New Vulnerability found in WhatsApp, read private chats

3/13/2014 The Hackers Chronicle 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMV7ZNbCJBEVMViXjnvDdTZLvS_yxGYsRM-ueqmB8PvuVWfgEtxy0IKs39CXiTkStUIoRE8sn6PWwb1VcWL7k19RwSkZkIkIkiPEJm3jDSHkCgpUjAWVheakIS437iPbWkYbBnlsmTMFba/s1600/new-vulnerability+in+whatsapp.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="New Vulnerability found in WhatsApp" border="0" height="167" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMV7ZNbCJBEVMViXjnvDdTZLvS_yxGYsRM-ueqmB8PvuVWfgEtxy0IKs39CXiTkStUIoRE8sn6PWwb1VcWL7k19RwSkZkIkIkiPEJm3jDSHkCgpUjAWVheakIS437iPbWkYbBnlsmTMFba/s1600/new-vulnerability+in+whatsapp.jpg" title="New Vulnerability found in WhatsApp" width="320" /></a></div>
<br />
A security consultant has uncovered a <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">security hole</a> in <a href="http://www.hackerschronicle.com/search/label/WhatsApp" target="_blank">WhatsApp</a>, the instant messaging platform recently acquired by <a href="http://www.hackerschronicle.com/search/label/Facebook" target="_blank">Facebook</a>. The flaw can be leveraged to gain access to the private chats of Android device owners.<br />
Many people are concerned with the <a href="http://www.hackerschronicle.com/search/label/Privacy" target="_blank">privacy</a> implications that come with Facebook’s acquisition of WhatsApp. However, as Bas Bosschert, the man who identified the vulnerability, highlights, Facebook didn’t need to buy the company if all it wanted to do was read users’ chats.<br />
The expert has found that any Android app that’s allowed access to the SD card installed on the device can easily access private conversations. <br />
All chats are saved in a database file (msgstore.db) that’s stored on the SD card. Bosschert has developed a <a href="http://bas.bosschert.nl/steal-whatsapp-database/#more-1" target="_blank">proof-of-concept</a> which demonstrates that any app that’s granted permission to access the card can easily retrieve the database and upload it to a remote server.<br />
According to Bosschert, in newer versions of <a href="http://www.whatsapp.com/%E2%80%8E" target="_blank">WhatsApp</a>, the database file is encrypted. However, this doesn’t mean that users’ private chats are secure. It simply means that an attacker would have to decrypt the database file to gain access to its contents.<br />
The decryption key can be found in WhatsApp Xtract, an app that allows users to create backups of WhatsApp conversations.<br />
The POC developed by the expert is designed so that when the database is retrieved, the victim only sees a simple loading screen. Cybercriminals could combine the data-stealing code with a popular application to harvest a large number of databases. <br />
In February, security researchers from Praetorian revealed finding a number of SSL-related vulnerabilities in WhatsApp. Most of them were fixed almost immediately by the company.
<br />
Source: <a href="http://www.softpedia.com/" rel="nofollow" target="_blank">Softpedia</a></div>

Mobile Vulnerability WhatsApp New Vulnerability found in WhatsApp, read private chats

A security consultant has uncovered a security hole in WhatsApp , the instant messaging platform recently acquired by Facebook . The fl...

Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

3/11/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
I've got so many queries about installing <a href="http://www.hackerschronicle.com/search/label/Aircrack" target="_blank">Aircrack</a> suite on <a href="http://www.hackerschronicle.com/search/label/Centos">CentOS</a> or Ubuntu. Today I will show you how to install Wi-Fi cracking suite on both CentOS 6.3 and <a href="http://www.hackerschronicle.com/search/labels/Ubuntu" target="_blank">Ubuntu</a> 13.10<br />
<h3>
Introduction</h3>
<div class="define border-fade">
Aircrack-ng is an 802.11 <a href="http://www.hackerschronicle.com/search/label/WEP" target="_blank">WEP</a> and <a href="http://www.hackerschronicle.com/search/label/WPA" target="_blank">WPA-PSK</a> keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools. In fact, Aircrack-ng is a set of tools for auditing wireless networks.</div>
<div class="highlight pop">
Note:</div>
Click on the pics to view screenshots in higher resolution.<br />
<h3>
Ubuntu 13.10</h3>
I've installed Ubuntu 13.10 on my system, Step required to install Aircrack are as follows.<br />
<ol>
<li>Check your system architecture.<br />
 <br /><div class="command wobble-horizontal">
# #uname -ni</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mWxZ3-23U_ObCR3IfbBRzDASuEV0yNgXbM60Jc-YsNjDMwjHyd-K8d4c3RJy1kKydvxD4WY0fZR5EOznYF3S2e3RJlBGDlQupOguKzeA2HgX8TtW-dbjyn62ztx7bVzq3iOOIjXqI-3h/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Installing Aircrack" border="0" height="209" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mWxZ3-23U_ObCR3IfbBRzDASuEV0yNgXbM60Jc-YsNjDMwjHyd-K8d4c3RJy1kKydvxD4WY0fZR5EOznYF3S2e3RJlBGDlQupOguKzeA2HgX8TtW-dbjyn62ztx7bVzq3iOOIjXqI-3h/s1600/1.png" title="Installing Aircrack" width="320" /></a></div>
<li>Switch to root account <br /><div class="command wobble-horizontal">
# sudo su</div>
</li>
<br />
<li>Install gcc, Kernel headers and make <br /><div class="command wobble-horizontal">
# apt-get install build-essential</div>
</li>
<br />2<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkylUlwOUZJiMuAgUvnhxuYI7v-xvfmUaxZfAxjtV9UzmSUoT1Wsi37OPIKxiRLojtNJl6ypZdnrsiQy9I6TgRx_XFOUiwNJCVzILg7t_syVJMDDb5HQYP7FHqmqYtFlAhhPC6Ga0wXlXC/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="66" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkylUlwOUZJiMuAgUvnhxuYI7v-xvfmUaxZfAxjtV9UzmSUoT1Wsi37OPIKxiRLojtNJl6ypZdnrsiQy9I6TgRx_XFOUiwNJCVzILg7t_syVJMDDb5HQYP7FHqmqYtFlAhhPC6Ga0wXlXC/s1600/2.png" width="320" /></a></div>
<li>Install OpenSSl development <br /><div class="command wobble-horizontal">
# apt-get install libssl-dev</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8kBgbhA28zdZhkQJszjVO34K-9snGWLrJ76sRBoYxCtU9h5zMzAdpTZBPOXsgmC3muMOa_E1pCbgrNz9h6f4Qss6UNTgoCMrred_qWA0oskacN6PO31ew_yF562LYmAceE3eA3mWzNgd4/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="132" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8kBgbhA28zdZhkQJszjVO34K-9snGWLrJ76sRBoYxCtU9h5zMzAdpTZBPOXsgmC3muMOa_E1pCbgrNz9h6f4Qss6UNTgoCMrred_qWA0oskacN6PO31ew_yF562LYmAceE3eA3mWzNgd4/s1600/3.png" width="320" /></a></div>
<li>Download the source of Aircrack-ng <br /><div class="command wobble-horizontal">
