2 Million Wi-Fi Passwords Leaked

4/23/2019 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_JzcJ1AsuRYfsljM1cITPR7YLgu-D-N76enZhfj9tuMOE08vCJnkM1jG-LmooyQWWC4TBPZ4GvvJqj0LTXuC_bEQ33v_D4qofBTBGN9gVbsA5rWJ-FhRiggoxyFtpd47iomLFe0IwzTIt/s1600/wifi-finder.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Wi-Fi Hotspot Finder Spills 2 Million Passwords" border="0" data-original-height="933" data-original-width="1390" height="427" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_JzcJ1AsuRYfsljM1cITPR7YLgu-D-N76enZhfj9tuMOE08vCJnkM1jG-LmooyQWWC4TBPZ4GvvJqj0LTXuC_bEQ33v_D4qofBTBGN9gVbsA5rWJ-FhRiggoxyFtpd47iomLFe0IwzTIt/s640/wifi-finder.jpg" title="Wi-Fi Hotspot Finder Spills 2 Million Passwords" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Wi-Fi Hotspot Finder Spills 2 Million Passwords Online</td></tr>
</tbody></table>
A popular hotspot finder app for Android exposed the Wi-Fi network passwords for more than two million networks.<br /><br />The app, downloaded by thousands of users, allowed anyone to search for Wi-Fi networks in their nearby area. The app allows the user to upload Wi-Fi network passwords from their devices to its database for others to use.<br /><br />That database of more than two million network passwords, however, was left exposed and unprotected, allowing anyone to access and download the contents in bulk.<br /><br />Sanyam Jain, a security researcher and a member of the GDI Foundation, found the database and reported the findings to TechCrunch.<br /><br />We spent more than two weeks trying to contact the developer, believed to be based in China, to no avail. Eventually we contacted the host, DigitalOcean, which took down the database within a day of reaching out.<br /><br />“We notified the user and have taken the [server] hosting the exposed database offline,” a spokesperson told.<br /><br />Each record contained the Wi-Fi network name, its precise geolocation, its basic service set identifier (BSSID) and network password stored in plaintext.<br /><br />Although the app developer claims the app only provides passwords for public hotspots, a review of the data showed countless home Wi-Fi networks. The exposed data didn’t include contact information for any of the Wi-Fi network owners, but the geolocation of each Wi-Fi network correlated on a map often included networks in wholly residential areas or where no discernible businesses exist.<br /><br />The app doesn’t require users to obtain the permission from the network owner, exposing Wi-Fi networks to unauthorized access. With access to a network, an attacker may be able to modify router settings to point unsuspecting users to malicious websites by changing the DNS server, a vital system used to convert web addresses into the IP addresses used to locate web servers on the internet. When on a network, an attacker also can read the unencrypted traffic that goes across the wireless network, allowing them to steal passwords and secrets.<br /><br />Tens of thousands of the exposed Wi-Fi passwords are for networks based in the U.S.<br />
Source: <a href="https://techcrunch.com/2019/04/22/hotspot-password-leak/">TechChrunch</a></div>

Wi-Fi Hotspot Finder Spills 2 Million Passwords Online A popular hotspot finder app for Android exposed the Wi-Fi network passwords for more than two million networks.The app, downloaded by thousands of users, allowed a…

Personal Data of FBI Agents leaked

4/15/2019 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHQpeMQxcICm5IPBC_C1bUWF43XRKGUxb3tFKXY50jQ3HOJl22SLE2a444BP1IU7I8Nqw1Kx3T4yYR9wedV1QGhx_Qv6hKLYOofV0lK7XvhSUARbGaXIJrYyKEYRKrFeR8zTntUkHRu6Q/s1600/fbi-leak.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hackers leak personal data of fbi agent" border="0" data-original-height="820" data-original-width="1236" height="424" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHQpeMQxcICm5IPBC_C1bUWF43XRKGUxb3tFKXY50jQ3HOJl22SLE2a444BP1IU7I8Nqw1Kx3T4yYR9wedV1QGhx_Qv6hKLYOofV0lK7XvhSUARbGaXIJrYyKEYRKrFeR8zTntUkHRu6Q/s640/fbi-leak.jpg" title="hackers leak personal data of fbi agent" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
hackers leak personal data of fbi agent</div>
Three websites belonging to the Federal Bureau of Investigation’s (FBI) National Academy Association (FBINAA) were hacked apparently by three hackers after they managed to breach their security, steal and upload data online.<br />
<br />
Part of the uploaded content was dozens of documents containing personal information of federal agents and law enforcement officers. The information includes email IDs (both private and government), names, job titles, contact numbers, and postal addresses.<br />
<br />
Reportedly, thousands of officials have their private information leaked online since there are around 4,000 unique records of personal credentials of federal officials. The data was stolen from three of the many chapter websites affiliated with the FBINAA across the US.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN6bJUgoWgbaZ0Dd4-FDX80kqJHTM7896N74ufcx7K8JJ47rXpLIJNSBrbaaXvyAP36uBDhYAepOeFEWWKLL5HVwrTWAQgKb5EGLIA6hDSJsHX0TjgPezpCDlOkw4x9MYUOq3Mv8RwPPI/s1600/FBI-data-leaked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="FBI Data Leak" border="0" data-original-height="370" data-original-width="930" height="252" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN6bJUgoWgbaZ0Dd4-FDX80kqJHTM7896N74ufcx7K8JJ47rXpLIJNSBrbaaXvyAP36uBDhYAepOeFEWWKLL5HVwrTWAQgKb5EGLIA6hDSJsHX0TjgPezpCDlOkw4x9MYUOq3Mv8RwPPI/s640/FBI-data-leaked.png" title="FBI Data Leak" width="640" /></a></div>
These websites are used for promotional purposes primarily for the FBI training academy in Quantico, VA. The hackers identified and exploited several flaws in the three websites and stole the entire contents of the yet unnamed websites. Afterward, the hackers transferred the data on their personal website.<br />
<br />
While speaking with one of the hackers, <a href="https://techcrunch.com/2019/04/12/police-data-hack/">TechCrunch</a> learned that the trio has managed to hack over 1,000 websites so far and the <a href="https://www.hackerschronicle.com/search/label/Cyber%20Crime">cybercriminals</a> are now trying to organize and structure the acquired information.<br />
<br />
<blockquote class="tr_bq">
    “Soon they will be sold. I think something else will publish from the list of hacked government sites,” the unidentified hacker told.</blockquote>
<br />
When asked if the hackers were aware of the fact that uploading such sensitive data online would endanger the security of federal agents and law enforcement officials, the hacker plainly replied “Probably, Yes,” adding that they have more than a million employees’ data belonging to various federal agencies and public service organizations in the US.<br />
<br />
<blockquote class="tr_bq">
    “We hacked more than 1,000 sites,” said the hacker. “Now we are structuring all the data, and soon they will be sold. I think something else will publish from the list of hacked government sites.” We asked if the hacker was worried that the files they put up for download would put federal agents and law enforcement at risk. “Probably, yes,” the hacker said.</blockquote>
<br />
The hackers do not intend to sell the stolen data on hacker forums or the Dark Web marketplace but will be offering it for free just to prove the legitimacy of the claim that they have the data and for the sake of experience. TechCrunch reported that there are over ten hackers involved and they mainly use public exploits to target websites that haven’t been updated or contain outdated plugins.<br />
<br />
While having an encrypted chat session , the hacker gave proof of some of the other websites that they have breached, which included Foxconn’s subdomain too.</div>

Data Leak FBI Hacking News Personal Data of FBI Agents leaked

hackers leak personal data of fbi agent Three websites belonging to the Federal Bureau of Investigation’s (FBI) National Academy Association (FBINAA) were hacked apparently by three hackers after they managed to breach …

