How did Coronavirus starts and what animals came into Coronavirus

4/22/2020 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjspGg4qBIqGvDcXgHUvNLHGdLmoeasBGrw2l8cf4ZpKbkqOcjPp9oKNHa0goNhQJ0BQL6cBvSV8YOZ0O1KbiPgf3U4ha60WreRXAXMSsuEhO1dQ_baft9hoX3BFN_zvyG3X78TwIiSirH1/s1600/How+did+Coronavirus+starts+and+what+animals+came+into+Coronavirus.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="How did Coronavirus starts and what animals came into Coronavirus" border="0" data-original-height="540" data-original-width="650" height="331" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjspGg4qBIqGvDcXgHUvNLHGdLmoeasBGrw2l8cf4ZpKbkqOcjPp9oKNHa0goNhQJ0BQL6cBvSV8YOZ0O1KbiPgf3U4ha60WreRXAXMSsuEhO1dQ_baft9hoX3BFN_zvyG3X78TwIiSirH1/s400/How+did+Coronavirus+starts+and+what+animals+came+into+Coronavirus.jpg" title="How did Coronavirus starts and what animals came into Coronavirus" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">How did Coronavirus starts and what animals came into Coronavirus</td></tr>
</tbody></table>
<br />
<div style="text-align: justify;">
To find out how the deadly corona virus reached humans from animals efforts are going on.In a region of China, <b>a bats, while hovering in the sky, released the residue of the coronavirus through its droppings which fell on the ground in the forest</b>. A wild animal, possibly a pangolin, smelled it and through it it spread to the rest of the animals.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The infected animal came in contact with the person and a person got that disease. After this, it started spreading among the workers of the wild life market and this led to the global transition.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Scientists are trying to prove the story that the corona virus spread from animals. Professor Andrew Cunningham of the Zoological Society of London says that a string of events are being added. He says that this discovery seems like a 'detective story'.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
According to Cunningham, many wild animals may be sources of the corona virus, but <b>bats are in particular a large number of different types of corona virus</b>.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
But how much do we know about its infection or spread? When scientists will be able to understand the new virus in the patient's body, then the situation will be clear about the Chinese bats.</div>
<div style="text-align: justify;">
<br /></div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUx0eNyuycfJzpAMC-q1kQZDUNNiA-qxMNRWkIDRLZNq24YW0-jLajyCoMrKdJNSAg690tg9fgwaZLzuW62j5XkuAJ2PGTP6Ft5JI1B4vq7hVIpbv8SmPVEi9Biu3IH1uIQsRiV8YZV1Ku/s1600/How+did+Coronavirus+starts+and+what+animals+came+into+Coronavirus.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="How did Coronavirus starts and what animals came into Coronavirus" border="0" data-original-height="280" data-original-width="462" height="385" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUx0eNyuycfJzpAMC-q1kQZDUNNiA-qxMNRWkIDRLZNq24YW0-jLajyCoMrKdJNSAg690tg9fgwaZLzuW62j5XkuAJ2PGTP6Ft5JI1B4vq7hVIpbv8SmPVEi9Biu3IH1uIQsRiV8YZV1Ku/s640/How+did+Coronavirus+starts+and+what+animals+came+into+Coronavirus.jpg" title="How did Coronavirus starts and what animals came into Coronavirus" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">How did Coronavirus starts and what animals came into Coronavirus</td></tr>
</tbody></table>
<br />
<div style="text-align: justify;">
Professor Jonathan Ball of the University of Nottingham says that these are mammals, so it is feared that they can either infect humans directly or through someone else. ''</div>
<div style="text-align: justify;">
<b>Mammal animals are found in every continent. They seldom fall ill by themselves, but they spread germs very fast</b>. According to Professor Kate Jonas of University College London (UCL), there is evidence that bats have changed themselves in many cases. He says, "If bats fall ill, they hit a large number of viruses. There is no doubt that like bats live, viruses thrive in them.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>The second puzzle</b> is about the <b>identity of a mysterious animal from whose body the infection of the corona virus spread</b> in Wuhan, China. One of them is a suspected pangolin. Pangolin is said to be the most commonly smuggled around the world. It is on the verge of extinction.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
It is in high demand in Asia. It is used in the manufacture of traditional Chinese medicines. <b>Many people also eat its meat with great fervor. The corona virus has been found in pangolins.</b> Some people are claiming that it resembles the novel human virus. <b>Were genetics exchanged between bats and pangolin viruses before infection spread to humans?</b></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Experts are taking precaution to reach any conclusion in this matter. The complete data of the study on pangolin has not been released yet. In such a situation it is difficult to confirm.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Professor Kaningam says that the background and research related to the pangolin is very important. For example, from where the animals were taken or whether one animal was taken from somewhere or from the meat market.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Pangolins and other wildlife including many species of bats are all sold in the meat market. Professor Kaningam says <b>that here viruses get a chance to go from one organism to another. He says, "The market of meat is the best place to spread germs from one organism to another. Here humans are also infected.</b></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
As far as we know, bats and pangolins are not listed here, but China will have information about which animal meat was sold here. Professor Ball says, <b>"Once the infection has spread, you want to know whether it will happen again because it is very important for health." In such a situation, we have to know which species of which animal caused the infection. '</b>'</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>In recent years, we have come in contact with many types of viruses. Ebola, HIV, SARS and now corona virus.</b> Professor Jonas says that the increase of infectious diseases from wild life may also show human greed. According to Professor Jonas, man is encroaching in their lives. He says, "The whole landscape is changing.<b>"</b> <b>The way human populations have come into contact with new viruses in recent years has never happened in the past.</b></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Professor Kanningam says, "If we understand the reason for the risks, then we can control things right in the beginning." Advocates to protect the environment and forests believe that even though bats are the source of viruses, they are the ecosystem. Are also necessary for He says, <b>"Insectivorous bats eat large numbers of insects. How do these mosquitoes and the insect-moths which cause damage to crops, corona virus and animals from which eat in humans. </b>At the same time, fruit bats work by spraying pollen on trees and spreading its seeds. Obviously, to control the disease, they do not need to be killed.</div>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5QJEZ4K2kcYTSKGu_z9O82kvh4nQgECvaB-7zQTYBNyCkclff2IqqPL0Q9OJxr5D03PKcm4mf_v9L1teM5dZN75wOulHor4jj9Q8B8n2qyIMHZOuGzREN1oL1VQ6YRnxpsNGtbr-bhAkB/s1600/How+did+Coronavirus+starts+and+what+animals+came+into+Coronavirus.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="How did Coronavirus starts and what animals came into Coronavirus" border="0" data-original-height="183" data-original-width="275" height="425" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5QJEZ4K2kcYTSKGu_z9O82kvh4nQgECvaB-7zQTYBNyCkclff2IqqPL0Q9OJxr5D03PKcm4mf_v9L1teM5dZN75wOulHor4jj9Q8B8n2qyIMHZOuGzREN1oL1VQ6YRnxpsNGtbr-bhAkB/s640/How+did+Coronavirus+starts+and+what+animals+came+into+Coronavirus.jpg" title="How did Coronavirus starts and what animals came into Coronavirus" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">How did Coronavirus starts and what animals came into Coronavirus</td></tr>
</tbody></table>
<br />
<div style="text-align: justify;">
After SARS in 2002–3, it was similar to the present-day corona virus. <b>During the time of SARS, the wildlife market was temporarily banned.</b> But soon the ban on wild animal market in China, Vietnam and other parts of South-East Asia was over. China has once again banned the trade of products made from wildlife. These products are mainly used in food, fur and traditional medicines. According to media reports, this ban may be forever.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
As we know the responsible for the spread of disease and thousands of deaths. Professor Diana Bell of the University of East Anglia says, <b>" If we become cautious we can avoid the next dangerous virus. We are bringing animals from different countries, different climates and different lifestyles. We are mixing the living organisms in the water and the living organisms on the trees. We need to stop all this."</b></div>
<h1 style="background-color: white; box-sizing: border-box; color: #555555; font-family: "roboto condensed", sans-serif; font-size: 40px; font-weight: 300; line-height: 1.3; margin: 0px; text-align: center;">
<br /></h1>
<h1 style="background-color: white; box-sizing: border-box; color: #555555; font-family: "roboto condensed", sans-serif; font-size: 40px; font-weight: 300; line-height: 1.3; margin: 0px; text-align: center;">
Coronavirus Cases till now :</h1>
<div class="maincounter-number" style="background-color: white; box-sizing: border-box; color: dimgrey; font-family: "noto sans", sans-serif; font-size: 54px; font-weight: 700; text-align: center;">
<span style="box-sizing: border-box; color: #aaaaaa;">2,558,975</span></div>
<div class="maincounter-number" style="background-color: white; box-sizing: border-box; color: dimgrey; font-family: "noto sans", sans-serif; font-size: 54px; font-weight: 700; text-align: center;">
<span style="box-sizing: border-box; color: #aaaaaa;"><br /></span></div>
<div class="maincounter-number" style="background-color: white; box-sizing: border-box; color: dimgrey; font-family: "noto sans", sans-serif; font-size: 54px; font-weight: 700; text-align: center;">
<span style="color: #363945; font-size: 14px; font-weight: 400; text-align: left;"><br /></span></div>
<div class="maincounter-number" style="background-color: white; box-sizing: border-box; color: dimgrey; font-family: "noto sans", sans-serif; font-size: 54px; font-weight: 700; text-align: justify;">
<span style="color: #363945; font-size: 14px; font-weight: 400; text-align: left;">The </span><span style="box-sizing: border-box; color: #363945; font-size: 14px; text-align: left;">coronavirus</span><span style="color: #363945; font-size: 14px; font-weight: 400; text-align: left;"><b> COVID-19 is affecting </b></span><span style="box-sizing: border-box; color: #363945; font-size: 14px; text-align: left;">210 countries and territories</span><span style="color: #363945; font-size: 14px; font-weight: 400; text-align: left;"> around the world and 2 </span><span style="color: #363945; font-size: 14px; font-weight: 400;">international conveyances. It is affecting worldwide.</span></div>
<div class="maincounter-number" style="background-color: white; box-sizing: border-box; color: dimgrey; font-family: "noto sans", sans-serif; font-size: 54px; font-weight: 700; text-align: justify;">
<span style="color: #363945; font-size: 14px; font-weight: 400;"><br /></span></div>
<div class="maincounter-number" style="background-color: white; box-sizing: border-box; color: dimgrey; font-family: "noto sans", sans-serif; font-size: 54px; text-align: center;">
<span style="box-sizing: border-box; color: #aaaaaa;"><div style="color: black; font-family: "Times New Roman"; font-size: medium; text-align: justify;">
<span style="font-family: Arial; font-size: 12px;"><b>"COVID-19 has done irreparable damage to countries across the globe, causing sickness, death, economic disruption, and human suffering. </b>In Missouri, the impact of the virus is very real - thousands have been <b>infected and many have died, families have been separated from dying loved ones, small businesses are shuttering their doors, and those living paycheck to paycheck are struggling to put food on their table,</b>" said Schmitt. </span></div>
<div style="color: black; font-family: "Times New Roman"; font-size: medium; font-weight: 400; text-align: justify;">
<span style="font-family: Arial; font-size: 12px;"><br /></span></div>
<div style="color: black; font-family: "Times New Roman"; font-size: medium; font-weight: 400; text-align: justify;">
<span style="font-family: Arial; font-size: 12px;">"The Chinese government lied to the world about the danger  </span><span style="font-family: Arial; font-size: 12px;">and contagious nature of COVID-19, silenced whistleblowers, and did little to stop the spread of the disease. They must be held accountable for their actions," he alleged.</span></div>
</span></div>
</div>

Coronavirus COVID-19 News How did Coronavirus starts and what animals came into Coronavirus

How did Coronavirus starts and what animals came into Coronavirus To find out how the deadly corona virus reached humans from animals...

