# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-549717875761077392
title: Yahoo Ad Network abused to redirect users to malicious websites serving Magnitude Exploit Kit
uri: Yahoo-Ad-Network-abused-to-redirect-users-to-malicious-websites-servin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/549717875761077392
content:
Internet advertisement networks provide hackers with an effective venue for targeting wide range computers through malicious advertisements. Previously it was reported by some security researchers that Yahoo's online advertising Network is one of the top ad networks were being abused to spread malware by cyber criminals.
Recent report published by Fox-IT, Hackers are using Yahoo's advertising <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eY5F_-AtCJo:epBOeaaQrNA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eY5F_-AtCJo:epBOeaaQrNA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8023463255282724865
title: MIT University website defaced by Anonymous hackers in honor of Aaron Swartz
uri: MIT-University-website-defaced-by-Anonymous-hackers-in-honor-of-Aaron
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8023463255282724865
content:
Today is January 11, 2014 and the last year on the same day a 26-year-old, young hacker, Reddit cofounder and the digital Activist, Aaron H. Swartz committed suicide. He found dead in his Brooklyn, New York apartment, where he had hanged himself.&lt;!-- adsense --&gt;Swartz was indicted by a federal grand jury in July 2011, accused of hacking the MIT JSTOR database and stealing over four million <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DdNvGL5KjWU:IXy-ETjsc2c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DdNvGL5KjWU:IXy-ETjsc2c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6067154037083032873
title: Mac OS X Flashback Trojan is still alive, recently infected 22,000 Apple machines
uri: Mac-OS-X-Flashback-Trojan-is-still-alive-recently-infected-22-000-App
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6067154037083032873
content:
The Flashback Trojan, the most sophisticated piece of malware that infected over 600,000 Apple's Macs systems back in April, 2012 is still alive and has infected about 22,000 machines recently, according to the researchers from Intego.
For a refresh, Flashback Trojan was first discovered in September 2011, basically a trojan horse that uses a social engineering to trick users into installing a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9HSvc6HT4X8:Yar_H_wmRZc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9HSvc6HT4X8:Yar_H_wmRZc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5066848401925993871
title: KALI Linux 1.0.6 released; officially added Emergency Self Destruct feature
uri: KALI-Linux-1-0-6-released-officially-added-Emergency-Self-Destruct-fe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5066848401925993871
content:
A few days back the developers of one of the most advance open source operating system for penetration testing called 'KALI Linux' announced that they were planning to include "emergency self-destruction of LUKS".&lt;!-- adsense --&gt;They patched a utility called cryptsetup, which introduces a self destruction feature that will allow the Kali user to encrypt the full hard disk to make the data <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j6bzL8gD8mA:iHHpGshd72g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j6bzL8gD8mA:iHHpGshd72g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6354230107570904725
title: Hackers behind TARGET data breach looking for Pro-cracker to decrypt Credit card PINs
uri: Hackers-behind-TARGET-data-breach-looking-for-Pro-cracker-to-decrypt-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6354230107570904725
content:
I think you haven’t forgotten the massive data breach occurred at TARGET, the third-largest U.S. Retailer during last Christmas Holidays. People shop during Black Friday sales in which over 40 million Credit &amp; Debit cards were stolen, used to pay for purchases at its 1500 stores nationwide in the U.S.
TARGET officially confirmed that the encrypted PINs (personal identification numbers) of payment<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hk28s1kldlw:WBqlOL7tDAo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hk28s1kldlw:WBqlOL7tDAo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8300733608166691252
title: Small satellite terminals (VSAT) are vulnerable to Cyber attack
uri: Small-satellite-terminals-(VSAT)-are-vulnerable-to-Cyber-attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8300733608166691252
content:
The Military Units that rely on very small aperture terminals (VSATs) for satellite communications in remote areas are vulnerable to cyber attack.
Researchers from cyber intelligence company IntelCrawler recently identified nearly 3 million VSATs, many of them in the United States, and found that about 10,000 of them could be easily accessed because of configuration weaknesses."We have scanned <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nyrKfv_qBzQ:7kmJxkkXblM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nyrKfv_qBzQ:7kmJxkkXblM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1000902548656247070
title: Rogue software update cause Malware attack on Japanese Nuclear Power Plant
uri: Rogue-software-update-cause-Malware-attack-on-Japanese-Nuclear-Power-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1000902548656247070
content:
The most critical and worst target of a State-sponsored cyber-attacks could be Hospitals, Dams, Dykes and Nuclear power stations and this may cause military conflicts between countries.&lt;!-- adsense --&gt;According to Japan Today, The Monju nuclear power plant in Tsuruga, Japan was accidentally targeted by a malware on 2nd January, when a worker updated the system to the latest version of the video <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NVtI_5oUbz4:vtgx5hc5D9U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NVtI_5oUbz4:vtgx5hc5D9U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5703615542565748156
title: Hack or attempt to Hack, you may face 20 years in prison
uri: Hack-or-attempt-to-Hack-you-may-face-20-years-in-prison
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5703615542565748156
content:
The Senate Judiciary Committee Chairman 'Patrick Leahy' reintroduced a revamped version of the "Personal Data Privacy and Security Act" for tough criminal penalties for hackers, that he originally authored in 2005.
During last Christmas Holidays, a massive data breach had occurred at the shopping giant Target, involving hack of 40 million credit &amp; debit cards, used to pay for purchases at its <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AsO6AGFYmeU:wv_d-LFtdcM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AsO6AGFYmeU:wv_d-LFtdcM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1512398630868060524
title: Yahoo Mail turns on HTTPS encryption by default to protect users
uri: Yahoo-Mail-turns-on-HTTPS-encryption-by-default-to-protect-users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1512398630868060524
content:
After the release of NSA Secret spying over Internet communications, I am expecting from all tech companies to make surveillance significantly harder.
Yahoo has HTTPS encryption support since late 2012, but users had to opt in to use the feature. Documents revealed by the Edward Snowden shows that the NSA secretly accessed data from several tech giants, including Yahoo, by intercepting <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7QeTDi0E8M:EbNJczZCrT0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7QeTDi0E8M:EbNJczZCrT0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2991807199700323081
title: 23-year-old Stack overflow vulnerability discovered in X11 Server
uri: 23-year-old-Stack-overflow-vulnerability-discovered-in-X11-Server
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2991807199700323081
content:
X.Org Foundation develops the X-Window System, the standard window system for open source operating systems and devices. Most of the graphical user interfaces for Unix and Linux systems rely on it.
At the 30th Chaos Communication Congress (CCC) in Germany, Ilja van Sprundel, a security researcher gave the presentation titled  "X11 Server security with being 'worse than it looks.'". He found more <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=33ICeK5GF_E:tffAvpV99M4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=33ICeK5GF_E:tffAvpV99M4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2992655055431782503
title: Google Chrome to encrypt Stored Cookies by default to enhance browser security
uri: Google-Chrome-to-encrypt-Stored-Cookies-by-default-to-enhance-browser
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2992655055431782503
content:
When you visit a website, it stores some information on your system through a web browser for later use i.e. Login information, so you do not have to re-login to your website every time you visit the same website on the same browser.
Cookies are usually stored as plain text or in the database by the browser and if a computer is accessed by multiple people, one person might scan another’s cookie <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E8xrVxKwdPY:QbfcrO5MbpI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E8xrVxKwdPY:QbfcrO5MbpI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4558523318956921193
title: Learn to Encrypt Your Emails against an invasion of privacy by NSA
uri: Learn-to-Encrypt-Your-Emails-against-an-invasion-of-privacy-by-NSA
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4558523318956921193
content:
Now that we have enough details about how the NSA's Surveillance program, running for a long time against almost each country of this planet. 
Hundreds of top-secret NSA documents provided by whistleblower Edward Snowden already exposed that Spying projects like PRISM and MUSCULAR are tapping directly into Google and Yahoo internal networks to access our Emails. NSA's tactics are even capable to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ApsnhFTnP3o:OJ8kXU6lRVo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ApsnhFTnP3o:OJ8kXU6lRVo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6281167151531187882
title: Kali Linux introducing Emergency Self Destruct feature to Full Disk Encryption
uri: Kali-Linux-introducing-Emergency-Self-Destruct-feature-to-Full-Disk-En
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6281167151531187882
content:
Full disk encryption is expected to be the top security technology to be adopted this year. Take a moment to think about the information that is present on your personal computer, i.e. Photos, passwords, emails, Important documents from work or Financial data and trade secrets.
Many of us from the Security Industry obviously have enough confidential and important data regarding our work, source <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2u3SKbqn8jI:pqt4aK3th5Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2u3SKbqn8jI:pqt4aK3th5Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7186041790257771207
title: 6 Tips to Save Time Doing Patch Management
uri: 6-Tips-to-Save-Time-Doing-Patch-Management
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7186041790257771207
content:
If you spend more than a few hours a month doing patching; if you stay up until the middle of the night one Saturday each month doing patching; if you just flip on automatic updates and hope for the best; or if you email your users instructions on how to update their machines – then you’re doing it wrong.
Patching shouldn’t be something that takes multiple days, nor is it something that should <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VsZQl79TQb8:NLo6qk493Qw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VsZQl79TQb8:NLo6qk493Qw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7670299945928469001
title: Exclusive - openSUSE Forum Hacked; 79500 Users Data Compromised
uri: Exclusive-openSUSE-Forum-Hacked-79500-Users-Data-Compromised
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7670299945928469001
content:
After Snapchat hack, this can be another worst data breach of the new year. A Pakistani hacker 'H4x0r HuSsY' has successfully compromised the official Forum of 'openSUSE', a Linux distro developed, sponsored &amp; supported by SUSE.&lt;!-- adsense --&gt;The hacker managed to deface the Forum and uploaded its custom message page as shown and account information of 79,500 registered users' may have been <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W_Wuaib_JHw:rNEfnv0xD5o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W_Wuaib_JHw:rNEfnv0xD5o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3252145929560724263
title: Potential backdoors discovered in US-based components used by French Satellites
uri: Potential-backdoors-discovered-in-US-based-components-used-by-French-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3252145929560724263
content:
United Arab Emirates (UAE) may terminate a $930 Million USD contract with France based companies for the supply of two two military Imaging satellites due to the discovery of several US produced components in them.
Now the deal is in danger because the UAE claims it has discovered backdoors in the components which are manufactured in the United States, reported by the Defense News.&lt;!-- adsense --<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mIWO_6u3i4A:W4QWEpIjqRw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mIWO_6u3i4A:W4QWEpIjqRw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1249784962852153945
title: Android based Cars may pose various Security and Privacy Issues
uri: Android-based-Cars-may-pose-various-Security-and-Privacy-Issues
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1249784962852153945
content:
After being an owner of Smartphones, now it’s your turn to own a Smart Car. Wouldn’t it sound great if you could use your favorite mobile apps on Car's dashboard display?
Yes! You heard right.. Google has tied-up with several Auto manufacturers with the goal to bring Android to Cars with built-in controls and hardware by the end of this year.&lt;!-- adsense --&gt;Google has announced at the CES <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nXBuxQuL9VE:096_JGxc3Sk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nXBuxQuL9VE:096_JGxc3Sk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2769656409747777139
title: Tajikistan Domain Registrar hacked; Google, Yahoo, Twitter, Amazon also defaced
uri: Tajikistan-Domain-Registrar-hacked-Google-Yahoo-Twitter-Amazon-als
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2769656409747777139
content:
Google’s primary search domain for Tajikistan had seemingly been hacked yesterday, along with other high profile domains including Yahoo, Twitter, Amazon -- redirected to a defaced page.
Actually neither Google, nor Twitter servers have been hacked, rather website of Tajikistan's Domain registrar (domain.tj) authority has been hacked, that allows the hacker to access domain control panel.&lt;!-- <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=37qa9eV8YZo:CbfnHDO_zwY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=37qa9eV8YZo:CbfnHDO_zwY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5466638474728745567
title: Staysure Hacked, Credit Card details of 93,000 Customers stolen
uri: Staysure-Hacked-Credit-Card-details-of-93-000-Customers-stolen
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5466638474728745567
content:
Staysure, a UK based Insurance company has suffered a massive data breach. More than 93,000 customers' sensitive financial data may have been compromised by unknown hackers.We became aware of the problem on November 14, and quickly informed the relevant card issuing bodies and subsequently The Financial Conduct Authority, the Information Commissioner’s Office and the Police.&lt;!-- adsense --&gt;The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tZ9rjcp-Z_o:3Bb1yZY9Csc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tZ9rjcp-Z_o:3Bb1yZY9Csc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9214575820319669958
title: Indian Intelligence Agencies going to deploy Internet Surveillance project NETRA
uri: Indian-Intelligence-Agencies-going-to-deploy-Internet-Surveillance-pro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9214575820319669958
content:
Think twice before using some words like ‘Bomb’, ‘Attack’, ‘Blast’ or ‘kill’ in your Facebook status update, tweets or emails, because this may flag you as a potential terrorist under a surveillance project of Indian Security agencies.
This Indian Internet surveillance project named as NETRA (Network Traffic Analysis), capable of detecting and capture any dubious voice traffic passing through <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bqS923o8Y3c:470-_3pfKx8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bqS923o8Y3c:470-_3pfKx8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7220777385343202981
title: Cryptolocker Malware learned to replicate itself through removable USB drives
uri: Cryptolocker-Malware-learned-to-replicate-itself-through-removable-USB
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7220777385343202981
content:
In the category of Ransomware Malware, a nasty piece of malware called CRYPTOLOCKER is on the top, that threatened most of the people around the world, effectively destroying important files of the victims.
Cryptolocker, which strongly encrypts victims' hard drives until a ransom is paid, is now again back in action to haunt your digital life with an additional feature.&lt;!-- adsense --&gt;Until now, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=znLVXaKR3Q0:ueU7hM7ehSw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=znLVXaKR3Q0:ueU7hM7ehSw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6478721571428897229
title: Coca-Cola reserved 16 Million MAC addresses to race in The Internet of Things
uri: Coca-Cola-reserved-16-Million-MAC-addresses-to-race-in-The-Internet-of
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6478721571428897229
content:
Have you seen the Coca-Cola "Freestyle" soda fountain yet? Instead of levers for different sodas, you have got a touchscreen, interface like an iPad and with a Push button you can have 127 Flavors of sodas.
There are more than 3,500 such machines are installed inside the world’s Burger Kings and all of them are connected to the internet, so that Coca-Cola can track inventory and making stock <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CjdrGAqpm50:qaPpS-RaHC4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CjdrGAqpm50:qaPpS-RaHC4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5938385614808449376
title: Microsoft Official Blog and Twitter account hacked by Syrian Electronic Army
uri: Microsoft-Official-Blog-and-Twitter-account-hacked-by-Syrian-Electroni
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5938385614808449376
content:
It could be the worst day ever for Microsoft's patch management and Incident response team. &lt;!-- adsense --&gt; A group of pro-Syrian  hackers 'Syrian Electronic Army' has successfully compromised the official Twitter account of the Microsoft News (@MSFTNews), Xbox Support.

They also defaced the Microsoft's TechNet blog (blogs.technet.com), and posted deface not over the blog. Microsoft says the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vevBoXmXVVM:frVuTBbqDzo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vevBoXmXVVM:frVuTBbqDzo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7860555287841666117
title: Samsung KNOX - An Encrypted Virtual Operating system for Android Devices
uri: Samsung-KNOX-An-Encrypted-Virtual-Operating-system-for-Android-Devic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7860555287841666117
content:
Last year Samsung launched a security feature called 'KNOX' for high-end enterprise mobile devices. It's a nice security addition and free with new Samsung handsets such as the Galaxy Note 3 and Samsung Galaxy S4.
Samsung Knox is an application that creates a virtual partition (container) within the normal Android operating system that allows a user to run two different Android systems on a same <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yuj9yroKUIc:QnoTRUjDEfw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yuj9yroKUIc:QnoTRUjDEfw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7539324666272111412
title: ASUS Wireless router leaves USB Storage Devices vulnerable to remote attackers
uri: ASUS-Wireless-router-leaves-USB-Storage-Devices-vulnerable-to-remote-a
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7539324666272111412
content:
In this era of Computers and Smartphones, where we are connected to the Internet every second and use it almost for everything.
For an Internet connection, one has to plug a device called Router between the ISP (Internet Service Provider) and device. Some Routers are available with USB option, where you can attach an external Hard Disk that allows files to be stored and retrieved across a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CEnXQSjFJYg:leU-Za8XxAg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CEnXQSjFJYg:leU-Za8XxAg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1232184079492786278
title: How to use PGP encryption with Mozilla Thunderbird Email client
uri: How-to-use-PGP-encryption-with-Mozilla-Thunderbird-Email-client
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1232184079492786278
content:
In my last article, we have learnt that how to encrypt our Emails using Gnu Privacy Guard. Previously we used Microsoft Outlook as a desktop mail client and a GpgOL plugin to handle encryption decryption of our communication.&lt;!-- adsense --&gt;
Since Microsoft is a US-based company, that has to follow all the laws of that contingent. Should we trust  Microsoft product to save our e-mail password and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MwOvfaAT5ow:BnyZn0DcNEs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MwOvfaAT5ow:BnyZn0DcNEs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6964536499061733573
title: US retailer Neiman Marcus confirmed data breach after TARGET
uri: US-retailer-Neiman-Marcus-confirmed-data-breach-after-TARGET
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6964536499061733573
content:
The TARGET Hack was not the only massive Data breach that happened during the last Black Friday, but also other three major US Retailers were also hacked.
Recently, Neiman Marcus also confirmed a data breach that involves Credit card theft from its customers during the holiday shopping season, using similar techniques to the one that penetrated Target last month.
Neiman Marcus has 79 stores and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kYTtZor8X9g:nZcRVaz5zWE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kYTtZor8X9g:nZcRVaz5zWE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8778129525761057727
title: Cisco released Security advisory for critical Router password reset vulnerability
uri: Cisco-released-Security-advisory-for-critical-Router-password-reset-vu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8778129525761057727
content:
In the first week of this year, we have reported about a critical vulnerability found in more than 2000 Routers that allow attackers to reset the admin panel password to defaults.



Recently, Cisco has released a security advisory, detailed about the similar vulnerability affecting their three networking products.&lt;!-- adsense --&gt;Cisco has rated the flaw highly critical and marked it as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JUqJrfaEdFY:b0oqGOD7hZg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JUqJrfaEdFY:b0oqGOD7hZg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9085261560119599947
title: 100Gbps DDoS attack took down Gaming servers with NTP Servers
uri: 100Gbps-DDoS-attack-took-down-Gaming-servers-with-NTP-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9085261560119599947
content:
The New Year begins with a new form of amplified Distributed Denial of Service (DDoS) Attack, a weapon for attackers to bring down websites and servers.
As we have reported two weeks ago that the attackers are abusing the Network Time Protocol (NTP) servers to perform an amplified version of DDoS Attack on various targets across the world.&lt;!-- adsense --&gt;
Earlier this week a number of popular <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wB8prkokZ2M:bMaOReJzUpA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wB8prkokZ2M:bMaOReJzUpA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-350061507186768756
title: Syrian Electronic Army's own website got hacked by Turkish hacker
uri: Syrian-Electronic-Army-s-own-website-got-hacked-by-Turkish-hacker
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/350061507186768756
content:
Oops.. Hackers got Hacked! The Syrian Electronic Army, who has hacked hundreds of High Profile targets in 2013-14, today they got hacked by a Turkish hacker.&lt;!-- adsense --&gt;Turkguvenligi, a Turkish hacker told The Hacker News that he hacked and defaced the official website of the hacking group SEA (sea.sy and leaks.sea.sy).
SEA Group has taken down many serious targets like Microsoft, Obama &amp; New<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4meuh4xXDjI:4B9oIPwZa8k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4meuh4xXDjI:4B9oIPwZa8k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5943277333629793264
title: Mozilla recommends the use of Open Source Browsers against State Surveillance
uri: Mozilla-recommends-the-use-of-Open-Source-Browsers-against-State-Surve
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5943277333629793264
content:
After the revelations from NSA internal documents leaked by Edward Snowden, the world knows the NSA as the Real Techie Gangster of this 21st Century, with the ability to brutally infiltrate every kind of electronic device, the Internet, and global communications. 
"It is becoming increasingly difficult to trust the privacy properties of software and services we rely on to use the Internet. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wzga5pafRfI:y2KOODqPzYU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wzga5pafRfI:y2KOODqPzYU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3825929689768208174
title: Exclusive: More than 200,000 Algerian TP-LINK Routers are vulnerable to Hackers
uri: Exclusive-More-than-200-000-Algerian-TP-LINK-Routers-are-vulnerable-t
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3825929689768208174
content:
More than 15.2% of the Algerian population use Internet service which is provided by around 30 Internet Service Providers and one of the largest shares is served by Algerie Telecom. 
Algerie Telecom provides TP-LINK TD-W8951ND Router to most of their home customers who Opt-In for Internet services and each of which has ZYXEL embedded firmware installed in it.&lt;!-- adsense --&gt;
ABDELLI Nassereddine,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-xDoimOp-q0:aK6DuCHNjDM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-xDoimOp-q0:aK6DuCHNjDM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1781685864285397596
title: Cyber criminals targeting another cryptocurrency 'Primecoin' with malicious miners
uri: Cyber-criminals-targeting-another-cryptocurrency-Primecoin-with-mali
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1781685864285397596
content:
Like Bitcoin, There are numerous other cryptocurrency similar in nature, including MasterCoin, ProtoShares, Litecoin, Peercoin, BitBar and many more.