Under Armour Fitness App MyFitnessPal data breached affecting 150 million users

4/03/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt3FA8mAmz1C1o0BjaaMWheMFcBxhvgcylN7-KTbsqpGh92hAMUOWeq9gpBEfP5gWl77xbCxGB42KLXYAE6qVFRbvgZ5j6QZjg8dO9uFQnG7dXw_COuSBCVDG7qEb6MLnD_kPsFZY4s5La/s1600/under-armour-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="470" data-original-width="940" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt3FA8mAmz1C1o0BjaaMWheMFcBxhvgcylN7-KTbsqpGh92hAMUOWeq9gpBEfP5gWl77xbCxGB42KLXYAE6qVFRbvgZ5j6QZjg8dO9uFQnG7dXw_COuSBCVDG7qEb6MLnD_kPsFZY4s5La/s640/under-armour-data-leak.png" width="640" /></a></div>
<div class="MsoNormal" style="background: white; margin: 7.5pt 0mm 3.75pt;">
 </div>
<div class="MsoNormal" style="background: white; margin: 7.5pt 0mm 3.75pt;">
Under Armour, Inc. last week <a href="https://content.myfitnesspal.com/security-information/notice.html">announced </a>that it is notifying users of MyFitnessPal - the company's food and nutrition application and website - about a massive data breach affecting 150 million users. But according to the comapny sources, Payment card data was not compromised because it is collected and processed separately. </div>
<div class="MsoNormal" style="background: white; margin: 7.5pt 0mm 3.75pt;">
A massive data breach on March 29 that impacted 150 million user accounts of the fitness vendor’s popular MyFitnessPal application Under Armour reported, which provides exercise, diet and calorie counting capabilities.<br />
"On March 25, the MyFitnessPal team became aware that an unauthorized party acquired data associated with MyFitnessPal user accounts in late February 2018.” Armour stated, Under Armour has not publicly identified the root cause of the breach.<br />
<br />
The data taken includes <b>usernames, email addresses and hashed passwords.</b> Rather than being stored in plain text, hashed passwords are scrambled cryptographically to protect passwords from being easily reused.<br />
<br />
On March 30, the company began to inform about the leakage of data to 150 million users . Users received the following e-mail:<br />
<blockquote class="tr_bq">
To the MyFitnessPal Community: <br />We have included your MyFitnessPal account information. We understand your protection and information seriously. <br />On March 25, 2018, we became aware of the MyFitnessPal user accounts. The related information included usernames, e-mail addresses, and hashed passwords - the majority of the hashing function called bcrypt used to secure passwords.<br />Once we became aware, we quickly took steps to determine the nature and scope of the issue. We are working with leading data security. We are also notified and are coordinating with law enforcement authorities. <br />We are <br />notifying MyFitnessPal users to provide information on how they can protect their data. <br />We will be requiring MyFitnessPal users to change their passwords and urge users to do so immediately. <br />We continue to monitor for suspected activity. <br />We continue to make enhancements to our systems to detect and prevent unauthorized access to user information.<br />We take our steps to safeguard your information. We recommend you: <br />Change your password for your account. MyFitnessPal account. <br />Review your accounts for suspicious activity. <br />Be cautious of any unsolicited communications. <br />Avoid clicking on links or downloading attachments from suspicious emails. <br />For more information, please go to <a href="https://content.myfitnesspal.com/security-information/FAQ.html">https://content.myfitnesspal.com/security-information/FAQ.html</a>. <br />Sincerely, <br />Paul Fipps <br />Chief Digital Officer</blockquote>
<br />If you have used this application and wherever you have had the same or similar password, change it as soon as possible.<br /><br />And if you logged in via <a href="https://www.hackerschronicle.com/search/label/facebook">Facebook </a>to the application , firstly - this is not the smartest approach (never do it!), And secondly, go to the Facebook options and receive the app all rights and link again. If you really need to log in via fejs, it would be better if you created an account in your application by e-mail.<br />
<br /></div>
</div>

Under Armour Fitness App MyFitnessPal data breached affecting 150 million users

Cyber Attack Data Leak databreach Hacking News MyFitnessPal under armour Under Armour Fitness App MyFitnessPal data breached affecting 150 million users

Under Armour, Inc. last week announced that it is notifying users of MyFitnessPal - the company's food and nutrition application and website - about a massive data breach affecting 150 million users. But according to …

Source Code of Tools used by Cambridge Analytica to hijack Facebook accounts leaked

