SQL Injection vulnerability in Yahoo

4/08/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTL6tV9kV7M1jnMiGsqJkN05t-AAte545WWB5lT0nMMl0ySjeeSv-ygAOYGGJvzdimuyEVq_HIt9dcbu4rZcVtV_Z2PbTp21u8eEUudbExSQnpDf5ZFe1jmLYBwiCnMTZz5yrKpNpBlAZ5/s1600/Expert-Finds-8-Files-Vulnerable-to-SQL-Injection-in-Yahoo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Expert Finds 8 Files Vulnerable to SQL Injection in Yahoo HK Promotions Pages" border="0" height="351" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTL6tV9kV7M1jnMiGsqJkN05t-AAte545WWB5lT0nMMl0ySjeeSv-ygAOYGGJvzdimuyEVq_HIt9dcbu4rZcVtV_Z2PbTp21u8eEUudbExSQnpDf5ZFe1jmLYBwiCnMTZz5yrKpNpBlAZ5/s1600/Expert-Finds-8-Files-Vulnerable-to-SQL-Injection-in-Yahoo.png" title="Expert Finds 8 Files Vulnerable to SQL Injection in Yahoo HK Promotions Pages" width="640" /></a></div>
<br />
Security researcher <strong>Behrouz Sadeghipour</strong> has identified several <a href="http://www.hackerschronicle.com/search/label/SQL%20Injection">SQL Injection</a> <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerabilities</a> in a Hong Kong subdomain of <a href="http://www.hackerschronicle.com/search/label/Yahoo">Yahoo</a>. He reported his findings to the company and all the security holes have been fixed.<br />
<br />
According to the expert, the flaws have been found in various files on the Hong Kong promotions subdomain (<a href="http://hk.promotions.yahoo.com/">hk.promotions.yahoo.com</a>). <br />
<br />
He decided to analyze this subdomain because it contains a lot of Flash files and PHP scripts that could be vulnerable, and it doesn’t appear that the pages have been created by Yahoo’s core developers. <br />
<br />
Furthermore, since the pages are in Chinese, it’s likely that they’re ignored by many auditors.<br />
<br />
The expert has managed to identify a total of eight vulnerable files. Following his analysis of the Yahoo HK promotions subdomain, Sadeghipour sent 5 reports to the company. <br />
<br />
The list of pages on which he found SQL Injection vulnerabilities includes the Emotive2012 page, the <a href="http://www.hackerschronicle.com/search/label/Nikon">Nikon</a> Photo Itinerary page, and the Education page. By leveraging these bugs, the researcher managed to gain access to names, email addresses and other information.<br />
<br />
Yahoo addressed the issues within a month after being reported. The expert has told me that the company has removed the vulnerable files. <br />
<br />
As some of our readers might know, this isn’t the first time <strong>Sadeghipour</strong> finds serious vulnerabilities in Yahoo’s Hong Kong subdomains. Last month, he identified a <a href="http://www.hackerschronicle.com/2014/03/remote-code-execution-in-yahoo.html">remote code execution flaw</a>.<br />
<br />
At the time, he found an administrator panel for the hk.yahoo.net subdomain that could be accessed with <span class="highlight pop">admin/admin</span> credentials. <br />
<br />
For additional details on the SQL Injection vulnerabilities found in Yahoo, check out <a href="http://nahamsec.com/2014/04/yahoo-sql-injection/">Behrouz Sadeghipour‘s blog</a>. You can also check out the proof-of-concept videos he made for a couple of the flaws:<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/8MuWtVqj4iU" width="560"></iframe><br />
<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/8HN-91UxUh8" width="560"></iframe><br /></div>

Security researcher Behrouz Sadeghipour has identified several SQL Injection vulnerabilities in a Hong Kong subdomain of Yahoo . He...