Facebook is Going To Start Dating Service: Secret Crush

5/01/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxieeq-PUmCvnI2BZnrheLsbFW6_5laXOlKSNWLB6VyfwP612CHdTGr1Ib8pi3A7O3XnTIA8WX9dTlTKRDube2O8XKtS8Jf17tITZxf6-fq9mR2bhC7fwemLdA26RDNturzrGtqxuMdBj7/s1600/Facebook-Secret-Crush.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Facebook Secret Crush" border="0" data-original-height="417" data-original-width="796" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxieeq-PUmCvnI2BZnrheLsbFW6_5laXOlKSNWLB6VyfwP612CHdTGr1Ib8pi3A7O3XnTIA8WX9dTlTKRDube2O8XKtS8Jf17tITZxf6-fq9mR2bhC7fwemLdA26RDNturzrGtqxuMdBj7/s640/Facebook-Secret-Crush.jpg" title="Facebook Secret Crush" width="640" /></a></div>
Facebook announced at its F8 conference today a new feature to its Dating repertoire, this one apparently designed to help single minglers poach potential paramours from their Friends by adding them to an ostensibly private list of people you’re crushing on.<br />
<br />
Here’s how this is supposed to go down: You add up to <a href="https://newsroom.fb.com/news/2019/04/f8-2019-day-1/">nine people</a> to a “Secret Crush” list. After you do, those nine people will receive an alert telling them someone has a crush on them. They can add their own secret crushes, and if they add you, you both get a notification and can chat about it on Messenger.<br />
<br />
Ordinarily, Facebook basic and Facebook Dating exist in two separate realms — your profile for one is not the same as your profile for another. The Secret Crush feature is the first crossover between the two (pray it’s the only one). On paper, it sounds like it might be a nice gesture, leaving an opening for shy or introverted people to express their interest in someone with no embarrassment or repercussions if the interest isn’t reciprocated.<br />
<br />
Supposedly, no one will know who your crushes are unless the two of your connect, but you just know there’s a way around that. I wouldn’t put it past some users to add and remove all of their Friends to their own Secret Crush list just to see if any of them match up — not because they feel the same way, but just for bragging rights. But that’s not what really concerns me.<br />
<br />
If you’re anything like me and have played audience to Facebook’s massive, trust-annihilating data leaks and generally cavalier attitude towards consumer data, then your gut clenched in a pre-emptive cringe at the privacy conundrum this is sure to cause. After a year of data privacy scandals, <a href="https://www.hackerschronicle.com/search/label/cambridge%20analytica">Cambridge Analytica</a> chief among them, I don’t think I’d trust Facebook with my dating interests in general, let alone a super secret list of the acquaintances I secretly long to be closer to.</div>

Dating facebook News SecretCrush Facebook is Going To Start Dating Service: Secret Crush

Facebook announced at its F8 conference today a new feature to its Dating repertoire, this one apparently designed to help single mingle...

Microsoft Outlook Breach Targeting Cryptocurrency Users

4/30/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHkvDoGBQpjT4W3SvbIPYYq3OcyhA4R4zK1748reunJHUTabTQPZrNb3Q1AnY8mD5qAX4HIbDwkHuqtXWX1cgbPJlfoVL7Tym4y3HotYKXBllGvEWyQTZRx4w1ztbekvKG5Wkl_vikSIe5/s1600/bitcoin_outlook_breach.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="963" data-original-width="1448" height="424" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHkvDoGBQpjT4W3SvbIPYYq3OcyhA4R4zK1748reunJHUTabTQPZrNb3Q1AnY8mD5qAX4HIbDwkHuqtXWX1cgbPJlfoVL7Tym4y3HotYKXBllGvEWyQTZRx4w1ztbekvKG5Wkl_vikSIe5/s640/bitcoin_outlook_breach.jpeg" width="640" /></a></div>
<br />
Earlier this month, news broke out that hackers were not only able to access Outlook users’ email metadata as previously reported, but also email content. The breach centered around a hacker getting hold of a Microsoft customer support worker’s login credentials; from there, the hacker could dive into the content of any non-corporate Outlook, Hotmail, or MSN account, Motherboard found.<br /><br />Now, multiple victims have come forward to flag what they believe may be one of the motivating reasons behind the breach: emptying peoples’ cryptocurrency accounts.<br /><br />“The hackers also had access to my inbox allowing them to password reset my Kraken.com account and withdrawal [sic] my Bitcoin,” Jevon Ritmeester, a Microsoft user that the company alerted to the data breach, told in an email, referring to popular cryptocurrency exchange Kraken.<br /><br />For verification purposes, Ritmeester provided Motherboard with the breach notification emails he received from Microsoft, as well as a screenshot showing what he said was an email forwarding rule the hackers set up: anytime an email mentioned the term “Kraken,” his account would automatically forward it to a Gmail address presumably controlled by the hackers.<br /><br />
<blockquote class="tr_bq">
Do you know anything else about this breach? You can contact Joseph Cox securely on Signal on +44 20 8133 5190, Wickr on josephcox, OTR chat on jfcox@jabber.ccc.de, or email joseph.cox@vice.com</blockquote>
<br />That would include emails such as password reset and Bitcoin withdrawal requests. Indeed, Ritmeester only found someone had requested both of those after checking the trash of his email account, he wrote in a recent post on the tech forum Tweakers. In the post, he added that he lost just over 1 bitcoin, or around $5,000 at the current exchange rate.<br /><br />It appears Ritmeester isn’t the only person who hackers stole cryptocurrency from due to the Microsoft breach.<br /><br />“My account was hacked as a direct result of this,” Reddit user shinratechlabs wrote earlier this month, adding that they lost “25,000 in crypto,” although it’s not clear what currency they may be referring to, fiat or otherwise.<br /><br />“Same exact for me only a lot less funds stolen, sucks,” another Reddit user, mickey_ficke, chimed in. Neither Reddit user responded to a request for comment.<br /><br />
<blockquote class="tr_bq">
“I feel Microsoft is trying to cover up and is not taking this seriously.”</blockquote>
<br />In his post on Tweakers, Ritmeester said he didn’t have two-factor authentication enabled on Kraken, which may have kept the hackers out of this cryptocurrency account. If he had it enabled, the hackers may have had to take control of this phone number as well in order to intercept the two-factor authentication tokens, for instance.<br /><br />A Microsoft spokesperson told on Monday that, “Customers who believe they have been impacted beyond what was outlined in the company’s notification should contact the Microsoft support team for assistance.”<br /><br />Originally, when TechCrunch and other outlets reported the Outlook data breach, Microsoft said it only impacted email metadata and customer information, such as subject lines and the names of other email addresses users communicated with. After Motherboard presented Microsoft with evidence that email content had also been impacted, Microsoft revised its statement, despite already being fully aware that content was exposed; the company had issued breach notification emails to victims saying as much. <a href="https://motherboard.vice.com/en_us/article/xwndwn/microsoft-outlook-msn-hotmail-breach-cryptocurrency-bitcoin"><span style="font-size: xx-small;">Source</span></a></div>

Bitcoin Cryptocurrency databreach News Microsoft Outlook Breach Targeting Cryptocurrency Users

Earlier this month, news broke out that hackers were not only able to access Outlook users’ email metadata as previously reported, but a...

Multi-Stage Malware Loader Hits Europeans via Signed Malspam

4/29/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmrjDKffNtOT802AuAJrLLSSXnZH_IrCmH7XuGuZ0b_7-y-K2e_sXeb79AqIntkQGOkpST-kcH6oB_fg1Q_Mj8FrWJdeFg1kzjQCWU6SbQ2uhVCpqCxxEMKo6T7CrTVbQz77f81UHJ1upH/s1600/Malspam.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="480" data-original-width="1200" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmrjDKffNtOT802AuAJrLLSSXnZH_IrCmH7XuGuZ0b_7-y-K2e_sXeb79AqIntkQGOkpST-kcH6oB_fg1Q_Mj8FrWJdeFg1kzjQCWU6SbQ2uhVCpqCxxEMKo6T7CrTVbQz77f81UHJ1upH/s640/Malspam.jpg" width="640" /></a></div>
Multiple malicious spam campaigns using signed emails have been observed while distributing the GootKit (aka talalpek or Xswkit) banking Trojan with the help of a multi-stage malware loader dubbed JasperLoader over the past few months.<br />
<br />
This loader is the third one detected by Cisco Talos' research team since July 2018, with Smoke Loader (aka Dofoil) being employed by threat actors to drop ransomware or cryptocurrency miner payloads last year, while <a href="https://blog.talosintelligence.com/2019/02/combing-through-brushaloader.html">Brushaloader</a> was identified during early 2019 and seen while making use of Living-of-the-Land (LotL) tools such as PowerShell scripts to remain undetected on compromised systems.<br />
<br />
<blockquote class="tr_bq">
“Specifically, we’re tracking a loader known as “JasperLoader,” which has been increasingly active over the past few months and is currently being distributed via malicious spam campaigns primarily targeting central European countries with a particular focus on Germany and Italy.” reads the<a href="https://blogs.cisco.com/security/talos/jasperloader-emerges-targets-italy-with-gootkit-banking-trojan"> analysis published </a>by Cisco Talos. “JasperLoader employs a multi-stage infection process that features several obfuscation techniques that make analysis more difficult.”</blockquote>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGi30kQTjzXBpfzjPEzBjIpTv1N_a_3WzP2ac00W2nE3spRf0dm-_BQ8VhecIHCS0wkIj_7xbcx3Er7sBlzunjeswyasogyL7g2yRzdqOxDMhUdrqeXGb7ZZaQemgWs911JebbGSu8R5EJ/s1600/Malspam+email+samples.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Malspam email samples" border="0" data-original-height="428" data-original-width="1288" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGi30kQTjzXBpfzjPEzBjIpTv1N_a_3WzP2ac00W2nE3spRf0dm-_BQ8VhecIHCS0wkIj_7xbcx3Er7sBlzunjeswyasogyL7g2yRzdqOxDMhUdrqeXGb7ZZaQemgWs911JebbGSu8R5EJ/s640/Malspam+email+samples.png" title="Malspam email samples" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Malspam email samples</td></tr>
</tbody></table>
The various malicious campaigns <a href="https://blogs.cisco.com/security/talos/jasperloader-emerges-targets-italy-with-gootkit-banking-trojan">detected by Cisco Talos</a> are localized to match the European country they are targeting, while the attachments employed to start the JasperLoader infection contain either a Visual Basic for Applications (VBS) script or a DOCM documents with VBA macros, both of them used to initiate the payload download process.<br />
<br />
What makes some of these malspam campaigns very dangerous is the fact that the attackers use legitimate certified email services such as Posta Elettronica Certificata (PEC) used in Italy, Switzerland and Hong Kong to send signed emails "to maximize the likelihood that they can convince potential victims to open their malicious emails."<br />
<br />
After the JasperLoader malware loader successfully infects its targets, it will check its geolocation and terminate itself if the compromised machine is from Russia, Ukraine, Belarus, or People's Republic of China.<br />
<br />
Next, it gains persistence by adding an LNK shortcut to itself to the infected system's Startup folder to get launched each time the machine is rebooted.<br />
<br />
It will also generate a bot identifier which gets sent to the command-and-control (C2) server allowing it to register the machine to the operators' botnet and it goes in standby, waiting for commands from the C2 server.<br />
<br />
JasperLoader allows the attackers to update the loader, to run Powershell-based arbitrary system commands, and, more importantly, to download the final Gootkit malware payload. (pic)<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiO-_ZxE6-9_K5w2U8z9KkzK9kFF1B9Ld9EDeEj9lGCR6gG26uiY2ZIXUFl3NLz_N6hCwMWyFhhuEHjZfBJoxEqT2huvjfOYHmxOD75j8Q2qhwq6KvyiAuATz7kEDIYqjuS8bk8fXkcS6po/s1600/Downloading+the+final+malware+payload.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="188" data-original-width="640" height="188" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiO-_ZxE6-9_K5w2U8z9KkzK9kFF1B9Ld9EDeEj9lGCR6gG26uiY2ZIXUFl3NLz_N6hCwMWyFhhuEHjZfBJoxEqT2huvjfOYHmxOD75j8Q2qhwq6KvyiAuATz7kEDIYqjuS8bk8fXkcS6po/s640/Downloading+the+final+malware+payload.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Downloading the final malware payload</td></tr>
</tbody></table>
<br />
Signing the malspam messages before sending them to their victims using valid certificates made it possible for the attackers behind JasperLoader malicious email campaigns to confirm their authenticity "as only those with access to the private keys should be able to sign the message."<br />
<br />
<blockquote class="tr_bq">
In addition, "abusing a legitimate email service allowed them to deliver their malicious emails in a way that would maximize the likelihood that a potential victim would open the attachments and infect themselves with JasperLoader," concluded Cisco Talos.</blockquote>
<br />
Indicators of compromise (IOCs) are also provided by the Cisco Talos' research team in the form of <a href="https://alln-extcloud-storage.cisco.com/ciscoblogs/5cc1be63b4832.txt">SHA256</a> attachment hashes, list of used domains and IP addresses. <a href="https://www.bleepingcomputer.com/news/security/europeans-hit-with-multi-stage-malware-loader-via-signed-malspam/"><span style="font-size: xx-small;">Source</span></a></div>