One of them is Primecoin (sign: Ψ; code: XPM), a peer-to-peer open source cryptocurrency that implements a scientific computing proof-of-work system. Unlike Bitcoin or other virtual currencies, only Primecoin provides a proof of work that has <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6-1F6f7nkEM:PWQWjibTKKY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6-1F6f7nkEM:PWQWjibTKKY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9154605892239178803
title: How to encrypt your files before uploading to Cloud Storage using CloudFogger
uri: How-to-encrypt-your-files-before-uploading-to-Cloud-Storage-using-Clou
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9154605892239178803
content:
In this Internet savvy generation, we want all of our data to be secured at some place. Having backups of your data is always a good idea, whether that data is stored in the Cloud or on your computer.
But everyone who is following the Edward Snowden leaks of the NSA's PRISM program now pushed to hardening their Mobile devices and computers for security, privacy, and anonymity.&lt;!-- adsense --&gt;
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sN1plGMi5Yc:tPWkA_V5lhc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sN1plGMi5Yc:tPWkA_V5lhc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4124556064845678073
title: PGP Inventor announced encrypted PrivatOS based #BLACKPHONE against NSA surveillance
uri: PGP-Inventor-announced-encrypted-PrivatOS-based-BLACKPHONE-against-NS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4124556064845678073
content:
Mobile security may not be secure as you think. In September we have reported that the National Security Agency has the ability to access data on iOS, Android and even BlackBerry devices.&lt;!-- adsense --&gt;
Everyday a new revelation of NSA Surveillance Program makes Security and Privacy a major concern for all of us. Today we feel the need of highly secured Networks and Encrypted Devices to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TZqLQfyXW3I:k0HrdKDqYkA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TZqLQfyXW3I:k0HrdKDqYkA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5709170162897628459
title: Starbucks' iOS app storing user credentials in plain text
uri: Starbucks-iOS-app-storing-user-credentials-in-plain-text
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5709170162897628459
content:
Watch out, coffee drinkers. If you are one of those 10 million Starbucks customers, who purchases drinks and food directly from their Smartphones, this news is for you!&lt;!-- adsense --&gt;
If you use Starbucks’ official iOS app, you should know that the company is not encrypting any of your information, including your password.
The app allows the Starbucks customers to check their balance, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TkrlK5cSdTs:Q2Q9ZmsKRUw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TkrlK5cSdTs:Q2Q9ZmsKRUw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5377484869007207265
title: Rakabulle, Advance File Binder from DarkComet RAT Developer
uri: Rakabulle-Advance-File-Binder-from-DarkComet-RAT-Developer
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5377484869007207265
content:
I hope you all still remember the famous and powerful Remote Administration Tool (RAT) called 'Dark Comet', developed by a French computer geek 'Jean-Pierre Lesueur', also known as 'DarkCoderSc'.&lt;!-- adsense --&gt;
However, He had closed the Dark Comet project, when the Syrian government found to be using it to track down and to spy on their people. After that DarkCoderSc started working under a new<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G7ntcQUixf8:DKgAHIz6D8k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G7ntcQUixf8:DKgAHIz6D8k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2370912251552098332
title: BlackPOS Malware used in TARGET Data Breach developed by 17-Year Old Russian Hacker
uri: BlackPOS-Malware-used-in-TARGET-Data-Breach-developed-by-17-Year-Old-R
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2370912251552098332
content:
The Holiday data breach at TARGET appeared to be part of a broad and highly sophisticated international hacking campaign against multiple retailers, involving the heist of possibly 110 million Credit-Debit cards, and personal information.
Target confirmed last weekend that a malicious software was embedded in point-of-sale (POS) equipment at its checkout counters to collect secure data as the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GsUHLBKdWD8:8LE1QqbJFu0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GsUHLBKdWD8:8LE1QqbJFu0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7765947248692619717
title: NSA admits to collect 200 Million text messages per day under Project DISHFIRE
uri: NSA-admits-to-collect-200-Million-text-messages-per-day-under-Project
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7765947248692619717
content:
After the exposure of various surveillance programs, including PRISM, XKeyscore, MUSCULAR, DROPOUTJEEP in recent revelation, NSA has come up as the only ‘Government that Actually Listen’.&lt;!-- adsense --&gt;
Another day and here comes another revelation - According to the The Guardian, National Security Agency (NSA) has collected almost 200 million text messages per day from across the globe and is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jsh2wq7IwBs:IYmpy5jrM2c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jsh2wq7IwBs:IYmpy5jrM2c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8083577555254409871
title: 100,000 Refrigerators and other home appliances hacked to perform cyber attack
uri: 100-000-Refrigerators-and-other-home-appliances-hacked-to-perform-cybe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8083577555254409871
content:
Have you given shed to Zombies in your house? No???? May be you have no idea about it. After Computers, Servers, Routers, Mobiles, Tablets…. Now its turn of your home appliances to be a weapon or a victim of cyber war.
Recently Security Researchers from Proofpoint found more than 100,000 Smart TVs, Refrigerator, and other smart household appliances compromised by hackers to send out 750,000 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qninnf1zZN8:Zhqg2_7aOBk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qninnf1zZN8:Zhqg2_7aOBk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2073476960100803962
title: 20 Million Credit Cards stolen in South Korea; 40% Population affected by the Data Leak
uri: 20-Million-Credit-Cards-stolen-in-South-Korea-40-Population-affected
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2073476960100803962
content:
Since all threats to data security and privacy often come from outside, but internal threats are comparatively more dangerous and a difficult new dimension to the data loss prevention challenge i.e. Data Breach. The "Insider threats" have the potential to cause greater financial losses than attacks that originate outside the company.
This is what happened recently with three credit card firms in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i_ok6F84OJQ:99gaNy1VpDE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i_ok6F84OJQ:99gaNy1VpDE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8295495966159202468
title: U.S. Judge ordered the largest Ever Forfeiture of 29,655 Bitcoins seized from Silk Road
uri: U-S-Judge-ordered-the-largest-Ever-Forfeiture-of-29-655-Bitcoins-seiz
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8295495966159202468
content:
In last October, the Feds told they would probably just liquidate the bitcoins seized from the online black market Silk Road, once they were legally free to do so.

&lt;!-- adsense --&gt;

Finally the United States District Judge J. Paul Oetken signed off on the forfeiture order for the Bitcoins, clearing the government to sell the assets.



Last September, the FBI had seized 29,655 Bitcoins from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rO029Y7uqtA:2B0UPr0CRKM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rO029Y7uqtA:2B0UPr0CRKM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7983058901015675775
title: Adware Companies buying popular Chrome extensions to inject Ads and Malware
uri: Adware-Companies-buying-popular-Chrome-extensions-to-inject-Ads-and-Ma
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7983058901015675775
content:
Browser extensions are extra features and functionality that you can easily add to Google Chrome, Firefox and other popular Browsers, but they can be used to serve malicious adware, which automatically renders advertisements in order to generate revenue for its author. &lt;!-- adsense --&gt;Hackers are now taking their business rather more seriously than we thought. Even a single instance of malicious <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6Ox38qfyg5o:Ab49RnFbntg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6Ox38qfyg5o:Ab49RnFbntg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3026234830408899284
title: More details about alleged 17-year-old Russian BlackPOS Malware Author released
uri: More-details-about-alleged-17-year-old-Russian-BlackPOS-Malware-Author
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3026234830408899284
content:
Security experts at IntelCrawler provided a new interesting update on BlackPOS malware author, that he forgot to delete his Social networking profile even after the last exposure from the investigators.
As we have reported a few days before that the Intelligence firm IntelCrawler has identified a 17 year old teenager, known as “Ree [4]” in the underground market, as the author of the BlackPOS/<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=USBeAEcLBZ8:DkGs9abCiSo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=USBeAEcLBZ8:DkGs9abCiSo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8682672096260663071
title: U.S. based Cloud Hosting providers contribute 44% of Malware distribution
uri: U-S-based-Cloud-Hosting-providers-contribute-44-of-Malware-distribut
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8682672096260663071
content:
U.S. has the top Security Agencies like NSA, FBI to tackle cyber crime and terrorism with their high profile surveillance technologies, but even after that U.S is proudly hosting 44% of the entire cloud based malware distribution.

With the enhancement in Internet technology, Cloud computing has shown the possibility of existence and now has become an essential gradient for any Internet Identity.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d8x2yy9h9CI:NrA4mwFP8OE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d8x2yy9h9CI:NrA4mwFP8OE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3393800376413624995
title: Microsoft remotely deleted Tor-based 'Sefnit Botnet' from more than 2 Million Systems
uri: Microsoft-remotely-deleted-Tor-Browser-Bundle-from-more-than-2-Million
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3393800376413624995
content:
In October 2013, Microsoft adopted a silent, offensive method to tackle infection due to a Tor-based botnet malware called 'Sefnit'. &lt;!-- adsense --&gt; In an effort to takedown of the Sefnit botnet to protect windows users, Microsoft remotely removes the older versions of installed Tor Browser software and infection from 2 Million systems, even without the knowledge of the system's owner.

Last<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qKXbkvwiWMM:AyrDxFfznDc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qKXbkvwiWMM:AyrDxFfznDc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7393860711096654133
title: 23-Year-old Russian Hacker confessed to be original author of BlackPOS Malware
uri: 23-Year-old-Russian-Hacker-confessed-to-be-original-author-of-BlackPOS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7393860711096654133
content:
In the previous reports of Cyber Intelligence firm 'IntelCrawler' named Sergey Tarasov, a 17-year-old teenager behind the nickname "ree[4]", as the developer of BlackPOS malware.



BlackPOS also known as "reedum" or 'Kaptoxa' is an effective crimeware kit, used in the massive heist of possibly 110 million consumers' Credit-Debit cards, and personal information from the TARGET.



Later <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UCQR4MST6Ps:2gZ-hJs_ZZk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UCQR4MST6Ps:2gZ-hJs_ZZk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6560216028606181401
title: Syrian Electronic Army kept their promise; Microsoft's Office blog hacked
uri: Syrian-Electronic-Army-kept-their-promise-Microsoft-s-Office-blog-hac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6560216028606181401
content:
Yesterday Night Microsoft has faced another targeted attack by the Syrian Electronic Army (SEA), a group supposed to be  aligned with Syrian President Bashar al-Assad.

&lt;!-- adsense --&gt;

The SEA group is popular for its advance phishing attack and using the same technique they also hacked into the Official Twitter account of Microsoft News, Xbox Support, Skype and also defaced the Microsoft, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y24Jv9y42NU:RRzTBCMmT2k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y24Jv9y42NU:RRzTBCMmT2k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7118950130389496482
title: OpenBSD Project survived after $20,000 Donation from Romanian Bitcoin Billionaire
uri: OpenBSD-Project-survived-after-20-000-Donation-from-Romanian-Bitcoin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7118950130389496482
content:
Last year in the month of December the Security-focused Unix-like distribution 'OpenBSD' Foundation announced that it was facing shut down due to lack of funds to pay their electricity bills and dedicated Internet line costs.

&lt;!-- adsense --&gt;

Theo de Raadt, the founder of the OpenBSD project, and Bob Beck (Developer) announced:
"In light of shrinking funding, we do need to look for a source<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QPngsbANrPI:Lyrd3tZcQZY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QPngsbANrPI:Lyrd3tZcQZY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3584373771119925329
title: '123456' giving tough competition to 'password' in Worst 25 Passwords of 2013
uri: 123456-giving-tough-competition-to-password-in-Worst-25-Passwords
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3584373771119925329
content:
123456, password, 12345678, qwerty… or abc123, How many of you have your password one of these??? I think quite a many of you.



Even after countless warnings and advices given to the users by many security researchers, people are continuously using a weak strength of password chains. &lt;!-- adsense --&gt; After observing many cyber attacks in 2013, we have seen many incidents  where an attacker <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k2PcIVm_YO8:khRTZqRKHrg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k2PcIVm_YO8:khRTZqRKHrg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3635438728674381429
title: Bluetooth enabled Credit Card Skimmers planted at Gas Station lead to $2 Million heist
uri: Bluetooth-enabled-Credit-Card-Skimmers-planted-at-Gas-Station-lead-to
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3635438728674381429
content:
Cyber Criminals will not let any way out without making Money. Another huge Credit Card theft and this time they targeted Gas Stations.

&lt;!-- adsense --&gt;

13 men were suspected and charged for stealing banking information, using Bluetooth enabled Credit Card Skimmers planted on the gas stations throughout the Southern United States.



They made more than $2 Million by downloading the ATM <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Go_d-kTMcoM:g2bWcZKJrI0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Go_d-kTMcoM:g2bWcZKJrI0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6227248898840836281
title: Government launched 'China Operating System' (COS) to break Andoird and iOS Monopoly
uri: Government-launched-China-Operating-System-(COS)-to-break-Andoird-an
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6227248898840836281
content:
China has always tried to support its homegrown tech industry and even the security concerns over U.S. secret surveillance which gives Chinese Government another reasons to trust domestic vendors.Many other countries are also in favor to develop their own technology industries to reduce their dependence on U.S.



The Government of China is not too fond of foreign mobile operating systems and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Zu45PXoGaw:s9FSA-SURT8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Zu45PXoGaw:s9FSA-SURT8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8683788637275518258
title: 16 Million German Users' Data Compromised in mysterious Botnet Malware attack
uri: 16-Million-German-Users-Data-Compromised-in-mysterious-Botnet-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8683788637275518258
content:
A New day begins with a Cup of Coffee and with new massive Data Breach News.



This time in Germany, the Digital identities of about 16 million online users had been stolen, and posing a risk to their accounts linked to social media and other services.

&lt;!-- adsense --&gt;

Federal Office for Information Security (BSI) discovered a security breach after running an analysis of the botnet network<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dNlgkcfhM7k:dVpnJh8BsC0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dNlgkcfhM7k:dVpnJh8BsC0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3217977689007410943
title: Converting Google Chrome into a Bugging Device by exploiting Speech Recognition feature
uri: Converting-Google-Chrome-into-a-Bugging-Device-by-exploiting-Speech-Re
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3217977689007410943
content:
How many of you use Google Chrome for surfing the Internet and feel safe while working on it? I think many of you. Chrome is one of the most trusted Web Browsers that provide a user friendly environment and cyber security, but this we all know that every product has its negative side too, and so has Google’s Chrome.



Chrome has a 'Voice Recognition' feature, that use your system's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UPkBW-NLFTY:7G1gGs_CKy8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UPkBW-NLFTY:7G1gGs_CKy8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-208763827840568616
title: 28% of Internet Users know the Importance of Online Privacy Tools
uri: 28-of-Internet-Users-know-the-Importance-of-Online-Privacy-Tools
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/208763827840568616
content:
Privacy is “workings of your mind”. We share our personal moments captured in images, credit card details, thoughts that are personal or professional with a person or a certain group at different instances of time and want it to be safe and secure.



We use an electronic gadget to share something trusting blindly the service provider company which may have to obey some unveiled laws of that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8VmVuzCp0ZM:IQXZ0Q-GOa0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8VmVuzCp0ZM:IQXZ0Q-GOa0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8710284352366217705
title: Infamous hacker "Guccifer" arrested in Romania; charged with multiple cyber crimes
uri: Infamous-hacker-Guccifer-arrested-in-Romania-charged-with-multiple
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8710284352366217705
content:
"Guccifer" arrested in Romania, the infamous hacker who was responsible for breaching the social media and email accounts of numerous high profile US and Romanian Politicians.
&lt;!-- adsense --&gt;
Romanian authorities collaborated with US services to catch him and the officers of the Directorate for Investigating Organized Crime and Terrorism (DIOCT) raided His House last Wednesday.



His well <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F65-g5idJi4:JvYiXsmi3S0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F65-g5idJi4:JvYiXsmi3S0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5064025181126377127
title: Facebook Hacker received $33,500 reward for Remote code execution vulnerability
uri: Facebook-Hacker-received-33-500-reward-for-Remote-code-execution-vuln
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5064025181126377127
content:
Facebook has paid out its largest Bug Bounty ever of $33,500 to a Brazilian security researcher for discovering and reporting a critical Remote code execution vulnerability, which potentially allows the full control of a server.

&lt;!-- adsense --&gt;

In September, 'Reginaldo Silva' found an XML External Entity Expansion vulnerability affecting the part of Drupal that handled OpenID, which allows<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mBTR5So7A3w:2sSO6iFFeis:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mBTR5So7A3w:2sSO6iFFeis:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6433778826107721427
title: CNN's Twitter, Facebook and website hacked by Syrian Electronic Army
uri: CNN-s-Twitter-Facebook-and-website-hacked-by-Syrian-Electronic-Army
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6433778826107721427
content:
A well-known pro-Syrian hacker group known as Syrian Electronic Army (SEA), aligned with President Bashar al-Assad, who successfully attacked The New York Times, Huffington Post, and Twitter, BBC, National Public Radio, Al-Jazeera, Microsoft, Xbox, Skype and responsible for cyber-attacks against various other U.S media companies in the past.&lt;!-- adsense --&gt;
Last evening, the Group claimed the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S576HbpmTHk:fNZcDIc4fHE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S576HbpmTHk:fNZcDIc4fHE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4819093305294298009
title: Malicious Russian Tor Exit Relays Intercepting encrypted Traffic of Facebook Users
uri: Malicious-Russian-Tor-Exit-Relays-Intercepting-encrypted-Traffic-of-Fa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4819093305294298009
content:
Tor is one of the best and freely available privacy software that lets people communicate anonymously online through a series of nodes that is designed to provide anonymity for users and bypass Internet censorship.



When you use the Tor software, your IP address remains hidden and it appears that your connection is coming from the IP address of a Tor exit relay or nodes, which can be <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ug9NWxDBntw:4iYFjM1lZeY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ug9NWxDBntw:4iYFjM1lZeY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7897164997862349916
title: WhatsApp for Windows? Naaa.. Hackers are spamming Malware as WhatsApp Software
uri: WhatsApp-for-Windows-Naaa-Hackers-are-spamming-Malware-as-WhatsApp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7897164997862349916
content:
Cyber criminals are taking advantage of the widespread popularity of the mobile messaging app 'WhatsApp'. A malware expert at the Kaspersky Lab revealed a large-scale spamming campaign, advertising a fake PC version of the WhatsApp, to spread a banking trojan. 

&lt;!-- adsense --&gt;

According to the report, unaware users have received an email written in Portuguese language, it also tries to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sZc9nY9e0Bo:83EK6H8HVpI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sZc9nY9e0Bo:83EK6H8HVpI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6536355170625892083
title: First Ever Windows Malware that can hack your Android Mobile
uri: First-Ever-Windows-Malware-that-can-hack-your-Android-Mobile
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6536355170625892083
content:
Hey Android users! I am quite sure that you must be syncing your Smartphone with your PCs for transferring files and generating backup of your device. 