Syrian cyber space attacked, 60,000 accounts leaked

4/07/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" title="60,000 Personal Credentials Leaked From Syrian Sites" width="320" /></a></div>
<br />
<div dir="ltr" style="text-align: left;" trbidi="on">
Today a hacker from the European Cyber Army going by the handle <a href="https://twitter.com/Zer0Pwn" target="_blank">@Zer0Pwn</a> has announced a leak of data from two syrian based websites job.sy, realestate.sy.<br />
<br />
<a href="http://pastebin.com/7Y13ULux">The leak</a> which is titled “ECA vs. Assad | Part 1″ was posted to <a href="http://pastebin.com/7Y13ULux">pastebin</a> with a preview of some of the users data and a link to <a href="http://www.sendspace.com/file/tqa737">sendspace</a>. The attack is apart of a bigger operation that is going on towards what the hackers are claim are pro-assad targets.<br />
<br />
The data leak has resulted in over 60,000 Accounts being dumped online and between the two databases are users credentials which have encrypted passwords for job.sy but plaintext for realestate.sy. Both databases have full user details such as full names, contact phone numbers and home addresses. On the march 30th career-sy.com appears to of been breached and <a href="http://pastebin.com/wLJhHNd8">posted to pastebin</a> as well with 3 administrator credentials as well as the vuln entry point and link for the control panel login which is located on the job.sy server which career-sy.com redirects to now.<br />
<br />
Some attacks by other ECA members have been carried out and posted to twitter by <a href="https://twitter.com/ECA_Legion">@ECA_Legion</a> with data being leaked from syrianmonster.com, a syrian hosting website, ddos attacks on sites like syria-courts.com, sana.sy and moj.gov.sy. banquecentrale.gov.sy. The leak of data from the realestate.sy database appears to have plaintext passwords to accounts linked to www.scs-net.org which is one of the job.sy official partners to making all three sites linked together or even owned and operated by the same people possibly.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="65" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" title="60,000 Personal Credentials Leaked From Syrian Sites" width="400" /></a></div>
<br />
Full dump info<br />
<br />
<a href="http://realestate.sy/">http://realestate.sy/</a><br />
<br />
File realestate.sy_users.sql<br />
File Contents:  3,257 Emails that are unique out of 3,517 Total emails Found.<br />
Information: Contains user names,email addresses, clear text passwords, full names, phone numbers, locations and site related information.<br />
<br />
File realestate.sy.sql<br />
File Contents: 4,912 Emails that are unique out of 13,223 Total emails Found.<br />
Information: Complete internal messaging system, site logs and administrator login logs with ips and cookie information.<br />
<br />
<a href="http://job.sy/">http://job.sy/</a><br />
<br />
File job.sy_users.sql<br />
File Contents: 50,017 Emails that are unique out of 52,483 Total emails Found. Included in the job.sy.sql file as well.<br />
Information: Contains user names, encrypted MD5 passwords, email addresses, home addresses and contact numbers and full names as well as other site related information.<br />
<br />
File job.sy.sql<br />
File Contents: 59,575 Emails that are unique out of 84,343 Total emails Found.<br />
Information: Contains logs with ip addresses and browser information, messages between job seekers and employees between, min resumes, job comments<br />
<br />
<a href="http://syrianmonster.com/">http://syrianmonster.com</a><br />
Only contains 1 administrator account with username and password.<br />
<br />
<a href="http://career-sy.com/">http://career-sy.com/</a><br />
3 administrator credentials with user names and encrypted passwords.</div>
</div>

Data Leak European Cyber Army Hacking News News Syrian cyber space attacked, 60,000 accounts leaked

Today a hacker from the European Cyber Army going by the handle @Zer0Pwn has announced a leak of data from two syrian based websites j...