# wget http://download.aircrack-ng.org/aircrack-ng-1.2-beta2.tar.gz</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiVNBT3lp6YxIi6o4BoMN0ZAhTxQKfLixIHqhIFPisF2oWP3oVsbPn4zkoVGqYPqfRQ8zOW6SI4TAEnKWqLzlmKR5Gchq96gvW_8-SWRal8nmjP-uS2Y40KbeMBXYOJjW6ZlPtLybmvtfO/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="107" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiVNBT3lp6YxIi6o4BoMN0ZAhTxQKfLixIHqhIFPisF2oWP3oVsbPn4zkoVGqYPqfRQ8zOW6SI4TAEnKWqLzlmKR5Gchq96gvW_8-SWRal8nmjP-uS2Y40KbeMBXYOJjW6ZlPtLybmvtfO/s1600/4.png" width="320" /></a></div>
<li>Untar the tar file <br /><div class="command wobble-horizontal">
# tar -zxvf aircrack-ng-1.2-beta2.tar.gz</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAe_K4HuXn5zjVOmA2-eRvYa7iiS9GwBINKB1C3vfuXAfBLLKDk0PEz8zQFm9F69Vj4UbFvl1Ja8Ckt23aM_e3FKh61AD9B4_Ouc8gO6e65p35G7xjyS4p_o8GHRum4hlrS-XeuMfs1oKR/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="42" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAe_K4HuXn5zjVOmA2-eRvYa7iiS9GwBINKB1C3vfuXAfBLLKDk0PEz8zQFm9F69Vj4UbFvl1Ja8Ckt23aM_e3FKh61AD9B4_Ouc8gO6e65p35G7xjyS4p_o8GHRum4hlrS-XeuMfs1oKR/s1600/5.png" width="320" /></a></div>
<li>Move to aircrack directory and edit common.mak file. <br /><div class="command wobble-horizontal">
# cd aircrack-ng-1.2-beta2<br />
nano common.mak</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtqOkah3b8ro6HDKcsPnRHnoLYxPq4TbNVal4yhyphenhyphen7-U06pjHl-mQTicf1S25Obrc5wOt63lemMMW8Nt4dN_nXOBRyKd_q2uZCXF8WPgzZY-Th8fZCVezymbl0faKlreT5oF2M8fRL91hFE/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="45" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtqOkah3b8ro6HDKcsPnRHnoLYxPq4TbNVal4yhyphenhyphen7-U06pjHl-mQTicf1S25Obrc5wOt63lemMMW8Nt4dN_nXOBRyKd_q2uZCXF8WPgzZY-Th8fZCVezymbl0faKlreT5oF2M8fRL91hFE/s1600/6.png" width="320" /></a></div>
<li>Find CFLAGS line, it should look like CFLAGS ?= -g -W -Wall -O3</li>
<br />
<li>Save and exit</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNs6YZwb8iiLLnLHe7R9oiq27fSlBsqBIT6swgZIHalVgaITbiCTiCPiQRbc3lwhhR5-IEQLJC9X36FPlUtyL0rE39xxZK18fzIPmAd9WenKJxc6HxQQ4C7-rhLuC7hAoNez2sNcIc1v8g/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNs6YZwb8iiLLnLHe7R9oiq27fSlBsqBIT6swgZIHalVgaITbiCTiCPiQRbc3lwhhR5-IEQLJC9X36FPlUtyL0rE39xxZK18fzIPmAd9WenKJxc6HxQQ4C7-rhLuC7hAoNez2sNcIc1v8g/s1600/7.png" width="320" /></a></div>
<li>Compile and install the source <br /><div class="command wobble-horizontal">
# make install</div>
</li>
<br />
<li>Update Aircrack Suite <br /><div class="command wobble-horizontal">
# airodump-ng-oui-update</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrPgHvIz59d-nQoFN_ISjVr1O5h6Cu40mRj50kE0A7HgI31vDYgNlZni96xQplYpLj03z1zKiYz4J4uCORnu21qblK98Dl-z7B7amlq3wG3rwVFYsuTw80KnkpqfIMN2Pzz-aaxORPr6J4/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="49" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrPgHvIz59d-nQoFN_ISjVr1O5h6Cu40mRj50kE0A7HgI31vDYgNlZni96xQplYpLj03z1zKiYz4J4uCORnu21qblK98Dl-z7B7amlq3wG3rwVFYsuTw80KnkpqfIMN2Pzz-aaxORPr6J4/s1600/8.png" width="320" /></a></div>
</ol>