&lt;!-- adsense --&gt;

If your system is running a windows operating system, then it’s a bad news for you. Researchers have discovered a new piece of windows malware that attempts to install mobile banking malware on Android devices while <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oRUnCIaxL5k:tWqtbSC0HEo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oRUnCIaxL5k:tWqtbSC0HEo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7937689181729732569
title: Snapchat's new Security feature Hacked in 30 Minutes; CAPTCHA Cracking tool published
uri: Snapchat-s-new-Security-feature-Hacked-in-30-Minutes-CAPTCHA-Cracking
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7937689181729732569
content:
Snapchat suffered a massive data breach back in December in which 4.6 million usernames and phone numbers were compromised.
&lt;!-- adsense --&gt;

Earlier this month, the company launched an update to its iOS and Android apps, added a new security measure to ensure that new users aren't spambots or a robot. While signing up for the first time, it now displays nine images and then ask you to pick<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ykRyijzzW5M:CLTX2Ay9Juw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ykRyijzzW5M:CLTX2Ay9Juw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6313894820081483979
title: CBI arrests Indian mastermind behind Hire-a-Hacker service on FBI tip-off
uri: CBI-arrests-Indian-mastermind-behind-Hire-a-Hacker-service-on-FBI-tip
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6313894820081483979
content:
For the first time in history, Indian Law Enforcement Agency 'Central Bureau of Investigation' (CBI) has arrested a Cyber criminal after getting a tip-off from the US Federal Bureau of Investigation (FBI).

&lt;!-- adsense --&gt;

33-Year-old Amit Vikram Tiwari, son of an Indian Army colonel and an engineering dropout, who allegedly ran two websites offering services for hacking into email accounts<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bJXmRa55kjk:5XAGSSlLiqM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bJXmRa55kjk:5XAGSSlLiqM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8380894902662005717
title: Yahoo fixes Critical Remote Command Execution vulnerability
uri: Yahoo-fixes-Critical-Remote-Command-Execution-vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8380894902662005717
content:
Cyber Security Expert and Penetration tester, Ebrahim Hegazy has found a serious vulnerability in Yahoo's website that allows an attacker to remotely execute any commands on the server i.e. Remote Command Execution vulnerability.
&lt;!-- adsense --&gt;



According to Ebrahim blog post, the vulnerability resides in a Chinese subdomin of Yahoo website i.e. http://tw.user.mall.yahoo.com/rating/list?<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cqxiXmRcByE:-vziYCCsf7c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cqxiXmRcByE:-vziYCCsf7c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-217697376927015152
title: Bangladeshi Hackers defaced BCCI website after Board approves ICC takeover proposal
uri: Bangladeshi-Hackers-defaced-BCCI-website-after-Board-approves-ICC-take
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/217697376927015152
content:
Apart from various Government websites falling victim to Hacking attacks, the latest to be targeted by hackers belongs to the world's richest cricket Board, the Board of Control for Cricket in India (BCCI).




Late night on 26th January (65th Republic Day of India), the official website of Indian cricket’s Governing body, BCCI.TV has been defaced by Bangladeshi hacker who goes by the name<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=thTxA42fJqk:cECZUICzKqk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=thTxA42fJqk:cECZUICzKqk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1522604766643167370
title: Google announces $2.7 million Reward for hacking Chrome OS at Pwnium Contest
uri: Google-announces-2-7-million-Reward-for-hacking-Chrome-OS-at-Pwnium-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1522604766643167370
content:
Pwnium is the annual Hacking competition where Google invites coders from around the world to find security holes in Google Chrome.



Google has announced its 4th Pwnium Hacking Contest hosted at the Canadian Security conference in March, offering more than $2.7 million in potential rewards for hacking Chrome OS-running ARM and Intel Chromebook.

&lt;!-- adsense --&gt;

This year the security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vXu0XmifHck:SjsRc6hPxPY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vXu0XmifHck:SjsRc6hPxPY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5175450986647554643
title: 10th Anniversary of the World’s first Mobile Malware 'Cabir'
uri: 10th-Anniversary-of-the-World-s-first-Mobile-Malware-Cabir
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5175450986647554643
content:
The year 2014 starts with the formation of new mobile malware like ‘Android.HeHe’, with the ability to steal text messages, intercept phone calls, and other malware such as ‘XXXX.apk’ uses WiFi networks or hotspots to steal information, infected more than 24,000 Devices.

But it should not be forgotten by us that 2014 marks the 10th Anniversary of the World’s First mobile malware. FortiGuard <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J_9C9pLhyME:nxpdAnZN6Mw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J_9C9pLhyME:nxpdAnZN6Mw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3218659528341882596
title: Israeli Defense computer hacked in Spear Phishing Attack
uri: Israeli-Defense-computer-hacked-in-Spear-Phishing-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3218659528341882596
content:
Hackers broke into an Israeli defense ministry computer via an email attachment tainted with malicious software.



Reuters reported Israeli Defense is the latest illustrious victim of the Spear Phishing Attack, and hackers penetrated into an Israeli defense ministry computer using a malicious email as a vector. 

&lt;!-- adsense --&gt;

Aviv Raff, Chief Technology officer at Seculert, confirmed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kHfF24qaAbo:fco4ZoYP9Dc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kHfF24qaAbo:fco4ZoYP9Dc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3489857788247525198
title: Possible Data Breach at Arts and Crafts Retailer 'Michaels Store'
uri: Possible-Data-Breach-at-Arts-and-Crafts-Retailer-Michaels-Store
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3489857788247525198
content:
Western landscapes are facing a hell lot of data breaches started with Target, Neiman Marcus and now country's largest crafts chain 'Michael’s Art and Crafts' may be is the latest retailer hit by a security breach.

In a statement, Irving, Texas-based company acknowledged a possible data security breach that may have affected its customers'  payment card information at its 1250 stores <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z8NGlpwEHjw:kDSoSv3dQTg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z8NGlpwEHjw:kDSoSv3dQTg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3437935726660176587
title: Foursquare vulnerability that exposes 45 million users' email addresses
uri: Foursquare-vulnerability-that-exposes-45-million-users-email-addresse
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3437935726660176587
content:
A location based Social Networking platform with 45 million users,'Foursquare' was vulnerable to the primary email address disclosed. 

&lt;!-- adsense --&gt;

Foursquare is a Smartphone application that gives you details of nearby cafes, bars, shops, parks using GPS location and also tells about your friends nearby. 



According to a Penetration tester and hacker 'Jamal Eddine',  an attacker can <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X5ae6p6AdP4:w4mS7XTUaKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X5ae6p6AdP4:w4mS7XTUaKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2981913230657623943
title: Mozilla Thunderbird vulnerability allows hackers to Insert malicious code into Emails
uri: Mozilla-Thunderbird-vulnerability-allows-hackers-to-Insert-malicious-c
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2981913230657623943
content:
Do you use Thunderbird, a free; open-source; cross-platform application for managing email and news feeds? According to a Pakistani Security Researcher from Vulnerability-Lab, a flaw gives an attacker the ability to run code on a user’s machine.
&lt;!-- adsense --&gt;
Mozilla Thunderbird 17.0.6 email application is vulnerable to critical validation and filter bypass vulnerability, enables an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YAZe-7G2FjU:rFgRnTqDysc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YAZe-7G2FjU:rFgRnTqDysc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-508497386252141791
title: FBI seized entire database of TorMail service; using it to catch Criminals
uri: FBI-seized-entire-database-of-TorMail-service-using-it-to-catch-Crimi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/508497386252141791
content:
Using Tormail Email service for being Anonymous online while conversations and mail exchange??

There is a very disappointing news for all current and past users, US Federal Bureau of Investigation (FBI) has a complete copy of Tormail server and they are using it to catch the Criminals &amp; Hackers.
&lt;!-- adsense --&gt;

According to court documents that recently surfaced, the FBI have cloned the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CE9HHLL8d2E:JECISaqKluc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CE9HHLL8d2E:JECISaqKluc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5627262629781333808
title: CryptorBit Ransomware that scam for Ransom money with fake Decryption Keys
uri: CryptorBit-Ransomware-that-scam-for-Ransom-money-with-fake-Decryption
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5627262629781333808
content:
We are continuously keeping our eye on new variants of the widely spread Ransomware family like Cryptolocker, Prison Locker, Copycat and Locker which encrypts your files and ask for a random amount to decrypt it. 



If infected by such malware, to be very honest, there is no hope for recovering your documents without paying a ransom amount to the cyber criminals.

&lt;!-- adsense --&gt;

Online <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SLtGNeqEXSs:pyDM7ehcXNM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SLtGNeqEXSs:pyDM7ehcXNM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7184236364633807948
title: Angry Birds and other Mobile Gaming apps leaking your private information to NSA
uri: Angry-Birds-and-other-Mobile-Gaming-apps-leaking-your-private-informat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7184236364633807948
content:
Are you fond of playing games on your Smartphone like Angry Birds or Subway Surfer?? You should now stop wasting your time, because NSA is utilizing your gaming energy in the best possible way.

&lt;!-- adsense --&gt;

According to the latest documents leaked by former U.S. Government  contractor Edward Snowden, Some of the world's most popular Smartphone  applications are telling British (GCHQ) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-EDLlSfjTDQ:o53tK2ymg7I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-EDLlSfjTDQ:o53tK2ymg7I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1345279946001224078
title: 24-year-old Russian Hacker and Developer of SpyEye Banking Trojan pleads guilty
uri: 24-year-old-Russian-Hacker-and-Developer-of-SpyEye-Banking-Trojan-plea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1345279946001224078
content:
A Russian man has pleaded guilty to conspiracy charges in a federal court in Atlanta on Tuesday for developing and distributing a malicious banking malware 'SpyEye' that infected more than 1.4 million computers worldwide since 2009.




Aleksandr Andreevich Panin, a 24 year old programmer, also known as Gribodemon and Harderman, was the main author of ‘SpyEye’, a sophisticated malware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rCSeIRi3WD4:AY_nkkPQlhc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rCSeIRi3WD4:AY_nkkPQlhc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2148670347143452550
title: First widely distributed Android bootkit Malware infects more than 350,000 Devices
uri: First-widely-distributed-Android-bootkit-Malware-infects-more-than-350
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2148670347143452550
content:
In the last quarter of 2013, sale of a Smartphone with ANDROID operating system has increased and every second person you see is a DROID user.



A Russian security firm 'Doctor Web' identified the first mass distributed Android bootkit malware called 'Android.Oldboot', a piece of malware that's designed to re-infect devices after reboot, even if you delete all working components of it.

&lt;<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hYBFP7XOO2c:I-h5MROGCeA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hYBFP7XOO2c:I-h5MROGCeA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1806204897790137519
title: Warning: Malicious version of FTP Software FileZilla stealing users' Credentials
uri: Warning-Malicious-version-of-FTP-Software-FileZilla-stealing-users-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1806204897790137519
content:
Malware code can be very small, and the impact can be very severe! The Antivirus firm AVAST spotted a malicious version of the open source FTP (File Transfer Protocol) software 'FileZilla' out in the wild.

&lt;!-- adsense --&gt;

The software is open source, but has been modified by the hackers that steal users' credentials, offered on various hacked sites for download with banner or text ads.



<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i_wDcOclPK8:XtwavsEbtQU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i_wDcOclPK8:XtwavsEbtQU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-446810571536317722
title: Edward Snowden nominated for Nobel Peace Prize 2014
uri: Edward-Snowden-nominated-for-Nobel-Peace-Prize-2014
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/446810571536317722
content:
Now there is really great news for all the supporters of Former National Security Agency (NSA) contractor Edward Snowden, as he is nominated for the 2014 Nobel Peace Prize by two Norwegian lawmakers.



Snorre Valen and Baard Vegar Solhjell, parliamentarians from Norway’s Socialist Left Party said, “He has contributed to revealing the extreme level of surveillance by nations against other <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PlXE3wZFi4c:6UQ9MnafxKU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PlXE3wZFi4c:6UQ9MnafxKU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-712541419772162048
title: Java-Bot, a Cross-platform malware launching DDoS attacks from infected computers
uri: Java-Bot-a-Cross-platform-malware-launching-DDoS-attacks-from-infecte
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/712541419772162048
content:
These days botnets are all over the news. In simple terms, a botnet is a group of computers networked together, running a piece of malicious software that allows them to be controlled by a remote attacker.



A major target for most of the malware is still Windows, but the growing market of Mac OS X, Linux and Smartphones, is also giving a solid reason to cyber criminals to focus.

&lt;!-- <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V-wsr68ceO0:6BRziObcE24:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V-wsr68ceO0:6BRziObcE24:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2733453551628128661
title: Cryptography Hacks - Hash Encryption using DuckDuckGo Search Engine
uri: Cryptography-Hacks-Hash-Encryption-using-DuckDuckGo-Search-Engine
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2733453551628128661
content:
Over the past several months, it has become clear that the Internet and our Privacy have been fundamentally compromised. A Private search engine DuckDuckGo claims that when you click on one of  their search results, they do not send personally identifiable  information along with your request to the third party.



Like Google dorks (advance search patterns), there are thousands of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eA9eR1Ic7Ok:9PrGPQiiLZs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eA9eR1Ic7Ok:9PrGPQiiLZs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5273432958707306708
title: MediaWiki Remote Code Execution vulnerability leaves Wikipedia open for Cyber attacks
uri: MediaWiki-Remote-Code-Execution-vulnerability-leaves-Wikipedia-open-fo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5273432958707306708
content:
The Encyclopedia giant WIKIPEDIA has been found vulnerable to remote code execution because of a critical flaw in the MediaWiki software.

&lt;!-- adsense --&gt;

Wikipedia is a name which has become a major source of information for all of us. It has webpages on almost every topic you need to search.



This giant is powered by an open source wiki software called MediaWiki. MediaWiki not only <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXBuindFieM:rQiIvpdBuXM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXBuindFieM:rQiIvpdBuXM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4645404501477927122
title: ICEPOL Ransomware Servers seized by Romanian Police that infected 260,000 Computers
uri: ICEPOL-Ransomware-Servers-seized-by-Romanian-Police-that-infected-260
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4645404501477927122
content:
After Financial and Banking Malwares, Ransomware has become the first choice of money motivated cybercriminals.



A new Ransomware Trojan known as ICEPOL has been one of those widespread malware which has been successfully installed approximately 267,786 times worldwide and 42,400 in the USA alone over a five month period, analyzed by the security firm BitDefender.

&lt;!-- adsense --&gt;

The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bNJcT23fTX0:VsqBC1LN5VQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bNJcT23fTX0:VsqBC1LN5VQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3629303221809732436
title: UK government planning to ditch Microsoft for Open Source alternatives
uri: UK-government-planning-to-ditch-Microsoft-for-Open-Source-alternatives
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3629303221809732436
content:
Downfall in the monopoly of propriety software like Microsoft and Apple accelerated after the Snowden revelations of NSA spying, where technology giants like Microsoft, Google, Apple are sharing a bed with the NSA.
&lt;!-- adsense --&gt;

The UK government is again planning to ditch Microsoft for Open Source and Free alternatives. Cabinet Office minister Francis Maude announced yesterday that they <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49qbQvfPKaA:LCjAkFWni8U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49qbQvfPKaA:LCjAkFWni8U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3585964690097131581
title: Yahoo Mail hacked; Change your account password immediately
uri: Yahoo-Mail-hacked-Change-your-account-password-immediately
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3585964690097131581
content:
A really bad year for the world's second-largest email service provider, Yahoo Mail! The company announced today, 'we identified a coordinated effort to gain unauthorized access to Yahoo Mail accounts', user names and passwords of its email customers have been stolen and are used to access multiple accounts.



Yahoo did not say how many accounts have been affected, and neither they are sure <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZaWVpT4pDCs:iHldA05Dqpg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZaWVpT4pDCs:iHldA05Dqpg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2282488393940852163
title: Spying agencies tracking your location by capturing MAC address of your devices
uri: Spying-agencies-tracking-your-location-by-capturing-MAC-address-of-you
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2282488393940852163
content:
Again a top secret revelation from the Snowden’s Desk! A new document retrieved by the whistleblower Edward Snowden shows that the Canadian spy agency is tracking airline travelers even days after they left the  terminal, just by capturing their device identification from the free Wi-Fi service at a major Canadian airport.&lt;!-- adsense --&gt;
CBC News reported that the US Intelligence agency worked <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eFNbB2FNL8Q:fCfP8CZnsos:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eFNbB2FNL8Q:fCfP8CZnsos:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5761607711815189378
title: Tor-enabled Point-of-Sale malware 'ChewBacca' stole Credit Card data from 11 Countries
uri: Tor-enabled-Point-of-Sale-malware-ChewBacca-stole-Credit-Card-data-f
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5761607711815189378
content:
After the massive data breaches at U.S retailers Target and Neiman Marcus in which financial credentials of more than 110 million and 1.1 million customers were compromised respectively, shows that the Point of Sale (POS) system has become a new target for the cyber criminals.

&lt;!-- adsense --&gt;

Despite the BlackPOS malware of Point of Sale (POS) system that  comes out as the major cause of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wZvsnJ7XwH4:QeMRbxz-dzo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wZvsnJ7XwH4:QeMRbxz-dzo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-993679509271443413
title: Screenlogger - A keylogger app for Android and iOS Smartphones
uri: Screenlogger-A-keylogger-app-for-Android-and-iOS-Smartphones
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/993679509271443413
content:
Are you using a pattern lock for your Smartphone to remain untouched from cyber criminals? But you are not aware that even your swipe gestures can be analyzed by hackers.



Neal Hindocha, a security adviser for the technology company Trustwave, has developed a prototype malware for the Smartphones that works the same as a keylogger software for desktop.

&lt;!-- adsense --&gt;

The malware dubbed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ybBq4vt8jDw:8hFYCcPQw8I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ybBq4vt8jDw:8hFYCcPQw8I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4135017528684842033
title: Microsoft's Process Explorer added VirusTotal Multi-Antivirus Scanner support
uri: Microsoft-s-Process-Explorer-added-VirusTotal-Multi-Antivirus-Scanner
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4135017528684842033
content:
Process Explorer, a part of the Microsoft’s Sysinternals suite of applications is an alternate task manager for Windows, which offers far more features than 'on-board'.



Microsoft’s Windows Sysinternal Suite has released the latest version of Process Explorer v16.0 that has an awesome feature which allows a user to scan any running program files with a web-based multi-antivirus scanner <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2S9l0cWOia0:2xv45Oz9cdg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2S9l0cWOia0:2xv45Oz9cdg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-422800831052256650
title: Chainfire's Pry-Fi Android App released to defend against NSA Spying under Public Wi-Fi
uri: Chainfire-s-Pry-Fi-Android-App-released-to-defend-against-NSA-Spying-u
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/422800831052256650
content:
Turn your face in any direction, someone is always trying to spy on you; doesn’t matter who and what you are? Just yesterday we reported that Communications Security Establishment Canada (CSEC) in Canada and NSA are together, running a spying program called 'game-changer'.



It was revealed that the agencies are tracking all the travelers who passed through the airport terminal, and could be<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h8YxAlOa_AA:h-Dk3IuFX0s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h8YxAlOa_AA:h-Dk3IuFX0s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7784451512236133404
title: Navy's Cyberwar Expert - New Director of NSA, replacing Gen. Keith Alexander
uri: Navy-s-Cyberwar-Expert-New-Director-of-NSA-replacing-Gen-Keith-Ale
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7784451512236133404
content:
It is very clear that when we talk about Intelligence and Surveillance, the first name comes to our mind is the U.S National Security Agency (NSA) and, the second is Gen. Keith Alexander, the Director of NSA..GEEK behind the massive surveillance Programs.

&lt;!-- adsense --&gt;

Many documents revealed by the former NSA’s contractor Edward Snowden exposed the extend level of worldwide spying <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2vC5_4vpLnA:zSTLaIWMb4c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2vC5_4vpLnA:zSTLaIWMb4c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2547105757502203072
title: Android app that notifies you whenever GPS enabled apps access your location
uri: Android-app-that-notifies-you-whenever-GPS-enabled-apps-access-your-lo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2547105757502203072
content:
A team of Researchers at Rutgers University has developed
 an Android application which will notify you every time, whenever an 
app installed on your Smartphone accesses the GPS functionality.

Smartphone is a multipurpose device, having features of both a mobile phone and a computer, allowing us to talk, text, access personal and official e-mail, browse the Internet, make purchases, manage <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mJzVZYjz5Mk:BTcIGuVSWbk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mJzVZYjz5Mk:BTcIGuVSWbk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1103399471783237366
title: eBay and PayPal UK website hacked by Syrian Electronic Army
uri: eBay-and-PayPal-UK-website-hacked-by-Syrian-Electronic-Army
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1103399471783237366
content:
A pro-hacker group, aligned with president Bashar al-Assad, very well known as Syrian Electronic Army (SEA) has again gained the media attention by adding the popular sites, i.e. eBay UK and PayPal UK to its victim list.