Europe GootKit Hacking News JasperLoader Malspam Malwares Spam Multi-Stage Malware Loader Hits Europeans via Signed Malspam

Multiple malicious spam campaigns using signed emails have been observed while distributing the GootKit (aka talalpek or Xswkit) banking ...

Stop What You’re Doing and Google ‘Thanos’

4/27/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3E0nDEJTu9tAg2jpEUWpKIe4oP_fLv-AbRkRr1Fo_8_KqM6MqeCPmxhqiyjgeownfgF4uh-qxMXRghyibKT13SeTWbsopr5ssjOFAEWpLAMtr2MpIG-NhTrbhpkXnO65bTCxCqJajVRa9/s1600/avengers-endgame.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="419" data-original-width="796" height="336" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3E0nDEJTu9tAg2jpEUWpKIe4oP_fLv-AbRkRr1Fo_8_KqM6MqeCPmxhqiyjgeownfgF4uh-qxMXRghyibKT13SeTWbsopr5ssjOFAEWpLAMtr2MpIG-NhTrbhpkXnO65bTCxCqJajVRa9/s640/avengers-endgame.png" width="640" /></a></div>
<br />
Avengers: Endgame is smashing box office records, collecting more than $60 million yesterday alone.<br />
<br />
And while the internet is going over Endgame, we’re just over here trying to finish out the work week so we can slide into a theater for a peek at the film. We are the kind of people who believes in first day first say but sadly we don not get any ticket as early as Sunday night. Needless to say, we’re a bit wary of spoilers. This led us to pass up a pretty cool Easter egg by the folks at Google.<br />
<br />
Okay, here goes. At the end of Infinity War, Thanos — snaps his fingers and wipes out something like half of the world’s population. It’s the ultimate cliffhanger moment, and one that led us to a year of waiting for some sense of closure.<br />
<br />
Google, in all its nerd glory, replicated this with Thanos-related search results. Some are reporting it as a means to block spoilers, but it seems more random than that, mostly blocking out the articles explaining the Easter egg, and a few of the cards included in most searches. But it’s still cool, and should lead to a spoiler-free experience if you want to check it out.<br />
<br />
Google Search is home to a new Easter egg celebrating yesterday's theatrical release of Avengers: Endgame. Just Google “Thanos” on desktop or mobile, and then nn the right, you’ll see a jewel-adorned glove, called the Infinity Gauntlet. Click it and watch what happens.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizLxPCFW3QYbOq-YFfVZQ9399ku68HJqh6LkoBv3rnDMHEK6NLCW5AGc2D5cHl_08BTY9kIsRFgp76J7q4zLdM6kG1Z95kg0oBsQyFGIG6dNTao7I30DBYWEcn1Iy2sGFcloX6MNubX90o/s1600/google-thanos.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="664" data-original-width="536" height="640" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizLxPCFW3QYbOq-YFfVZQ9399ku68HJqh6LkoBv3rnDMHEK6NLCW5AGc2D5cHl_08BTY9kIsRFgp76J7q4zLdM6kG1Z95kg0oBsQyFGIG6dNTao7I30DBYWEcn1Iy2sGFcloX6MNubX90o/s640/google-thanos.png" width="515" /></a></div>
<br />
Previously it was also reported that avengers endgame got leaked online in china. Click <a href="https://www.hackerschronicle.com/2019/04/avengers-endgame-leaked.html">here</a> to read more.<br />
</div>

Avengers Endgame Google Marvel Technology Thanos Stop What You’re Doing and Google ‘Thanos’

Avengers: Endgame is smashing box office records, collecting more than $60 million yesterday alone. And while the internet is going ov...

Avengers: Endgame Leaked Online in China

4/26/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDolKTrpqGHDs64QYKSgieSRuSKbRzKuqomzLQmi0DK6pbUP_SiLGPfSSy-FqLCnF4fS8_yLwrsL0HcOjQAGc1R3G6dV1kstZKK2KfaXYYOSlwNjpZXvo_xKei_oNtfT46lxKCPMHhs6Kh/s1600/avengers-endgame-full-movie-download.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="avengers-endgame-full-movie-download" border="0" data-original-height="468" data-original-width="1600" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDolKTrpqGHDs64QYKSgieSRuSKbRzKuqomzLQmi0DK6pbUP_SiLGPfSSy-FqLCnF4fS8_yLwrsL0HcOjQAGc1R3G6dV1kstZKK2KfaXYYOSlwNjpZXvo_xKei_oNtfT46lxKCPMHhs6Kh/s640/avengers-endgame-full-movie-download.jpeg" title="avengers-endgame-full-movie-download" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
Marvel’s latest and perhaps the most anticipated movie ever to be released Avengers: End Game has become an object of controversy lately as hackers and <a href="https://www.hackerschronicle.com/search/label/Cyber%20Crime">cybercriminals</a> are trying their best to benefit from the movie’s widespread, intense hype.<br />
<br />
Last week, Marvel fans were requested to not use social media after a video made via mobile phone containing movie spoilers was posted online. Now that the movie has been released in China and just a day is left in its US release, reports are rife that a camera version of the movie has been uploaded on various torrent platforms and piracy sites.<br />
<br />
TorrentFreak reveals that copy of Avengers: End Game has been recorded from a cinema in China and initially it exclusively appeared on Chinese torrent sites. It is interesting because the movie’s sponsors and producers chose to release it in China first and it is yet to be released in the US.<br />
<br />
Reportedly, this decision was taken to address the issue of piracy in the region. The movie has so far raked in $90 million in sales, that’s an impressive start for sure but the inevitable has happened as someone was able to record the movie in the cinema and upload it online.<br />
<br />
According to the analysis from <a href="https://torrentfreak.com/avengers-endgame-leaks-online-in-china-begins-to-spread-190424/">TorrentFreak</a>, their system notified about the appearance of a 1.2 GB cammed version of Avengers: End Game between 4:00 pm and 5:00 pm China local time, that’s merely a few hours after the movie was released in China.<br />
<blockquote class="tr_bq">
Don’t spoil the Endgame.</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1cZRLTltdArqER839hE8T7pSHG7STItqVm00OFhibryop8C-3lbufICNeMdf5Fv6w8G2vvWqN6GhtoDCDLZDlO-6vi_tpUXZMuscpcZm90ViGJ4m58GJUVIVJ-cNAxtpEHT3KrXOWDYoN/s1600/avengers-end-game-leaked-online.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="avengers end game leaked online" border="0" data-original-height="340" data-original-width="600" height="362" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1cZRLTltdArqER839hE8T7pSHG7STItqVm00OFhibryop8C-3lbufICNeMdf5Fv6w8G2vvWqN6GhtoDCDLZDlO-6vi_tpUXZMuscpcZm90ViGJ4m58GJUVIVJ-cNAxtpEHT3KrXOWDYoN/s640/avengers-end-game-leaked-online.jpg" title="avengers end game leaked online" width="640" /></a></div>
As soon as the movie was released online, dozens of users located in <a href="https://www.hackerschronicle.com/search/label/Chinese%20Hackers">China</a> started sharing it on torrent sites. Then came the 2 GB version of the movie and new copies are also emerging at regular intervals. The initial versions were basically different variants of the first torrent shared on Thunder torrent site; it became evident because all the new variants had the same client code starting from 7.10.35.XXX.<br />
<br />
The good news is that the pirated version circulating on torrent sites is of pretty bad quality as the movie continuously flickers, is semi-rotated and there are watermarks of a gambling site visible throughout. TorrentFreak also noted that the pirated version has made it to piracy sites in the UK as well.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRbOR3N9msJP1t9eGyimwPvEx4Q42RoBPPYG2thkDZVbCSwWXtPbEW347Wh9Tdbvqg6OQB5Ptz_PlAyu8Ffz-h-yiA5gxk9ptRfQXWym44wzK0KwIkJO4fCM2j8e5oGvbwtKNkKtXSVAIn/s1600/avengers4torrentdata-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="avengers end game available on torrent" border="0" data-original-height="354" data-original-width="600" height="376" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRbOR3N9msJP1t9eGyimwPvEx4Q42RoBPPYG2thkDZVbCSwWXtPbEW347Wh9Tdbvqg6OQB5Ptz_PlAyu8Ffz-h-yiA5gxk9ptRfQXWym44wzK0KwIkJO4fCM2j8e5oGvbwtKNkKtXSVAIn/s640/avengers4torrentdata-1.png" title="avengers end game available on torrent" width="640" /></a></div>
<br />
<br />
It is worth mentioning that the initial version of the movie’s copy was dubbed in Chinese but later another version with English audio and Chinese subtitles was released online. Moreover, an improved version of the movie has also been released that has been sponsored by a <a href="https://www.hackerschronicle.com/search/label/Russian%20Hackers">russian</a> betting company 1XBet.<br />
<br />
Avengers: End Game is touted as the final and conclusive chapter of the franchise. So far 22 films have been released since 2008 under the Marvel Cinematic Universe banner. The makers have tried their best to keep the movie’s storyline a secret, so much so that even the journalists weren’t allowed to watch the movie prior to interviewing its star cast. </div>

Avengers Endgame Chinese Hackers Cyber Crime Full Movie Marvel Movie Russian Hackers Torrent Avengers: Endgame Leaked Online in China

Marvel’s latest and perhaps the most anticipated movie ever to be released Avengers: End Game has become an object of controversy lat...