Congrats, Aircrack suite is now installed.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfvH85Uz1QkcZK-wC-o5amh9mnm6STjpyo_pAg2bypbNALbgvFQEldqf2TjFUvlPIBXF1i2NKbx3GIj8B2O79zMAnasW8hDLcgTeBD_56Z-CNzuhnghdIXxiv2PuOZrdQSij5A6wAl0vq/s1600/9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="74" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfvH85Uz1QkcZK-wC-o5amh9mnm6STjpyo_pAg2bypbNALbgvFQEldqf2TjFUvlPIBXF1i2NKbx3GIj8B2O79zMAnasW8hDLcgTeBD_56Z-CNzuhnghdIXxiv2PuOZrdQSij5A6wAl0vq/s1600/9.png" width="320" /></a></div>
<br />
<h3>
CentOS 6.4</h3>
<ol>
<li>Check your system architecture <br /><div class="command wobble-horizontal">
# uname -ni</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXj1gfbpV87Li960jkTZR3tnakWDWSgXBq5nrpC0VC7G9b1M_kJalTxt9IEKYqHNw7oTOF5GVVzuZ2UqSykGFs0S8slQHUYYHLQnHlqjLLza-KWD1NROozepxZAWKT4j0Kg5u6wsTO5H6G/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXj1gfbpV87Li960jkTZR3tnakWDWSgXBq5nrpC0VC7G9b1M_kJalTxt9IEKYqHNw7oTOF5GVVzuZ2UqSykGFs0S8slQHUYYHLQnHlqjLLza-KWD1NROozepxZAWKT4j0Kg5u6wsTO5H6G/s1600/1.png" width="320" /></a></div>
<li>Open Browser and check for appropriate RPM package from<div class="system pop">
http://pkgs.repoforge.org/aircrack-ng/</div>
</li>
<br />
<li>Copy the link for RPM package and download that package <br /><div class="command wobble-horizontal">
# wget http://pkgs.repoforge.org/aircrack-ng/aircrack-ng-0.9.3-1.el5.rf.i386.rpm</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA8Q_hGimI4oLuT36T1Z0vhKtLa2NfUBBhQRNftYYnFvuHicCMcOCIabzO7z4pbWROMwWiWkpNHYuwOjbe5ZfpoSSUuvHQQS-ojgRFHQ3GsFavaffPXgmlfRwcZ5VizM1YMCcErgPtkqJg/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="237" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA8Q_hGimI4oLuT36T1Z0vhKtLa2NfUBBhQRNftYYnFvuHicCMcOCIabzO7z4pbWROMwWiWkpNHYuwOjbe5ZfpoSSUuvHQQS-ojgRFHQ3GsFavaffPXgmlfRwcZ5VizM1YMCcErgPtkqJg/s1600/2.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1t1ScgXAHosovv87fhkUM5MxsVfR2YwloaOFdeCOIiXjxerBTc3hkeixQFmLqS47W5Y1MB__segnGz4Mo8wGop4pbDne6HZ8GcGEPv3OI-lbkRkCy5rXnxRqfGZ4ziLw4ZdIjoL70Hx-F/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1t1ScgXAHosovv87fhkUM5MxsVfR2YwloaOFdeCOIiXjxerBTc3hkeixQFmLqS47W5Y1MB__segnGz4Mo8wGop4pbDne6HZ8GcGEPv3OI-lbkRkCy5rXnxRqfGZ4ziLw4ZdIjoL70Hx-F/s1600/3.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<li>Install the package <br /><div class="command wobble-horizontal">
# rpm -ivh aircrack-ng-0.9.3-1.el5.rf.i386.rpm</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_jLNg3lQIhiJJdo0hGu8LPO1ZqLxaKsyojiNSlUEFbWaCALD8Hzl0cQ2nh7KWUUk67l4MhmaRz23-x-I0_8f3HnnlVcnJ8niJurH1FHACHgM4dmDfpvKlnYmgW4jIrh9FK5p2leqwLWGS/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_jLNg3lQIhiJJdo0hGu8LPO1ZqLxaKsyojiNSlUEFbWaCALD8Hzl0cQ2nh7KWUUk67l4MhmaRz23-x-I0_8f3HnnlVcnJ8niJurH1FHACHgM4dmDfpvKlnYmgW4jIrh9FK5p2leqwLWGS/s1600/4.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</ol>
<div class="highlight">
<strong>Congrats</strong></div>
Aircrack Suite has been installed on your Machine.<br />
We will soon post about cracking Wi-Fi with CentOS/Ubuntu</div>