3/27/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEduR2TtnILaL7oVBznbPnhekcKb7ZUMzGSSXO-DjClOz4H8ZOa0bA67PKwukye5wjLX20yb_-8wnVZUWw54q9q-qodV4ADTCvDelRzYheXpz1mmbGYVSh5jKd3sff7a1eoufQYu76eayC/s1600/facebook-data-leak.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="430" data-original-width="800" height="344" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEduR2TtnILaL7oVBznbPnhekcKb7ZUMzGSSXO-DjClOz4H8ZOa0bA67PKwukye5wjLX20yb_-8wnVZUWw54q9q-qodV4ADTCvDelRzYheXpz1mmbGYVSh5jKd3sff7a1eoufQYu76eayC/s640/facebook-data-leak.jpg" width="640" /></a></div>
AggregateIQ – a Canadian political advertising firm that played a role in the 2016 <a href="http://www.hackerschronicle.com/search/label/US%20Elections">US election</a> and the UK's "Vote Leave" Brexit campaign – left its applications and database credentials publicly accessible, security firm Upguard <a href="https://www.upguard.com/breaches/aggregate-iq-part-one">said </a>on Monday.<br />
<br />
There's no evidence that the <a href="http://www.hackerschronicle.com/search/label/Data%20Leak">exposed code</a> or data was taken. Nor is there evidence it wasn't. It was simply left accessible to the public for an unspecified period of time.<br />
<br />
In a phone interview,  Chris Vickery, Upguard's director of cyber risk research, said AggregateIQ had installed a custom version of the open source <a href="http://www.hackerschronicle.com/search/label/GitLab">GitLab </a>software version control and collaboration system.<br />
<br />
"For whatever reason, they configured it to allow registration of new accounts by the public," he said.<br />
<br />
About a week ago, on March 20, Vickery found the code repo, hosted on a GitLab subdomain of AggregateIQ.com, <a href="http://gitlab.aggregateiq.com/">gitlab.aggregateiq.com</a>.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhpN-mtxQ4JVaPMUSb0JYefIHe4kQbv488xyyirSu5b7ACyuNmM2V_ghqK8u1yoXGKtqPsD0njft9ZvxiSTL0GAMlWStlfg5PpnNQb19J4dbD3d_O0xjYIQ7x8CXnmissJvoTluI_07LKO/s1600/aggregatoriq-gitlab.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="968" data-original-width="1537" height="402" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhpN-mtxQ4JVaPMUSb0JYefIHe4kQbv488xyyirSu5b7ACyuNmM2V_ghqK8u1yoXGKtqPsD0njft9ZvxiSTL0GAMlWStlfg5PpnNQb19J4dbD3d_O0xjYIQ7x8CXnmissJvoTluI_07LKO/s640/aggregatoriq-gitlab.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">AggregateIQ GitLab Repository</td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGOtwotX9_tYp5sm4XP0msxaecuw8sy07HyEmDixBoitOm26hCogCjtEwp9FCmwnY5DP6VmS7MTZQgSsLiK0Rq0E_dQpP7yruyFu-pagphtD4hFsI283U9Bkrl2TSvAJwj13bvZFxMDlBq/s1600/aggregatoriq-mamba-jamba.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="765" data-original-width="989" height="494" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGOtwotX9_tYp5sm4XP0msxaecuw8sy07HyEmDixBoitOm26hCogCjtEwp9FCmwnY5DP6VmS7MTZQgSsLiK0Rq0E_dQpP7yruyFu-pagphtD4hFsI283U9Bkrl2TSvAJwj13bvZFxMDlBq/s640/aggregatoriq-mamba-jamba.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Explanation of Primary Data Storage</td></tr>
</tbody></table>
<br />
Accessing the URL allowed him to register simply by providing an email address. After that, he was able to see the firm's tools and data.<br />
<br />
Vickery said he informed federal authorities of his findings but declined to name the specific agency, per the agency's request. He also said he informed AggregateIQ, and the biz shut down access 11 minutes later.<br />
<br />
Upguard suggests the material found – apparently used to support US Senator Ted Cruz's failed 2016 presidential campaign – raises questions about the firm's alleged ties to Cambridge Analytica, which <b>received $5.8 million for services rendered from the Cruz campaign</b>.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb3CUX1Yx_mfMsBIVcfaWXoXimw20oSbL7mbopFaBvD1oL2R655bmOanYDHr-UFIeUXgMWKb1JCfv4dh8upTaxvVkDpuY_qaNy_eDv4whWTR_Vjs8rqSGyOpfEKmWRkZGFGK8kWxj9H44y/s1600/ripon_voicemail_script.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="273" data-original-width="766" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb3CUX1Yx_mfMsBIVcfaWXoXimw20oSbL7mbopFaBvD1oL2R655bmOanYDHr-UFIeUXgMWKb1JCfv4dh8upTaxvVkDpuY_qaNy_eDv4whWTR_Vjs8rqSGyOpfEKmWRkZGFGK8kWxj9H44y/s640/ripon_voicemail_script.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">US Senator Ted Cruz's VoiceMail Script: Ripon_canvas</td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEkbL_0FhZWFF1BjqlH0tqpr5avCuvpYFn-e6o7gd1U1mSRyde4al4xu8kdQezEI2JHujT5zyDwJtgMVV_Dlz9fnEN9xpNwvNXzU7_GIqcZkCZH4Jx6hOoagX8Yn3mFNFGKc_ujgTrKSjK/s1600/ripon_dialer_commit.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="288" data-original-width="992" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEkbL_0FhZWFF1BjqlH0tqpr5avCuvpYFn-e6o7gd1U1mSRyde4al4xu8kdQezEI2JHujT5zyDwJtgMVV_Dlz9fnEN9xpNwvNXzU7_GIqcZkCZH4Jx6hOoagX8Yn3mFNFGKc_ujgTrKSjK/s640/ripon_dialer_commit.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Ripon_dialer utilizing phonebanking utility.</td></tr>
</tbody></table>
<br />
<a href="http://www.hackerschronicle.com/search/label/cambridge%20analytica">Cambridge Analytica</a>, a UK-based data analytics firm, stands at the center of the current Facebook privacy scandal, a consequence of the biz obtaining about 50 million Facebook profiles from a researcher who took advantage of the social media site's former policy of letting app devs gather info on app users and all of their friends.<br />
<br />
<a href="http://www.hackerschronicle.com/search/label/aggregateiq">AggregateIQ </a>has been linked to Cambridge Analytica in press reports; Cambridge Analytica CEO Alexander Nix (currently suspended after undercover video of him discussing his company's tactics) has acknowledged using AggregateIQ in the past to develop software applications.<br />
<br />
A Guardian/Observer report from May 2017 alleges that Wylie, the whistleblower who helped bring the Facebook data scandal to the fore, brought AggregateIQ and Cambridge Analytica together.<br />
  <br />
Read More About: <a href="http://www.hackerschronicle.com/2018/03/facebook-data-breach.html">Facebook Data Leak</a><br />
<br />
The report asserts that at one point, AggregateIQ’s address and phone number were the same as the address and phone listed for SCL Canada on Cambridge Analytica’s website.<br />
<br />
On Saturday, AggregateIQ issued a statement to distance itself from Cambridge Analytica and its parent company SCL and to assert that it has never knowingly been involved in illegal activity.<br />
<br />
"AggregateIQ has never been and is not a part of Cambridge Analytica or SCL," the Canadian company said. "Aggregate IQ has never entered into a contract with Cambridge Analytica. Chris Wylie has never been employed by AggregateIQ."<br />
<br />
Vickery expressed skepticism about AggregateIQ's disavowal of ties to Cambridge Analytica.<br />
<blockquote class="tr_bq">
I find it hard to believe that there would be such a non-relationship as they describe," he said. "I've seen compelling evidence the to contrary.</blockquote>
<br />
Upguard says it discovered "a set of sophisticated applications, data management programs, advertising trackers, and information databases that collectively could be used to target and influence individuals through a variety of methods, including automated phone calls, emails, political websites, volunteer canvassing, and Facebook ads."<br />
<br />
The security biz also said it found various credentials, keys, hashes, usernames, and passwords to access AggregateIQ accounts, which would allow hackers who obtained the information to compromise accounts. Vickery clarified that the databases were not directly exposed.<br />
<blockquote class="tr_bq">
These are the tools used to interact with the data," he said. "These aren't the databases themselves.</blockquote>
The credentials to access the databases through these tools were available but he said he did not use them – using someone else's credentials to login without authorization carries a potential legal risk.<br />
<br />
But, said Vickery, there's mention of the Republican National Committee and a significant data store. Upguard's post contains a screenshot of an application described at the Database of Truth that combines RNC data with state voter files, consumer data, third party data providers, and other sources of information. In theory, that database could contain information on millions of US voters.<br />
<br />
Vickery said he is considering further posts about his findings but has yet to determine the details.<br />
<br />
Asked whether it is aware of Upguard's findings, a spokesperson for the Office of the Privacy Commissioner of Canada sent in the following statement:<br />
<br />
<blockquote class="tr_bq">
What we can tell you at this point is that we have been in contact with our provincial counterpart in British Columbia, which has been examining matters related to AggregateIQ and our discussions with them are ongoing. We don’t have further information to share at this time.</blockquote>
</div>

Source Code of Tools used by Cambridge Analytica to hijack Facebook accounts leaked

aggregateiq cambridge analytica Data Leak facebook GitLab Hacking News Source Code US Elections Source Code of Tools used by Cambridge Analytica to hijack Facebook accounts leaked

AggregateIQ – a Canadian political advertising firm that played a role in the 2016 US election and the UK's "Vote Leave" Brexit campaign – left its applications and database credentials publicly accessible, security fir…

Data Breach at Orbitz exposed 880,000 credit cards

3/21/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXXnPBMyuwTZoTNpyjN5CmLaO3JgDrV_xEgkSgKkPR0P4xYcnurZoX4pSXj-nu-cIXOoSwGopMJ_93H6fTS6HMEVLoE8LLvYMQZKa_IRliLx5uzrFD3dXuM1FW5x7oI8SLiHgrFdSJIL77/s1600/expedia-hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="533" data-original-width="800" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXXnPBMyuwTZoTNpyjN5CmLaO3JgDrV_xEgkSgKkPR0P4xYcnurZoX4pSXj-nu-cIXOoSwGopMJ_93H6fTS6HMEVLoE8LLvYMQZKa_IRliLx5uzrFD3dXuM1FW5x7oI8SLiHgrFdSJIL77/s640/expedia-hacked.jpg" width="640" /></a></div>
<br />
Travel website Orbitz, a subsidiary of Expedia Inc. disclosed Tuesday a <a href="http://www.hackerschronicle.com/search/label/databreach">security breach</a> that may have exposed data for thousands of customers, including information on 8,80,000 <a href="http://www.hackerschronicle.com/search/label/Credit%20Card">credit cards</a>.<br />
<br />
The Expedia-owned travel website operator said the breach affected an older website and the platform of an unnamed business partner. The information attackers “likely accessed” included people’s names, dates of birth, email addresses, street addresses, and genders, Orbitz said.<br />
<br />
The <a href="http://www.hackerschronicle.com/search/label/Data%20Leak">data leak</a>, which took place between Oct. and Dec. and involved records dating between Jan. 1, 2016 and Dec. 22, 2017, did not affect its current website, <a href="http://orbitz.com/">Orbitz.com</a>, nor did it involve any Social Security numbers, Orbitz said. The company said it “has not found any evidence” that other customer information was affected, like travel itineraries or passports.<br />
<br />
Orbitz advised customers who used its services during the prescribed time period to check their credit and debit card billings statements and to contact their banks if they see any fraudulent charges.<br />
<br />
Orbitz said it was in the process of notifying potential victims and that it would offer them a year of free credit monitoring services. Customers with questions can visit <a href="http://orbitz.allclearid.com/">orbitz.allclearid.com</a> for more information, the company said.<br />
<blockquote class="tr_bq">
“We deeply regret the incident,” Orbitz said in a statement, noting that it was unsure whether hackers had indeed absconded with customer information. The company determined on March 1, 2018 that it had uncovered “evidence suggesting…an attacker may have accessed personal information,” it said.</blockquote>
“We took immediate steps to investigate the incident and enhance security and monitoring of the affected platform,” Orbitz said.<br />
<br />
Expedia’s share price fell almost 2% during the day.</div>