Password Expiry rules are useless: Microsoft

4/25/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqUF_WuEse2kZ0JaRkL9KfdsgNTITKFOlBjF3k_mgQ9Sx5gPpxQr007nzlJWs4CJE9aybr4FNChxuvk8JDa-vFbo7xU0ux-sQgS_mTuiDb-hLTKDmcAklCDvRsRY2yy1sJciX5C6j71tJ4/s1600/microsoft-password-expiry.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="microsoft password expiry" border="0" data-original-height="749" data-original-width="1092" height="438" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqUF_WuEse2kZ0JaRkL9KfdsgNTITKFOlBjF3k_mgQ9Sx5gPpxQr007nzlJWs4CJE9aybr4FNChxuvk8JDa-vFbo7xU0ux-sQgS_mTuiDb-hLTKDmcAklCDvRsRY2yy1sJciX5C6j71tJ4/s640/microsoft-password-expiry.png" title="microsoft password expiry" width="640" /></a></div>
<br />
 <span class="caption">Ever had to change your password for no reason? </span><span class="caption">Before, it was annoying. Now, it's useless.</span><br />
<br />
Microsoft has admitted that one of the great curses of our time, the password reset rule, is nonsense.<br />
<br />
"When humans are assigned or forced to create passwords that are hard to remember, too often they'll write them down where others can see them," Microsoft's <a href="https://twitter.com/AaronMargosis">Aaron Margosis</a> wrote in a <a href="https://blogs.technet.microsoft.com/secguide/2019/04/24/security-baseline-draft-for-windows-10-v1903-and-windows-server-v1903/">blog post</a> Wednesday. Worse, Margosis wrote, when people are forced to change their passwords, too often they make a "small and predictable alteration to their existing password," or they'll just forget it.<br />
<br />
The blog post introduces a broader set of "<a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines">baseline</a>" security settings Microsoft is considering recommending to companies that use its computer management software. Think of them as defaults of a sort.<br />
<br />
Unfortunately, Microsoft isn't simply yanking the password reset feature, which would be the humane thing to do. In the end, it'll still be up to your company's tech team whether to listen to reason or continue living in the security Stone Age.<br />
<br />
It's worth noting that Microsoft isn't changing recommendations around the way we create passwords. In fact, the company recommends companies increasingly ban typical bad passwords, and force employees to use multifactor authentication. <br />
<br />
<blockquote>
"Periodic password expiration is an ancient and obsolete mitigation of very low value," Margosis wrote.</blockquote>
<br />
But make no mistake, <a href="https://www.hackerschronicle.com/search/label/Microsoft">Microsoft</a>, whose Windows software powers nearly 80% of the world's computers, has finally seen the light. <span style="font-size: xx-small;"><a href="http://cnet.com/">Source</a></span></div>

Microsoft Password Password Expiry Technology Password Expiry rules are useless: Microsoft

Ever had to change your password for no reason? Before, it was annoying. Now, it's useless. Microsoft has admitted that one of ...

Bodybuilding.com confirms Data Breach

4/24/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjav4fT_vy7AeU-yBoFGrd1P0avUFMV_V3pVWbMrJnnzVZTdh9WNajlxHgh7WH3clxT3ByH0VgxReB0_Cod9GEQWwfNLirHPGCoUEYnFJ0nEtY2-tDMBaa4TzgiV8_i9EjE8FaEjB2RlnSm/s1600/bodybuilding-hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Bodybuilding.com hacked" border="0" data-original-height="425" data-original-width="1000" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjav4fT_vy7AeU-yBoFGrd1P0avUFMV_V3pVWbMrJnnzVZTdh9WNajlxHgh7WH3clxT3ByH0VgxReB0_Cod9GEQWwfNLirHPGCoUEYnFJ0nEtY2-tDMBaa4TzgiV8_i9EjE8FaEjB2RlnSm/s640/bodybuilding-hacked.jpg" title="Bodybuilding.com hacked" width="640" /></a></div>
<br />
Bodybuilding.com, the internet's biggest online store and online forum for fitness and bodybuilding enthusiasts, has disclosed last week a security breach that impacted its IT systems.<br />
<br />
Customer data might have been exposed, the company said in a <a href="https://www.bodybuilding.com/help?notifications&data-incident">short message</a> posted on its website. Its staff isn't sure if the attacker accessed customer data, though.<br />
<br />
A third-party security firm was hired to help with the investigation, but forensics experts couldn't confirm that customer data was stolen from Bodybuilding.com's servers, either.<br />
<br />
Bodybuilding.com said investigators traced the unauthorized activity to a phishing email its staff received in July 2018. At least one employee appears to have fallen for this email.<br />
<br />
Hackers used the data they obtained from this phishing email to access the company's network in February 2019. Bodybuilding.com didn't say when it detected the intrusion, but it said it finished its investigation on April 12. It went public with the security breach a week later, on April 19.<br />
<br />
<blockquote class="tr_bq">
We became aware of a data security incident involving unauthorized access to our systems in February 2019. We engaged one of the leading data security firms to conduct a thorough investigation, which traced the unauthorized activity to a phishing email received in July 2018. On April 12, 2019, we concluded our investigation and could not rule out that personal information may have been accessed.</blockquote>
<br />
Despite not knowing if hackers accessed customer data, Bodybuilding.com decided to do the right thing and notify all of its customers of the security incident, as a precaution.<br />
<br />
It also reset all users' passwords as well, to prevent any abuse in case attackers did manage to steal any data.<br />
<br />
According to the company, if hackers did manage to access and steal customer data, possibly exposed details will include name, email address, billing/shipping addresses, phone number, order history, any communications with Bodybuilding.com, birthdate, and any information included in BodySpace profiles.<br />
<br />
Social Security numbers and payment card details were not exposed, the company said, as the site never collected this information in the first place.<br />
<br />
Besides notifying users of the breach, Bodybuilding.com is also alerting users that scammers might also try to imitate its data breach disclosure notifications for online fraud or phishing attacks.<br />
<br />
<blockquote class="tr_bq">
Please note that the email from Bodybuilding.com does not ask you to click on any links or contain attachments and does not request your personal data. If the email you received about this issue prompts you to click on a link, suggests you download an attachment, or asks you for information, the email was not sent by Bodybuilding.com and may be an attempt to steal your personal data. Avoid clicking on links or downloading attachments from such suspicious emails. Any link included in our email to users directs users to insert the Bodybuilding.com FAQs URL into your browser and does not request your personal data.</blockquote>
<a href="https://www.zdnet.com/google-amp/article/bodybuilding-com-discloses-security-breach/"><span style="font-size: xx-small;">Source</span></a></div>

bodybuilding.com databreach Hacking News News Phishing Security Bodybuilding.com confirms Data Breach

Bodybuilding.com, the internet's biggest online store and online forum for fitness and bodybuilding enthusiasts, has disclosed last ...

2 Million Wi-Fi Passwords Leaked

4/23/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_JzcJ1AsuRYfsljM1cITPR7YLgu-D-N76enZhfj9tuMOE08vCJnkM1jG-LmooyQWWC4TBPZ4GvvJqj0LTXuC_bEQ33v_D4qofBTBGN9gVbsA5rWJ-FhRiggoxyFtpd47iomLFe0IwzTIt/s1600/wifi-finder.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Wi-Fi Hotspot Finder Spills 2 Million Passwords" border="0" data-original-height="933" data-original-width="1390" height="427" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_JzcJ1AsuRYfsljM1cITPR7YLgu-D-N76enZhfj9tuMOE08vCJnkM1jG-LmooyQWWC4TBPZ4GvvJqj0LTXuC_bEQ33v_D4qofBTBGN9gVbsA5rWJ-FhRiggoxyFtpd47iomLFe0IwzTIt/s640/wifi-finder.jpg" title="Wi-Fi Hotspot Finder Spills 2 Million Passwords" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Wi-Fi Hotspot Finder Spills 2 Million Passwords Online</td></tr>
</tbody></table>
A popular hotspot finder app for Android exposed the Wi-Fi network passwords for more than two million networks.<br /><br />The app, downloaded by thousands of users, allowed anyone to search for Wi-Fi networks in their nearby area. The app allows the user to upload Wi-Fi network passwords from their devices to its database for others to use.<br /><br />That database of more than two million network passwords, however, was left exposed and unprotected, allowing anyone to access and download the contents in bulk.<br /><br />Sanyam Jain, a security researcher and a member of the GDI Foundation, found the database and reported the findings to TechCrunch.<br /><br />We spent more than two weeks trying to contact the developer, believed to be based in China, to no avail. Eventually we contacted the host, DigitalOcean, which took down the database within a day of reaching out.<br /><br />“We notified the user and have taken the [server] hosting the exposed database offline,” a spokesperson told.<br /><br />Each record contained the Wi-Fi network name, its precise geolocation, its basic service set identifier (BSSID) and network password stored in plaintext.<br /><br />Although the app developer claims the app only provides passwords for public hotspots, a review of the data showed countless home Wi-Fi networks. The exposed data didn’t include contact information for any of the Wi-Fi network owners, but the geolocation of each Wi-Fi network correlated on a map often included networks in wholly residential areas or where no discernible businesses exist.<br /><br />The app doesn’t require users to obtain the permission from the network owner, exposing Wi-Fi networks to unauthorized access. With access to a network, an attacker may be able to modify router settings to point unsuspecting users to malicious websites by changing the DNS server, a vital system used to convert web addresses into the IP addresses used to locate web servers on the internet. When on a network, an attacker also can read the unencrypted traffic that goes across the wireless network, allowing them to steal passwords and secrets.<br /><br />Tens of thousands of the exposed Wi-Fi passwords are for networks based in the U.S.<br />
Source: <a href="https://techcrunch.com/2019/04/22/hotspot-password-leak/">TechChrunch</a></div>

Data Leak DigitalOcean Hacking News Wi-Fi WiFi Finder 2 Million Wi-Fi Passwords Leaked

Wi-Fi Hotspot Finder Spills 2 Million Passwords Online A popular hotspot finder app for Android exposed the Wi-Fi network passwords fo...

Personal Data of FBI Agents leaked

4/15/2019 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHQpeMQxcICm5IPBC_C1bUWF43XRKGUxb3tFKXY50jQ3HOJl22SLE2a444BP1IU7I8Nqw1Kx3T4yYR9wedV1QGhx_Qv6hKLYOofV0lK7XvhSUARbGaXIJrYyKEYRKrFeR8zTntUkHRu6Q/s1600/fbi-leak.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hackers leak personal data of fbi agent" border="0" data-original-height="820" data-original-width="1236" height="424" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHQpeMQxcICm5IPBC_C1bUWF43XRKGUxb3tFKXY50jQ3HOJl22SLE2a444BP1IU7I8Nqw1Kx3T4yYR9wedV1QGhx_Qv6hKLYOofV0lK7XvhSUARbGaXIJrYyKEYRKrFeR8zTntUkHRu6Q/s640/fbi-leak.jpg" title="hackers leak personal data of fbi agent" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
hackers leak personal data of fbi agent</div>
Three websites belonging to the Federal Bureau of Investigation’s (FBI) National Academy Association (FBINAA) were hacked apparently by three hackers after they managed to breach their security, steal and upload data online.<br />
<br />
Part of the uploaded content was dozens of documents containing personal information of federal agents and law enforcement officers. The information includes email IDs (both private and government), names, job titles, contact numbers, and postal addresses.<br />
<br />
Reportedly, thousands of officials have their private information leaked online since there are around 4,000 unique records of personal credentials of federal officials. The data was stolen from three of the many chapter websites affiliated with the FBINAA across the US.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN6bJUgoWgbaZ0Dd4-FDX80kqJHTM7896N74ufcx7K8JJ47rXpLIJNSBrbaaXvyAP36uBDhYAepOeFEWWKLL5HVwrTWAQgKb5EGLIA6hDSJsHX0TjgPezpCDlOkw4x9MYUOq3Mv8RwPPI/s1600/FBI-data-leaked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="FBI Data Leak" border="0" data-original-height="370" data-original-width="930" height="252" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN6bJUgoWgbaZ0Dd4-FDX80kqJHTM7896N74ufcx7K8JJ47rXpLIJNSBrbaaXvyAP36uBDhYAepOeFEWWKLL5HVwrTWAQgKb5EGLIA6hDSJsHX0TjgPezpCDlOkw4x9MYUOq3Mv8RwPPI/s640/FBI-data-leaked.png" title="FBI Data Leak" width="640" /></a></div>
These websites are used for promotional purposes primarily for the FBI training academy in Quantico, VA. The hackers identified and exploited several flaws in the three websites and stole the entire contents of the yet unnamed websites. Afterward, the hackers transferred the data on their personal website.<br />
<br />
While speaking with one of the hackers, <a href="https://techcrunch.com/2019/04/12/police-data-hack/">TechCrunch</a> learned that the trio has managed to hack over 1,000 websites so far and the <a href="https://www.hackerschronicle.com/search/label/Cyber%20Crime">cybercriminals</a> are now trying to organize and structure the acquired information.<br />
<br />
<blockquote class="tr_bq">
    “Soon they will be sold. I think something else will publish from the list of hacked government sites,” the unidentified hacker told.</blockquote>
<br />
When asked if the hackers were aware of the fact that uploading such sensitive data online would endanger the security of federal agents and law enforcement officials, the hacker plainly replied “Probably, Yes,” adding that they have more than a million employees’ data belonging to various federal agencies and public service organizations in the US.<br />
<br />
<blockquote class="tr_bq">
    “We hacked more than 1,000 sites,” said the hacker. “Now we are structuring all the data, and soon they will be sold. I think something else will publish from the list of hacked government sites.” We asked if the hacker was worried that the files they put up for download would put federal agents and law enforcement at risk. “Probably, yes,” the hacker said.</blockquote>
<br />
The hackers do not intend to sell the stolen data on hacker forums or the Dark Web marketplace but will be offering it for free just to prove the legitimacy of the claim that they have the data and for the sake of experience. TechCrunch reported that there are over ten hackers involved and they mainly use public exploits to target websites that haven’t been updated or contain outdated plugins.<br />
<br />
While having an encrypted chat session , the hacker gave proof of some of the other websites that they have breached, which included Foxconn’s subdomain too.</div>