GitHub under DDoS Attack

3/21/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4SJuTIBKWzzZyeE5rY1q-3V4zHR4PZ_xFuFmlaaG_TXzX6WCRrV6TBaYCEUY5Z1XDfOrGJM3tbmUCjWPZ2gb6cs-0dm-fusgc1yl7LGRgHjB4SYFYKAGitVKgsSimsmx-bPffRg-udhFy/s1600/github+under+ddos+attack.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="GitHub under DDoS Attack" border="0" height="153" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4SJuTIBKWzzZyeE5rY1q-3V4zHR4PZ_xFuFmlaaG_TXzX6WCRrV6TBaYCEUY5Z1XDfOrGJM3tbmUCjWPZ2gb6cs-0dm-fusgc1yl7LGRgHjB4SYFYKAGitVKgsSimsmx-bPffRg-udhFy/s1600/github+under+ddos+attack.png" title="GitHub under DDoS Attack" width="400" /></a></div>
It’s pretty clear that <a href="https://github.com/" target="_blank">GitHub</a> is one of the favorite targets for <a href="http://www.hackerschronicle.com/search/label/DDoS">distributed denial-of-service</a> (DDOS) attacks. The service is currently facing another attack wave. <br />
<br />
“We are currently working to mitigate an incoming DDoS attack. We’ll provide additional information as it becomes available,” GitHub <a href="https://status.github.com/messages" target="_blank">wrote</a> just a few minutes ago.<br />
<br />
The code repository hasn’t shared any additional details in the meantime and may not even do so if the attack isn’t much more serious than the regular DDOS attacks targeting it.<br />
<br />
GitHub handles such situations so often that it has gotten so accustomed to mitigating them that access to the service is usually restored within about 20 minutes.<br />
<br />
The service is armed with enough weapons to handle volumetric and complex attacks, so everything should be back to normal in no time.<br />
<br />
Last week, they faced one of the biggest attacks in recent months and, as a result, GitHub started working on ways to improve its DDOS mitigating capabilities to make sure that even uncommon operations could be blocked quickly, so that users could get their service back.<br />
<br />
On March 11, the attack was so wide that GitHub went down for 2 hours, a lot more than the regular 20 minutes that people are used to.<br />
<br />
<strong>[UPDATE 1:]</strong> The efforts to reduce the number of legitimate users who are flagged as attack traffic continues.<br />
<br />
<strong>[UPDATE 2:]</strong> GitHub is back to working order. </div>

Cyber Crime DDoS GitHub Hacking News News GitHub under DDoS Attack

It’s pretty clear that GitHub is one of the favorite targets for distributed denial-of-service (DDOS) attacks. The service is currently...

Toyota, Renault and Chevrolet Hacked by Pakistani Hackers

3/19/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLm9kPncC30uf-n5pYPDb6Ub7tND2BmIeLKF9N69iYIY1FpKrSdsx76uKYg-dPLG1lwaf1Nf3XbG4yWyS3FdmMyLnRHS9_CwOy524PJ7hSUi-5uUOj6bC_eZYwJkFu2-NXuug907s7Gxmr/s1600/Toyota+hacked.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="131" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLm9kPncC30uf-n5pYPDb6Ub7tND2BmIeLKF9N69iYIY1FpKrSdsx76uKYg-dPLG1lwaf1Nf3XbG4yWyS3FdmMyLnRHS9_CwOy524PJ7hSUi-5uUOj6bC_eZYwJkFu2-NXuug907s7Gxmr/s1600/Toyota+hacked.PNG" width="320" /></a></div>
<em><a href="http://zone-h.com/archive/notifier=Algeriano" target="_blank">Algeriano</a></em> a hacker from Team Cyber Criminals a group of <a href="http://www.hackerschronicle.com/search/label/Pakistani%20Hackers" target="_blank">Pakistani hackers</a> hacked worlds leading automobile companies domains reserved for Guatemala including <a href="http://www.toyota.com.gt/" target="_blank">Toyota</a> , <a href="http://www.renault.com.gt/" target="_blank">Renault</a> and <a href="http://www.chevrolet.com.gt/" target="_blank">Chevrolet</a> , Attacker didn't mention any reason to deface websites. <br />
<br />
“Hacked by Algeriano. TOYOTA & RENAULT & CHEVROLET Guatemala hacked. Cyber Criminals Was Here,” the attacker wrote on the defaced websites.<br />
<br />
This message indicates that the hacker simply wanted to show off. The sites don’t appear to be storing any sensitive customer information. However, such an attack can still impact a company’s image.<br />
<br />
At the time of writing, all of the websites have been restored. They appear to have been restored within 24 hours after the breach took place. <a href="http://zone-h.com/mirror/id/22028173" target="_blank">Mirrors of the defacements</a> are available on Algeriano’s zone-h.org page. <br />
In this case, all of the three websites appear to have been developed by the same company for a car distributor. The most likely scenario is that the sites have been plagued by the same <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerability</a>, which the hacker easily exploited to deface them. <br />
<br />
Hopefully, the company that manages the sites has addressed the security holes, but it’s unlikely. The <a href="http://zone-h.com/archive/domain=www.toyota.com.gt" target="_blank">Toyota Guatemala website was previously defaced</a> back in 2009, 2011 and 2013 by various hackers.
</div>