Credit Card Cyber Attack Cyber Crime Data Leak databreach expedia Hacking News orbitz Data Breach at Orbitz exposed 880,000 credit cards

Travel website Orbitz, a subsidiary of Expedia Inc. disclosed Tuesday a security breach that may have exposed data for thousands of customers, including information on 8,80,000 credit cards. The Expedia-owned travel web…

50 Million Facebook Accounts Hijacked to help Trump Win

3/18/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUEmmat2-sv6abghJmD2zJxbrD88SmG_6cMo92OLAiycOXq81J34cWQIQ97G_3N7YUZTas813lA1CTHxmkXCBDf5SFJZObFBjEM8XcLli-fa9DBXAZBv6hdntT0zjLWuXcIcVzGomOA5No/s1600/facebook-role-in-us-elections.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="facebook-data-used-to-help-trump-win" border="0" data-original-height="400" data-original-width="800" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUEmmat2-sv6abghJmD2zJxbrD88SmG_6cMo92OLAiycOXq81J34cWQIQ97G_3N7YUZTas813lA1CTHxmkXCBDf5SFJZObFBjEM8XcLli-fa9DBXAZBv6hdntT0zjLWuXcIcVzGomOA5No/s640/facebook-role-in-us-elections.jpg" title="facebook-data-used-to-help-trump-win" width="640" /></a></div>
<br />
50 million Facebook accounts, most of them in the United States, had their data harvested in 2014 by a company looking for ways to target people with political messages. Facebook has denied this was a data breach.<br />
<br />
A whistleblower named Christopher Wylie, who used to work at a company called Cambridge Analytica, gave a dossier of evidence including “emails, invoices, contracts and bank transfers” told to the <a href="https://www.theguardian.com/news/2018/mar/17/cambridge-analytica-facebook-influence-us-election">Observer</a>.<br />
<blockquote class="tr_bq">
Cambridge Analytica data breach Whistleblower Christopher Wylie says, "We exploited Facebook to harvest millions of profiles. And built models to exploit that and target their inner demons."</blockquote>
A company called Global Science Research (GSR) run by Cambridge University academic Aleksandr Kogan created an app called <b>thisisyourdigitallife </b>– a personality test people can fill out online. He worked with Cambridge Analytica which was looking for ways to influence what people think about politics. A contract was signed between GSR and a Cambridge Analytica affiliate called SCL Elections Ltd. When people filled out the personality test, they gave permission for the app to collect their Facebook data “for academic use”. However, the app also collected the data of all of the user’s Facebook friends, quickly inflating the number of people affected to the tens of millions.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzEZt2mdJvVTXeWFflXlH9OBAS9i8YWqwjVFqBlm7CZoECbTwX9efBHzs4Nn6O3U6PNa_7ivGa3ewUalMkZb9Tt1HSiP5__joF2qYdX5YA-PTzPdJUgD2Gj1YD4V6oXxMW9sqzT-rU1q4F/s1600/Christopher-Wylie.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="392" data-original-width="600" height="417" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzEZt2mdJvVTXeWFflXlH9OBAS9i8YWqwjVFqBlm7CZoECbTwX9efBHzs4Nn6O3U6PNa_7ivGa3ewUalMkZb9Tt1HSiP5__joF2qYdX5YA-PTzPdJUgD2Gj1YD4V6oXxMW9sqzT-rU1q4F/s640/Christopher-Wylie.jpg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Whistleblower Christopher Wylie</td></tr>
</tbody></table>
<br />
The data from 50 million Facebook profiles were looked at against the electoral register, and then used to build an algorithm which analyses people’s personality traits in relation to their voting behaviour. This could then be used to find potential swing voters and create messages tailored to influence them politically. <br />
<br />
Cambridge Analytica is being investigated by the Electoral Commission for its possible role in the EU referendum and by the Information Comissioner’s Office over using data analytics for political purposes. The firm is also being investigated in the United States by special counsel Robert Mueller, a former FBI director who is investigating possible collusion between Russia and President Donald Trump’s election campaign. Wylie has also passed on his dossier of evidence to the National Crime Agency’s <a href="http://www.hackerschronicle.com/search/label/Cyber%20Crime">cybercrime </a>unit and the Information Commissioner’s Office. <br />
<br />
On Friday, just before the story broke, Facebook announced it was suspending Cambridge Analytica and GSR’s Aleksandr Kogan from Facebook while it carries out an investigation into “misuse of data”. It has also suspended whistleblower Christopher Wylie from using Facebook. Facebook denies this was a data breach, as GSR got the data “in a legitimate way” but it broke Facebook rules by passing the data on to third parties. Facebook also claims it removed the app in 2015 and written proof that all data had been destroyed. <br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0JDngUw212kzFYdmkkRzd8_J_emRKgptPvshjts-Jv2ybjWq-SoTfe5jiGSfoPhyphenhyphenN8XwVZlaxHbBhTWvO8IEMz25-E7szxKwDvq3iuVgWF1h__r36OcOuGGxrEONx-1Qi639p7wbFMLhl/s1600/steve-bannon.jpeg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="366" data-original-width="650" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0JDngUw212kzFYdmkkRzd8_J_emRKgptPvshjts-Jv2ybjWq-SoTfe5jiGSfoPhyphenhyphenN8XwVZlaxHbBhTWvO8IEMz25-E7szxKwDvq3iuVgWF1h__r36OcOuGGxrEONx-1Qi639p7wbFMLhl/s640/steve-bannon.jpeg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Donald Trump adviser Steve Bannon</td></tr>
</tbody></table>
Cambridge Analytica’s vice president at the time was Steve Bannon, who was also head of the right-wing website Breitbart and was running Donald Trump’s campaign to become US President. Bannon later became President Trump’s chief of staff, but was fired last year. Cambridge Analytica was funded by Robert Mercer, a hedge fund billionaire and Trump’s biggest campaign donor. GSR’s Aleksandr Kogan is also an associate professor at St Petersburg State University in Russia and has received grants from the Russian government to research Facebook users’ emotional states. <br />
<br />
Cambridge Analytica told the Observer its contract with GSR said Kogan must seek “informed consent” for data collection. It’s affiliate SCL Elections worked with Facebook to make sure no terms had been “knowingly breached” and was given a signed statement that all data had been deleted. Cambridge Analytica also claims none of the data was used in the 2016 US presidential election.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhL3cEUwXfZGi_aT6TJ1y_sxG50AXS5rkSAXZ_5e3JnOjWbv1PWBjUapBWjgkgJc4gcr3RMmpet8HVZ7H3yz7Y7hMkhwWypwmUVTrFAoseHatkUrtvFy5hrnGSnpVxcg8AD8Jib5oPH66zr/s1600/facebook-us-elections.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="693" data-original-width="861" height="513" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhL3cEUwXfZGi_aT6TJ1y_sxG50AXS5rkSAXZ_5e3JnOjWbv1PWBjUapBWjgkgJc4gcr3RMmpet8HVZ7H3yz7Y7hMkhwWypwmUVTrFAoseHatkUrtvFy5hrnGSnpVxcg8AD8Jib5oPH66zr/s640/facebook-us-elections.PNG" width="640" /></a></div>
</div>