Data Leak FBI Hacking News Personal Data of FBI Agents leaked

hackers leak personal data of fbi agent Three websites belonging to the Federal Bureau of Investigation’s (FBI) National Academy Associ...

Voting Machine firewall details and passwords leaked online

4/06/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="margin-bottom: .0001pt; margin: 0mm;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7B6FUrs1Xkli2dBiG8sucr_mhoaIIoVfv2I0nvFZIBpm74L9LvSHN2FbDe1nUzJ0NUVdI5v2MCvi-6QYPNPryWwmQbAzUkNvLB1F8IUvQ6WDpJ4p6zBLJO4GCYh4Erl14C6orQfKWFvY/s1600/Electronic-Voting-hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7B6FUrs1Xkli2dBiG8sucr_mhoaIIoVfv2I0nvFZIBpm74L9LvSHN2FbDe1nUzJ0NUVdI5v2MCvi-6QYPNPryWwmQbAzUkNvLB1F8IUvQ6WDpJ4p6zBLJO4GCYh4Erl14C6orQfKWFvY/s400/Electronic-Voting-hacked.jpg" width="400" /></a></div>
<br />
A sysadmin at a number one mechanical device vendor denote a firewall configuration file, as well as passwords, into a public Cisco support forum in 2011, gap the corporate up to attainable attack.<br />
The config files expose a wealth of knowledge helpful to Associate in Nursing wrongdoer, as well as the name, hostname, and ASA version range. whereas <b>there's no proof that the mechanical device vendor was compromised, this accidental discharge of knowledge is "juicy intelligence,"</b> Dan Tentler, founder and corporate executive of satellite cluster, Associate in Nursing attack simulation security company, tells.<br />
<br />
"If you have got a crack team of housebreaker varieties and they are all attending to burgled a building, this firewall configuration file is that the equivalent of finding the ground set up of the building they're reaching to burgled," Tentler says.<br />
<br />
Compromising the c<b>omputer code offer chain of a mechanical device vendor would be a years-long endeavor, requiring careful designing and long-run persistence within the company's network.</b> It remains unclear if this "floor plan" was ever employed by Associate in Nursing wrongdoer because the mechanical device vendor has not answered that question with rhetorical certainty.<br />
One of the ASA devices seems to be a firewall on the company's development and testing network. Associate in Nursing wrongdoer World Health Organization used this intelligence to compromise the mechanical device vendor's network may have used works backdoors ("remote access software") to hack vote machines. they might have deep-seated refined microcode backdoors or engaged in spear phishing attacks against native election officers.<br />
<br />
A nation-state wrongdoer may even have derived the mechanical device ASCII text file and used it to seem for security flaws. "The mechanical device vendors...are actually on the microwave radar of powerful attackers, as well as nation-state adversaries," Alex Halderman, a prof of computing at the University of Michigan, Associate in Nursing a knowledgeable of mechanical device security, tells. "The networks they're mistreatment for developing, testing, and debugging election system computer code area unit probably to be probed by attackers World Health Organization would wish to weaken the protection of our elections."<br />
<br />
"If you'll get into one in every of these vendors," he adds, <b>"take the ASCII text file to the vote machines, that is of huge advantage to somebody UN agency needs to attack them."</b><br />
In the forum postings, that area unit still public at the time of this writing, the mechanical device merchandiser worker asked for facilitate configuring a Cisco ASA 5505 — a firewall appliance — and includes sensitive details regarding the company's internal network layout, likewise as passwords (likely the default passwords), writing, "Here is my running config."<br />
<br />
In one forum post, the worker asks for help:<br />
I am making an attempt to line up a DMZ with an interior VLAN to transfer SFTP (SSH) firmly. I am unable to get the within the computer to attach to the SFTP (SSH) server. I actually have bought and activated the safety upgrade My DMZ server. My computer making an attempt to travel from the within to the DMZ.<br />
The employee continues to provoke facilitate, writing in another forum post, "I would really like to trammel the safety on my Firewall. am I able to take away my ‘any any’ statements in my access lists? Here's my config."<br />
<br />
It's doable, of course, that the sysadmin modified the passwords before posting to the <b>Cisco support forum, though the language used ("Here is my running config") suggests otherwise.</b> it is also doable the passwords were modified afterward.<br />
Even if the passwords were ne'er valid, this firewall config offers associate aggressor valuable intelligence. "This info is incredibly helpful for associate aggressor that’s targeting this organization with a political goal in mind," Tentler says. "If Russia found this and was deciding to focus on this organization, this can be gold."<br />
<br />
We found what we have a tendency to believe to be the employee’s LinkedIn profile, that shows the worker now not works for the corporate. Neither the mechanical device merchandiser nor the previous worker competent our press inquiries.<br />
"I hope that vendor has enforced immensely higher security coaching since 2011 so as to avoid additional security leaks of this nature," Halderman says, "but nothing that I actually have seen would lead Maine to<b> believe their security has improved to the extent necessary to stave off nation-state adversaries</b>."<br />
<br />
<br /></div>
</div>

Cisco Cyber Crime evm hacking evm tempering Hacking News voting machine Voting Machine firewall details and passwords leaked online

A sysadmin at a number one mechanical device vendor denote a firewall configuration file, as well as passwords, into a public Cisco su...

Under Armour Fitness App MyFitnessPal data breached affecting 150 million users

4/03/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt3FA8mAmz1C1o0BjaaMWheMFcBxhvgcylN7-KTbsqpGh92hAMUOWeq9gpBEfP5gWl77xbCxGB42KLXYAE6qVFRbvgZ5j6QZjg8dO9uFQnG7dXw_COuSBCVDG7qEb6MLnD_kPsFZY4s5La/s1600/under-armour-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="470" data-original-width="940" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt3FA8mAmz1C1o0BjaaMWheMFcBxhvgcylN7-KTbsqpGh92hAMUOWeq9gpBEfP5gWl77xbCxGB42KLXYAE6qVFRbvgZ5j6QZjg8dO9uFQnG7dXw_COuSBCVDG7qEb6MLnD_kPsFZY4s5La/s640/under-armour-data-leak.png" width="640" /></a></div>
<div class="MsoNormal" style="background: white; margin: 7.5pt 0mm 3.75pt;">
 </div>
<div class="MsoNormal" style="background: white; margin: 7.5pt 0mm 3.75pt;">
Under Armour, Inc. last week <a href="https://content.myfitnesspal.com/security-information/notice.html">announced </a>that it is notifying users of MyFitnessPal - the company's food and nutrition application and website - about a massive data breach affecting 150 million users. But according to the comapny sources, Payment card data was not compromised because it is collected and processed separately. </div>
<div class="MsoNormal" style="background: white; margin: 7.5pt 0mm 3.75pt;">
A massive data breach on March 29 that impacted 150 million user accounts of the fitness vendor’s popular MyFitnessPal application Under Armour reported, which provides exercise, diet and calorie counting capabilities.<br />
"On March 25, the MyFitnessPal team became aware that an unauthorized party acquired data associated with MyFitnessPal user accounts in late February 2018.” Armour stated, Under Armour has not publicly identified the root cause of the breach.<br />
<br />
The data taken includes <b>usernames, email addresses and hashed passwords.</b> Rather than being stored in plain text, hashed passwords are scrambled cryptographically to protect passwords from being easily reused.<br />
<br />
On March 30, the company began to inform about the leakage of data to 150 million users . Users received the following e-mail:<br />
<blockquote class="tr_bq">
To the MyFitnessPal Community: <br />We have included your MyFitnessPal account information. We understand your protection and information seriously. <br />On March 25, 2018, we became aware of the MyFitnessPal user accounts. The related information included usernames, e-mail addresses, and hashed passwords - the majority of the hashing function called bcrypt used to secure passwords.<br />Once we became aware, we quickly took steps to determine the nature and scope of the issue. We are working with leading data security. We are also notified and are coordinating with law enforcement authorities. <br />We are <br />notifying MyFitnessPal users to provide information on how they can protect their data. <br />We will be requiring MyFitnessPal users to change their passwords and urge users to do so immediately. <br />We continue to monitor for suspected activity. <br />We continue to make enhancements to our systems to detect and prevent unauthorized access to user information.<br />We take our steps to safeguard your information. We recommend you: <br />Change your password for your account. MyFitnessPal account. <br />Review your accounts for suspicious activity. <br />Be cautious of any unsolicited communications. <br />Avoid clicking on links or downloading attachments from suspicious emails. <br />For more information, please go to <a href="https://content.myfitnesspal.com/security-information/FAQ.html">https://content.myfitnesspal.com/security-information/FAQ.html</a>. <br />Sincerely, <br />Paul Fipps <br />Chief Digital Officer</blockquote>
<br />If you have used this application and wherever you have had the same or similar password, change it as soon as possible.<br /><br />And if you logged in via <a href="https://www.hackerschronicle.com/search/label/facebook">Facebook </a>to the application , firstly - this is not the smartest approach (never do it!), And secondly, go to the Facebook options and receive the app all rights and link again. If you really need to log in via fejs, it would be better if you created an account in your application by e-mail.<br />
<br /></div>
</div>

Under Armour Fitness App MyFitnessPal data breached affecting 150 million users

Cyber Attack Data Leak databreach Hacking News MyFitnessPal under armour Under Armour Fitness App MyFitnessPal data breached affecting 150 million users

Under Armour, Inc. last week announced that it is notifying users of MyFitnessPal - the company's food and nutrition application...