Aircrack Centos Hacking Tools Linux Tutorials Ubuntu Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

I've got so many queries about installing Aircrack suite on CentOS or Ubuntu. Today I will show you how to install Wi-Fi cracking sui...

DAVOSET, most powerfull DDoS Tool released

3/10/2014 The Hackers Chronicle 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZlFYyQfV_YUTteFhVKASM96_VEWfcndjgzi3bHx9kgZxtnjDRzrIpEXqTDWwcVXf12_gIS-moq1ryaSJLREpCBL7Pkr-WpjLUWxEMa466G5qCr5G8cOOkhUcygzt1T112nudcQMan8LMh/s1600/davoset.PNG" imageanchor="1"><img alt="DAVOSET, most powerfull DDoS Tool released" border="0" height="106" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZlFYyQfV_YUTteFhVKASM96_VEWfcndjgzi3bHx9kgZxtnjDRzrIpEXqTDWwcVXf12_gIS-moq1ryaSJLREpCBL7Pkr-WpjLUWxEMa466G5qCr5G8cOOkhUcygzt1T112nudcQMan8LMh/s1600/davoset.PNG" title="DAVOSET, most powerfull DDoS Tool released" width="400" /></a></div>
<br />
DDoS attacks via other sites execution tool (<a href="http://www.hackerschronicle.com/search/label/DAVOSET" target="_blank">DAVOSET</a>) - a tool for use by Abuse of Functionality and XML External Entities <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerabilities</a> at some sites for attacks on other sites (including <a href="http://www.hackerschronicle.com/search/label/DOS" target="_blank">DoS</a> and <a href="http://www.hackerschronicle.com/search/label/DDoS" target="_blank">DDoS</a> attacks). <br />
In new version there were added support of security bypass in plugin Google Maps, added new services into full list of zombies and removed non-working services from lists of zombies.<br />
Also there was added BYPASS method into the format of the list of zombie-servers. It allows to bypass protection of web applications, such as domain restriction in Google Maps.<br />
In total there are 170 zombie-services in the list, which are ready to strike against any website.<br />
<div class="highlight">
<b>Download: </b><a href="http://websecurity.com.ua/uploads/2014/DAVOSET_v.1.1.8.rar" target="_blank">websecurity.com.ua</a></div>
<div class="highlight">
<b>Video Demonstration:</b></div>
<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/RKi35-f346I" width="420"></iframe><br /></div>

DAVOSET DDoS DOS Hacking Tools DAVOSET, most powerfull DDoS Tool released

DDoS attacks via other sites execution tool ( DAVOSET ) - a tool for use by Abuse of Functionality and XML External Entities vulnerabili...

Russia attacks Ukraine with cyber weapon, Snake

3/09/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkufqwMk63tMR0xjp5-I1wm07WieL4DbAf_bk96E2khr9KyudVRIG7ss6m8pp6AECyuICHtMbzZBnTJbC5evBnEdcvHbONe8w43iifpTms1XeWoqt4R9GKYc86CVdIlOg_6VrCfI6cXJ36/s1600/Ukraine-cyber-attack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ukraine's Computers attcked with a Virus, Snake similar to Stuxnet" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkufqwMk63tMR0xjp5-I1wm07WieL4DbAf_bk96E2khr9KyudVRIG7ss6m8pp6AECyuICHtMbzZBnTJbC5evBnEdcvHbONe8w43iifpTms1XeWoqt4R9GKYc86CVdIlOg_6VrCfI6cXJ36/s1600/Ukraine-cyber-attack.jpg" title="Ukraine's Computers attcked with a Virus, Snake similar to Stuxnet" width="320" /></a></div>
<br />
Dozens of computer networks in Ukraine have been infected by an aggressive new cyber weapon called <a href="http://www.hackerschronicle.com/search/label/Snake" target="_blank">Snake</a>, according to expert analysis.<br />
 The cyber weapon has been increasingly used since the start of this year, even before protests that led to the overthrow of president Viktor Yanukovych, British-based <a href="http://en.wikipedia.org/wiki/BAE_Systems" rel="nofollow" target="_blank">BAE Systems</a> said in a report published Friday.<br />
 The complex composition of <a href="http://www.hackerschronicle.com/search/label/Snake" target="_blank">Snake</a> bears similarities with <a href="http://www.hackerschronicle.com/search/label/Stuxnet" target="_blank">Stuxnet</a>, the <a href="http://www.hackerschronicle.com/search/label/Malwares" target="_blank">malware</a> that disrupted Iran's nuclear facilities in 2010.<br />
Snake—also known as Ouroboros after the serpent in Greek mythology—gives remote attackers "full remote access to the compromised system", BAE said.<br />
Because it can stay inactive for a number of days, it is extremely hard to detect.
Although its origins are unclear, its developers appear to operate it in the same timezone as Moscow—GMT plus four hours—and some <a href="http://www.hackerschronicle.com/search/label/Russian%20Hackers" target="_blank">Russian</a> text is embedded into the code, BAE says.
BAE has identified 14 cases of Snake in Ukraine since the start of 2014, compared to eight cases in the whole of 2013. In all there have been 32 reported cases in <a href="http://www.hackerschronicle.com/search/label/Ukraine" target="_blank">Ukraine</a> since 2010, out of 56 worldwide.<br />
 Nigel Inkster, who until 2006 was the head of operations and intelligence at Britain's MI6 foreign intelligence agency, said Russia was most likely behind the cyber-attacks on Ukraine.<br />
"If you look at it in probabilistic terms... then the list of suspects boils down to one, he told the Financial Times.
"Until recently the Russians have kept a low profile, but there's no doubt in my mind that they can do the full scope of cyber attacks, from denial of service to the very, very sophisticated."</div>

Hacking News Malwares News Russian Hackers Snake Stuxnet Ukraine Russia attacks Ukraine with cyber weapon, Snake

Dozens of computer networks in Ukraine have been infected by an aggressive new cyber weapon called Snake , according to expert analysis....