After targeting websites of various media agencies, government organizations and big enterprises, including the latest defaced CNN and Microsoft, today they targeted and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZM4MY0d3dko:7GluM5aQPok:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZM4MY0d3dko:7GluM5aQPok:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3739986018066392128
title: NSA allegedly hacked Belgian Cryptography Expert with spoofed LinkedIn Profile
uri: NSA-allegedly-hacked-Belgian-Cryptography-Expert-with-spoofed-LinkedIn
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3739986018066392128
content:
Cryptographer Professor Jean-Jacques Quisquater has become the part of a targeted attack by the US National Security Agency (NSA) and its British counterpart GCHQ, first reported on Saturday morning by De Standaard.



A few months back in September 2013 it was revealed that, Belgacom, the largest telecommunications company in Belgium was hacked and number of employees on Belgacom’s network, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2gpOGL60HbA:zcCCAGJVjTM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2gpOGL60HbA:zcCCAGJVjTM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7183147163254232580
title: Microsoft launching 'Transparency Center' for Source code integrity Check
uri: Microsoft-launching-Transparency-Center-for-Source-code-integrity-Ch
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7183147163254232580
content:
Last Friday at the 50th Munich Security Conference, Microsoft announced to launch 'Transparency centers' around the World, where government customers will be able to verify the source code of Microsoft’s products and can confirm that there are no backdoors.



The recent chain of scandals over US global snooping has seriously damaged the trust in U.S. Government and top U.S. Tech companies,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RovzJjDsSE4:_xKzD24I0zo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RovzJjDsSE4:_xKzD24I0zo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3110312564735586891
title: Test your Mobile Hacking and Penetration testing Skills with Damn vulnerable iOS app
uri: Test-your-Mobile-Hacking-and-Penetration-testing-Skills-with-Damn-vuln
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3110312564735586891
content:
Smartphones are powerful and popular, with more than thousands of new mobile apps hitting the market everyday. Apps and mobile devices often rely on consumers' data, including private information, photos, and location, that can be vulnerable to data breaches, surveillance and real-world thieves.

&lt;!-- adsense --&gt;

When developing a mobile application, developer has to fulfill high security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D3QDOz0KQyU:9RyuXQ8CZjs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D3QDOz0KQyU:9RyuXQ8CZjs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6727077466767780632
title: 'Chaos Computer Club' filed criminal complaint against German government Over Mass Spying
uri: Chaos-Computer-Club-filed-criminal-complaint-against-German-governme
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6727077466767780632
content:
After the revelation of former NSA contractor Edward Snowden, we all very well knew the impact of it on the world, but nobody would have estimated that the impact will be so worst.



The revelation, not only defaced NSA, but also its counterpart GCHQ, and various other governments which were serving them in the world's spying scandal. Now, after various allegations on NSA, Chaos Computer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mcvtsquYB10:dAaCvL_jb9s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mcvtsquYB10:dAaCvL_jb9s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7672027004397295782
title: 800,000 Customers' detail stolen in Data Breach at French Telecom 'Orange'
uri: 800-000-Customers-detail-stolen-in-Data-Breach-at-French-Telecom-Ora
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7672027004397295782
content:
One of the world’s largest mobile operator 'Orange' has been hit by data breach.




The French multinational telecommunication company announced recently, it was targeted by unknown hackers on 16th January 2014, who allegedly gained access to the accounts of up to 800,000 customers of Orange website.

&lt;!-- adsense --&gt;

According to a report published on the PC INpact website, the company <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GcU_27BnyWU:9ZcYrDH_sns:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GcU_27BnyWU:9ZcYrDH_sns:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5676918290057560592
title: Gameover Malware, variant of ZeuS Trojan uses Encryption to Bypass Detection
uri: Gameover-Malware-variant-of-ZeuS-Trojan-uses-Encryption-to-Bypass-Det
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5676918290057560592
content:
The year begins with the number of new variants of malware that were discovered by various security researchers. The new variants are more complex, sophisticated and mostly undetectable.



Two years back in 2012, the FBI warned us about the ‘GameOver’ banking Trojan, a variant of Zeus financial malware that spreads via phishing emails. GameOver makes fraudulent transactions from your bank <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pLB4mMJ4crE:bh8e4DAXvE8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pLB4mMJ4crE:bh8e4DAXvE8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4632493956190271259
title: Google Chrome added pop-up warning to prevent users from Browser hijacking
uri: Google-Chrome-added-pop-up-warning-to-prevent-users-from-Browser-hijac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4632493956190271259
content:
GOOGLE, one of the most trusted brands continuously trying to keep its products more robust and secure for keeping its users safe.

Google honors vulnerability hunters under its Bug bounty program and not only that, the company also offer a huge amount of reward to hackers in 'Pwnium' hacking competition for finding critical vulnerability.



Google Chrome, Browser from Google product family<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oEJAco0nJi4:yhKZD97bZdI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oEJAco0nJi4:yhKZD97bZdI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5916921868475949626
title: DuckDuckGo Goodies that every SysAdmin Should Know
uri: DuckDuckGo-Goodies-that-every-SysAdmin-Should-Know
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5916921868475949626
content:
DuckDuckGo, a private search engine that doesn't track your data over the internet and respects your online privacy, offers hundreds of Goodies that let you quickly do certain things like Programming, Math, Geek, Music related things.