Defacement Hacking News News Pakistani Hackers Toyota, Renault and Chevrolet Hacked by Pakistani Hackers

Algeriano a hacker from Team Cyber Criminals a group of Pakistani hackers hacked worlds leading automobile companies domains reserved f...

Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked

3/13/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSc38Udf3xr3eXGsPIfcHYsnwXkWGpSjIKk7zEtBgsPUMf0OYq9HBSke737pUoIo_O1FCoIvO6rrmjxw7uwvGyFmNvLnK6MYLt0noFVK_XHTvr3zzfARvFo7560r1kTZiNPcYqNUhBaaxi/s1600/russian+intel+&+spy+hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked" border="0" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSc38Udf3xr3eXGsPIfcHYsnwXkWGpSjIKk7zEtBgsPUMf0OYq9HBSke737pUoIo_O1FCoIvO6rrmjxw7uwvGyFmNvLnK6MYLt0noFVK_XHTvr3zzfARvFo7560r1kTZiNPcYqNUhBaaxi/s1600/russian+intel+&+spy+hacked.png" title="Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked" width="320" /></a></div>
<br />
Today Russian hacktivist <a href="https://twitter.com/Rucyborg" target="_blank">@Rucyborg</a> has announced a leak of data from Searchinform and sent a message out to its director.<br />
The leak was <a href="https://twitter.com/Rucyborg/status/443468396068610050" target="_blank">announced</a> a couple of hours ago via twitter and posted to <a href="http://cyberguerrilla.org/" target="_blank">cyberguerrilla.org</a> with a message which states that the hackers have had access to <a href="http://searchinform.ru/" target="_blank">searchinform.ru</a> since as far back as 2012 and that they have infected  download links. The leak was uploaded to <a href="http://bayfiles.net/file/18L8Z/dICvHg/sinformru.rar" target="_blank">bayfiles</a> and is part 2 of an <a href="http://www.hackerschronicle.com/2014/03/cyber-attacks-on-ukraine.html" target="_blank">on going assault on Russia</a> in relation to the recent drama that putin has been creating.<br />
<a href="http://searchinform.com/about/full-text-search-company.html" target="_blank">Searchinform</a> is one of them sneaky company’s with an even more sneaky product which allows snooping on others, while in this day and age is not so surprising but the extent which they do go to is pretty extensive and really does pose a huge security risk to one if the wrong person was to be using it. They offer work time monitors, full-on network sniffers designed at modern day communications over social medias, microphone sniffers for recording employees and a <a href="http://searchinform.com/main/full-text-search-information-security-product.html" target="_blank">whole range of other products</a>.<br />
Data leaked is in a 382MB compressed file that contains well over 3000 files which include instructions and usage information, also it appears to have copies of searchinform for clients and basic new client setup information. In normal fashion there has been a <a href="http://searchinform.com/main/full-text-search-information-security-product.html" target="_blank">imgur gallery</a> created with a preview of the contents of this leak which can be found below, i have also added a couple of screen shots of the contents of the uncompressed leak data.<br />
The message on  <a href="http://cyberguerrilla.org/" target="_blank">cyberguerrilla.org</a> also has a direct message for the CEO of SearchInform.<br />
<div class="content shadow-radial">
Our message to SearchInform.ru – director Ozhegov – you are a bunch of FSB bastadz – leaking information to all the counterparts and outsiders – you provide so called CONTUR of Security to main russian corps – and keep control of all the clients for the SORM needs – nonight – the stars – revolt- and this is your downfall.<br />
<br /></div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierGuWF0ZT_jlPTTeEtxfBHmbTDCQ30xJ1_shNlryML2vBgzJcTvAg11PWsRaNSim_o8sOvfMad2HYnMYDyUqfo-_9gVEtv5RD_7aZw4FS5N71u6N5x3aZmGt0fXSAEGrWYhsBE8oEWmy2/s1600/russian+intel+hacked.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierGuWF0ZT_jlPTTeEtxfBHmbTDCQ30xJ1_shNlryML2vBgzJcTvAg11PWsRaNSim_o8sOvfMad2HYnMYDyUqfo-_9gVEtv5RD_7aZw4FS5N71u6N5x3aZmGt0fXSAEGrWYhsBE8oEWmy2/s320/russian+intel+hacked.jpg" width="131" /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEpVyw59Ltm0ePqb65Zo4axd_qtlVrhoDMo58LX6pKo3Ba3qUuvggz4hxocgD42AuCPFSWgbB-5fztsvwXksPJp0nulc-1z4hrc9jq3KC1jaLd4SUWhqrL9SWgEVMmiZZNkc-tSCPuQIQb/s1600/russian+spy+hacked.jpg" imageanchor="1" style="clear: right; display: inline !important; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="183" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEpVyw59Ltm0ePqb65Zo4axd_qtlVrhoDMo58LX6pKo3Ba3qUuvggz4hxocgD42AuCPFSWgbB-5fztsvwXksPJp0nulc-1z4hrc9jq3KC1jaLd4SUWhqrL9SWgEVMmiZZNkc-tSCPuQIQb/s320/russian+spy+hacked.jpg" width="400" /></a></div>
</div>