Personal info of 12 million KT customers Leaked

3/08/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Personal info of 12 million KT customers Leaked" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEichfGTVKfClvK_w94PRErJUgAnXvPyNPCkHHyAC182eQnqMQBbjFPrSG3opGqeGaewCyarqeZyb5CcNeSJB_LLOnFjZ3Ir5clrR1sP_kCse6-WS2DFFg9oH3W85zl3ZUm7VRwdETl4y8Bp/s1600/KT-data-leak.png" title="Personal info of 12 million KT customers Leaked" width="320" /></a></div>
<br />
Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial information of some 12 million customers of the South Korean telecom giant.<br />
According to the <a href="http://edition.cnn.com/2014/03/06/business/south-korea-telecoms-hackers" target="_blank">CNN</a>, one of the arrested men, a 29-year-old surnamed Kim, was a hacker who broke into the company's computer system with customized hacking software and extracted customer information such as names, resident registration numbers and bank account information.<br />
The initial breach apparently happened in February 2013, and he has been extracting the data ever since. He allegedly sold it to a 37-year-old man surnamed Park, a telemarketing business owner that used the information to credibly impersonate a KT Corp. employee in order to sell cell phones.<br />
Another man has been arrested but almost immediately released.<br />
Apparently, in the last year, they managed to earn themselves nearly $11 million through this scheme.<br />
KT is cooperating with the police as the investigation continues, and will be forced to set up a website its users can visit to check whether their information has been compromised, the Yonhap News Agency <a href="http://english.yonhapnews.co.kr/business/2014/03/07/17/0501000000AEN20140307000900320F.html" target="_blank">reported</a>.<br />
The South Korean Ministry of Science, ICT and Future Planning is warning potentially affected users to be on the lookout for phishing emails impersonating the company and taking advantage of the situation to make them share more personal details.
</div>

Cyber Crime Data Leak Hacking News Korean Hackers News Privacy Personal info of 12 million KT customers Leaked

Two men have been arrested in connection with the massive KT Corp. data breach that resulted in the theft of personal and financial info...

Russian Defence Hacked, 500+MB Data Leaked

3/06/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Russian Defence Export Hacked" border="0" height="71" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOflRQn5hAdjYc6YeeCb31T1Apix8GJ46RKRFwXVksjDRg_09tVZB-_GeDWpeEf0Lm3MLZ2gKrDPRpx3lM8-WTX2ivOW3gkME_440Dap1bgzrgZku_aZ2qFAcgZ-Yg_Sl6fCqAUve5MMrA/s1600/russian-defence-hacked.png" title="Russian Defence Hacked" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
Today Russian hacktivist <a href="https://twitter.com/Rucyborg" target="_blank">Rucyborg</a> has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT (<a href="http://www.roe.ru/" target="_blank">http://www.roe.ru/</a>).<br />
The leak was announced just a short time ago from twitter and has been posted to <a href="https://www.cyberguerrilla.org/blog/?p=17581" target="_blank">cyberguerrilla</a>. The leaked files are just the first part of a few to come from the Russian government.<br />
The attacks have been carried out due to the recent drama Putin is causing and the Russian hackers have stated they do not want any war all they want to do is expose Putin and his government for what they are.<br />
they have also stated that leaks from <a href="https://en.wikipedia.org/wiki/Sukhoi" target="_blank">Sukhoi</a>, <a href="https://en.wikipedia.org/wiki/Oboronprom" target="_blank">Oboronprom</a>, <a href="http://eng.gazflot.ru/" target="_blank">Gazflot</a>, <a href="http://eng.gazflot.ru/" target="_blank">Rusal</a> and others.<br />
The leaked data has been uploaded to <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar" target="_blank">bayfiles</a> as a 488MB rar file and a <a href="http://bayfiles.net/file/18nWT/NHiWky/rusarms.rar">preview</a> of the leaked documents has also been provided.<br />
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3UbsoF_nnfmXkzISesJ79ayr6pS_VH2xdqCHbcjEOwc8lPmcfjpnlIgzH_U0elX5qMbLf-Tu79cfJNUo8t56Xzttmvj7R7A0neJuC0fC4O5hKOTMEPPKWpiGrDLGvJ4BAkjlS0MtZnn9n/s1600/roe-mil-leak-1.jpg" width="229" /></a></div>
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsxdtUDPj1N_YfEjD0-uc9AMnKJSbP6cTEdpL8JuH7wD6rhZ0ye0ZbivUIzFApi0EhGXUignB15GRWt1fbWVfA5wHQa-dmoN_qHhDEONx1wKjg5HYfCiFZOV3PBRgEnuiWJnkyErZQ_kl/s1600/roe-mil-leak-3.jpg" width="320" /></a></div>
<br /><br /><br /><br /></div>