In our previous article, we have posted Cryptography hacks using DuckDuckGo search engine and today we are going to give another tutorial on DuckDuckGo Goodies<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dE3HVcmGNAI:lD20kV9FM_M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dE3HVcmGNAI:lD20kV9FM_M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2382756265552948007
title: 'The Hacker News' Magazine - Relaunching New Editions
uri: The-Hacker-News-Magazine-Relaunching-New-Editions
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2382756265552948007
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/0b445274.TheHackerNewsMagazine.png" data-original-source="http://4.bp.blogspot.com/-6_o2w5RUKnI/UvC8iwpLLNI/AAAAAAAAAa0/4h5pBlPFFVc/s1600/The+Hacker+News+Magazine.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="The Hacker News Magazine" border="0" src="media/d42ddbd5.TheHackerNewsMagazine.png" data-original-source="http://4.bp.blogspot.com/-6_o2w5RUKnI/UvC8iwpLLNI/AAAAAAAAAa0/4h5pBlPFFVc/s728/The+Hacker+News+Magazine.png" title="The Hacker News Magazine" /></a></div><div style="text-align: justify;">Dear Readers,&nbsp; After publishing 15 informative editions of '<i>The Hacker News</i>' magazine in past 2 years; we at THN are again planning to relaunch the new Chapters of '<a href="http://magazine.thehackernews.com/" target="_blank"><b>The Hacker News Magazine</b></a>'.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The Hacker News (THN) Monthly Magazine is the most comprehensive and informative collection of IT Security, Hacking and innovative technological notions since about 2011. THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Now on the demand of our readers, we are going to launch our new Monthly editions of the THN Magazine with some new sections, innovative themes in addition with some interactive interview sessions, from the month of March this year.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">We cordially invite IT adepts and specialists to contribute as Authors with their new researches and knowledgeable articles, as the goal of our Free Hacking Magazine is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts worldwide.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>Simply submit your idea or article to us</b> and your submission could be featured in our next edition. Please contact us at: <b><a href="mailto:admin@thehackernews.com" rel="nofollow" target="_blank">admin@thehackernews.com</a></b></div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ul6yqxDtuw:s3CvXNJxsm8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ul6yqxDtuw:s3CvXNJxsm8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-621816878475544534
title: Adobe issues Emergency Flash Player update to patch critical zero-day threat
uri: Adobe-issues-Emergency-Flash-Player-update-to-patch-critical-zero-day
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/621816878475544534
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/d9b8b314.Flashvulnerability.png" data-original-source="http://2.bp.blogspot.com/-mr9E_FRKvSw/UvJT9eabMMI/AAAAAAAAAbE/7sfjshVKMZU/s1600/Flash+vulnerability.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Flash vulnerability" border="0" src="media/725d0599.Flashvulnerability.png" data-original-source="http://2.bp.blogspot.com/-mr9E_FRKvSw/UvJT9eabMMI/AAAAAAAAAbE/7sfjshVKMZU/s728/Flash+vulnerability.png" title="Flash vulnerability" /></a></div><div style="text-align: justify;">Adobe is recommending that users update their Flash Players immediately. The company has published an emergency <a href="http://helpx.adobe.com/security/products/flash-player/apsb14-04.html" rel="nofollow" target="_blank">security bulletin</a> today, that addresses vulnerabilities the Flash Player and released a patch to fix a vulnerability which is currently being exploited in a sophisticated cyber espionage campaign.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">"<i>Adobe is aware of reports that an exploit for this vulnerability  exists in the wild, and recommends users apply the updates referenced in  the security bulletin.</i>" </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The <a href="http://thehackernews.com/search/label/Vulnerability">vulnerability</a> (<b>CVE-2014-0497</b>), allows an attacker to remotely take control of the targeted system hosting Flash. "<i>These updates address a critical vulnerability that could potentially allow an attacker to remotely take control of the affected system</i>" advisory said.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">The security hole affects the version 12.0.0.43 and earlier for both Windows and Mac OSs and Adobe Flash Player 11.2.202.335 and earlier versions for Linux.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The vulnerability was discovered by two researchers at <i>Kaspersky Lab</i>, Alexander Polyakov and Anton Ivanov.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The story started some month ago, when the Kaspersky Team discovered a new sophisticated <a href="http://thehackernews.com/search/label/cyber%20espionage">cyber espionage</a> operation which has been going on at least since 2007. The operation dubbed “<b>The Mask</b>” <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="cc7969b4-764c-48ed-b46e-18bbbf78dca5" id="151ad186-658d-489c-89ed-e3109a14cc46">hit</span> systems in 27 <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="cc7969b4-764c-48ed-b46e-18bbbf78dca5" id="3da36555-d686-4570-a8eb-edefca0b5378">countries leveraging</span> high-end exploits, the attackers adopted an extremely sophisticated <a href="http://thehackernews.com/search/label/Malware">malware</a> which includes a <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="cc7969b4-764c-48ed-b46e-18bbbf78dca5" id="1ed1afa9-57ce-4483-894d-e1fc3a3ac594">bootkit</span> and <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="cc7969b4-764c-48ed-b46e-18bbbf78dca5" id="4274c339-72fa-490d-9268-9663b6ea5215">rootkit</span>.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The malicious code used is able to infect also Mac and Linux versions and included a customized attack against Kaspersky products.</div><div style="text-align: justify;"><blockquote class="tr_bq">“<i>This is putting them above Duqu in terms of sophistication, making it one of the most advanced threats at the moment. Most interesting, the authors appear to be native in yet another language which has been observed very rarely in APT attacks. We will present more details about the “Mask” APT next week at the Kaspersky Security Analyst Summit 2014 (on Twitter, #TheSAS2014). </i>” Reports a post on <a href="https://www.securelist.com/en/blog/208216046/A_Glimpse_Behind_The_Mask" rel="nofollow" target="_blank"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="3fd74e88-d8d8-43c2-b7bc-d69ae5d1eb77" id="478595a3-0b1b-4e8e-96cc-d005e3a4bec5">SecureList</span> blog</a>. </blockquote></div><div style="text-align: justify;">Kaspersky Lab provides <a href="http://www.securelist.com/en/blog/8177/CVE_2013_0497_a_0_day_vulnerability" rel="nofollow" target="_blank">technical analysis</a> of the exploits and payload. They discovered a total of 11 exploits, using same vulnerability and all are unpacked SWF files in&nbsp; the following versions of Adobe Flash Player:<br /><blockquote class="tr_bq"><i>11.3.372.94</i><br /><i>11.3.375.10</i><br /><i>11.3.376.12</i><br /><i>11.3.377.15</i><br /><i>11.3.378.5</i><br /><i>11.3.379.14</i><br /><i>11.6.602.167</i><br /><i>11.6.602.180</i><br /><i>11.7.700.169</i><br /><i>11.7.700.202</i><br /><i>11.7.700.224</i></blockquote>These exploits only work with Windows XP, Vista, 2003 R2, 2003, Windows 7, Windows 7x64, Windows 2008 R2, Windows 2008, 8, Windows 8x6, Mac OS 10.6.8. <br /><br />Researchers discovered that these exploits had been detected on three different user machines, one of which worked under Mac OS 10.6.8 and the other two under Windows 7. They found that <b>.docx</b> document with the 0-day exploit was distributed via a targeted email mailing.<br /><div class="separator" style="clear: both; text-align: center;"><a href="media/1458c41e.cve-2014-0497_03.png" data-original-source="http://2.bp.blogspot.com/-YutDKzsvqn8/UvJaORc8ulI/AAAAAAAAAbU/hk_cfJa1uCs/s1600/cve-2014-0497_03.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="media/1458c41e.cve-2014-0497_03.png" data-original-source="http://2.bp.blogspot.com/-YutDKzsvqn8/UvJaORc8ulI/AAAAAAAAAbU/hk_cfJa1uCs/s1600/cve-2014-0497_03.png" /></a></div>There are total three types of Shellcode:<br /><blockquote class="tr_bq"><i>First one is a primitive shellcode that reads an executable named a.exe from an SWF file and drops it to the hard drive. Only one of the 11 exploits in our possession included a payload.</i></blockquote><blockquote class="tr_bq"><i>The second type downloads and executes a file from a URL passed in the SWF file’s parameters. The third shellcode type, which is only present in some of the files, is the most interesting. </i></blockquote>Adobe was informed of the  availability of an exploit in the wild used to hit systems running the  Flash Player, it recommends users update product installations to the latest versions:<br /><ol style="text-align: justify;"><li>Users  of Adobe Flash Player 12.0.0.43 and earlier versions for Windows and  Macintosh should update to Adobe Flash Player 12.0.0.44.</li><li>Users of Adobe Flash Player 11.2.202.335 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.336.</li><li>Adobe Flash Player 12.0.0.41 installed with Google Chrome will  automatically be updated to the latest Google Chrome version, which will  include Adobe Flash Player 12.0.0.44 for Windows, Macintosh and Linux.</li><li>Adobe Flash Player 12.0.0.38 installed with Internet Explorer 10  will automatically be updated to the latest Internet Explorer 10  version, which will include Adobe Flash Player 12.0.0.44 for Windows  8.0.</li><li style="text-align: justify;">Adobe Flash Player 12.0.0.38 installed  with Internet Explorer 11 will automatically be updated to the latest  Internet Explorer 11 version, which will include Adobe Flash Player  12.0.0.44 for Windows 8.1.</li></ol><div><a href="http://get.adobe.com/flashplayer/" rel="nofollow" target="_blank"><b>Adobe flash player download</b></a></div></div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SHxM4br3TpU:pNyNm1_1beI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SHxM4br3TpU:pNyNm1_1beI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5871902060853621754
title: British Intelligence Agency DDoSed Anonymous Chatrooms to disrupt communication
uri: British-Intelligence-Agency-DDoSed-Anonymous-Chatrooms-to-disrupt-comm
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5871902060853621754
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/b7838e60.lligenceAgencyDDoSedAnonymousChatroomstodisruptcommunication.jpg" data-original-source="http://4.bp.blogspot.com/-Gbkw0SmVWlY/UvNMyq0IQLI/AAAAAAAAAco/Nw8eQNn6vrw/s1600/British+Intelligence+Agency+DDoSed+Anonymous+Chatrooms+to+disrupt+communication.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="British Intelligence Agency DDoSed Anonymous Chatrooms to disrupt communication" border="0" src="media/b4ed520e.lligenceAgencyDDoSedAnonymousChatroomstodisruptcommunication.jpg" data-original-source="http://4.bp.blogspot.com/-Gbkw0SmVWlY/UvNMyq0IQLI/AAAAAAAAAco/Nw8eQNn6vrw/s728/British+Intelligence+Agency+DDoSed+Anonymous+Chatrooms+to+disrupt+communication.jpg" title="British Intelligence Agency DDoSed Anonymous Chatrooms to disrupt communication" /></a></div>Since 2011, the collective hacking group, <a href="http://thehackernews.com/search/label/Anonymous%20Hacker" target="_blank">Anonymous</a> and LulzSec were targeting both Government and law-enforcement websites of U.S and UK, by their own DDoS attack tactics which they used to communicate and plan on Chat rooms known as IRCs, but British intelligence agency <a href="http://thehackernews.com/search/label/GCHQ" target="_blank">GCHQ</a> used their own weapon against them.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">According to the recent <a href="http://thehackernews.com/search/label/Edward%20Snowden" target="_blank"><i>Edward Snowden</i></a> document, a division of Government Communications Headquarters (GCHQ), which is also very well known as the British counterpart of the NSA, had shut down communications among Anonymous hacktivists by launching a “<i>denial of service</i>” (DDOS) attacks, making the British government the first western government known to have conducted such an attack, NBC news <a href="http://www.nbcnews.com/news/investigations/war-anonymous-british-spies-attacked-hackers-snowden-docs-show-n21361" rel="nofollow" target="_blank">reports</a>.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">The same DDoS technique the hackers use to take down government, political and industry websites, including the Central Intelligence Agency (CIA), Federal bureau of Investigation (FBI), the Serious Organized Crime Agency (SOCA), Sony News International and Westboro Baptist Church.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">According to the PowerPoint <a href="media/19c22ff8.snowden_anonymous_nbc_document.pdf" data-original-source="http://msnbcmedia.msn.com/i/msnbc/sections/news/snowden_anonymous_nbc_document.pdf" rel="nofollow" target="_blank">presentation</a> prepared for a 2012 NSA conference called <b>SIGDEV</b>, shows that there was a special GCHQ unit known as the<b> Joint Threat Research Intelligence Group (JTRIG</b>) launched an operation called ‘<i>Rolling Thunder</i>’ that perform massive <a href="http://thehackernews.com/search/label/ddos%20attack" target="_blank">DDOS attacks</a> and uses other techniques to scare away 80 percent of the users of Anonymous internet chat rooms.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">JTRIG also infiltrated anonymous IRC chatrooms to trace hacktivists real identities and to help send them to the prison for stealing data and attacking several government websites.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The operation allowed JTRIG to identify <i>GZero</i>, whose real name was <i>Edward Pearson</i>, a British hacker of age 25 from New York, who was prosecuted and sentenced to 26 months in prison for stealing 8 million identities and information from 200,000 PayPal accounts.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Another hactivist <i>Jake Davis</i>, nick named <i>Topiary</i>, an 18-year-old member of Anonymous and LulzSec spokesman for Scotland, was arrested in July 2011 and was sentenced to 24 months in a youth detention center.<br /><blockquote class="tr_bq">Today Jake <a href="https://twitter.com/DoubleJake/status/430977340131143680" rel="nofollow" target="_blank">tweeted</a> that, "<i>I plead guilty to two counts of DDoS conspiracy and to my face these GCHQ bastards were doing the exact same thing</i>" and "<i>who are the real criminals?</i>"</blockquote></div><div class="separator" style="clear: both; text-align: center;"><a href="media/1a9be5b5.ntThreatResearchIntelligenceGroupDDOSoperationRollingThunder.png" data-original-source="http://3.bp.blogspot.com/-Mvg2TCaPG0I/UvNLA2MM3WI/AAAAAAAAAcc/XIukNY4w8vs/s1600/Joint+Threat+Research+Intelligence+Group+DDOS+operation+Rolling+Thunder+.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="British Intelligence Agency DDoSed Anonymous Chatrooms to disrupt communication" border="0" src="media/fdf3c3dd.ntThreatResearchIntelligenceGroupDDOSoperationRollingThunder.png" data-original-source="http://3.bp.blogspot.com/-Mvg2TCaPG0I/UvNLA2MM3WI/AAAAAAAAAcc/XIukNY4w8vs/s728/Joint+Threat+Research+Intelligence+Group+DDOS+operation+Rolling+Thunder+.png" title="British Intelligence Agency DDoSed Anonymous Chatrooms to disrupt communication" /></a></div><div style="text-align: justify;">A slide headlined “<b>DDOS</b>” refers to the operation known as “<b>Rolling Thunder</b>” The conversation between two hacktivists quotes, “<i>Was there any problem with the IRC [chat room] network?” asks one. “I wasn’t able to connect the past 30 hours.</i>” “<i>Yeah,</i>” responds another. “<i>We’re being hit by a syn flood. I didn’t know whether to quit last night, because of the DDOS.</i>”</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">In a statement to NBC news, a GCHQ spokesperson said that “<i>All of GCHQ's work is carried out in accordance with a strict legal and policy framework</i>,” and that its activities were "<i>authorized, necessary and proportionate.</i>"</div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_fUiTQi50W8:NfRr8Hs0bZU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_fUiTQi50W8:NfRr8Hs0bZU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5125937581032135044
title: Google adds its Chrome apps and extensions to Bug Bounty Program
uri: Google-adds-its-Chrome-apps-and-extensions-to-Bug-Bounty-Program
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5125937581032135044
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/ee0649d9.GoogleaddsitsChromeappsandextensionstoBugBountyProgram.jpg" data-original-source="http://3.bp.blogspot.com/-iNaMPZu3Zqc/UvM3U7swGZI/AAAAAAAAAcM/NGWsgLwP2Os/s1600/Google+adds+its+Chrome+apps+and+extensions+to+Bug+Bounty+Program.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Google adds its Chrome apps and extensions to Bug Bounty Program" border="0" src="media/ac5c17da.GoogleaddsitsChromeappsandextensionstoBugBountyProgram.jpg" data-original-source="http://3.bp.blogspot.com/-iNaMPZu3Zqc/UvM3U7swGZI/AAAAAAAAAcM/NGWsgLwP2Os/s728/Google+adds+its+Chrome+apps+and+extensions+to+Bug+Bounty+Program.jpg" title="Google adds its Chrome apps and extensions to Bug Bounty Program" /></a></div><div style="text-align: justify;">Google's Vulnerability Reward Program which started in November 2010, offers a hefty reward to the one who find a good vulnerability in  its products.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Now Google is getting a little more serious about the security of its Chrome <a href="http://thehackernews.com/search/label/browser%20security" target="_blank">Browser</a> and has expanded its Bug Bounty Program to include all <a href="http://thehackernews.com/search/label/Chrome" target="_blank">Chrome</a> apps, extensions developed and branded as "<i>by Google</i>". </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The Internet is a platform which has become a necessary medium for performing our daily tasks like reading news, paying bills, playing games, scheduling meetings and everything we perform on this platform is possible only because of the various applications maintained by the service providers.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">"<i>We think developing Chrome extensions securely is relatively easy, but  given that extensions like Hangouts and GMail are widely used, we want  to make sure efforts to keep them secure are rewarded accordingly.</i>" Google said in a <a href="http://googleonlinesecurity.blogspot.in/2014/02/security-reward-programs-update.html" rel="nofollow" target="_blank">blog post</a>. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Not only this, to improve the security of open-source projects like <i>Open SSL</i>, <i>Linux Kernel</i> or BND DNS software which is critical to the health of the Internet, Google encourages bug hunters by increasing the payouts for qualifying code improvements under its Patch Reward Program.</div><div style="text-align: justify;"></div><div style="text-align: justify;">“<i>The rewards for each vulnerability will range from the usual $500 up to $10,000 USD and will depend on the permissions and the data each extension handle. If you find a vulnerability in any Google-developed Chrome Extensions, please contact us at <a href="http://goo.gl/vulnz">goo<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="96637167-c0e1-4e4e-8f87-d2bae2b9b9cd" id="6e8837a4-683e-41fb-9625-ed0fa890db76">.</span><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="96637167-c0e1-4e4e-8f87-d2bae2b9b9cd" id="d282b569-bddb-4fb7-b50b-294154b93f37">gl</span>/<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="96637167-c0e1-4e4e-8f87-d2bae2b9b9cd" id="bd003545-a96c-4d48-b752-2c5815ce98ec">vulnz</span></a></i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The New Reward structure is:</div><ul style="text-align: justify;"><li>$10,000 for complicated, high-impact improvements that almost certainly prevent major vulnerabilities in the affected code.&nbsp;</li><li>$5,000 for moderately complex patches that provide convincing security benefits.</li><li>Between $500 and $1,337 for submissions that are very simple or that offer only fairly speculative gain.&nbsp;</li></ul><div style="text-align: justify;">If you are a freelancer or Security enthusiast, then <a href="http://thehackernews.com/search/label/bug%20bounty" target="_blank">Bug bounty program</a> is nothing more than a golden opportunity for you. "<i>We look forward to ongoing collaboration with the broader security community, and we'll continue to invest in these programs to help make the Internet a safer place for everyone</i>,"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Though it is good to have an in-house IT Security team, but collective and open way of penetration testing is an economically efﬁcient mechanism for ﬁnding complex vulnerabilities.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Google has also scheduled its <a href="http://thehackernews.com/2014/01/google-announces-27-million-reward-for.html" target="_blank">4th 'Pwnium' hacking contest</a> in March and $2.7 Million is up for Bug hunters to grab.</div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w4MtRSdG-Do:SrtbBw6sAJg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w4MtRSdG-Do:SrtbBw6sAJg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1168249358289059008
title: Facebook domain hacked by Syrian Electronic Army
uri: Facebook-domain-hacked-by-Syrian-Electronic-Army
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1168249358289059008
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/2969e76c.FacebookDomainwasalmosthackedbySyrianElectronicArmy.png" data-original-source="http://2.bp.blogspot.com/-zIA1HrL5vPI/UvMlDN2uuSI/AAAAAAAAAb8/mIoeNvAb1Hg/s1600/Facebook+Domain+was+almost+hacked+by+Syrian+Electronic+Army.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Facebook domain hacked by Syrian Electronic Army" border="0" src="media/23833958.FacebookDomainwasalmosthackedbySyrianElectronicArmy.png" data-original-source="http://2.bp.blogspot.com/-zIA1HrL5vPI/UvMlDN2uuSI/AAAAAAAAAb8/mIoeNvAb1Hg/s728/Facebook+Domain+was+almost+hacked+by+Syrian+Electronic+Army.png" title="Facebook domain hacked by Syrian Electronic Army" /></a></div>On the 10th Anniversary of Social networking website Facebook, the hacker group '<a href="http://thehackernews.com/search/label/Syrian%20Electronic%20Army" rel="nofollow" target="_blank"><b>Syrian Electronic Army</b></a>'  claimed that they managed to hack into the administrator account of the Facebook's Domain Registrar - <i>MarkMonitor.</i><br /></div><div style="text-align: justify;"></div><div style="text-align: justify;">The hacking group changed the Facebook Domain's contact information to a Syrian email address on the company’s WHOIS domain information page, as shown.<br /></div><div style="text-align: justify;"></div><div style="text-align: justify;">"<b><i>Happy Birthday Mark! http://Facebook.com owned by #SEA</i></b>" the group <a href="https://twitter.com/Official_SEA16/statuses/431208035050991616" rel="nofollow" target="_blank">tweeted</a>.</div><!-- adsense --><br /><div style="text-align: justify;">Hackers also claimed that it had updated the nameserver information to hijack domain, but the process had to be abandoned because it was "<i>taking too much time...</i>" whereas, Facebook spokesperson did confirm that the website's domain record email contact information had been changed.</div><div class="separator" style="clear: both; text-align: center;"><a href="media/fb41ddb2.MarkMonitorAdministrationPanel.jpg" data-original-source="http://1.bp.blogspot.com/-Kxk9xtzg9tg/UvMf1hSM5nI/AAAAAAAAAbk/6g3FagnElOg/s1600/MarkMonitor+Administration+Panel.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Facebook domain hacked by Syrian Electronic Army" border="0" src="media/9a4492bb.MarkMonitorAdministrationPanel.jpg" data-original-source="http://1.bp.blogspot.com/-Kxk9xtzg9tg/UvMf1hSM5nI/AAAAAAAAAbk/6g3FagnElOg/s728/MarkMonitor+Administration+Panel.jpg" title="Facebook domain hacked by Syrian Electronic Army" /></a></div><div style="text-align: justify;"><b>Why SEA Targeted Facebook? </b>Syrian activists and Hackers claimed that Facebook has been deleting pages created by dissidents and removing content as it was violating the social network’s standards, according to Facebook, and that important information about the conflict is being lost as a result. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Journalists and activists involved in the Syrian revolution said that the deletion of Syrian opposition pages by Facebook removes important data and context about the revolution there, including some crucial information about chemical weapon attacks last year.<br /></div><div style="text-align: justify;"></div><div style="text-align: justify;">If SEA had succeeded in updating the nameserver record for Facebook, then the millions of users could have been directed to any other defaced or malicious website.<br /></div><div style="text-align: justify;"></div><div style="text-align: justify;">At the time of writing, the registrant contact details were restored and Facebook confirmed that no traffic to the website was hijacked, and that no users of the social network were affected.</div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jw9AxcurSJI:6NfTerUzbh0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jw9AxcurSJI:6NfTerUzbh0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8422635585638797030
title: 98% of SSL enabled websites still using SHA-1 based weak Digital Certificates
uri: 98-of-SSL-enabled-websites-still-using-SHA-1-based-weak-Digital-Certi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8422635585638797030
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: justify;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/9eb793d7.SLenabledwebsitesstillusingSHA-1basedweakDigitalCertificates.png" data-original-source="http://1.bp.blogspot.com/-Hi2imZ0YL1I/UvN_Csw4b4I/AAAAAAAAAdE/GXu19wL5fyQ/s1600/98%25+of+SSL+enabled+websites+still+using+SHA-1+based+weak+Digital+Certificates.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="98% of SSL enabled websites still using SHA-1 based weak Digital Certificates" border="0" src="media/2f4ba01e.SLenabledwebsitesstillusingSHA-1basedweakDigitalCertificates.png" data-original-source="http://1.bp.blogspot.com/-Hi2imZ0YL1I/UvN_Csw4b4I/AAAAAAAAAdE/GXu19wL5fyQ/s728/98%25+of+SSL+enabled+websites+still+using+SHA-1+based+weak+Digital+Certificates.png" title="98% of SSL enabled websites still using SHA-1 based weak Digital Certificates" /></a></div>The National Institute of Standards and Technology (NIST) had published a  <a href="media/0278e7b6.sp800-131A.pdf" data-original-source="http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-131A.pdf" rel="nofollow" target="_blank">document</a> on Jan 2011 that the SHA-1 algorithm will be risky and  should be disallowed after year 2013, but it was recently <a href="http://news.netcraft.com/archives/2014/02/04/nist-continues-using-sha-1-algorithm-after-banning-it.html" rel="nofollow" target="_blank">noticed</a> by <i>Netcraft </i>experts that <b>NIST.gov </b>website itself were using 2014  dated SSL certificate with SHA-1 hashes.<br /><br />"<i>From January 1, 2011 through December 31, 2013, the use of SHA-1 is deprecated for digital signature generation. The user must accept risk when SHA-1 is used, particularly when approaching the December 31, 2013 upper limit. SHA-1 shall not be used for digital signature generation after December 31, 2013.</i>" NIST in the document.<br /><br />Digital signatures facilitate the safe exchange of electronic documents by providing a way to test both the authenticity and the integrity of information exchanged digitally. Authenticity means when you sign data with a digital signature, someone else can verify the signature, and can confirm that the data originated from you and was not altered after you signed it.<br /><!-- adsense --><br />A digital certificate is essentially a bit of information that tells the Web server is trusted. Digital signatures are usually applied to hash values that represent larger data. <br /><br />A Cryptographic hash function like MD5 and SHA-1 can transform input of an arbitrary length to an output of a certain number of bits, typically 128 or 160 bits. The output is called the<b> hash value</b>. <br /><br /><b>SHA-1</b> is a hashing algorithm that is currently enjoying widespread adoption. SHA-1 is a 160-bit hash functions, whose job is to ensure the integrity of a given piece of  data. Different data yield unique hash values, and any change to a  given piece of data will result in a different hash value. This was designed by the National Security Agency (<a href="http://thehackernews.com/search/label/NSA" target="_blank">NSA</a>) to be a part of the Digital Signature Algorithm.<br /><br />But in 2005, Cryptographic weaknesses were discovered in SHA-1. Hashes are designed to minimize the probability that two different pieces of data yield the same hash values, but yes, it is possible that two different data can have the same hash value, according to <i>Cryptographic hash <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="7991dd54-da3b-463d-bbf4-d9f469bb5810" id="cf1e6822-af0d-4333-88e6-062aecbf1fa0">collision</span> </i>theory.&nbsp; </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">In February 2005, three female Chinese researchers - <i>Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu</i> have reduced the amount of time needed to find two documents with the same signature. <a href="http://thehackernews.com/search/label/Brute%20force" target="_blank">Brute-force</a> is the best way to find such collision points, where two messages can have the same hash value.<br /><br />The Strength of digital signature is determined by the cryptographic key i.e. 160-bit for SHA-1. There are 2<sup>160</sup>  possible SHA-1 hash values and mathematical theory of Chinese researchers tell us that the  chances that any two  different pieces of data computing to the same  value should be about 1 in 2<sup>69</sup>, and the process is about 2,000 times faster than brute force. <br /><br />At that time, it was predicted that <span data-dobid="hdw">practically</span>  doing so would take thousands of years, but today with modern cloud computing  technology, such crypto attacks would cost only $700,000, which is an  affordable project for well funded hacking group or Intelligence agencies like the NSA, GCHQ.<br /><br />So  it is potentially possible to exploit the SHA-1 crypto hash to spoof  any digital signatures, and this is the reason that SHA-1 is  being phased out of most governmental applications, and that NIST has  recommended that SHA-1 not be used after 2013.<br /><blockquote class="tr_bq">"<i>An attacker able to find SHA-1 collisions could carefully construct a pair of certificates with colliding SHA-1 hashes: one a conventional certificate to be signed by a trusted CA, the other a sub-CA certificate able to be used to sign arbitrary SSL certificates. By substituting the signature of the CA-signed certificate into the sub-CA certificate, certificate chains containing the attacker-controlled sub-CA certificate will pass browser verification checks. This attack is, however, made more difficult by path constraints and the inclusion of unpredictable data in the certificate before signing it.</i>"&nbsp; Netcraft expert said.</blockquote></div><div style="text-align: justify;">For the use of digital signatures, we need the collision resistance property of the hash function. So, the latest Digital certificates of NIST are now verified by VeriSign, and using SHA-2 (SHA-256) with RSA in their certificates.<br /><blockquote class="tr_bq">"<i>In total, more than 98% of all SSL certificates in use on the Web are still using SHA-1 signatures. Netcraft's February 2014 SSL Survey found more than 256,000 of these certificates would otherwise be valid beyond the start of 2017 and, due to the planned deprecation of SHA-1, will need to be replaced before their natural expiry dates." </i></blockquote>But not only NIST, other US government organizations are also using an outdated hashing algorithm, including Obamacare website <i>healthcare.gov</i>, <i>donogc.navy.mil</i> and several others.<br /><div class="separator" style="clear: both; text-align: center;"><a href="media/398aed1d.NISTSSLcertificatewithSHA-1.png" data-original-source="http://1.bp.blogspot.com/-1PZJNqYGXkg/UvN73Am2VOI/AAAAAAAAAc4/lBmFULCHPt8/s1600/NIST+SSL+certificate+with+SHA-1.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="98% of SSL enabled websites still using SHA-1 based weak Digital Certificates" border="0" src="media/101e4b02.NISTSSLcertificatewithSHA-1.png" data-original-source="http://1.bp.blogspot.com/-1PZJNqYGXkg/UvN73Am2VOI/AAAAAAAAAc4/lBmFULCHPt8/s728/NIST+SSL+certificate+with+SHA-1.png" height="280" title="98% of SSL enabled websites still using SHA-1 based weak Digital Certificates" width="728" /></a></div>However, in the same document, NIST also published a deadline of December 31, 2013 for switching over 1024 to 2048-bit certificate.<br /><br />In February 2013, Symantec announced a multi-algorithm <a href="http://thehackernews.com/search/label/SSL%20Certificates" target="_blank">SSL certificates</a> for Web servers that go beyond traditional crypto to include what’s known as the <i>Elliptic Curve Cryptography (ECC) Digital Signature Algorithm (DSA)</i>. <br /><br />ECC offers greater security as compared to other prevalent algorithms and 10,000 times harder to break than an RSA-bit key, i.e. Symantec ECC-256 certificates will offer equivalent security of a 3072-bit RSA certificate. </div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=luU1YJdYGBk:mp9_npfnclM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=luU1YJdYGBk:mp9_npfnclM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6082779389869243762
title: IBM developing Self-Destructing Microchips for US Defense
uri: IBM-developing-Self-Destructing-Microchips-for-US-Defense
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6082779389869243762
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/ee339360.self-destructCMOSmicrochipVanishingProgrammableResources.png" data-original-source="http://2.bp.blogspot.com/-uHmKL3KiRws/UvSIn8uYjcI/AAAAAAAAAdU/a3UBWM64oWg/s1600/self-destruct+CMOS+microchip+Vanishing+Programmable+Resources.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="self-destruct CMOS microchip Vanishing Programmable Resources" border="0" src="media/5ddbf78c.self-destructCMOSmicrochipVanishingProgrammableResources.png" data-original-source="http://2.bp.blogspot.com/-uHmKL3KiRws/UvSIn8uYjcI/AAAAAAAAAdU/a3UBWM64oWg/s728/self-destruct+CMOS+microchip+Vanishing+Programmable+Resources.png" title="self-destruct CMOS microchip Vanishing Programmable Resources" /></a></div>Science Fiction Movies always show the possible direction of the development of technology and gives us the opportunity to think about it. The U.S. Government is also trying to develop such technology that was introduced in movies like <i>Star Trek</i> and <i>TERMINATOR</i> i.e. Self destructing Network of computers, Sensors and other devices. <br /><br />The agency of the United States Department of Defense which is responsible for funding the development of many technologies, <i>Defense Advanced Research Projects Agency (DARPA)</i> has <a href="https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;tab=core&amp;id=41304fc8f8cfcf93b758886c5705ab6b" rel="nofollow" target="_blank">handed </a>over a contract to IBM for creating a microchip that will self-destruct remotely.<br /><!-- adsense --><br />The project announced a year back, known as <b>Vanishing Programmable Resources (<a href="http://www.darpa.mil/Our_Work/MTO/Programs/Vanishing_Programmable_Resources_%28VAPR%29.aspx" rel="nofollow" target="_blank">VAPR</a>)</b>, which is dedicated to developing a CMOS microchip that self-destructs when it receives a certain frequency of radio  signal from military command, in order to fully destroy it and  preventing it from being used by the enemy. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The U.S. Military uses all kinds of embedded systems and there are obviously concerns about American technology falling into the wrong hands. If Iran shoots a drone out of the sky, there could be all sorts of sensitive data and bleeding-edge technology that could then be collected, analyzed, and reverse-engineered.</div><div style="text-align: justify;"><br />"<i>It is nearly impossible to track and recover every device, resulting in an unintended accumulation in the environment and potential unauthorized use and compromise of all intellectual property and technological advantage,</i>” DARPA states.<br /><br />This target will be achieved by using a fuse or a reactive metal layer  initiate shattering when ‘glass substrate’ receives an external Radio  Frequency (RF) signal. Once broken, the material would render the device's silicon chip into dust.</div><div style="text-align: justify;"><blockquote class="tr_bq"><div>“<i>IBM plans is to utilize the property of strained glass substrates to shatter as the driving force to reduce attached CMOS chips into Si and SiO2 powder. A trigger, such as a fuse or a reactive metal layer will be used to initiate shattering, in at least one location, on the glass substrate. An external RF signal will be required for this process to be initiated. IBM will explore various schemes to enhance glass shattering and techniques to transfer this into the attached Si CMOS devices.</i>”</div></blockquote>IBM has awarded £3.4 million to design a CMOS microchip that can be turned into silicon dust remotely. I Hope the new destruction technology would stay within the military infrastructure, and not extend their reach to devices like Smartphones and Personal Computers.</div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aEgj4TelSSI:wg5PSdXuS-o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aEgj4TelSSI:wg5PSdXuS-o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7673935116743134667
title: LINKUP - First Ransomware trojan that modifies DNS settings to mine Bitcoin forcefully
uri: LINKUP-First-Ransomware-trojan-that-modifies-DNS-settings-to-mine-Bi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7673935116743134667
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/588eebcd.LinkupRansomwareDNSChangingMalware.jpg" data-original-source="http://3.bp.blogspot.com/-Qb4CP4WWe8E/UvTKmfFuXAI/AAAAAAAAAec/126MQSVKkpg/s1600/Linkup+Ransomware+DNS+Changing+Malware.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Linkup Ransomware DNS Changing Malware" border="0" src="media/546bc16f.LinkupRansomwareDNSChangingMalware.jpg" data-original-source="http://3.bp.blogspot.com/-Qb4CP4WWe8E/UvTKmfFuXAI/AAAAAAAAAec/126MQSVKkpg/s728/Linkup+Ransomware+DNS+Changing+Malware.jpg" title="Linkup Ransomware DNS Changing Malware" /></a></div><div style="text-align: justify;">Till now we all have heard about the <a href="http://thehackernews.com/search/label/ransomware" target="_blank">Ransomware</a> malware that encrypts your files or lock down your computer and ask for a ransom amount to be paid in a specified duration of time to unlock it.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Emsisoft has detected a new piece of malware called “<b><i>Linkup</i></b>”, dubbed as “<i>Trojan-Ransom.Win32.Linkup</i>” that doesn't lock your computer or encrypts files; rather it blocks your Internet access by modifying the DNS settings, with the ability to turn your computer into a <i><a href="http://thehackernews.com/search/label/Bitcoin" target="_blank">Bitcoin</a> mining</i> robot.&nbsp;<b>Sounds Interesting??</b></div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Once the <i>Linkup Trojan</i> is installed in your system, it makes a copy of itself and disables the selected Windows Security and Firewall services to facilitate the infection. Injected poisoned DNS Server will only allow the malware and Bitcoin miner to communicate with the internet.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">It display a bogus notification on the victim's web browser, which is supposed to be from the <i>Council of Europe</i>, that accuses you of viewing “<b><i>Child Pornography</i></b>” and only returns the access of Internet back on the payment of a £0.01 (Euro) fine.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">This is unconfirmed that after paying ransom money, the malware will restore the Internet access or not, "<i>but most likely only a blatant lie</i>". The Ransom amount is supposed to be paid by the Credit Card with the submission of your personal information, including your Name, DOB and City, as shown:</div><div class="separator" style="clear: both; text-align: center;"><a href="media/964fc9fe.LinkupRansomwareDNSChangingMalware.png" data-original-source="http://1.bp.blogspot.com/-PRsCoX0XO3I/UvTKunbXKNI/AAAAAAAAAek/HZ74sTwn93A/s1600/Linkup+Ransomware+DNS+Changing+Malware.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Linkup Ransomware DNS Changing Malware" border="0" src="media/11e9127e.LinkupRansomwareDNSChangingMalware.png" data-original-source="http://1.bp.blogspot.com/-PRsCoX0XO3I/UvTKunbXKNI/AAAAAAAAAek/HZ74sTwn93A/s728/Linkup+Ransomware+DNS+Changing+Malware.png" title="Linkup Ransomware DNS Changing Malware" /></a></div><div style="text-align: justify;">In addition to blocking your Internet access, <i>Linkup</i> malware also download and install other malware that connect your computer to a Bitcoin mining botnet forcefully, which can combine the computing power of multiple infected computers to earn Bitcoin for whoever is behind the attack.<br /><br /></div><div style="text-align: justify;">Emsisoft has <a href="http://blog.emsisoft.com/2014/02/03/malware-analysis-ransomware-linkup-blocks-dns-and-mines-bitcoins/" rel="nofollow" target="_blank">detail explanation</a> of the working of malware on their site: </div><div style="text-align: justify;"><blockquote class="tr_bq">“<i>This combination of ransomware and Bitcoin mining is a new and fascinating development. At this point, however, its functionality is still quite limited as the downloaded jhProtominer only works on 64-bit operating systems. In time, it will be interesting to see if Linkup is modified to download more flexible variants.</i>”</blockquote></div><div style="text-align: justify;">If your computer has been infected, you are advised not to pay ransom money or submit any personal information, rather you can install '<i>Emsisoft Anti-Malware</i>' to remove the malware and restoring DNS settings to default.</div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KrFWq1PbuNQ:XOo7ufguLQo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KrFWq1PbuNQ:XOo7ufguLQo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4213786297067520119
title: Bredo Banking Malware Campaign Targets Bank of America Customers
uri: Bredo-Banking-Malware-Campaign-Targets-Bank-of-America-Customers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4213786297067520119
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/7f330e32.BankofAmericaBredovirus.jpg" data-original-source="http://3.bp.blogspot.com/-omcP-HV0XYE/UvTE0tvRbXI/AAAAAAAAAFI/zBuqYlU1E_g/s1600/Bank+of+America+Bredo+virus.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="media/026c108d.BankofAmericaBredovirus.jpg" data-original-source="http://3.bp.blogspot.com/-omcP-HV0XYE/UvTE0tvRbXI/AAAAAAAAAFI/zBuqYlU1E_g/s728/Bank+of+America+Bredo+virus.jpg" /></a></div><div style="text-align: justify;">The Major US Financial institution,<b> Bank of America</b> is being targeted by a stealthy malicious financial malware campaign, according to <i>AppRiver </i>report.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Last month the researchers at <i>AppRiver</i> has <a href="http://blogs.appriver.com/Blog/bid/101248/Spam-Spike-New-Virus-Campaign-Targets-Bank-of-America-Customers" rel="nofollow" target="_blank">noticed</a> enormous volumes of traffic through their data centers, with the peaks of traffic reaching three or four times than their normal network traffic.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">They caught and blocked a malware campaign that was using the new and novel tactics designed specifically to beat the filtering engines.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Last Wednesday the company experienced huge spam traffic i.e. 10 to 12 times the normal amount of their normal routine traffic. “<i>These spikes have been driven by a tremendous increase in the number of incoming messages being sent with viruses attached.</i>” and some user experienced delays in sending and receiving mail.</div><div class="separator" style="clear: both; text-align: center;"><a href="media/ffc700e3.BankofAmericaBredovirus.png" data-original-source="http://2.bp.blogspot.com/-KlhM85ToP5s/UvTEHCaZHVI/AAAAAAAAAE4/ZuyfYFRdV-Y/s1600/Bank+of+America+Bredo+virus.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Bredo Banking Malware Campaign Targets Bank of America Customers" border="0" src="media/b1a30a8d.BankofAmericaBredovirus.png" data-original-source="http://2.bp.blogspot.com/-KlhM85ToP5s/UvTEHCaZHVI/AAAAAAAAAE4/ZuyfYFRdV-Y/s728/Bank+of+America+Bredo+virus.png" title="Bredo Banking Malware Campaign Targets Bank of America Customers" /></a></div><div style="text-align: justify;">They found the malware campaign, distributing a Financial Trojan designed to target, the Bank of America customers, known as ‘<b>Bredo virus</b>’, capable of stealing information such as Credit Card Numbers, Banking credentials, user’s keystrokes.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">AppRiver said that ‘<i>The software may also have abilities to further infect a system by downloading more malware on to the machine</i>’ and added that, ‘<i>running through a variety of virus scanners showed that only 11 of 51 antivirus vendors were classifying it as malware.</i>’</div><div class="separator" style="clear: both; text-align: center;"><a href="media/1a4525e7.BankofAmericaBredovirus.png" data-original-source="http://2.bp.blogspot.com/-zGhdH6tAjWs/UvTETbxLLkI/AAAAAAAAAFA/KHCqXsyx7fk/s1600/Bank+of+America+Bredo+virus.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Bredo Banking Malware Campaign Targets Bank of America Customers" border="0" src="media/fe7f3c70.BankofAmericaBredovirus.png" data-original-source="http://2.bp.blogspot.com/-zGhdH6tAjWs/UvTETbxLLkI/AAAAAAAAAFA/KHCqXsyx7fk/s728/Bank+of+America+Bredo+virus.png" title="Bredo Banking Malware Campaign Targets Bank of America Customers" /></a></div><div style="text-align: justify;">The Bredo botnet was first detected in May 2009 and is capable of propagating through malicious e-mails that includes malware attachments which would infect a computer when opened, effectively turning the computer into another zombie controlled by the botnet.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">In October 2010, the Dutch law enforcement agents seized 143 LeaseWeb servers used as command &amp; the control center of botnet, but were not able to successfully vanish it completely.</div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FxN1UVQRgII:yeuE4y2z6mo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FxN1UVQRgII:yeuE4y2z6mo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5140218259862508543
title: Microsoft February Patch Tuesday : Two critical and Three Important Security Updates
uri: Microsoft-February-Patch-Tuesday-Two-critical-and-Three-Important-Se
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5140218259862508543
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/ab572002.ryPatchTuesdayincludespatchfortwocriticalRemoteCodeExecution.jpg" data-original-source="http://3.bp.blogspot.com/-1gjdC7pMhik/UvS_lbgqwSI/AAAAAAAAAeM/hi7QOD-hZZ4/s1600/Microsoft+February+Patch+Tuesday+includes+patch+for+two+critical+Remote+Code+Execution.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Microsoft February Patch Tuesday : Two critical and Three Important Security Updates" border="0" src="media/4bca7836.ryPatchTuesdayincludespatchfortwocriticalRemoteCodeExecution.jpg" data-original-source="http://3.bp.blogspot.com/-1gjdC7pMhik/UvS_lbgqwSI/AAAAAAAAAeM/hi7QOD-hZZ4/s728/Microsoft+February+Patch+Tuesday+includes+patch+for+two+critical+Remote+Code+Execution.jpg" title="Microsoft February Patch Tuesday : Two critical and Three Important Security Updates" /></a></div><div style="text-align: justify;">Today <a href="http://thehackernews.com/search/label/Microsoft" target="_blank">Microsoft</a> has released Security Bulletin Advanced <a href="http://technet.microsoft.com/en-us/security/bulletin/ms14-feb" rel="nofollow" target="_blank">Notification</a> for February 2014 Patch Tuesday. The notification dictates five bulletins out of which two have critical Remote Code Execution and rest are important in aspect to severity of security flaw.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">A <a href="http://thehackernews.com/search/label/remote%20code%20execution" target="_blank">Remote Code Execution</a> vulnerability has been found in Security software of Microsoft i.e. Forefront Protection 2010 for Exchange Server, but this time there will be no new bulletins for Internet Explorer. </div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Not only this, users of Windows 7, Windows Server 2008 R2, Windows 8 and Windows 8.1, Windows Server 2012 and Windows Server 2012 R2, Windows RT and Windows RT 8.1 are also advised to patch their systems in order to protect themselves from being a victim of malicious code which is exploiting Remote code execution vulnerability.</div><div class="separator" style="clear: both; text-align: center;"><a href="media/bf93153f.ryPatchTuesdayincludespatchfortwocriticalRemoteCodeExecution.png" data-original-source="http://3.bp.blogspot.com/-E78AmtN_mVE/UvS-j1Pr5DI/AAAAAAAAAeE/Xzs3uVlO4Kw/s1600/Microsoft+February+Patch+Tuesday+includes+patch+for+two+critical+Remote+Code+Execution.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Microsoft February Patch Tuesday : Two critical and Three Important Security Updates" border="0" src="media/5c169b0d.ryPatchTuesdayincludespatchfortwocriticalRemoteCodeExecution.png" data-original-source="http://3.bp.blogspot.com/-E78AmtN_mVE/UvS-j1Pr5DI/AAAAAAAAAeE/Xzs3uVlO4Kw/s728/Microsoft+February+Patch+Tuesday+includes+patch+for+two+critical+Remote+Code+Execution.png" title="Microsoft February Patch Tuesday : Two critical and Three Important Security Updates" /></a></div><div style="text-align: justify;">Except the remote code execution, Microsoft is going to release patches for privilege escalation, information disclosure, and denial of service security flaws in Windows operating system. Privilege escalation is also marked important for .NET framework of Microsoft.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">In August 2013 advisory, Microsoft <a href="http://support.microsoft.com/kb/2862973" rel="nofollow" target="_blank">announced</a>: “<i>The availability of an update for supported editions of Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, and Windows RT that restricts the use of certificates with MD5 hashes. This restriction is limited to, certificates issued under roots in the Microsoft root certificate program. Usage of the MD5 hash algorithm in certificates could allow an attacker to spoof content, perform phishing attacks, or perform man-in-the-middle attacks.</i>”</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">On the coming patch Tuesday, Microsoft will deprecate MD5 hash for signing certificates for server authentication, code signing, and time stamping and will use SHA-2 for signing such certificates. But updates have already been released to test the impact of it for about six months.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">For more details, you can read a report on the risks of using <a href="http://thehackernews.com/2014/02/98-of-ssl-enabled-websites-still-using.html" target="_blank">weak hash functions for signing the Digital Certificates</a>. </div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Ox1gr5x4Cs:nLjexQqNE6Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Ox1gr5x4Cs:nLjexQqNE6Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8592686466742071952
title: Facebook releases 'Conceal' API for Android developers to Encrypt data on Disk
uri: Facebook-releases-Conceal-API-for-Android-developers-to-Encrypt-data
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8592686466742071952
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"></div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/73052f26.ceal-OpenSourceEncryptionforAndroidappdatareleasedbyFacebook.png" data-original-source="http://4.bp.blogspot.com/-3hgxzvs07Tg/UvSthFcpPrI/AAAAAAAAAd0/i0KeF6frPhs/s1600/Conceal+-+Open+Source+Encryption+for+Android+app+data+released+by+Facebook.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="media/73052f26.ceal-OpenSourceEncryptionforAndroidappdatareleasedbyFacebook.png" data-original-source="http://4.bp.blogspot.com/-3hgxzvs07Tg/UvSthFcpPrI/AAAAAAAAAd0/i0KeF6frPhs/s1600/Conceal+-+Open+Source+Encryption+for+Android+app+data+released+by+Facebook.png" /></a></div>Many Smartphone applications support, installation or app data storage to an external SD Card, that can be helpful in saving space on the internal memory, but also vulnerable to hackers.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Typically, an app that has permission to read and write data from an SD card has the permission to read all data on that card, including information written by other apps. This means that if you install a malicious application by mistake, it can easily steal any sensitive data from your Phone's SD Card.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">To prevent the data from being misused by any other app, the best implementation is to encrypt the data, but that will drop the performance of the device.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">On its 10th birthday, as a treat for mobile developers, Facebook has unveiled the source code of its <a href="http://thehackernews.com/search/label/Android" target="_blank">Android</a> security tool called '<b>Conceal</b>' cryptographic API Java library, that will allow app developers to encrypt data on disk in the most resource efficient way, with an easy-to-use programming interface.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Smaller than other <a href="http://thehackernews.com/search/label/cryptography" target="_blank">cryptography</a> standards and built for speed, the Conceal might end up the best solution. "<i>We saw an opportunity to do things better and decided to encrypt the private data that we stored on the SD card so that it would not be accessible to other apps</i>" Facebook Software Engineer said in a <a href="https://code.facebook.com/posts/1419122541659395/introducing-conceal-efficient-storage-encryption-for-android/" rel="nofollow" target="_blank">blog post</a>.</div><div style="text-align: justify;"><a href="media/b8b63352.HowtouseFacebookConcealcryptographicAPI.png" data-original-source="http://3.bp.blogspot.com/-gWvPHIKYiSM/UvSld1aC49I/AAAAAAAAAdk/bWdiqQyu6wI/s1600/How+to+use+Facebook+Conceal+cryptographic+API.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="media/90cb2ce3.HowtouseFacebookConcealcryptographicAPI.png" data-original-source="http://3.bp.blogspot.com/-gWvPHIKYiSM/UvSld1aC49I/AAAAAAAAAdk/bWdiqQyu6wI/s728/How+to+use+Facebook+Conceal+cryptographic+API.png" /></a> The tool is based on algorithms from <b>OpenSSL</b>, a common open source <a href="http://thehackernews.com/search/label/encryption" target="_blank">encryption</a> system for the web:</div><blockquote class="tr_bq"><div style="text-align: justify;">"<i>Conceal doesn't implement any crypto. Instead, it uses specific cryptographic algorithms from OpenSSL. OpenSSL's crypto library is about 1MB when built for armv7. By using only the parts of OpenSSL we needed, we were able to reduce the size of OpenSSL to 85KB. We believe providing a smaller library will reduce the friction of adopting state of the art encryption algorithms, make it easier to handle different Android platform versions, and enable us to quickly incorporate fixes for any security vulnerabilities in OpenSSL as well.</i>"</div></blockquote><div style="text-align: justify;">Conceal&nbsp;is smaller and faster than existing Java crypto libraries, uses <i>AES-GCM</i>,  an authenticated encryption algorithm that helps to detect any  potential tampering with data. "<i>We instead use AES-GCM which is an authenticated encryption algorithm that not only encrypts the data, but also computes a MAC of the data at the same time.</i>" he said.<br /><br />The library also provides resources for storing and managing keys to protect against known weaknesses in the Android's random number generator. Conceal officially supports Android 2.3 and higher (Gingerbread). It will run on 2.2 (Froyo) phones as well.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The company is already using the tool  with the primary Facebook app that runs on Android. Developers can access the Conceal API from <a href="http://facebook.github.io/conceal/" rel="nofollow" target="_blank">GITHUB</a>. </div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UITOQtGEUN0:6PlerMLqr4E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UITOQtGEUN0:6PlerMLqr4E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6252726683057967330
title: Hacking a Car remotely with $20 iPhone sized Device
uri: Hacking-a-Car-remotely-with-20-iPhone-sized-Device
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6252726683057967330
content:
In the era of Smart devices, we have Smartphones, Smart TVs, Smart Fridges, and even the Smart cars! We have made our life very easy and comfortable by providing the master control of every task to such smart devices.