Ecuador disabled Wikileaks founder Julian Assange's Internet Access

3/29/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieb-VZsU0bCIz6FcGRBe_0j_uch_S229GgnzMf5CtFhsHUxcOs2z1Sh7gKyd2Pcp8xI6qUBB5n85E59LwoWbrhExVIwV9e_thuLa4GUUrYNGFX1J_WvxwAq74tK-Et3gco38uEWWCzUS0M/s1600/julian-assange.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="julian-assange" border="0" data-original-height="596" data-original-width="1018" height="374" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieb-VZsU0bCIz6FcGRBe_0j_uch_S229GgnzMf5CtFhsHUxcOs2z1Sh7gKyd2Pcp8xI6qUBB5n85E59LwoWbrhExVIwV9e_thuLa4GUUrYNGFX1J_WvxwAq74tK-Et3gco38uEWWCzUS0M/s640/julian-assange.jpg" title="julian-assange" width="640" /></a></div>
<br />
<br />
The founder of WikiLeaks has been offline for a few hours after Ecuador suspended his internet access. WikiLeaks’ founder Julian Assange can’t connect to the internet anymore.<br />
<br />
On Wednesday, Ecuador’s government posted a statement on Twitter saying it cut Assange’s internet access for sending out messages meddling with other countries’ affairs. The message, posted in Spanish, said Assange had broken a “written commitment” not to do that.<br />
<br />
“Assage’s behavior, with his messages through social networks, puts in danger the good relationships that Ecuador maintains with the United Kingdom, with the other countries in the European Union and other nations,” read the statement.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk9_KMv1NFj2miMjOcEPuxs8uYc6QlTwsRqSa32OHqcZYFAlZl0fiqCf4IwL9APqfmMxz9nNb0mJguqRdKHm1vo0QyYUFFijF_nTL7n5iR9jl5j7ZnT2i9ddkMs38fYjpoVyWdXajCSoMB/s1600/internet-disabled-julian-assange.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="745" data-original-width="593" height="640" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk9_KMv1NFj2miMjOcEPuxs8uYc6QlTwsRqSa32OHqcZYFAlZl0fiqCf4IwL9APqfmMxz9nNb0mJguqRdKHm1vo0QyYUFFijF_nTL7n5iR9jl5j7ZnT2i9ddkMs38fYjpoVyWdXajCSoMB/s640/internet-disabled-julian-assange.PNG" width="507" /></a></div>
<br />
Assange has been living in the Ecuadorian embassy in London since 2012, when the government granted him political asylum.<br />
<br />
It’s unclear what message or messages in particular got Assange in trouble. Ecuador’s government and Ecuador’s embassy in Washington DC did not immediately respond to a request for comment via email.<br />
<br />
Assange spent much of Tuesday on Twitter posting several tweets related to the arrest of Catalan independentist politician Carles Puigdemont. Puigdemont was arrested in Germany on Sunday. The politician fled Spain after declaring the Catalan independence last year. The Spanish government has indicted him for crimes of rebellion and sedition, among others, and issued a European arrest warrant.<br />
<br />
He also posted a somewhat cryptic, an seemingly apropos of nothing, tweet in Spanish that said: “I won’t have the right to speak about political prisoners who were interfered with under any circumstance.”<br />
<br />
Assange often comments on international affairs on his personal Twitter account, as well as the WikiLeaks official one. In 2016 and in 2017 he often commented on American politics and the US elections.<br />
<br />
WikiLeaks supporters, such as MEGA’s founder Kim Dotcom, took it to Twitter to protest, using the hashtag #ReconnectAssange.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL8Tn2ttv98Cj1RuTMpuCLkD0SPOUFp32-EXL28XYJjBGnPReNrKzkso7WkIRFOsohTi7gNuqQFoXPbLKJXNCRWHG0a0CLa8Fg5JCExCKt12DLLB_8Qv6J3WwX4OQsjsYnWYX3Ds9-SlCe/s1600/ReconnectJulian.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="618" data-original-width="648" height="381" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL8Tn2ttv98Cj1RuTMpuCLkD0SPOUFp32-EXL28XYJjBGnPReNrKzkso7WkIRFOsohTi7gNuqQFoXPbLKJXNCRWHG0a0CLa8Fg5JCExCKt12DLLB_8Qv6J3WwX4OQsjsYnWYX3Ds9-SlCe/s400/ReconnectJulian.PNG" width="400" /></a></div>
<br /></div>

Hacking News julian assange politics ReconnectAssange wikileaks Ecuador disabled Wikileaks founder Julian Assange's Internet Access

The founder of WikiLeaks has been offline for a few hours after Ecuador suspended his internet access. WikiLeaks’ founder Julian Assan...

Intel CPUs Vulnerable To New Spectre-Like Attack, BranchScope

3/28/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-OgISz-LWmIqbGtXLg6c-5TcL-lE1G9t1shQoILWCUnuGovEIVJZ45gZA2mz_a1ia22TODVdCE7G0V37HVPFnR5H0Zk5jNmRKLoMnka2655VsKMsOK0C_YErOBXlhyphenhyphenjZG3zl3EJF4A-nK/s1600/BranchScope.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Intel CPUs Are Now Vulnerable to BranchScope Attacks.After Meltdown and Spectre" border="0" data-original-height="455" data-original-width="1250" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-OgISz-LWmIqbGtXLg6c-5TcL-lE1G9t1shQoILWCUnuGovEIVJZ45gZA2mz_a1ia22TODVdCE7G0V37HVPFnR5H0Zk5jNmRKLoMnka2655VsKMsOK0C_YErOBXlhyphenhyphenjZG3zl3EJF4A-nK/s640/BranchScope.png" title="Intel CPUs Are Now Vulnerable to BranchScope Attacks.After Meltdown and Spectre" width="640" /></a></div>
<br />
<br />
Security researchers have discovered a new wave of attacks called <b>BranchScope</b>. Yet we're not done with the Meltdown and Spectre security flaws that put billions of devices at risk of attacks.<br />
<br />
<b>BranchScope :  </b>It's a <b>new side-channel attack </b>discovered by four security researchers<b> </b>from College of William and Mary, Carnegie Mellon University in Qatar, University of California Riverside, and Binghamton University, which could affect devices powered by Intel processors and which may be immune to the <a href="http://www.hackerschronicle.com/search/label/meltdown">Meltdown </a>and Spectre mitigations.<br />
<br />
According to their <a href="http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf">paper</a>, even if they are a bit more sophisticated, the BranchScope attacks can do the same damage as the <a href="http://www.hackerschronicle.com/search/label/spectre">Spectre </a>and Meltdown flaws, in the way that an<b> attacker can exploit the security vulnerability to retrieve sensitive data from the unpatched system, including passwords and encryption keys,</b> by manipulating the shared directional branch predictor.<br />
<br />
"<b>The success of the attack largely depends on the ability to perform branch manipulations with precise timing,</b>" reads the paper. "The attacker controlled OS can easily manipulate victim execution timings. For example, the attacker can configure the Advanced Programmable Interrupt Controller (APIC) in such a way that enclave code is interrupted after several instructions are executed."<br />
<br />
Sandy Bridge, Haswell, and Skylake processors affected The researchers have demonstrated the BranchScope attack on three recent Intel Core i5 and Core i7 x86_64 (64-bit) processor families,  including Sandy Bridge, Haswell, and Skylake. The worst part of these attacks is that BranchScope can be extended, offering attackers additional tools to perform more advanced and flexible attacks that target even applications running inside Intel SGX (Software Guard Extensions) enclaves.<br />
<br />
In their paper, which is a must read if you want to learn everything there is to know about the BranchScope vulnerability, the security<b> researchers have proposed software- and hardware-based mitigations for the BranchScope attacks</b>. Therefore, we expect Intel to release new microcode updates for its processors that also fully patch the <a href="http://www.hackerschronicle.com/search/label/branchscope">BranchScope </a>vulnerability, so make sure you always keep your systems up-to-date.<br />
<br />
“We have been working with these researchers and have determined the method they describe is similar to previously known side channel exploits. We anticipate that existing software mitigations for previously known side channel exploits, such as the use of side channel resistant cryptography, will be similarly effective against the method described in this paper. We believe close partnership with the research community is one of the best ways to protect customers and their data, and we are appreciative of the work from these researchers.”<br />
<br />
<br /></div>

branchscope Hacking News intel meltdown spectre Vulnerability Intel CPUs Vulnerable To New Spectre-Like Attack, BranchScope

Security researchers have discovered a new wave of attacks called BranchScope . Yet we're not done with the Meltdown and Spectre se...

Source Code of Tools used by Cambridge Analytica to hijack Facebook accounts leaked