Data Leak Hacking News News Rucyborg Russian Hackers Russian Intelligence and Spy Company SearchInform Hacked, Data Leaked

Today Russian hacktivist @Rucyborg has announced a leak of data from Searchinform and sent a message out to its director. The leak wa...

Russia attacks Ukraine with cyber weapon, Snake

3/09/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkufqwMk63tMR0xjp5-I1wm07WieL4DbAf_bk96E2khr9KyudVRIG7ss6m8pp6AECyuICHtMbzZBnTJbC5evBnEdcvHbONe8w43iifpTms1XeWoqt4R9GKYc86CVdIlOg_6VrCfI6cXJ36/s1600/Ukraine-cyber-attack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ukraine's Computers attcked with a Virus, Snake similar to Stuxnet" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkufqwMk63tMR0xjp5-I1wm07WieL4DbAf_bk96E2khr9KyudVRIG7ss6m8pp6AECyuICHtMbzZBnTJbC5evBnEdcvHbONe8w43iifpTms1XeWoqt4R9GKYc86CVdIlOg_6VrCfI6cXJ36/s1600/Ukraine-cyber-attack.jpg" title="Ukraine's Computers attcked with a Virus, Snake similar to Stuxnet" width="320" /></a></div>
<br />
Dozens of computer networks in Ukraine have been infected by an aggressive new cyber weapon called <a href="http://www.hackerschronicle.com/search/label/Snake" target="_blank">Snake</a>, according to expert analysis.<br />
 The cyber weapon has been increasingly used since the start of this year, even before protests that led to the overthrow of president Viktor Yanukovych, British-based <a href="http://en.wikipedia.org/wiki/BAE_Systems" rel="nofollow" target="_blank">BAE Systems</a> said in a report published Friday.<br />
 The complex composition of <a href="http://www.hackerschronicle.com/search/label/Snake" target="_blank">Snake</a> bears similarities with <a href="http://www.hackerschronicle.com/search/label/Stuxnet" target="_blank">Stuxnet</a>, the <a href="http://www.hackerschronicle.com/search/label/Malwares" target="_blank">malware</a> that disrupted Iran's nuclear facilities in 2010.<br />
Snake—also known as Ouroboros after the serpent in Greek mythology—gives remote attackers "full remote access to the compromised system", BAE said.<br />
Because it can stay inactive for a number of days, it is extremely hard to detect.
Although its origins are unclear, its developers appear to operate it in the same timezone as Moscow—GMT plus four hours—and some <a href="http://www.hackerschronicle.com/search/label/Russian%20Hackers" target="_blank">Russian</a> text is embedded into the code, BAE says.
BAE has identified 14 cases of Snake in Ukraine since the start of 2014, compared to eight cases in the whole of 2013. In all there have been 32 reported cases in <a href="http://www.hackerschronicle.com/search/label/Ukraine" target="_blank">Ukraine</a> since 2010, out of 56 worldwide.<br />
 Nigel Inkster, who until 2006 was the head of operations and intelligence at Britain's MI6 foreign intelligence agency, said Russia was most likely behind the cyber-attacks on Ukraine.<br />
"If you look at it in probabilistic terms... then the list of suspects boils down to one, he told the Financial Times.
"Until recently the Russians have kept a low profile, but there's no doubt in my mind that they can do the full scope of cyber attacks, from denial of service to the very, very sophisticated."</div>