50 Million Facebook Accounts Hijacked to help Trump Win

aggregateiq cambridge analytica Cyber Crime Data Leak databreach donald trump facebook Hacking News US Elections 50 Million Facebook Accounts Hijacked to help Trump Win

50 million Facebook accounts, most of them in the United States, had their data harvested in 2014 by a company looking for ways to target people with political messages. Facebook has denied this was a data breach. A whi…

After Nirav Modi, Hackers are targeting Punjab National Bank

2/23/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxI3_ffIRgsUVDxeyzqvySZ4SQEZoCHHmw_amNPS6rUSwYlqnFOJ5clv8AQCC7fYqZX45iv7Vz18aLit1O3UdeoTiNO7kZBMiihfLDK3ETjhAQjgkyBI2x2KrPiJSOlcSYHIf-pQ-BodTw/s1600/PNB-Data-Breached.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="PNB Debit/Credit cards information Breached" border="0" data-original-height="433" data-original-width="770" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxI3_ffIRgsUVDxeyzqvySZ4SQEZoCHHmw_amNPS6rUSwYlqnFOJ5clv8AQCC7fYqZX45iv7Vz18aLit1O3UdeoTiNO7kZBMiihfLDK3ETjhAQjgkyBI2x2KrPiJSOlcSYHIf-pQ-BodTw/s640/PNB-Data-Breached.jpg" title="PNB Debit/Credit cards information Breached" width="640" /></a></div>
<br />
Punjab National Bank has reported a <b><a href="http://www.hackerschronicle.com/search/label/Data%20Leak" target="_blank">data breach</a> affecting as many as 10,000 credit and debit card customers</b>, and security experts believe that sensitive information has been available for  purchase through a website for at least three months.<br />
<br />
The disclosure will raise further questions about security levels at the bank, which is already under stress over a reported Rs 11,300 crore fraud involving fake letters of guarantee that were allegedly used by leading jeweller Nirav Modi to raise funds from banks. Two PNB employees allegedly colluded with Modi and his uncle in the scam.<br />
<br />
<u>PNB was not aware of the data breach  until it was tipped off on Wednesday night</u> by CloudSek Information Security, a company registered in Singapore but mainly operating in Bengaluru, India, that monitors data transactions.<br />
<br />
“We have a crawler that is deployed in the <a href="http://www.hackerschronicle.com/search/label/Darknet" target="_blank">dark/deep web</a>. These are sites on the internet which are not indexed by Google or other major search engines. They are used to buy and sell sensitive data illegally,” said chief technical officer Rahul Sasi. “Our crawler detects any such data and sends it to a Machine Learning software that we have created. If this detects anything that is suspicious, and of interest to our clients, we immediately take action.”<br />
<br />
He said CloudSek was unable to contact <a href="http://www.hackerschronicle.com/search/label/PNB" target="_blank">PNB </a>after detecting the breach as it is not a customer at the bank, but eventually passed the details through a government agency. PNB’s Chief Information Security Officer T D Virwani confirmed it was working with the government to contain fallout from the release of the data, which was offered through a blackhat website.<br />
<br />
Government officials who are aware of the breach said other relevant agencies had been alerted and they were trying to establish the extent of the problem. So far, they have discovered sensitive information from as many as 10,000 credit cards issued by the bank.<br />
<br />
<b>This includes names, expiry dates, Personal Identification Numbers and Card Verification Values.</b> Sasi said two sets of data were released: some with CVV numbers and some without. The last date stamp on the data is January 29, 2018, indicating that the details are still current for thousands of card customers.<br />
<br />
“We believe, on preliminary analysis, that the data has been available for at least three months. While this is yet to be firmly established, we are carrying out our forensic investigation,” said a government official familiar with the case. Virwani was asked to comment on the breach, but has not yet responded.<br />
<br />
Investigators in both the private and government sectors are still trying to determine how the breach occurred. It is thought the data could have come from a laptop or mobile phone carried by a bank customer that was infected with a malicious code, or from a third party. Payment gateways also had access to the data.<br />
<br />
But an investigator said it was more likely the bank’s security was compromised, as a large amount of data came from a single source.<br />
<br />
“Usually these sites on the deep/dark web build up reputations on the authenticity of the data they sell illegally. This particular site has a very good reputation. They offer a sample size to buyers to establish their credentials before the sale is made. In this case they were <span class="highlight">offering to sell the data at US$4.90 per card</span>,” he reported.<br />
<br />
Sasi said all options were possible, but there wasn’t enough information yet to be certain how the leak had taken place.<br />
<br />
It is the second big data leak in recent years in India. In October 2016 more than 3.2 million <a href="http://www.hackerschronicle.com/search/label/Credit%20Card" target="_blank">credit and debit cards</a> issued by numerous banks had to be recalled after customers reported they were used illegally in China and other countries. An investigation revealed that computer systems of a private payment services firm that manages ATM machines for a large Indian bank had been hacked.</div>

Credit Card Darknet Data Leak News PNB After Nirav Modi, Hackers are targeting Punjab National Bank

Punjab National Bank has reported a data breach affecting as many as 10,000 credit and debit card customers, and security experts believe that sensitive information has been available for purchase through a website for…

Western Union Money Transfer, Hacked

2/14/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpuAeT0_k1iZ9oL_nMOItMpEKtDe1t1oZ5fH2p9Yc7WrANYtc_enEGiSKIQ55TfJ-NmhT3Q6_FJk9DwIerAFLmaPCZHzPjbYpark9xpyPfIreyirI3DIc2LAUQQTW_tMbWA9yNviuWh30/s1600/WU_hacked.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="512" data-original-width="800" height="408" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpuAeT0_k1iZ9oL_nMOItMpEKtDe1t1oZ5fH2p9Yc7WrANYtc_enEGiSKIQ55TfJ-NmhT3Q6_FJk9DwIerAFLmaPCZHzPjbYpark9xpyPfIreyirI3DIc2LAUQQTW_tMbWA9yNviuWh30/s640/WU_hacked.jpg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Western Union Money Transfer, Hacked</td></tr>
</tbody></table>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<br />
Western Union has confirmed one of its IT suppliers was hacked, and that customer information was exposed to miscreants.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
Someone, who wished to remain anonymous, showed us a copy of a letter dated January 31 that he received from the money-transfer outfit. The missive admitted that a supposedly secure data storage company used by Western Union was compromised: a database full of the wire-transfer giant's customer records was vulnerable to plundering, and hackers were quick to oblige.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
"We have discovered that <b>some of your information may have been accessed without authorization as a result of a computer intrusion against an external vendor system formerly used by Western Union for secure data storage</b>," the letter read.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<br /></div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<span style="font-size: 16.0000400543213px; line-height: 24.0000610351563px;">"We promptly moved our external secure storage to a different vendor's system. We immediately notified law enforcement, and are actively cooperating with its investigation. Expert assistance was also immediately engaged to determine what personal information may have been compromised."</span></div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
In other words, it sounds as though a <a href="http://www.hackerschronicle.com/search/label/Cloud%20Storage">cloud-based</a> or off-site backup storage provider was hacked. Now that system has been shut down, the cops alerted, and digital forensics teams are probing the network intrusion.</div>
<h3 class="crosshead" style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 1.0625em; margin: 0px 0px 5px;">
<span style="box-shadow: rgb(230, 231, 231) 0em -0.56em 0px inset;">Suspicious</span></h3>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
"Upon detecting suspicious activity, Western Union permanently discontinued all use of the vendor's system and the system was taken offline," a spokesperson for Western Union told.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
"<a href="http://www.hackerschronicle.com/search/label/Western%20Union">Western Union</a> took immediate action upon learning of this intrusion to notify law enforcement authorities. The company has notified affected individuals and regulators as appropriate. Affected individuals received a customized notification that explains the specific types of his or her personal data that may have been affected."</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
According to the letter, the storage archive contained customers' contact details, bank names, Western Union internal customer ID numbers, as well as transaction amounts, times and identification numbers. Credit card data was definitely not taken, it stressed.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<i>El Reg</i> tweeted a redacted copy of the letter earlier this week:</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<br /></div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVrNxpVuL9cK13AgvKiH_UJiZswdFY6KOAXN2MDQ2fo2E7YUK7fj9eAWdPvJDPmO0dWVGME_LGJ-_pxm4JQPHvx2S8nPKhb1nZwWbQ2gR5XJzfRdS_xRF343Kw4dHMGph60yyMdOBnirsU/s1600/DV3ExpCVwAAp3Mg.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Western Union Money Transfer, Hacked" border="0" data-original-height="899" data-original-width="1199" height="478" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVrNxpVuL9cK13AgvKiH_UJiZswdFY6KOAXN2MDQ2fo2E7YUK7fj9eAWdPvJDPmO0dWVGME_LGJ-_pxm4JQPHvx2S8nPKhb1nZwWbQ2gR5XJzfRdS_xRF343Kw4dHMGph60yyMdOBnirsU/s640/DV3ExpCVwAAp3Mg.jpg" title="Western Union Money Transfer, Hacked" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><br /></td></tr>
</tbody></table>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<span style="font-size: 16px;">The </span><b style="font-size: 16px;">red-faced biz was quick to point out that none of its internal payment or financial systems were affected in the attack</b><span style="font-size: 16px;">. It also isn’t saying who the third-party storage supplier was, giving other customers of the slovenly provider time to check whether or not they have been hacked too.</span></div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
Western Union says that, so far, it isn't aware of any fraudulent activity stemming from the data security cockup, but just to be on the safe side it is enrolling affected customers in a year of free <a href="http://www.hackerschronicle.com/search/label/Identity%20Theft">identity-fraud</a> protection. </div>
</div>

