unencrypted communications", said CERT-In in a latest advisory to users of this network.<br />
VPN technology is used to create an encrypted tunnel into a private network over public Internet. Organisations and group of people use such connections to enable employees or acquaintances to securely connect to enterprise networks from remote locations through multiple kinds of devices like laptops, desktops, mobiles and tablets.<br />
The agency said the current malicious application is capable of diverting the VPN traffic "to a different network address" and successful exploitation of this issue "could allow attackers to capture entire communication originating from affected device".<br />
"It is noted that not all applications are encrypting their network communication. Still there is a possibility that attacker could possibly capture sensitive information from the affected device in plain text like email addresses, IMEI number, SMSes, installed applications", the advisory said.<br />
Cyber experts said that this anomaly could only lead to capture and viewing the data which is in plain text and Android applications directly connecting to the server using SSL will not be affected. Websites which use 'https' in their URL will also be safe. The cyber agency has also suggested some counter measures to beat this threat.<br />
"Apply appropriate updates from original equipment manufacturer, do not download and install application from untrusted sources, maintain updated mobile security solution or <a href="http://www.hackerschronicle.com/search/label/Mobile">mobile</a> <a href="http://www.hackerschronicle.com/search/label/Anti%20Virus" target="_blank">anti-virus</a> solutions on the device, exercise caution while visiting trusted or untrusted URLs and do not click on the URLs received via SMS or email unexpectedly from trusted or received from untrusted users", are some of the combat techniques which have been suggested by the agency.</div>

Android Malwares Mobile VPN Vulnerability Vulnerability in Android Jelly Bean and Kitkat

The researchers at CERT-IN , the Indian governments agency that monitors cyber threats, issued the advisory about the VPN flaw a few da...

RCE, Information Disclosure and XSS Flaws Found in PayPal

How to patch your server against The Heartbleed Bug

SQL Injection vulnerability in Yahoo

Syrian cyber space attacked, 60,000 accounts leaked

Enable HAProxy stats in Cent OS

New Security Operating System Released, Developed by US Airforce

GitHub under DDoS Attack

New Exploits for Old PHP Vulnerability

One Billion Android Devices Vulnerable to Privilege Escalation

Beware of fake TOR Browser

Remote Code Execution vulnerability in Yahoo

Now Test your eyesight with your smatphone

Toyota, Renault and Chevrolet Hacked by Pakistani Hackers

Anti-Virus Killer Android Virus, Detected

Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked

New Vulnerability found in WhatsApp, read private chats

Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

DAVOSET, most powerfull DDoS Tool released

Russia attacks Ukraine with cyber weapon, Snake

Personal info of 12 million KT customers Leaked

Russian Defence Hacked, 500+MB Data Leaked

Bitcoin Bank Hacked, Theft of $6,20,000

Vulnerability in Android Jelly Bean and Kitkat

Popular

Comments

Archive