Hacking News Malwares News Russian Hackers Snake Stuxnet Ukraine Russia attacks Ukraine with cyber weapon, Snake

Dozens of computer networks in Ukraine have been infected by an aggressive new cyber weapon called Snake , according to expert analysis....

Personal info of 12 million KT customers Leaked

3/08/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Personal info of 12 million KT customers Leaked" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" title="Personal info of 12 million KT customers Leaked" width="320" /></a></div>
<br />
Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial information of some 12 million customers of the South Korean telecom giant.<br />
According to the <a href="http://edition.cnn.com/2014/03/06/business/south-korea-telecoms-hackers" target="_blank">CNN</a>, one of the arrested men, a 29-year-old surnamed Kim, was a hacker who broke into the company's computer system with customized hacking software and extracted customer information such as names, resident registration numbers and bank account information.<br />
The initial breach apparently happened in February 2013, and he has been extracting the data ever since. He allegedly sold it to a 37-year-old man surnamed Park, a telemarketing business owner that used the information to credibly impersonate a KT Corp. employee in order to sell cell phones.<br />
Another man has been arrested but almost immediately released.<br />
Apparently, in the last year, they managed to earn themselves nearly $11 million through this scheme.<br />
KT is cooperating with the police as the investigation continues, and will be forced to set up a website its users can visit to check whether their information has been compromised, the Yonhap News Agency <a href="http://english.yonhapnews.co.kr/business/2014/03/07/17/0501000000AEN20140307000900320F.html" target="_blank">reported</a>.<br />
The South Korean Ministry of Science, ICT and Future Planning is warning potentially affected users to be on the lookout for phishing emails impersonating the company and taking advantage of the situation to make them share more personal details.
</div>

Cyber Crime Data Leak Hacking News Korean Hackers News Privacy Personal info of 12 million KT customers Leaked

Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial info...

Russian Defence Hacked, 500+MB Data Leaked

3/06/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Russian Defence Export Hacked" border="0" height="71" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" title="Russian Defence Hacked" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
Today Russian hacktivist <a href="https://twitter.com/Rucyborg" target="_blank">Rucyborg</a> has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT (<a href="http://www.roe.ru/" target="_blank">http://www.roe.ru/</a>).<br />
The leak was announced just a short time ago from twitter and has been posted to <a href="https://www.cyberguerrilla.org/blog/?p=17581" target="_blank">cyberguerrilla</a>. The leaked files are just the first part of a few to come from the Russian government.<br />
The attacks have been carried out due to the recent drama Putin is causing and the Russian hackers have stated they do not want any war all they want to do is expose Putin and his government for what they are.<br />
they have also stated that leaks from <a href="https://en.wikipedia.org/wiki/Sukhoi" target="_blank">Sukhoi</a>, <a href="https://en.wikipedia.org/wiki/Oboronprom" target="_blank">Oboronprom</a>, <a href="http://eng.gazflot.ru/" target="_blank">Gazflot</a>, <a href="http://eng.gazflot.ru/" target="_blank">Rusal</a> and others.<br />
The leaked data has been uploaded to <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar" target="_blank">bayfiles</a> as a 488MB rar file and a <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar">preview</a> of the leaked documents has also been provided.<br />
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" width="229" /></a></div>
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" width="320" /></a></div>
<br /><br /><br /><br /></div>