Cloud Storage Cyber Attack Data Leak Hacking News News Western Union Western Union Money Transfer, Hacked

Western Union Money Transfer, Hacked Western Union has confirmed one of its IT suppliers was hacked, and that customer information was exposed to miscreants. Someone, who wished to remain anonymous, showed us a copy of …

'Biggest Leak in History' : iPhone source code LEAKED

2/08/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTCpeNjQs-nRH19WHT0uo3TGM3QzlaCoLEL9HNvuBaGcH_oNbmXIs7_4F-0-rh8Z8oAXu9cDxitDTxsYpjzC_RimkEKFsnzifm9jjBbqGJ9dtaLLrCdh0aIngAkJnvBQAkQ8xKfnL8lo0Z/s1600/iPhone-code-leaked.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="350" data-original-width="590" height="376" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTCpeNjQs-nRH19WHT0uo3TGM3QzlaCoLEL9HNvuBaGcH_oNbmXIs7_4F-0-rh8Z8oAXu9cDxitDTxsYpjzC_RimkEKFsnzifm9jjBbqGJ9dtaLLrCdh0aIngAkJnvBQAkQ8xKfnL8lo0Z/s640/iPhone-code-leaked.jpg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">'Biggest Leak in History' : iPhone source code leaked</td></tr>
</tbody></table>
<br />
Someone just posted what experts say is the <a href="http://www.hackerschronicle.com/search/label/Source%20Code" target="_blank">source code</a> for a core component of the iPhone’s operating system on GitHub, which could pave the way for hackers and security researchers to find vulnerabilities in iOS and make iPhone jailbreaks easier to achieve.<br />
The GitHub code is labeled “<b>iBoot</b>,” which is the part of iOS that is responsible for ensuring a trusted boot of the operating system. In other words, it’s the program that loads iOS, the very first process that runs when you turn on your iPhone. It loads and verifies the kernel is properly signed by Apple and then executes it—it’s like the iPhone’s BIOS.<br />
<br />
The code says it’s for iOS 9, an older version of the operating system, but portions of it are likely to still be used in iOS 11.<br />
<br />
Apple has traditionally been very reluctant to release code to the public, though it has made certain parts of <a href="http://www.hackerschronicle.com/search/label/iOS" target="_blank">iOS</a> and MacOS open source in recent years. But it has taken particular care to keep iBoot secure and its code private; bugs in the boot process are the most valuable ones if reported to Apple, which values them at a max payment of $200,000. “<b>This is the biggest leak in history</b>,” Jonathan Levin, the author of  on iOS and Mac OSX internals, told me in an online chat. “It’s a huge deal.”<br />
<br />
Levin said the code appears to be the real iBoot code because it aligns with code he <a href="http://www.hackerschronicle.com/search/label/Reverse%20Engineering" target="_blank">reverse engineered</a> himself. A second security researcher familiar with iOS also said they believe the code is real. We don’t know who is behind the leak. Apple did not respond to a request for comment.<br />
Having access to the source code of iBoot gives iOS security researchers a better chance to find vulnerabilities that could lead to compromising or jailbreaking the device, Levin said. That means hackers could have an easier time finding flaws and bugs that could allow them to crack or decrypt an iPhone. And, perhaps, this leak could eventually allow advanced programmers to emulate iOS on non Apple platforms.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU63mWjBrFYlpcwlnVfohdJ3jJYYUz3pFHIjjJ9SMS2KhaSZoi1vjJki5mM2UC_mjSFhiO_dLHxvYOsiwY48cUww3Qv2BBsj5jAKJmBg8HeRn65NyZdg5cAB6c35aF7ey3kLZXmS3qCEXB/s1600/ios-code.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="482" data-original-width="640" height="301" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU63mWjBrFYlpcwlnVfohdJ3jJYYUz3pFHIjjJ9SMS2KhaSZoi1vjJki5mM2UC_mjSFhiO_dLHxvYOsiwY48cUww3Qv2BBsj5jAKJmBg8HeRn65NyZdg5cAB6c35aF7ey3kLZXmS3qCEXB/s400/ios-code.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both;">
<a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">Vulnerabilities </a>in previous versions of iBoot allowed jailbreakers and hackers to brute-force their way through the iPhone’s lock screen and decrypt a user’s data. But newer iPhones have a chip , which has hardened the security of the device.</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
For regular users, Levin added, this means that tethered jailbreaks, which require the phone to be connected to a computer when booting, could soon be back. These jailbreaks used to be relatively easy to pull off and were common, but are now extremely hard to come by on up-to-date iOS devices, which have advanced security mechanisms that make it hard for even highly skilled researchers from even looking for bugs, as they need to first jailbreak the device before beginning to probe the device.</div>
<div class="separator" style="clear: both;">
It’s these security improvements . Nowadays, finding bugs and vulnerabilities in iOS is something that requires a significant amount of time and resources. That’s why the jailbreaking community gets excited for any leak of source code or any exploit.</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
“iBoot is the one component <a href="http://www.hackerschronicle.com/search/label/Apple" target="_blank">Apple </a>has been holding on to, still encrypting its 64 bit image,” Levin said. “And now it’s wide open in source code form.”</div>
<br /></div>

Data Leak iOS News Source Code 'Biggest Leak in History' : iPhone source code LEAKED

'Biggest Leak in History' : iPhone source code leaked Someone just posted what experts say is the source code for a core component of the iPhone’s operating system on GitHub, which could pave the way for hackers and sec…