But imagine if an attacker wants to take revenge or hurt someone, now they can hack your car, rather failing breaks in the traditional way. Sounds Horrible !



WELL, Two <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5_WUiK3aXSA:xPZRSkvIVUw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5_WUiK3aXSA:xPZRSkvIVUw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9183926706418930688
title: Snapchat app vulnerable to denial-of-service attack, allows remotely crash iPhone
uri: Snapchat-app-vulnerable-to-denial-of-service-attack-allows-remotely-c
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9183926706418930688
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/5466eeb8.iPhone-SNAPCHAT-app-denial-of-service-attack-vulnerability.png" data-original-source="http://1.bp.blogspot.com/-xcHhLd6juuY/UvZxjvqx7OI/AAAAAAAAAe8/EsFQR9sAilg/s1600/iPhone-SNAPCHAT-app-denial-of-service-attack-vulnerability.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="iPhone SNAPCHAT app denial-of-service attack vulnerability" border="0" src="media/b17496d7.iPhone-SNAPCHAT-app-denial-of-service-attack-vulnerability.png" data-original-source="http://1.bp.blogspot.com/-xcHhLd6juuY/UvZxjvqx7OI/AAAAAAAAAe8/EsFQR9sAilg/s728/iPhone-SNAPCHAT-app-denial-of-service-attack-vulnerability.png" title="iPhone SNAPCHAT app denial-of-service attack vulnerability" /></a></div><i>SNAPCHAT</i>, photo sharing app is the majority choice for variety of users. Recently, the company has faced <a href="http://thehackernews.com/2014/01/snapchats-new-security-feature-hacked.html" target="_blank">data breach and Captcha bypass</a> vulnerability, and just yesterday a new denial-of-service attack has been revealed which can crash an <a href="http://thehackernews.com/search/label/iPhone" target="_blank">iPhone</a>.  </div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;"><i>Jamie Sanchez</i>, a security researcher has <a href="http://www.seguridadofensiva.com/2014/01/descubriendo-nuevas-vulnerabilidades-en-snapchat.html" rel="nofollow" target="_blank">found</a> the app vulnerable, which can enable a hacker to launch a <a href="http://thehackernews.com/search/label/denial-of-service%20attacks" target="_blank">denial-of-service attacks</a>, resulting prompt the user to reset the mobile device.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The flaw into the Snapchat app allows someone to flood a user with thousands of messages in a measure of seconds, "<i>By reusing old tokens, hackers can send massive amounts of messages using powerful computers. This method could be used by spammers to send messages in mass quantities to numerous users, or it could be used to launch a cyber attack on specific individuals</i>" he said.</div><div style="text-align: justify;"><center><iframe allowfullscreen="" frameborder="0" height="480" src="//www.youtube.com/embed/3A6iSctV088" width="640"></iframe></center></div><div style="text-align: justify;">He demonstrated the vulnerability to<i> <a href="http://www.latimes.com/business/technology/la-fi-tn-snapchat-shut-down-iphone-20140207,0,3127301.story#axzz2sfNNG5NI" rel="nofollow" target="_blank">LA Times</a></i> reporter, bombarded his handset with thousands of messages within five seconds in a denial-of-service attack, which caused his iPhone to freeze until it restarted.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Snapchat's <a href="http://thehackernews.com/search/label/Android" target="_blank">Android</a> app is not much vulnerable to this denial-of-service attack, but it impacts on the performance of the phone and leave snapchat app useless until the attack is over. Jamie Sanchez declined to contact Snapchat with his findings as he believes the company has no respect for the cyber security research community after ignoring previous app <a href="http://thehackernews.com/search/label/Vulnerability" target="_blank">vulnerability</a> reports.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">This is the third time in the past 10 weeks when snapchat has no prior information about the security flaws and reacted immediately after public disclosure of the vulnerability.<br /><br /><b>Update: </b>Snapchat reacted, "<i>We are working to resolve the issue and will be reaching out to the security researcher who publicized the attack to learn more.</i>". </div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c-RilJDeRoE:gSrEAnPcDj8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c-RilJDeRoE:gSrEAnPcDj8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4856439149111232777
title: iOS vulnerability allows to disable 'Find My iPhone' without password
uri: iOS-vulnerability-allows-to-disable-Find-My-iPhone-without-password
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4856439149111232777
content:
Smartphone manufacturers are adding ways for owners to track and manage their phones if they ever get lost or stolen. Find My iPhone is a service that comes with every iOS device that allows you to track your iPhone, whether it was lost or stolen.