Anonymous Data Leak Hacking News News Russian Hackers Russian Defence Hacked, 500+MB Data Leaked

Today Russian hacktivist Rucyborg has announced a big leak of files from Russian Defence Export ROSOBORONEXPORT ( http://www.roe.ru/ )...

Bitcoin Bank Hacked, Theft of $6,20,000

3/04/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqrBYVYzRsfVnaUNr447VTqFtwzKDZUNcHJocKWkQNtZ8KpPCHCykPNCC3c7qhrtW8-6iSe2wkHrqQlrUmXalRzjg02z5mPShMs1qQUbx3BBnMJTaUE_JmKor5wZMN-9_bo7jtvuaQohGm/s1600/bitcoin-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Bitcoin Bank Hacked, Theft of $6,20,000" border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqrBYVYzRsfVnaUNr447VTqFtwzKDZUNcHJocKWkQNtZ8KpPCHCykPNCC3c7qhrtW8-6iSe2wkHrqQlrUmXalRzjg02z5mPShMs1qQUbx3BBnMJTaUE_JmKor5wZMN-9_bo7jtvuaQohGm/s1600/bitcoin-hacked.png" title="Bitcoin Bank Hacked, Theft of $6,20,000" width="400" /></a></div>
<br />
Flexcoin, famous for making <a href="http://www.hackerschronicle.com/search/label/Bitcoin" target="_blank">bitcoin</a> banking as easy as regular banking, is no more. The company shut its doors on Tuesday morning after hackers stole 896 bitcoins (nearly $620,000) from its vault on Sunday. And the most unsettling thing? That wasn't even the only bitcoin heist last weekend.<br />
To <a href="https://en.bitcoin.it/wiki/Flexcoin" target="_blank">Flexcoin's</a> credit, it wasn't completely cleaned out by hackers. Hackers did clean out Flexcoin's hot wallet, but an undisclosed number of bitcoins in cold storage were untouched. "Cold storage" simply means that the bitcoins were kept in computers <a href="https://en.bitcoin.it/wiki/Cold_storage" target="_blank">not connected to the internet</a>, an extra level of security for which customers pay an extra 0.5 percent. Flexcoin will give those bitcoins back to customers. Those whose bitcoins were stolen are, well, they're shit out of luck because bitcoins aren't insured like good ol' greenbacks are in most banks.<br />
If this sounds like a familiar story, that's because it is. On Tuesday, another bitcoin firm called <a href="https://bitcointalk.org/index.php?topic=499580" target="_blank">Polonix</a> also admitted that hackers broke in and stole 12.5 percent of its reserves, though it plans on replenishing the lost 'coin itself. And who could forget the infamous implosion of Mt.Gox, the Japan-based bitcoin exchange that filed for bankruptcy last week and announced that $424 million worth of cryptocurrency was lost and gone forever. Those just a couple of the major heists and boondoggles on a growing list of heists and boondoggles.<br />
But what do you expect. The burgeoning bitcoin industry is famously unstable and <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerable</a>. Sure, it's an exciting idea for the sake of liberty and anarchy and whatever! It's just not the safest way to store your money right now, is all.</div>

Bitcoin Cyber Crime Hacking News News Russian Hackers Source Code Bitcoin Bank Hacked, Theft of $6,20,000

Flexcoin, famous for making bitcoin banking as easy as regular banking, is no more. The company shut its doors on Tuesday morning after...