Anonymous Data Leak Hacking News News Russian Hackers Russian Defence Hacked, 500+MB Data Leaked

Today Russian hacktivist Rucyborg has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT ( http://www.roe.ru/ )...

Bitcoin Bank Hacked, Theft of $6,20,000

3/04/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqrBYVYzRsfVnaUNr447VTqFtwzKDZUNcHJocKWkQNtZ8KpPCHCykPNCC3c7qhrtW8-6iSe2wkHrqQlrUmXalRzjg02z5mPShMs1qQUbx3BBnMJTaUE_JmKor5wZMN-9_bo7jtvuaQohGm/s1600/bitcoin-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Bitcoin Bank Hacked, Theft of $6,20,000" border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqrBYVYzRsfVnaUNr447VTqFtwzKDZUNcHJocKWkQNtZ8KpPCHCykPNCC3c7qhrtW8-6iSe2wkHrqQlrUmXalRzjg02z5mPShMs1qQUbx3BBnMJTaUE_JmKor5wZMN-9_bo7jtvuaQohGm/s1600/bitcoin-hacked.png" title="Bitcoin Bank Hacked, Theft of $6,20,000" width="400" /></a></div>
<br />
Flexcoin, famous for making <a href="http://www.hackerschronicle.com/search/label/Bitcoin" target="_blank">bitcoin</a> banking as easy as regular banking, is no more. The company shut its doors on Tuesday morning after hackers stole 896 bitcoins (nearly $620,000) from its vault on Sunday. And the most unsettling thing? That wasn't even the only bitcoin heist last weekend.<br />
To <a href="https://en.bitcoin.it/wiki/Flexcoin" target="_blank">Flexcoin's</a> credit, it wasn't completely cleaned out by hackers. Hackers did clean out Flexcoin's hot wallet, but an undisclosed number of bitcoins in cold storage were untouched. "Cold storage" simply means that the bitcoins were kept in computers <a href="https://en.bitcoin.it/wiki/Cold_storage" target="_blank">not connected to the internet</a>, an extra level of security for which customers pay an extra 0.5 percent. Flexcoin will give those bitcoins back to customers. Those whose bitcoins were stolen are, well, they're shit out of luck because bitcoins aren't insured like good ol' greenbacks are in most banks.<br />
If this sounds like a familiar story, that's because it is. On Tuesday, another bitcoin firm called <a href="https://bitcointalk.org/index.php?topic=499580" target="_blank">Polonix</a> also admitted that hackers broke in and stole 12.5 percent of its reserves, though it plans on replenishing the lost 'coin itself. And who could forget the infamous implosion of Mt.Gox, the Japan-based bitcoin exchange that filed for bankruptcy last week and announced that $424 million worth of cryptocurrency was lost and gone forever. Those just a couple of the major heists and boondoggles on a growing list of heists and boondoggles.<br />
But what do you expect. The burgeoning bitcoin industry is famously unstable and <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerable</a>. Sure, it's an exciting idea for the sake of liberty and anarchy and whatever! It's just not the safest way to store your money right now, is all.</div>

Bitcoin Cyber Crime Hacking News News Russian Hackers Source Code Bitcoin Bank Hacked, Theft of $6,20,000

Flexcoin, famous for making bitcoin banking as easy as regular banking, is no more. The company shut its doors on Tuesday morning after...

EC-Council Hacked 2014

2/23/2014 cyb3r.gladiat0r 0

Defacement EC-Council Hacking News News EC-Council Hacked 2014

The security company EC-Council which provides multiple certificates like the Certified Ethical Hacker has been hacked by a hacker th...