Normally, the iPhone requires a password if you want to deactivate “Find My iPhone”, but it isn’t entirely perfect and thieves are now smart <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B_ihyi9qTRs:mzMUwaDDaAI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B_ihyi9qTRs:mzMUwaDDaAI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3755060750816334093
title: Snowden used web crawler tool to access and download 1.7 million Secret NSA Files
uri: Snowden-used-web-crawler-tool-to-access-and-download-1-7-million-Secre
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3755060750816334093
content:
National Security Agency (NSA) – the one that had ruled over the privacy of the entire world from countries to individuals, the one with master access to read anyone’s data, intruded into large fiber networks, and can target anyone, at any time, at any place; but lapsed somewhere in protecting its own privacy and security of the confidential data.



If I am wrong, then from where did Snowden<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vTOQ551Uuwk:HaLNdqDkUX4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vTOQ551Uuwk:HaLNdqDkUX4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6176019119488738927
title: Hackers exploiting Router vulnerabilities to hack Bank accounts through DNS Hijacking
uri: Hackers-exploiting-Router-vulnerabilities-to-hack-Bank-accounts-throug
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6176019119488738927
content:
In past months, we have reported about critical vulnerabilities in many wireless Routers including Netgear, Linksys, TP-LINK, Cisco, ASUS, TENDA and more vendors, installed by millions of home users worldwide.


Polish Computer Emergency Response Team (CERT Polska) recently noticed a large scale cyber attack ongoing campaign aimed at Polish e-banking users.

Cyber criminals are using known <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-Rv-LaA5NTg:H84gRWu26po:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-Rv-LaA5NTg:H84gRWu26po:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8445392051112156307
title: LinkedIn shutting down its security-plagued INTRO app in Early March
uri: LinkedIn-shutting-down-its-security-plagued-INTRO-app-in-Early-March
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8445392051112156307
content:
Last October, the social network 'LinkedIn' launched a controversial Smartphone app called 'Intro' that intercepts and route all of your emails through LinkedIn servers to inject LinkedIn profiles of the sender directly into the mails. The app was released for Android, as well as iOS devices.
Why Controversial? The app puts the security and privacy of your data entirely in the company’s hands, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bFnM0VNG6NM:48gyye7PXWQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bFnM0VNG6NM:48gyye7PXWQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6445153863080423321
title: Unseen 4096-Bit Encrypted Email, Chat and File Sharing Service to counter NSA Spying
uri: Unseen-4096-Bit-Encrypted-Email-Chat-and-File-Sharing-Service-to-coun
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6445153863080423321
content:
With the beginning of a new week, we always came across a new revelation of surveillance programs run by the U.S. Government. A Recent NYT Report disclosed that how whistleblower Edward Snowden downloaded 1.7 million classified files which are revealing a number of secret spying projects that are being executed by NSA. The only lesson we have learned, is about taking our PRIVACY very <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tnhu5h8bIIs:jykF2XY3v5A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tnhu5h8bIIs:jykF2XY3v5A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9089110191659712242
title: Google shamed and forced by France to Display 'Privacy Violation Fine' Notice on its homepage
uri: Google-shamed-and-forced-by-France-to-Display-Privacy-Violation-Fine
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9089110191659712242
content:
Last Saturday millions of France Internet users saw a strange message on Google's Homepage, rather than any GOOGLE DOODLE, as shown above.

Despite Paying €150,000 ($228,147) Fine to France Government, Google has been forced to post a 'Privacy Fine Notice' on its French Search Engine homepage for violating Data-Processing and Freedoms Laws.



The French Data-protection authority - 'The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UNtXxfU9m2E:I9dD0KtGm1g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UNtXxfU9m2E:I9dD0KtGm1g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2428252392907758956
title: Snapchat user accounts vulnerable to Brute-Force Attack
uri: Snapchat-user-accounts-vulnerable-to-Brute-Force-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2428252392907758956
content:
Snapchat, a Smartphone application that lets users share snapshots with friends is catching fire among teenagers. It was first hacked in December when 4.6 million Snapchat users were exposed in a database breach.
&lt;!-- adsense --&gt;
Later, the denial-of-service attack and CAPTCHA Security bypass were discovered by other researchers within last two-three weeks. Snapchat has no Vulnerability <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=njZ2k4pGrJA:Ab7343UaWZ4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=njZ2k4pGrJA:Ab7343UaWZ4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1222758568864058230
title: Beware! Cyber Criminals may spoil your Valentine's Day
uri: Beware-Cyber-Criminals-may-spoil-your-Valentine-s-Day
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1222758568864058230
content:
Valentine's Day - a day of hearts, Chocolates, Flowers and Celebrations when people express their emotions to their loved ones and most of us send E-cards, purchase special gifts with the help of various Online Shop Sites and many other tantrums making them feel special.



While you are busy in Googling ideal gifts for your loved ones, the Cyber thieves are also busy in taking advantage of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S_IJJ084HLs:tK-jOl1GY5I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S_IJJ084HLs:tK-jOl1GY5I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8224091320828305769
title: The Mask, a malware campaign that remained undetected for 7 Years
uri: The-Mask-a-malware-campaign-that-remained-undetected-for-7-Years
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8224091320828305769
content:
A Sophisticated cyber spying operation, ‘The Mask’, that has been under the mask for about 7 years targeting approximately 31 countries, has now been ‘unmasked’ by researchers at Kaspersky Labs.



The Researchers believe that the program has been operational since 2007 and is seems to be sophisticated nation-state spying tool that targeted government agencies and diplomatic offices and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kkDVJe7_JVE:mgPIBa1FtdQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kkDVJe7_JVE:mgPIBa1FtdQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8987913592353646473
title: Dear Internet, Today is 'The Day We Fight Back', Biggest protest against NSA Surveillance
uri: Dear-Internet-Today-is-The-Day-We-Fight-Back-Biggest-protest-again
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8987913592353646473
content:
The US Government has allotted a large share of its 'Black Budget' for secret military research and weapons programs, along with surveillance programs, that is harvesting hundreds of millions of Metadata from emails, web activity, chats, social networks, and everything else around the world. To make this happen, NSA has used a number of unethical ways, but labeled as legal solutions. 



<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KNLYV0v5Rv4:qdGCrTW-AB8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KNLYV0v5Rv4:qdGCrTW-AB8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4030714330331657239
title: Largest Ever 400Gbps DDoS attack hits Europe uses NTP Amplification
uri: Largest-Ever-400Gbps-DDoS-attack-hits-Europe-uses-NTP-Amplification
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4030714330331657239
content:
The Distributed Denial of Service (DDoS) attack is the one of favourite weapon for the hackers to temporarily suspend services of a host connected to the Internet and till now nearly every big site had been a victim of this attack.



Since 2013, Hackers have adopted new tactics to boost Distributed Denial of Service attack sizes, which is known as ‘Amplification Attack’, that provide the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MnRtfBPP3wY:1LJ9fBS4yt0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MnRtfBPP3wY:1LJ9fBS4yt0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7524737439751883374
title: Update Adobe Shockwave Player to fix Critical Remote Code Execution Vulnerabilities
uri: Update-Adobe-Shockwave-Player-to-fix-Critical-Remote-Code-Execution-Vu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7524737439751883374
content:
Adobe has released a security update to address critical vulnerabilities for Adobe Shockwave Player 12.0.7.148 and earlier versions of the Windows and Mac OS X systems.



The Patch fixes two critical remote code execution vulnerabilities, that could potentially allow an attacker to remotely take control of the affected system.



According to the Security Advisory released by Adobe, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E55ljfJzxWg:K1i3RsPbnFo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E55ljfJzxWg:K1i3RsPbnFo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3702810647081155867
title: Underground Marketplace 'Utopia' Seized by Dutch Police, 5 suspects arrested
uri: Underground-Marketplace-Utopia-Seized-by-Dutch-Police-5-suspects-ar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3702810647081155867
content:
After Silk Road, another underground online marketplace 'Utopia' has been seized by Dutch National Police, where users could buy illegal drugs and guns for home delivery.




The police started their investigation under Codename 'Operation Commodore' in 2013,  and finally seized Utopia's Germany-based servers and arrested total 5 suspects for running this marketplace. One arrested in Germany <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fA7rW7cTLEc:HH1e43yN3ms:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fA7rW7cTLEc:HH1e43yN3ms:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8616426920567896008
title: Edward Snowden obtained classified NSA documents by stealing Coworker’s Password
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8616426920567896008
content:
We are quite aware of the leaks that the Whistleblower Edward Snowden carried out against the US National Security Agency (NSA) and after reading every related update, watching every document that he provided to various news websites, you all are left with a question in mind that, How he could carry out this whole operation without any helping hand?



Yes, you are right! The former NSA <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SNy9iTfHnBE:keHknFa18zk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SNy9iTfHnBE:keHknFa18zk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-400674715842740501
title: Magento vulnerability allows an attacker to create administrative user
uri: Magento-vulnerability-allows-an-attacker-to-create-administrative-user
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/400674715842740501
content:
It seems you cannot go a day without hearing about someone or some group hacking a website or stealing credit card and other sensitive data from e-commerce sites.



The Market of E-commerce is at its boom, and that provides even more opportunities to hackers. There are many readymade e-commerce platforms available on the Internet, that are easy to install and easy to manage at no extra cost <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8OD4rthuGbQ:znFfuNpOqgg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8OD4rthuGbQ:znFfuNpOqgg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3581678543909686346
title: Hackers targeting non-browser applications with Fake SSL Certificates
uri: Hackers-targeting-non-browser-applications-with-Fake-SSL-Certificates
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3581678543909686346
content:
Having SSL Certification doesn't mean that the website you are visiting is not a bogus website. SSL certificates protect web users in two ways, it encrypts sensitive information such as usernames, passwords, or credit card numbers and also verify the identity of websites.
But today hackers and cyber criminals are using every tantrum to steal your credentials by injecting fake SSL certificates to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zRWJcB-OFgY:56K-2d0lJU0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zRWJcB-OFgY:56K-2d0lJU0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1007871845564034543
title: Forbes Hacked by Syrian Electronic Army; Website and Twitter accounts Compromised
uri: Forbes-Hacked-by-Syrian-Electronic-Army-Website-and-Twitter-accounts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1007871845564034543
content:
Forbes is the latest victim in a long line of high-profile attacks by the Syrian Electronic Army (SEA), sending a reminder to the international community that cyber warfare is alive and well.



The pro-Assad group also took responsibility for hacking multiple Forbes websites and hijacked three Twitter accounts related to the website.

&lt;!-- adsense --&gt;

According to the screenshots published <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zfm_XnH3I10:iGzgs3HD9Qw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zfm_XnH3I10:iGzgs3HD9Qw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8620043665890268986
title: CVE-2014-0322: Internet Explorer zero-day exploit targets US Military Intelligence
uri: CVE-2014-0322-Internet-Explorer-zero-day-exploit-targets-US-Military
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8620043665890268986
content:
Hackers are using a zero day vulnerability in Microsoft's Internet Explorer (IE) web browser and targeting US military personnels in an active attack campaign, dubbed as 'Operation Snowman'.



FireEye Researchers have discovered that a U.S. veterans website was compromised to serve a zero day exploit, known as CVE-2014-0322, which typically involves the compromise of a specific website in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7Qe1kVWJElY:W7544WXHKHc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7Qe1kVWJElY:W7544WXHKHc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-922595154170482271
title: Hacker removed Mark Zuckerberg's Facebook Timeline Cover Photo
uri: Hacker-removed-Mark-Zuckerberg-s-Facebook-Timeline-Cover-Photo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/922595154170482271
content:
Something unusual happened today, Mark Zuckerberg's Facebook Timeline Cover Photo is removed, as shown in the above Screenshot.

Suddenly, after few hours, I got a mail from an Egyptian Hacker with nickname 'Dr.FarFar', claimed that he has hacked the Mark Zuckerberg's Facebook Profile and removed the Cover Photo using a private exploit.

The hacker has not provided any technical details about<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65J4742GoRY:sEhspuLu1Bs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65J4742GoRY:sEhspuLu1Bs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5853702021922389505
title: 300000 Android Devices infected by Premium SMS-Sending Malware
uri: 300000-Android-Devices-infected-by-Premium-SMS-Sending-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5853702021922389505
content:
Downloading various apps blindly from Google play store may bring you at risk in terms of money. 



PandaLabs, the Cloud Security Company, has identified malicious Android apps on Google Play that can sign up users for premium SMS subscription services without their permission and so far it has infected at least 300,000 Android users, although the number of malicious downloads could have <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wtTwl9ARHtg:uoLgH8jTV68:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wtTwl9ARHtg:uoLgH8jTV68:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1452941471160323804
title: TESCO Customers' account details leaked online
uri: TESCO-Customers-account-details-leaked-online
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1452941471160323804
content:
You all were busy in celebrating Valentine’s Day with your loved ones, and the cyber criminals were too celebrating the day in their own way, and this time, with the TESCO customers.



A list of over 2,240 Tesco.com Internet Shopping accounts was posted Online on the Pastebin website by some unknown hackers on Thursday, allowing access to online shopping accounts, personal details and Tesco <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jt8WqMNzcTg:kaOUajh9e1I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jt8WqMNzcTg:kaOUajh9e1I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8988980326493723193
title: Flappy Bird app clones send text messages to Premium Number
uri: Flappy-Bird-app-clones-send-text-messages-to-Premium-Number
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8988980326493723193
content:
Flappy Bird, developed by a 29-year old, Dong Nguyen, was one of the top free gaming apps of the last month, but now officially unavailable for users.



After achieving income of $50,000 per day in advertising revenue, Dong Nguyen pulled out Flappy Bird gaming app from all the web app stores and now it’s permanently dead.



“Flappy Bird was designed to play in a few minutes when you are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OKsW3MuF34E:YXZhB_N3S-c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OKsW3MuF34E:YXZhB_N3S-c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8994364596713684543
title: Crowd-Funding site Kickstarter Hacked! It's time to change your Password
uri: Crowd-Funding-site-Kickstarter-Hacked-It-s-time-to-change-your-Passwo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8994364596713684543
content:
If you have an account at the popular crowd funding site Kickstarter, it's time to change your account's password. Kickstarter's CEO Yancey Strickler says that the company has been hacked by an unknown hacker earlier this week.



Kickstarter said in a blog post that no credit card information was stolen in Data Breach, but users' personal information has been compromised and they also <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gS1l9KI20l8:gfxZvqCWUCQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gS1l9KI20l8:gfxZvqCWUCQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6651762538120848373
title: Germany to step up Counter Espionage Program against United States
uri: Germany-to-step-up-Counter-Espionage-Program-against-United-States
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6651762538120848373
content:
Sooner or later it had to Happen! After whistle-blower Edward Snowden unfolded various spying operations that were controlled by the US Intelligence agency, it gave a reason to all other countries to start their own Counter-Surveillance programs.



Last year in October, it was revealed that the National Security Agency (NSA) was eavesdropping the mobile communications of German Chancellor <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mRq-xhC-hYo:quWCifl4gGs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mRq-xhC-hYo:quWCifl4gGs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1331301211714409873
title: Google and Apple app Store removing all Games with "Flappy" word in Title
uri: Google-and-Apple-app-Store-removing-all-Games-with-Flappy-word-in-Ti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1331301211714409873
content:
After the developer of Flappy Bird pulled the gaming app from both the Apple and Google app stores, it led to the creation of dozens and dozens of Flappy Bird clones that are trying to cash in on the popularity of the original title.
Also Security researchers from multiple anti-malware firms have recently identified a number of malicious versions of Flappy Bird apps.
In Order to protect <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vGv0zeLJYJU:og9kv7gGTTk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vGv0zeLJYJU:og9kv7gGTTk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1759243480364807394
title: Linksys Malware 'The Moon' Spreading from Router to Router
uri: Linksys-Malware-The-Moon-Spreading-from-Router-to-Router
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1759243480364807394
content:
Which Wireless Router do you have at your Home or Office? If it’s a Linksys Router you could be in the danger to a new malware that attacks your firmware and replicates itself.
Security researcher Johannes B. Ullrich from the SANS Technology Institute has warned about a self-replicating malware which is exploiting authentication bypass and code-execution vulnerabilities in the Linksys wireless <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lCnnmVP-5qk:-IIg1xPW3Rs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lCnnmVP-5qk:-IIg1xPW3Rs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5014583442750591753
title: Confirmed: Samsung Galaxy S5 has a Fingerprint Scanner
uri: Confirmed-Samsung-Galaxy-S5-has-a-Fingerprint-Scanner
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5014583442750591753
content:
After the huge success of Samsung galaxy S3, Samsung Galaxy S4 and Samsung Tablets, the world’s most successful Android manufacturer is going to reveal its brand new Smartphone Samsung Galaxy S5 next week at Mobile World.

Early in 2014, rumors suggested that Samsung Galaxy S5 will have Fingerprint Scanning technology like iPhone 5s.



Fingerprint scanners are slowly becoming a popular <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C6rILi9MgLI:SDFtjMBaFKg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C6rILi9MgLI:SDFtjMBaFKg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6349867272242951885
title: Google Forces Handset Manufacturers to Ship Smartphone with latest Android version
uri: Google-Forces-Handset-Manufacturers-to-Ship-Smartphone-with-latest-And
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6349867272242951885
content:
Get bored with the older versions of Google’s Android Operating system? Then there is Good News for Android lovers! Google is putting an end to the older versions of Android newly manufactured Smartphone Handsets.
According to a leaked Google Document, the Smartphone Manufacturers will be forced to provide the latest version of Android, i.e. version 4.4 KitKat installed in the new handsets, under<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRhXnGvYnfU:w0bvOp-Vb6I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRhXnGvYnfU:w0bvOp-Vb6I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1187373902688427898
title: Ultrasonic Password Security for Google Accounts
uri: Google-may-implement-Ultrasonic-Password-Security-for-your-accounts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1187373902688427898
content:
Does a Strong Password Guarantee you the Security of your Online Account? If yes, then you should once check out our 'Data breaches' section on the website.



A Startup Company, SlickLogin has developed a technology that enables you to login into online accounts using Ultrasonic sound, instead of entering username and password on your.



The company claims its technology offers "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gTJcI-ixdS0:upqSLpzaE1c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gTJcI-ixdS0:upqSLpzaE1c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6357393013022582696
title: Adult Magazine Sued LeaseWeb for Hosting Pirated Websites, claiming $188M in Damages
uri: Adult-Magazine-Sued-LeaseWeb-for-Hosting-Pirated-Websites-claiming-1
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6357393013022582696
content:
Perfect 10, an Adult Magazine Publisher who previously accused Google, Amazon, RapidShare, Deposit File and many more companies for Copyright Infringement, has sued LEASEWEB Hosting provider this time.



LEASEWEB is the former hosting provider of File Sharing website 'Megaupload', and Perfect 10 accuses them of providing hosting services to several websites that host pirated copies of their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-o5SDcUR-3E:dg29YnoltNY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-o5SDcUR-3E:dg29YnoltNY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6505723885946298410
title: Free Online Game website offers $13,000 Reward to expose details on DDoS attack
uri: Free-Online-Game-website-offers-13-000-Reward-to-expose-details-on-DD
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6505723885946298410
content:
Currently there are more than Million people worldwide playing Windows Games, Computer Games and Online Video Games, at least an hour a day, but the gaming servers are often insecure and misconfigured.

Yesterday, a popular multiplayer Free Online Game 'Wurm' servers were knocked offline by Distributed Denial of Service (DDoS) attack. Servers were targeted shortly after its most recent update.
&lt;<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UInxUMBY2z8:r1pT-zvl5zY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UInxUMBY2z8:r1pT-zvl5zY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3647786019576549660
title: ZeuS Trojan variant Targets Salesforce accounts and SaaS Applications
uri: ZeuS-Trojan-variant-Targets-Salesforce-accounts-and-SaaS-Applications
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3647786019576549660
content:
Zeus, a financially aimed Banking Trojan that comes in many different forms and flavors, is capable to steal users' online-banking credentials once installed. This time, an infamous Zeus Trojan has turned out to be a more sophisticated piece of malware that uses web-crawling action.