3/27/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEduR2TtnILaL7oVBznbPnhekcKb7ZUMzGSSXO-DjClOz4H8ZOa0bA67PKwukye5wjLX20yb_-8wnVZUWw54q9q-qodV4ADTCvDelRzYheXpz1mmbGYVSh5jKd3sff7a1eoufQYu76eayC/s1600/facebook-data-leak.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="430" data-original-width="800" height="344" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEduR2TtnILaL7oVBznbPnhekcKb7ZUMzGSSXO-DjClOz4H8ZOa0bA67PKwukye5wjLX20yb_-8wnVZUWw54q9q-qodV4ADTCvDelRzYheXpz1mmbGYVSh5jKd3sff7a1eoufQYu76eayC/s640/facebook-data-leak.jpg" width="640" /></a></div>
AggregateIQ – a Canadian political advertising firm that played a role in the 2016 <a href="http://www.hackerschronicle.com/search/label/US%20Elections">US election</a> and the UK's "Vote Leave" Brexit campaign – left its applications and database credentials publicly accessible, security firm Upguard <a href="https://www.upguard.com/breaches/aggregate-iq-part-one">said </a>on Monday.<br />
<br />
There's no evidence that the <a href="http://www.hackerschronicle.com/search/label/Data%20Leak">exposed code</a> or data was taken. Nor is there evidence it wasn't. It was simply left accessible to the public for an unspecified period of time.<br />
<br />
In a phone interview,  Chris Vickery, Upguard's director of cyber risk research, said AggregateIQ had installed a custom version of the open source <a href="http://www.hackerschronicle.com/search/label/GitLab">GitLab </a>software version control and collaboration system.<br />
<br />
"For whatever reason, they configured it to allow registration of new accounts by the public," he said.<br />
<br />
About a week ago, on March 20, Vickery found the code repo, hosted on a GitLab subdomain of AggregateIQ.com, <a href="http://gitlab.aggregateiq.com/">gitlab.aggregateiq.com</a>.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhpN-mtxQ4JVaPMUSb0JYefIHe4kQbv488xyyirSu5b7ACyuNmM2V_ghqK8u1yoXGKtqPsD0njft9ZvxiSTL0GAMlWStlfg5PpnNQb19J4dbD3d_O0xjYIQ7x8CXnmissJvoTluI_07LKO/s1600/aggregatoriq-gitlab.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="968" data-original-width="1537" height="402" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhpN-mtxQ4JVaPMUSb0JYefIHe4kQbv488xyyirSu5b7ACyuNmM2V_ghqK8u1yoXGKtqPsD0njft9ZvxiSTL0GAMlWStlfg5PpnNQb19J4dbD3d_O0xjYIQ7x8CXnmissJvoTluI_07LKO/s640/aggregatoriq-gitlab.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">AggregateIQ GitLab Repository</td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGOtwotX9_tYp5sm4XP0msxaecuw8sy07HyEmDixBoitOm26hCogCjtEwp9FCmwnY5DP6VmS7MTZQgSsLiK0Rq0E_dQpP7yruyFu-pagphtD4hFsI283U9Bkrl2TSvAJwj13bvZFxMDlBq/s1600/aggregatoriq-mamba-jamba.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="765" data-original-width="989" height="494" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGOtwotX9_tYp5sm4XP0msxaecuw8sy07HyEmDixBoitOm26hCogCjtEwp9FCmwnY5DP6VmS7MTZQgSsLiK0Rq0E_dQpP7yruyFu-pagphtD4hFsI283U9Bkrl2TSvAJwj13bvZFxMDlBq/s640/aggregatoriq-mamba-jamba.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Explanation of Primary Data Storage</td></tr>
</tbody></table>
<br />
Accessing the URL allowed him to register simply by providing an email address. After that, he was able to see the firm's tools and data.<br />
<br />
Vickery said he informed federal authorities of his findings but declined to name the specific agency, per the agency's request. He also said he informed AggregateIQ, and the biz shut down access 11 minutes later.<br />
<br />
Upguard suggests the material found – apparently used to support US Senator Ted Cruz's failed 2016 presidential campaign – raises questions about the firm's alleged ties to Cambridge Analytica, which <b>received $5.8 million for services rendered from the Cruz campaign</b>.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb3CUX1Yx_mfMsBIVcfaWXoXimw20oSbL7mbopFaBvD1oL2R655bmOanYDHr-UFIeUXgMWKb1JCfv4dh8upTaxvVkDpuY_qaNy_eDv4whWTR_Vjs8rqSGyOpfEKmWRkZGFGK8kWxj9H44y/s1600/ripon_voicemail_script.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="273" data-original-width="766" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb3CUX1Yx_mfMsBIVcfaWXoXimw20oSbL7mbopFaBvD1oL2R655bmOanYDHr-UFIeUXgMWKb1JCfv4dh8upTaxvVkDpuY_qaNy_eDv4whWTR_Vjs8rqSGyOpfEKmWRkZGFGK8kWxj9H44y/s640/ripon_voicemail_script.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">US Senator Ted Cruz's VoiceMail Script: Ripon_canvas</td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEkbL_0FhZWFF1BjqlH0tqpr5avCuvpYFn-e6o7gd1U1mSRyde4al4xu8kdQezEI2JHujT5zyDwJtgMVV_Dlz9fnEN9xpNwvNXzU7_GIqcZkCZH4Jx6hOoagX8Yn3mFNFGKc_ujgTrKSjK/s1600/ripon_dialer_commit.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="288" data-original-width="992" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEkbL_0FhZWFF1BjqlH0tqpr5avCuvpYFn-e6o7gd1U1mSRyde4al4xu8kdQezEI2JHujT5zyDwJtgMVV_Dlz9fnEN9xpNwvNXzU7_GIqcZkCZH4Jx6hOoagX8Yn3mFNFGKc_ujgTrKSjK/s640/ripon_dialer_commit.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Ripon_dialer utilizing phonebanking utility.</td></tr>
</tbody></table>
<br />
<a href="http://www.hackerschronicle.com/search/label/cambridge%20analytica">Cambridge Analytica</a>, a UK-based data analytics firm, stands at the center of the current Facebook privacy scandal, a consequence of the biz obtaining about 50 million Facebook profiles from a researcher who took advantage of the social media site's former policy of letting app devs gather info on app users and all of their friends.<br />
<br />
<a href="http://www.hackerschronicle.com/search/label/aggregateiq">AggregateIQ </a>has been linked to Cambridge Analytica in press reports; Cambridge Analytica CEO Alexander Nix (currently suspended after undercover video of him discussing his company's tactics) has acknowledged using AggregateIQ in the past to develop software applications.<br />
<br />
A Guardian/Observer report from May 2017 alleges that Wylie, the whistleblower who helped bring the Facebook data scandal to the fore, brought AggregateIQ and Cambridge Analytica together.<br />
  <br />
Read More About: <a href="http://www.hackerschronicle.com/2018/03/facebook-data-breach.html">Facebook Data Leak</a><br />
<br />
The report asserts that at one point, AggregateIQ’s address and phone number were the same as the address and phone listed for SCL Canada on Cambridge Analytica’s website.<br />
<br />
On Saturday, AggregateIQ issued a statement to distance itself from Cambridge Analytica and its parent company SCL and to assert that it has never knowingly been involved in illegal activity.<br />
<br />
"AggregateIQ has never been and is not a part of Cambridge Analytica or SCL," the Canadian company said. "Aggregate IQ has never entered into a contract with Cambridge Analytica. Chris Wylie has never been employed by AggregateIQ."<br />
<br />
Vickery expressed skepticism about AggregateIQ's disavowal of ties to Cambridge Analytica.<br />
<blockquote class="tr_bq">
I find it hard to believe that there would be such a non-relationship as they describe," he said. "I've seen compelling evidence the to contrary.</blockquote>
<br />
Upguard says it discovered "a set of sophisticated applications, data management programs, advertising trackers, and information databases that collectively could be used to target and influence individuals through a variety of methods, including automated phone calls, emails, political websites, volunteer canvassing, and Facebook ads."<br />
<br />
The security biz also said it found various credentials, keys, hashes, usernames, and passwords to access AggregateIQ accounts, which would allow hackers who obtained the information to compromise accounts. Vickery clarified that the databases were not directly exposed.<br />
<blockquote class="tr_bq">
These are the tools used to interact with the data," he said. "These aren't the databases themselves.</blockquote>
The credentials to access the databases through these tools were available but he said he did not use them – using someone else's credentials to login without authorization carries a potential legal risk.<br />
<br />
But, said Vickery, there's mention of the Republican National Committee and a significant data store. Upguard's post contains a screenshot of an application described at the Database of Truth that combines RNC data with state voter files, consumer data, third party data providers, and other sources of information. In theory, that database could contain information on millions of US voters.<br />
<br />
Vickery said he is considering further posts about his findings but has yet to determine the details.<br />
<br />
Asked whether it is aware of Upguard's findings, a spokesperson for the Office of the Privacy Commissioner of Canada sent in the following statement:<br />
<br />
<blockquote class="tr_bq">
What we can tell you at this point is that we have been in contact with our provincial counterpart in British Columbia, which has been examining matters related to AggregateIQ and our discussions with them are ongoing. We don’t have further information to share at this time.</blockquote>
</div>

Source Code of Tools used by Cambridge Analytica to hijack Facebook accounts leaked

aggregateiq cambridge analytica Data Leak facebook GitLab Hacking News Source Code US Elections Source Code of Tools used by Cambridge Analytica to hijack Facebook accounts leaked

AggregateIQ – a Canadian political advertising firm that played a role in the 2016 US election and the UK's "Vote Leave" ...

MongoDB Hacked in 13 seconds demanding for ransom

3/23/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM3RrQ7ct6l67yOe5gYYcqqtZ7uqmOTa-2Gn3IK-6GnuP_5drlgq214myKQEqRc6-8cTvHbkmgct3gYNOCVwcUCNuNMWwt5zBQW6rxdlu9gvyhTePv1M82P6H4skau8qTcb_HPu6m9pJI/s1600/mongodb-hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="325" data-original-width="683" height="302" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM3RrQ7ct6l67yOe5gYYcqqtZ7uqmOTa-2Gn3IK-6GnuP_5drlgq214myKQEqRc6-8cTvHbkmgct3gYNOCVwcUCNuNMWwt5zBQW6rxdlu9gvyhTePv1M82P6H4skau8qTcb_HPu6m9pJI/s640/mongodb-hacked.jpg" width="640" /></a></div>
<br />
The hackers have been exploiting unprotected MongoDB for the last couple of years, based servers to steal data and hold the exposed databases for ransom. In order to raise awareness, <b>hackers leaked 36 million records of internal data collected from several vulnerable servers.</b><br />
<br />
<br />
The IT security researchers from German firm Kromtech conducted an experiment in which they purposely left a MongoDB database exposed to the public and kept an eye on the incoming connections, to determine and measure the depth of attacks against MongoDB,.<br />
<br />
<br />
The matter seriousness can be understood by the fact that in July of 2015 John Matherly of Shodan, <b>the world’s first search engine for the Internet of Things (IoT devices) revealed that there are over 30,000 unprotected MongoDB databases exposed for public access</b>.<br />
<br />
<b>Honeypot</b>: Which is a security mechanism set to detect and counteract attempts at unauthorized use of information systems.<br />
<br />
The honeypot database contained 30GB of fake data. Little did they know, it took only three hours for hackers to identify the database before wiping out its data in just 13 seconds and leaving a ransom note demanding 0.2 Bitcoin according to Kromtech’s blog post.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSmn-WPs3HTyuG4VUdaVUsWn_d9XLO1Sjopze1P-TfmGzhXZfiL4TwwXZ8VUBX2_sRdaThLcY2Bh1uEP5-q5m26OzAkdaEyhyphenhyphenfrdL9gNLAQnSFpOpgZzS3UVk_5R0aakxJwdpdQHb0zsw/s1600/ramsom-note.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="110" data-original-width="702" height="100" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSmn-WPs3HTyuG4VUdaVUsWn_d9XLO1Sjopze1P-TfmGzhXZfiL4TwwXZ8VUBX2_sRdaThLcY2Bh1uEP5-q5m26OzAkdaEyhyphenhyphenfrdL9gNLAQnSFpOpgZzS3UVk_5R0aakxJwdpdQHb0zsw/s640/ramsom-note.png" width="640" /></a></div>
<br />
Here it is noteworthy that in January 2017, hackers held several MongoDB databases for ransom and demanded 0.2 Bitcoin in return. It is unclear if the hackers who took over the honeypot database are part of the same group. However, according to Kromtech’s Chief Communication Officer Bob Diachenko, the attack on their database has been traced back to China.<br />
<br />
The researchers are certain that only an automated script can complete such task within 13 seconds.<br />
<br />
“The attacker connects to our database first, then drops the databases to delete them, drops the Journals to erase their tracks, creates a database called Warning with Readme collection and the Solution Record, then drops the Journals again to cover their tracks. This was all completed in just thirteen seconds, leading to the conclusion that this was the work of an automated script,” noted Kromtech researchers.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikc-ITCUJqScaHHfQxcIDKQNrql0zulaDQCWFOyDraoqbf7dHvVMBrc2mVGBw7joiAJ5CUatOiNogBu4owoGBJGlFLr0WmlA-AiVpU52BW7F0lbQRDyDBjIbJ8mS-6_k3EW4S4LJT2u6c/s1600/mongodb-hacked-in-13-seconds.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="419" data-original-width="768" height="348" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikc-ITCUJqScaHHfQxcIDKQNrql0zulaDQCWFOyDraoqbf7dHvVMBrc2mVGBw7joiAJ5CUatOiNogBu4owoGBJGlFLr0WmlA-AiVpU52BW7F0lbQRDyDBjIbJ8mS-6_k3EW4S4LJT2u6c/s640/mongodb-hacked-in-13-seconds.jpg" width="640" /></a></div>
<br />
<b>The <a href="https://mackeepersecurity.com/post/how-long-does-it-take-for-a-mongodb-to-be-compromised">researchers </a>are advising </b>users to secure their database since exposed MongoDB servers are still at risk. <b>Another important aspect</b> of <b>ransom attacks against MongoDB is that hackers are simply deleting the database therefore even if victim pays them off, their data will never be returned.</b> Therefore, keep a back up of your data and never pay ransom in such cases.</div>

Cyber Attack Cyber Crime database Hacking News MongoDB MongoDB Hacked in 13 seconds demanding for ransom

The hackers have been exploiting unprotected MongoDB for the last couple of years, based servers to steal data and hold the exposed data...