Millions of health records, LEAKED

6/28/2016 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLH8RYn6seWRyOte7fXtY8K8pjplZLMBjUEMPHB27KS7ls5QCC0Jzb4NaBoSVfAeVodHSfn6y1kG2j7nR7RRpn2sZjb8EzvXwRmyGD8_cjfYBPqzkZW9R-KydPBqbJf4fnVfjjecvLBeE/s1600/health-records-dat-breach.jpeg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="347" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLH8RYn6seWRyOte7fXtY8K8pjplZLMBjUEMPHB27KS7ls5QCC0Jzb4NaBoSVfAeVodHSfn6y1kG2j7nR7RRpn2sZjb8EzvXwRmyGD8_cjfYBPqzkZW9R-KydPBqbJf4fnVfjjecvLBeE/s640/health-records-dat-breach.jpeg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">The dark web seller has four batches of data, going for close to $1 million in bitcoin.</td></tr>
</tbody></table>
<br />
<br />
A hacker is advertising hundreds of thousands of alleged records from healthcare organizations on a dark web marketplace, including social security and insurance policy numbers.<br />
<br />
The seller, who goes by the name "<b>thedarkoverlord</b>" began listing the data over the weekend, but could not be immediately contacted on Monday.<br />
<br />
The largest batch of data, which the seller claims to contain a little over 9.2 million health insurance records from US patients, is on sale for 750 bitcoins. At Monday's rate, that's about $486,000. The data includes names, addresses, emails, phone numbers, dates of birth and social security numbers.<br />
<br />
We couldn't verify the authenticity of the data contained in the seller's ad. The seller did not have any points to their name, unlike other known hackers, indicating that they are new to the site. News site Motherboard contacted some users who confirmed that their data was in a sample that was received.<br />
<br />
The hacker said the data was stolen by exploiting an disclosed <a href="http://www.hackerschronicle.com/search/label/Vulnerability">zero-day</a> flaw in the remote desktop protocol (RDP), which can allow a user to remotely view another user's desktop.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAzvREp49HEWjUdGfKDRKILcDL3aKCdXrntu5j7Zj_tffLXRtaw2y4jD6yxyIY_qnd2kHKGqnh-AC6kr-Be9wbNxDLrME6ORJLvwJXFE3vqfwsjj8o8DFpFht59UIk7vnmOdpv2P0CGXw/s1600/health-recods-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="467" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAzvREp49HEWjUdGfKDRKILcDL3aKCdXrntu5j7Zj_tffLXRtaw2y4jD6yxyIY_qnd2kHKGqnh-AC6kr-Be9wbNxDLrME6ORJLvwJXFE3vqfwsjj8o8DFpFht59UIk7vnmOdpv2P0CGXw/s640/health-recods-data-leak.png" width="640" /></a></div>
<br />
<br />
It's not all that surprising, given that earlier this year a hacker exposed thousands of insecure desktops that anyone can remotely view, thanks to poorly-configured remote desktop software. In one case, we were able to see a computer used in a pediatrician's office, which contained personal details on hundreds of patients.<br />
<br />
Another batch of data includes 207,000 records from an unnamed healthcare organization in the US midwest region, on sale for 170 bitcoins (about $110,100 at the time of writing).<br />
<br />
The seller also claims to have close to 397,000 records from members in Atlanta, Georgia -- most of which are from Blue Cross Blue Shield and United Healthcare, which is being sold for 300 bitcoin (or about $194,000).<br />
<br />
Another smaller batch contains records on 47,800 members from Farmington, Missouri, which is on sale for 60 bitcoins (or about $39,000).<br />
<br />
The hacker said in one listing that the data was stored on an "accessible internal network" and stored in plaintext -- which if true would be in violation of federal healthcare privacy rules. Another database was allegedly stolen from a Microsoft Access database.<br />
<br />
It's not clear where the data came from, but healthcare providers and hospitals have been increasingly targeted for customer and patient data in recent months. Anthem was notably hit last year, in which hackers took off with over 80 million records.<br />
<br />
According to recent data, the healthcare industry tallies up as the highest cost of a<a href="http://www.hackerschronicle.com/search/label/Data%20Leak"> data breach</a> per record.<br />
  </div>

Darknet Data Leak Hacking News Identity Theft News Millions of health records, LEAKED

The dark web seller has four batches of data, going for close to $1 million in bitcoin. A hacker is advertising hundreds of thousands of alleged records from healthcare organizations on a dark web marketplace, including…

Syrian cyber space attacked, 60,000 accounts leaked

4/07/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" title="60,000 Personal Credentials Leaked From Syrian Sites" width="320" /></a></div>
<br />
<div dir="ltr" style="text-align: left;" trbidi="on">
Today a hacker from the European Cyber Army going by the handle <a href="https://twitter.com/Zer0Pwn" target="_blank">@Zer0Pwn</a> has announced a leak of data from two syrian based websites job.sy, realestate.sy.<br />
<br />
<a href="http://pastebin.com/7Y13ULux">The leak</a> which is titled “ECA vs. Assad | Part 1″ was posted to <a href="http://pastebin.com/7Y13ULux">pastebin</a> with a preview of some of the users data and a link to <a href="http://www.sendspace.com/file/tqa737">sendspace</a>. The attack is apart of a bigger operation that is going on towards what the hackers are claim are pro-assad targets.<br />
<br />
The data leak has resulted in over 60,000 Accounts being dumped online and between the two databases are users credentials which have encrypted passwords for job.sy but plaintext for realestate.sy. Both databases have full user details such as full names, contact phone numbers and home addresses. On the march 30th career-sy.com appears to of been breached and <a href="http://pastebin.com/wLJhHNd8">posted to pastebin</a> as well with 3 administrator credentials as well as the vuln entry point and link for the control panel login which is located on the job.sy server which career-sy.com redirects to now.<br />
<br />
Some attacks by other ECA members have been carried out and posted to twitter by <a href="https://twitter.com/ECA_Legion">@ECA_Legion</a> with data being leaked from syrianmonster.com, a syrian hosting website, ddos attacks on sites like syria-courts.com, sana.sy and moj.gov.sy. banquecentrale.gov.sy. The leak of data from the realestate.sy database appears to have plaintext passwords to accounts linked to www.scs-net.org which is one of the job.sy official partners to making all three sites linked together or even owned and operated by the same people possibly.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="65" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" title="60,000 Personal Credentials Leaked From Syrian Sites" width="400" /></a></div>
<br />
Full dump info<br />
<br />
<a href="http://realestate.sy/">http://realestate.sy/</a><br />
<br />
File realestate.sy_users.sql<br />
File Contents:  3,257 Emails that are unique out of 3,517 Total emails Found.<br />
Information: Contains user names,email addresses, clear text passwords, full names, phone numbers, locations and site related information.<br />
<br />
File realestate.sy.sql<br />
File Contents: 4,912 Emails that are unique out of 13,223 Total emails Found.<br />
Information: Complete internal messaging system, site logs and administrator login logs with ips and cookie information.<br />
<br />
<a href="http://job.sy/">http://job.sy/</a><br />
<br />
File job.sy_users.sql<br />
File Contents: 50,017 Emails that are unique out of 52,483 Total emails Found. Included in the job.sy.sql file as well.<br />
Information: Contains user names, encrypted MD5 passwords, email addresses, home addresses and contact numbers and full names as well as other site related information.<br />
<br />
File job.sy.sql<br />
File Contents: 59,575 Emails that are unique out of 84,343 Total emails Found.<br />
Information: Contains logs with ip addresses and browser information, messages between job seekers and employees between, min resumes, job comments<br />
<br />
<a href="http://syrianmonster.com/">http://syrianmonster.com</a><br />
Only contains 1 administrator account with username and password.<br />
<br />
<a href="http://career-sy.com/">http://career-sy.com/</a><br />
3 administrator credentials with user names and encrypted passwords.</div>
</div>

Data Leak European Cyber Army Hacking News News Syrian cyber space attacked, 60,000 accounts leaked

Today a hacker from the European Cyber Army going by the handle @Zer0Pwn has announced a leak of data from two syrian based websites job.sy, realestate.sy. The leak which is titled “ECA vs. Assad | Part 1″ was posted to…

Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked

3/13/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSc38Udf3xr3eXGsPIfcHYsnwXkWGpSjIKk7zEtBgsPUMf0OYq9HBSke737pUoIo_O1FCoIvO6rrmjxw7uwvGyFmNvLnK6MYLt0noFVK_XHTvr3zzfARvFo7560r1kTZiNPcYqNUhBaaxi/s1600/russian+intel+&+spy+hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked" border="0" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSc38Udf3xr3eXGsPIfcHYsnwXkWGpSjIKk7zEtBgsPUMf0OYq9HBSke737pUoIo_O1FCoIvO6rrmjxw7uwvGyFmNvLnK6MYLt0noFVK_XHTvr3zzfARvFo7560r1kTZiNPcYqNUhBaaxi/s1600/russian+intel+&+spy+hacked.png" title="Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked" width="320" /></a></div>
<br />
Today Russian hacktivist <a href="https://twitter.com/Rucyborg" target="_blank">@Rucyborg</a> has announced a leak of data from Searchinform and sent a message out to its director.<br />
The leak was <a href="https://twitter.com/Rucyborg/status/443468396068610050" target="_blank">announced</a> a couple of hours ago via twitter and posted to <a href="http://cyberguerrilla.org/" target="_blank">cyberguerrilla.org</a> with a message which states that the hackers have had access to <a href="http://searchinform.ru/" target="_blank">searchinform.ru</a> since as far back as 2012 and that they have infected  download links. The leak was uploaded to <a href="http://bayfiles.net/file/18L8Z/dICvHg/sinformru.rar" target="_blank">bayfiles</a> and is part 2 of an <a href="http://www.hackerschronicle.com/2014/03/cyber-attacks-on-ukraine.html" target="_blank">on going assault on Russia</a> in relation to the recent drama that putin has been creating.<br />
<a href="http://searchinform.com/about/full-text-search-company.html" target="_blank">Searchinform</a> is one of them sneaky company’s with an even more sneaky product which allows snooping on others, while in this day and age is not so surprising but the extent which they do go to is pretty extensive and really does pose a huge security risk to one if the wrong person was to be using it. They offer work time monitors, full-on network sniffers designed at modern day communications over social medias, microphone sniffers for recording employees and a <a href="http://searchinform.com/main/full-text-search-information-security-product.html" target="_blank">whole range of other products</a>.<br />
Data leaked is in a 382MB compressed file that contains well over 3000 files which include instructions and usage information, also it appears to have copies of searchinform for clients and basic new client setup information. In normal fashion there has been a <a href="http://searchinform.com/main/full-text-search-information-security-product.html" target="_blank">imgur gallery</a> created with a preview of the contents of this leak which can be found below, i have also added a couple of screen shots of the contents of the uncompressed leak data.<br />
The message on  <a href="http://cyberguerrilla.org/" target="_blank">cyberguerrilla.org</a> also has a direct message for the CEO of SearchInform.<br />
<div class="content shadow-radial">
Our message to SearchInform.ru – director Ozhegov – you are a bunch of FSB bastadz – leaking information to all the counterparts and outsiders – you provide so called CONTUR of Security to main russian corps – and keep control of all the clients for the SORM needs – nonight – the stars – revolt- and this is your downfall.<br />
<br /></div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierGuWF0ZT_jlPTTeEtxfBHmbTDCQ30xJ1_shNlryML2vBgzJcTvAg11PWsRaNSim_o8sOvfMad2HYnMYDyUqfo-_9gVEtv5RD_7aZw4FS5N71u6N5x3aZmGt0fXSAEGrWYhsBE8oEWmy2/s1600/russian+intel+hacked.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierGuWF0ZT_jlPTTeEtxfBHmbTDCQ30xJ1_shNlryML2vBgzJcTvAg11PWsRaNSim_o8sOvfMad2HYnMYDyUqfo-_9gVEtv5RD_7aZw4FS5N71u6N5x3aZmGt0fXSAEGrWYhsBE8oEWmy2/s320/russian+intel+hacked.jpg" width="131" /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEpVyw59Ltm0ePqb65Zo4axd_qtlVrhoDMo58LX6pKo3Ba3qUuvggz4hxocgD42AuCPFSWgbB-5fztsvwXksPJp0nulc-1z4hrc9jq3KC1jaLd4SUWhqrL9SWgEVMmiZZNkc-tSCPuQIQb/s1600/russian+spy+hacked.jpg" imageanchor="1" style="clear: right; display: inline !important; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="183" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEpVyw59Ltm0ePqb65Zo4axd_qtlVrhoDMo58LX6pKo3Ba3qUuvggz4hxocgD42AuCPFSWgbB-5fztsvwXksPJp0nulc-1z4hrc9jq3KC1jaLd4SUWhqrL9SWgEVMmiZZNkc-tSCPuQIQb/s320/russian+spy+hacked.jpg" width="400" /></a></div>
</div>

Data Leak Hacking News News Rucyborg Russian Hackers Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked

Today Russian hacktivist @Rucyborg has announced a leak of data from Searchinform and sent a message out to its director. The leak was announced a couple of hours ago via twitter and posted to cyberguerrilla.org with a …

Personal info of 12 million KT customers Leaked

3/08/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Personal info of 12 million KT customers Leaked" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" title="Personal info of 12 million KT customers Leaked" width="320" /></a></div>
<br />
Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial information of some 12 million customers of the South Korean telecom giant.<br />
According to the <a href="http://edition.cnn.com/2014/03/06/business/south-korea-telecoms-hackers" target="_blank">CNN</a>, one of the arrested men, a 29-year-old surnamed Kim, was a hacker who broke into the company's computer system with customized hacking software and extracted customer information such as names, resident registration numbers and bank account information.<br />
The initial breach apparently happened in February 2013, and he has been extracting the data ever since. He allegedly sold it to a 37-year-old man surnamed Park, a telemarketing business owner that used the information to credibly impersonate a KT Corp. employee in order to sell cell phones.<br />
Another man has been arrested but almost immediately released.<br />
Apparently, in the last year, they managed to earn themselves nearly $11 million through this scheme.<br />
KT is cooperating with the police as the investigation continues, and will be forced to set up a website its users can visit to check whether their information has been compromised, the Yonhap News Agency <a href="http://english.yonhapnews.co.kr/business/2014/03/07/17/0501000000AEN20140307000900320F.html" target="_blank">reported</a>.<br />
The South Korean Ministry of Science, ICT and Future Planning is warning potentially affected users to be on the lookout for phishing emails impersonating the company and taking advantage of the situation to make them share more personal details.
</div>

Cyber Crime Data Leak Hacking News Korean Hackers News Privacy Personal info of 12 million KT customers Leaked

Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial information of some 12 million customers of the South Korean telecom giant. According t…

Russian Defence Hacked, 500+MB Data Leaked

3/06/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Russian Defence Export Hacked" border="0" height="71" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" title="Russian Defence Hacked" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
Today Russian hacktivist <a href="https://twitter.com/Rucyborg" target="_blank">Rucyborg</a> has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT (<a href="http://www.roe.ru/" target="_blank">http://www.roe.ru/</a>).<br />
The leak was announced just a short time ago from twitter and has been posted to <a href="https://www.cyberguerrilla.org/blog/?p=17581" target="_blank">cyberguerrilla</a>. The leaked files are just the first part of a few to come from the Russian government.<br />
The attacks have been carried out due to the recent drama Putin is causing and the Russian hackers have stated they do not want any war all they want to do is expose Putin and his government for what they are.<br />
they have also stated that leaks from <a href="https://en.wikipedia.org/wiki/Sukhoi" target="_blank">Sukhoi</a>, <a href="https://en.wikipedia.org/wiki/Oboronprom" target="_blank">Oboronprom</a>, <a href="http://eng.gazflot.ru/" target="_blank">Gazflot</a>, <a href="http://eng.gazflot.ru/" target="_blank">Rusal</a> and others.<br />
The leaked data has been uploaded to <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar" target="_blank">bayfiles</a> as a 488MB rar file and a <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar">preview</a> of the leaked documents has also been provided.<br />
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" width="229" /></a></div>
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" width="320" /></a></div>
<br /><br /><br /><br /></div>

Anonymous Data Leak Hacking News News Russian Hackers Russian Defence Hacked, 500+MB Data Leaked

Today Russian hacktivist Rucyborg has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT (http://www.roe.ru/). The leak was announced just a short time ago from twitter and has been posted to cybe…