18.5 Million Websites Infected With Malware

3/22/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhX7tz1gHmgqsrr-J_aVIopZgZubXEunrBTNrAq0HQtwzYyAXdSGnrxqAKJ8MdV_UnVTh0u8FWcayQlOibNEOIrGlRrWEzi-F5NSjTd1q6BdRC4z45xNLyFKVRYsZsOWKLNynTKk5o8XcE/s1600/website-malware-attack.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="website-malware-attack" border="0" data-original-height="438" data-original-width="1339" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhX7tz1gHmgqsrr-J_aVIopZgZubXEunrBTNrAq0HQtwzYyAXdSGnrxqAKJ8MdV_UnVTh0u8FWcayQlOibNEOIrGlRrWEzi-F5NSjTd1q6BdRC4z45xNLyFKVRYsZsOWKLNynTKk5o8XcE/s640/website-malware-attack.PNG" title="website-malware-attack" width="640" /></a></div>On the internet, there are more than 1.86 billion websites. Around 1% of these -- something like 18,500,000 -- are infected with malware at a given time each week; while the average website is attacked 44 times every day.<br />
<br />
Sitelock has published its Q4 2017 Website Security Insider analysis of malware and websites based on statistics from 6 million of its 12 million customers. All these customers use at least one of Sitelock's malware scanners, while a smaller subset also use the firm's cloud-based web application firewall (WAF). <b>The WAF provides insight into <a href="http://www.hackerschronicle.com/search/label/DDoS">DDoS </a>attacks against websites,</b> while the scanners provide insight into the state of malware in websites.<br />
<br />
The analysis shows an increase of <b>around 20% in the number of infected websites over Q3 2017</b>. <b>"We went from about 0.8% of our user base in Q3 to a little over 1% in Q4," Sitelock research analyst Jessica Ortega told SecurityWeek</b>. A 0.2% increase seems a small number, but it implies that up to 18.5 million websites worldwide may be infected with malware at any given time.<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi96ShNSJGwhEKKtBYEvxe-DCuwC_l6Ik61yW8duVvKOJ-jjGYp_YboO2RGKwmZmZtP49uzQxRbj6hTRZifQ00legX-H3iuO0w0ooUzTnqxgGvoNsUBTp21NdsOWadOk6BgyvgTPOD-oPo/s1600/website-attack.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="200" data-original-width="800" height="160" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi96ShNSJGwhEKKtBYEvxe-DCuwC_l6Ik61yW8duVvKOJ-jjGYp_YboO2RGKwmZmZtP49uzQxRbj6hTRZifQ00legX-H3iuO0w0ooUzTnqxgGvoNsUBTp21NdsOWadOk6BgyvgTPOD-oPo/s640/website-attack.png" width="640" /></a></div><br />
Despite the increase in infected sites, continued Ortega, "The total number of attacks or attempted attacks actually decreased by about 20% -- so what we're seeing is that it takes fewer attack attempts to compromise the websites. Attackers are becoming sneakier, and more difficult-to-decode malware is coming through."<br />
<br />
The majority of Sitelock's customers are typically small businesses and blogs. "<b>Many website owners remain unaware that website security is their responsibility and rely too heavily </b>on popular search engines and other <b>third parties to notify them when they've been compromised</b>," <b>said Ortega.</b> This doesn't work -- less than 1 in 5 infected websites are blacklisted by the search engines.<br />
<br />
Other owners rely on their CMS software provider to keep them secure with security updates. But according to Sitelock, 46% of <a href="http://www.hackerschronicle.com/search/label/Wordpress">WordPress</a> sites infected with malware were up to date with the latest core updates. Those also using plug-ins were twice as likely to be compromised.<br />
<br />
It is the sheer volume of both threats and compromises that is most surprising. During Q4 2017, <b>Sitelock cleaned an average of 672,655 <a href="http://www.hackerschronicle.com/search/label/Malwares">malici<span id="goog_234162612"></span><span id="goog_234162613"></span>ous </a>files every week. </b>It found an average of 309 infected files per site. Sixteen percent of malware results in site defacements, while more than 12% are backdoors facilitating the upload of thousands of other malicious files including exploit kits and phishing pages.<br />
<br />
<b>Jessica Ortega, a research analyst at Sitelock, comments that the malicious files are often stored on websites in zip files.</b> Even if active files are removed, the site can be compromised again, and the zip file extracted for the attacker to continue precisely as before.<br />
<br />
One of the problems is that the average website is very easy to compromise. <b>Sitelock's analysis in Q4 found an average of 414 pages per site containing cross-site scripting (XSS)</b> vulnerabilities; 959 pages per site containing SQL injection (SQLi) vulnerabilities; and 414 pages per site containing cross-site request forgery (CSRF) vulnerabilities.<br />
<br />
<blockquote class="tr_bq">Even CSM security updates can be used against the website if they are not immediately installed. <b>"Attackers can see what vulnerabilities have been patched in the latest update, and develop an exploit for those <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerabilities</a>.</b> They then scan the internet for, for example, WordPress sites that haven't yet been updated, and compromise them."</blockquote><br />
Understanding the attackers' motives is key to understanding the threat to small business websites. "A lot of attackers go for the low-hanging fruit, and small business websites are among the softest and easiest targets because so many owners don't even realize they need security," e<b>xplains Ortega</b>. One of the primary motivations is to improve the search engine rankings of the attackers' own customers, by inserting backlinks to the customer website.<br />
<br />
"Or they use it to attack the website's visitors -- for example, by phishing credentials," she continued; "and <b>obviously the longer that a phishing site stays up, the greater the number of credentials it can potentially steal.</b> Or they're just trying to further spread their malware to visitors via exploit kits."<br />
<br />
Compromising small business websites is a numbers game for the criminals. Each site has a relatively small reach in the volume of visitors that can be exploited, but the sheer number of sites combined with the ease of compromise makes it worthwhile. And it is complicated by being perhaps the last refuge of the skiddie. As large companies improve their own security, small companies increasingly attract low-skilled skiddies who hack for personal aggrandizement -- those who do it because they can, and then boast about it.<br />
<br />
<b>Sixteen percent of infected sites were subsequently defaced,</b> often with a political or religious message, often <b>by script skiddies</b>.<br />
For a list of best Android Mobile Hacking Apps: <a href="https://joyofandroid.com/best-hacking-apps-for-android/">Refer Here</a><br />
</div>

DDoS Hacking News Malwares sitelock Vulnerability 18.5 Million Websites Infected With Malware

On the internet, there are more than 1.86 billion websites. Around 1% of these -- something like 18,500,000 -- are infected with malware at ...

Data Breach at Orbitz exposed 880,000 credit cards

3/21/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXXnPBMyuwTZoTNpyjN5CmLaO3JgDrV_xEgkSgKkPR0P4xYcnurZoX4pSXj-nu-cIXOoSwGopMJ_93H6fTS6HMEVLoE8LLvYMQZKa_IRliLx5uzrFD3dXuM1FW5x7oI8SLiHgrFdSJIL77/s1600/expedia-hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="533" data-original-width="800" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXXnPBMyuwTZoTNpyjN5CmLaO3JgDrV_xEgkSgKkPR0P4xYcnurZoX4pSXj-nu-cIXOoSwGopMJ_93H6fTS6HMEVLoE8LLvYMQZKa_IRliLx5uzrFD3dXuM1FW5x7oI8SLiHgrFdSJIL77/s640/expedia-hacked.jpg" width="640" /></a></div>
<br />
Travel website Orbitz, a subsidiary of Expedia Inc. disclosed Tuesday a <a href="http://www.hackerschronicle.com/search/label/databreach">security breach</a> that may have exposed data for thousands of customers, including information on 8,80,000 <a href="http://www.hackerschronicle.com/search/label/Credit%20Card">credit cards</a>.<br />
<br />
The Expedia-owned travel website operator said the breach affected an older website and the platform of an unnamed business partner. The information attackers “likely accessed” included people’s names, dates of birth, email addresses, street addresses, and genders, Orbitz said.<br />
<br />
The <a href="http://www.hackerschronicle.com/search/label/Data%20Leak">data leak</a>, which took place between Oct. and Dec. and involved records dating between Jan. 1, 2016 and Dec. 22, 2017, did not affect its current website, <a href="http://orbitz.com/">Orbitz.com</a>, nor did it involve any Social Security numbers, Orbitz said. The company said it “has not found any evidence” that other customer information was affected, like travel itineraries or passports.<br />
<br />
Orbitz advised customers who used its services during the prescribed time period to check their credit and debit card billings statements and to contact their banks if they see any fraudulent charges.<br />
<br />
Orbitz said it was in the process of notifying potential victims and that it would offer them a year of free credit monitoring services. Customers with questions can visit <a href="http://orbitz.allclearid.com/">orbitz.allclearid.com</a> for more information, the company said.<br />
<blockquote class="tr_bq">
“We deeply regret the incident,” Orbitz said in a statement, noting that it was unsure whether hackers had indeed absconded with customer information. The company determined on March 1, 2018 that it had uncovered “evidence suggesting…an attacker may have accessed personal information,” it said.</blockquote>
“We took immediate steps to investigate the incident and enhance security and monitoring of the affected platform,” Orbitz said.<br />
<br />
Expedia’s share price fell almost 2% during the day.</div>

Credit Card Cyber Attack Cyber Crime Data Leak databreach expedia Hacking News orbitz Data Breach at Orbitz exposed 880,000 credit cards

Travel website Orbitz, a subsidiary of Expedia Inc. disclosed Tuesday a security breach that may have exposed data for thousands of cus...

Intel processors will use hardware-based protections against Meltdown and Spectre 2

3/20/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9EtGh1NAW69qca9ByY_y1QdHET3Iwt7bxUc37EhPSlTaJJFQNiy49abJzlV0iIx62d7Ni21AFBKVob3eeDXqBb5jdZeAvaLOseuAkgrXcRP0n-2GjKGTMrF-lz5cEyFGKR21uYXhsOnee/s1600/intel-meltdown-spectre-patch.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="900" data-original-width="1600" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9EtGh1NAW69qca9ByY_y1QdHET3Iwt7bxUc37EhPSlTaJJFQNiy49abJzlV0iIx62d7Ni21AFBKVob3eeDXqBb5jdZeAvaLOseuAkgrXcRP0n-2GjKGTMrF-lz5cEyFGKR21uYXhsOnee/s640/intel-meltdown-spectre-patch.png" width="640" /></a></div>
<br />
Intel has officially pushed out microcode updates with Spectre and Meltdown mitigations for all of the processors it launched in the past five years.<br />
<br />
In addition to this, the company’s CEO announced new, redesigned processor lines that will start shipping later this year and will include hardware-based protection for Meltdown (exploiting CVE-2017-5754, a rogue cata cache load flaw) and variant 2 of Spectre (exploiting CVE-2017-5715, a branch target injection <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerability</a>).<br />
<blockquote class="tr_bq">
“While [Spectre] Variant 1 will continue to be addressed via software mitigations, we are making changes to our hardware design to further address the other two,” Intel CEO Brian Krzanich <a href="https://newsroom.intel.com/editorials/advancing-security-silicon-level/">said</a>.</blockquote>
“We have redesigned parts of the processor to introduce new levels of protection through partitioning that will protect against both Variants 2 [<a href="http://www.hackerschronicle.com/search/label/spectre">Spectre</a>] and 3 [<a href="http://www.hackerschronicle.com/search/label/meltdown">Meltdown</a>]. Think of this partitioning as additional ‘protective walls’ between applications and user privilege levels to create an obstacle for bad actors. These changes will begin with our next-generation Intel Xeon Scalable processors (code-named Cascade Lake) as well as 8th Generation Intel Core processors expected to ship in the second half of 2018. ”<br />
<br />
He did not offer more details about these protections, but the video included in the announcement says that the Spectre variant 2 fixes will make it so that attackers can’t influence the path the speculative execution process and use misdirections to gain access to sensitive data. The solution, Intel says, “retains the many benefits of speculative execution, while addressing the threat of variant 2.”<br />
<br />
Organizations and users who don’t want to spend money on new processors will have to make do with the firmware updates for the old ones – and suffer some performance impacts.<br />
<br />
<blockquote class="tr_bq">
“We have now released <a href="https://newsroom.intel.com/wp-content/uploads/sites/11/2018/03/microcode-update-guidance.pdf">microcode updates</a> for 100 percent of Intel products launched in the past five years that require protection against the side-channel method vulnerabilities discovered by Google,” Krzanich noted.</blockquote>
<br />
It is on industry partners like Microsoft to implement them via firmware and software updates.<br />
<br />
Krzanich, of course, advised everyone to implement the updates as they are made available.</div>

Intel processors will use hardware-based protections against Meltdown and Spectre 2

CVE-2017-5715 Hacking News intel Malwares meltdown spectre Intel processors will use hardware-based protections against Meltdown and Spectre 2

Intel has officially pushed out microcode updates with Spectre and Meltdown mitigations for all of the processors it launched in the pas...