Instead of going after Banking credentials and performing malicious keystroke logging, a new variant of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L0b7O-yzfOY:d68FM6BC2iQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L0b7O-yzfOY:d68FM6BC2iQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8442169203718198753
title: Tinder Online Dating app vulnerability revealed Exact Location of Users
uri: Tinder-Online-Dating-app-vulnerability-revealed-Exact-Location-of-User
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8442169203718198753
content:
Using Popular Online Dating app - Tinder on iPhone?? Then you are at significant risk that exposed members' private information without their knowledge.



Online Dating app Tinder, available for the iPhone from the app store, has become incredibly popular in the past few months.

Tinder app allows you to find dates nearby your location within a few miles and connects you with them, but a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wDoxt0OrInU:gZDVkQoBEOo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wDoxt0OrInU:gZDVkQoBEOo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2715841671796547177
title: Why Facebook is buying WhatsApp for $19 Billion?
uri: Why-Facebook-is-buying-WhatsApp-for-19-Billion
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2715841671796547177
content:
Popular Smartphone Messaging app WhatsApp's $19 billion acquisition by Social Network giant Facebook made Headlines this week.



While Some are applauding the move, and many other users are worried about WhatsApp’s future and their privacy after this acquisition.



Why So Serious?

WhatsApp currently having 450 million active users and processes 50 billion messages a day. Service charges a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ELOrK8RxmIM:aMMva__m3VQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ELOrK8RxmIM:aMMva__m3VQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8804032239891923338
title: Learn How DuckDuckGo Search Engine helps you to be a Good Programmer
uri: Learn-How-DuckDuckGo-Search-Engine-helps-you-to-be-a-Good-Programmer
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8804032239891923338
content:
So you want to be a Programmer? Want to learn - How to code, Debug, and Program? The Web is full of free resources that can turn you into a programmer in no time, but never knew Where to start or How to troubleshoot your programs.

Learning How to be a good programmer begins with learning logic concepts and language syntax and Google is a superb search engine, used by the majority of users <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WYyBXQwjaN8:zPqAu87DwUE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WYyBXQwjaN8:zPqAu87DwUE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3471541151409154244
title: Adobe releases another Emergency Security Patch for Flash Player
uri: Adobe-releases-another-Emergency-Security-Patch-for-Flash-Player
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3471541151409154244
content:
Security Firm FireEye has uncovered yet another critical zero-day vulnerability in widely used Adobe Flash Software and Adobe has been forced to issue a second emergency patch update in less than a month.

All versions of Adobe Flash Player released before today's patch are vulnerable to the zero-day exploit and the patch addresses a critical vulnerability CVE-2014-0502, being used in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lq7cPIvw2sE:Hgx0qEn79DY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lq7cPIvw2sE:Hgx0qEn79DY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1377702356555202776
title: Apple's iOS vulnerable to Man-in-the-middle Attack, Install iOS 7.0.6 to Patch
uri: Apple-s-iOS-vulnerable-to-Man-in-the-middle-Attack-Install-iOS-7-0-6
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1377702356555202776
content:
Apple's latest 35.4 MB update of iOS 7.0.6 doesn't seem important at first, but it contains a critical security patch that addresses a flaw with SSL encryption.




Yes, a very critical security vulnerability that could allow hackers to intercept email and other communications that are meant to be encrypted in iPhone, iPad and Mac computer.



Apple provides very little information when <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4huuTiPrtXY:5svGtKkHLlY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4huuTiPrtXY:5svGtKkHLlY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8811069075913187768
title: Learn How to Hide WhatsApp 'Last seen at' Time and Profile Picture from Other Users
uri: Learn-How-to-Hide-WhatsApp-Last-seen-at-Time-and-Profile-Picture-fro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8811069075913187768
content:
WhatsApp for Android added most awaited privacy option for all who do not want to display information about when they last used the app.

This is the first impressive update of the WhatsApp after acquisition by Facebook, who has paid a lot of money in cash and stock to acquire it.




The Popular Smartphone messaging application WhatsApp version 2.11.169 will provide you more ability and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9CnOfRsKS4:ZU2HDF6EBII:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9CnOfRsKS4:ZU2HDF6EBII:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4409586157593239630
title: Android iBanking Trojan Source Code Leaked Online
uri: Android-iBanking-Trojan-Source-Code-Leaked-Online
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4409586157593239630
content:
Smartphone is the need of everyone today and so the first target of most of the Cyber Criminals. Malware authors are getting to know their market and are changing their way of operations. Since last year we have seen a rise in the number of hackers moving from the Blackhat into the Greyhat.



The Head of knowledge delivery and business development for RSA's FraudAction Group, Daniel Cohen <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5hTwjUuAeG8:mTmGOStHVes:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5hTwjUuAeG8:mTmGOStHVes:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7129529971066625323
title: Silent Circle's Blackphone - Privacy and Security Focused Smartphone for $629
uri: Silent-Circle-s-Blackphone-Privacy-and-Security-Focused-Smartphone-f
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7129529971066625323
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/bcbe5cb7.Silent-Circle-Blackphone-buy.jpg" data-original-source="http://3.bp.blogspot.com/-1gd8CQnYyGw/UwtqaO_-OxI/AAAAAAAAaT4/uRspdOCEJC4/s1600/Silent-Circle-Blackphone-buy.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Silent Circle's BLACKPHONE - A Privacy and Security Focused Smartphone now available for pre-order for about $629." border="0" src="media/f3131845.Silent-Circle-Blackphone-buy.jpg" data-original-source="http://3.bp.blogspot.com/-1gd8CQnYyGw/UwtqaO_-OxI/AAAAAAAAaT4/uRspdOCEJC4/s728/Silent-Circle-Blackphone-buy.jpg" title="Silent Circle's BLACKPHONE - A Privacy and Security Focused Smartphone now available for pre-order for about $629." /></a></div>Earlier this year&nbsp;encrypted communications firm <b>Silent Circle</b> and Spanish Smartphone maker <b></b><b></b><b></b><b></b><b></b><b>Geeksphone</b>&nbsp;announced a&nbsp;<a href="http://thehackernews.com/2014/01/Blackphone-encypted-PrivatOS-smartphone-Silent-Circle_15.html" target="_blank"><span style="text-align: left;">privacy-focused&nbsp;</span><span style="text-align: left;">encrypted</span><span style="text-align: left;">&nbsp;S</span><span style="text-align: left;">martphone</span></a>&nbsp;called '<b>Blackphone</b>' and today the company has revealed it as '<span style="text-align: left;"><i>Mobile World Congress</i>' in Barcelona.</span></div><div style="text-align: justify;"><span style="text-align: left;"><br /></span></div><div style="text-align: justify;">The Blackphone titled as, “<i>world’s first Smartphone which places privacy and control directly in the hands of its users,</i>” has a fully customized version&nbsp;<span style="text-align: justify;">customized</span><span style="text-align: justify;"> version</span><span style="text-align: justify;"> of Android called<b> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="5c6c7207-48f2-4d94-bbd8-c19323fd6e2e" id="af9e2d18-d162-4ab5-b586-3d52e1680c15"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="4118ea4c-2738-478a-afdf-4c6544e8556b" id="66f1f60b-48b7-4630-8dcc-2bb58abc69a2">PrivatOS</span></span>&nbsp;</b>and pre-installed with lots of&nbsp;</span>privacy-enabled applications, is now available for <a href="https://store.blackphone.ch/" rel="nofollow" target="_blank">pre-order for about $629</a>.<br /><br />Silent Circle was co-founded by a&nbsp;respected Cryptographer&nbsp;<i><b>Phil Zimmermann,&nbsp;</b></i>best known as the creator of&nbsp;<b><a href="http://thehackernews.com/2014/01/learn-to-encrypt-your-emails-against.html" target="_blank">Pretty Good Privacy</a> (PGP)</b>, which is a widely used email encryption software.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The Blackphone handsets main focus is keeping all of your data secure, and to stop government agencies snooping on your communications. Blackphone will come with a set of application developed by <i>Silent Circle</i>, including <i>Silent Phone, Silent Text, and Silent Contacts</i> as well as other features for firewall and remote wipe when required.</div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/f6d75253.Silent-Circle-Blackphone.jpg" data-original-source="http://4.bp.blogspot.com/-mzn80CinrtE/UwtqguQEowI/AAAAAAAAaUA/h3U3BWKbonQ/s1600/Silent-Circle-Blackphone.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Silent Circle's Blackphone - Privacy and Security Focused Smartphone available at $629" border="0" src="media/7d041351.Silent-Circle-Blackphone.jpg" data-original-source="http://4.bp.blogspot.com/-mzn80CinrtE/UwtqguQEowI/AAAAAAAAaUA/h3U3BWKbonQ/s728/Silent-Circle-Blackphone.jpg" title="Silent Circle's Blackphone - Privacy and Security Focused Smartphone available at $629" /></a></div></div><div style="text-align: justify;">Blackphone also has a <b><i>'Kismet Smart Wi-Fi Manager'</i></b> to improve the security device on public networks, and also provides the private web browsing and secure file-sharing options. The <a href="http://thehackernews.com/search/label/Android" target="_blank">Android</a>-based Blackphone is powered by a quad-core 2 GHz processor, 2GB of RAM, 16GB of <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="0e0b4539-73d8-4cf5-90a0-783b4cec1859" id="3a13d7f0-6685-4c4a-9125-df28336a7630">onboard</span> storage and support for LTE networks.<br /><br />The Blackphone also comes with <b></b><b></b><b></b><b></b><b>SpiderOak</b>, which provides 5GB of <a href="http://thehackernews.com/2014/01/how-to-encrypt-your-files-before.html" target="_blank">encrypted data backup</a>, and&nbsp;Virtual Private Network from <i><b>Disconnect.me</b></i>.<br /><br />But if you think 'Blackphone' is a shield against the NSA or other intelligence agencies Blackphone, then you should know this - <i><b>Blackphone cannot mask metadata entirely from <a href="http://thehackernews.com/search/label/NSA" target="_blank">NSA</a>.</b>&nbsp;</i>No piece of man-made technology is entirely hack-proof.<br /><div class="separator" style="clear: both; text-align: center;"><a href="media/5f18cd64.Buy-blackphone.png" data-original-source="http://2.bp.blogspot.com/-yMuHMSF-MVk/Uwt99XnsuGI/AAAAAAAAaUQ/ss-0By4tuTw/s1600/Buy-blackphone.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="media/29b7705b.Buy-blackphone.png" data-original-source="http://2.bp.blogspot.com/-yMuHMSF-MVk/Uwt99XnsuGI/AAAAAAAAaUQ/ss-0By4tuTw/s728/Buy-blackphone.png" /></a></div>Mike Janke, co-founder and CEO of Silent Circle told Mashable, "<i>If you are on the terrorist wanted list or a criminal, intelligence services will get into your device... There's no such thing as 100% secure phone.</i>"<br /><br />The Blackphone’s main security feature is voice and text encryption, not about hiding metadata which is related to a communication data such as date, time, location and identity of the users.</div><div><div><div><!-- adsense --></div></div></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6hVyNCEN9sw:IWECyHQRRmc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6hVyNCEN9sw:IWECyHQRRmc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7009405008220077963
title: Hacking Team sold Spyware to 21 Countries; Targeting Journalists and Human Right Activists
uri: Hacking-Team-sold-Spyware-to-21-Countries-Targeting-Journalists-and-H
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7009405008220077963
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/e9876c85.Hacking-spyware-tool.jpg" data-original-source="http://4.bp.blogspot.com/-MsWBeP460lM/Uws9gMGkd5I/AAAAAAAAaTo/lsS4vQa9FX8/s1600/Hacking-spyware-tool.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Hacking Team sold Spyware to 21 Countries; Targeting Journalists and Human Right Activists" border="0" src="media/8c3b96bd.Hacking-spyware-tool.jpg" data-original-source="http://4.bp.blogspot.com/-MsWBeP460lM/Uws9gMGkd5I/AAAAAAAAaTo/lsS4vQa9FX8/s728/Hacking-spyware-tool.jpg" title="Hacking Team sold Spyware to 21 Countries; Targeting Journalists and Human Right Activists" /></a></div><span>Spying on the world by injecting sophisticated backdoors in software, systems, and mobile phones, leads to violation of the Privacy and Security of every individual. Yes, we are talking about <i>Surveillance</i>, but this time not about NSA</span><span>.</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span>Instead, Countries including some with poor human-rights records and a much less technically advanced nation are the likely culprits, as they apparently used commercial spyware in making surveillance capabilities that once were the exclusive expertise of the known spy agencies, such as<i> National Security Agency (NSA) and GCHQ.</i><o:p></o:p></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span><i><b>Citizen lab</b></i>, a nonprofit research lab has&nbsp;<a href="https://citizenlab.org/2014/02/mapping-hacking-teams-untraceable-spyware/" rel="nofollow" target="_blank">found</a> traces of a remote hacking tool&nbsp;</span><span>in 21 countries</span><span>, developed by&nbsp;</span><i ><b>Hacking Team,</b></i><span >&nbsp;including Ethiopia, Sudan, Azerbaijan and Saudi Arabia, which the team had already&nbsp;</span><a href="http://news.cnet.com/8301-13578_3-57573707-38/meet-the-corporate-enemies-of-the-internet-for-2013/" rel="nofollow"  target="_blank">denied</a><span >&nbsp;back in 2013.</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><!-- adsense --><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span ><i>Hacking Team,</i> also known as <b><i>HT </i></b><b><i></i></b><b><i>S.r.l</i></b>, is an Italian company, which is known for its powerful surveillance software,<i> <b>Remote Code System </b></i><b><i>(RCS)</i></b> that it sells to Governments and law enforcement agencies.<o:p></o:p></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="text-align: justify;"><span >Senior Counsel of Hacking Team, Eric Rabe stated that the company does not provide its products to '<i>repressive regimes</i>.'</span></div><blockquote class="tr_bq" style="text-align: justify;"><span >"<i>On the issue of repressive regimes, Hacking Team goes to great lengths to assure that our software is not sold to governments that are blacklisted by the EU, the US, NATO, and similar international organizations or any “repressive regime.</i>"</span></blockquote><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span ><i>Remote Control System (RCS)</i> is a <a href="http://thehackernews.com/search/label/Malware" target="_blank">malware</a>, can be defined as <i>'instrument of crime'</i>, infects computers and Smartphones in order to enable covert surveillance. The company claims that its Trojan once installed in the victims’ computer, can intercept encrypted communication, including emails and Skype voice calls. Furthermore, RCS can turn on a device’s webcam and microphone to spy on the user without their knowledge.<o:p></o:p></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >The Team prominently advertises that their RCS spyware is <i><b>"untraceable"</b></i> to a specific government operator and can be installed remotely. They say that it can scale up to monitor "hundreds of thousands of targets" and is capable of being deployed to Apple, <a href="http://thehackernews.com/search/label/Android" target="_blank">Android</a>, Symbian, and Blackberry mobile devices.</span></div><blockquote class="tr_bq" style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >"<i>Hacking Team has made a number of statements that seem intended to reassure the public, as well as potential regulators, that they conduct effective due diligence and self-regulation regarding their clients, and the human rights impact of their products,</i>" the Citizen Lab researchers report on Monday. "<i>They also market their RCS product as untraceable. Our research suggests that both of these claims ring hollow.</i>"</span><span >&nbsp;</span></blockquote><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >The researchers at <b>Citizen Lab</b> have found traces of&nbsp;<i>Remote Control System (RCS)</i>&nbsp;by mapping the spyware's network of proxy servers,&nbsp;which the Hacking Team claims that RCS is "<i>untraceable</i>."</span></div><blockquote class="tr_bq" style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >"<i>Our research reveals that the RCS collection infrastructure uses a <b>proxy-chaining technique</b>, roughly analogous to that used by general-purpose anonymity solutions like Tor, in that multiple hops are used to anonymize the destination of information," reads the report. "Despite this technique, we are still able to map out many of these chains and their endpoints using a specialized analysis.</i>"&nbsp;</span><span >Citizen Lab researchers&nbsp;explained.</span></blockquote><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >On the basis of</span><span >&nbsp;tracing endpoints of Hacking Team proxy chains, t</span><span >he researchers suspected that the agencies of </span><i >21 Governments</i><span > are current or former Clients of RCS, and the country names are <i>Azerbaijan, Colombia, Egypt, Ethiopia, Hungary, Kazakhstan, Korea, Malaysia, Mexico, Morocco, Nigeria, Oman, Panama, Poland, Saudi Arabia, Sudan, Thailand, Turkey, UAE, Uzbekistan,</i> including <i>Italy </i>which is the homeland of the <i>Hacking Team</i>.</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >The&nbsp;Governments are targeting for political </span><span ></span><span >advantage,&nbsp;</span><span >including</span><span ></span><span > the US-based news Organization</span><span >, rather than using it for legitimate law enforcement operations.</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >According to&nbsp;</span><span >researchers at Citizen Lab,&nbsp;</span><span >The No.1 suspect is Ethiopian Government, that used the hacking tool created by Hacking Team to carry out the spying operation against the Ethiopian journalists in the United States and Europe.</span><br /><center><iframe allowfullscreen="" frameborder="0" height="360" src="//www.youtube.com/embed/pUzulXY_4W4" width="640"></iframe><span ><br /><o:p></o:p></span></center></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><br /></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >Hacking Team to Citizen Lab:</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><blockquote class="tr_bq"><span >“<i>We have established an outside panel of technical experts and legal advisors, unique in our industry that reviews potential sales. This panel reports directly to the board of directors regarding proposed sales.</i>”</span></blockquote></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><span >However The FBI, which investigates Computer crimes, declined to comment on the Citizen Lab report, but an activist at the <i>Electronic Frontier Foundation (EFF) </i>and an expert in surveillance technology, <b>Eva Galperin</b> said that:<o:p></o:p></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0in; text-align: justify;"><blockquote class="tr_bq"><span >"<i>If the Ethiopian government is not a Hacking Team customer, then I would sure like to know how their tools wound up being used to spy on Ethiopian journalists.</i>"</span></blockquote></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F5el7cRYGPI:y6Y-trnaJKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F5el7cRYGPI:y6Y-trnaJKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4972999084081026039
title: 5 Best WhatsApp alternatives with end-to-end Encryption
uri: 5-Best-WhatsApp-alternatives-with-end-to-end-Encryption
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4972999084081026039
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/ec9d8a7b.WhatsApp-end-to-end-Encryption-secure-chat.jpg" data-original-source="http://2.bp.blogspot.com/-aMTzuOEL6no/Uwsy-9Yh_lI/AAAAAAAAACs/vRWzfyvyLmQ/s1600/WhatsApp-end-to-end-Encryption-secure-chat.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="media/e667fe5e.WhatsApp-end-to-end-Encryption-secure-chat.jpg" data-original-source="http://2.bp.blogspot.com/-aMTzuOEL6no/Uwsy-9Yh_lI/AAAAAAAAACs/vRWzfyvyLmQ/s728/WhatsApp-end-to-end-Encryption-secure-chat.jpg" /></a></div><a href="http://thehackernews.com/search/label/Whatsapp" target="_blank"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="189d8734-5aec-4ea5-8154-85c2dd29f81d" id="e7422ec2-0d3b-49e1-a7c8-071167a4ec7b"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="fd2a7188-db5e-46b9-8a70-48e62fa09959" id="e7912bcd-7dd7-4902-8fc8-2150b25d9183">WhatsApp</span></span></a> acquisition may have had a negative impact on the reputation of the company, it seems many users are planning to switch the service and a few of them have already done it.<br /><br />In our previous article, we have mentioned that why you should <a href="http://thehackernews.com/2014/02/why-you-need-to-stop-using-whatsapp.html" target="_blank">switch from WhatsApp to an encrypted Chat messaging service</a>.<br /><br />Mobile messaging apps often used to deliver sensitive data or used for personal and corporate communications, so the data stored by the service provider should be encrypted end-to-end, which is not yet in the case of WhatsApp.<br /><br />There are many mobile messaging applications like Japan-based&nbsp;<b>Line</b>, China’s&nbsp;<b>WeChat</b>, Korea-based&nbsp;<b></b><b></b><b></b><b></b><b>KakaoTalk</b>, and Canada’s&nbsp;<b></b><b></b><b></b><b></b><b></b><b></b><b>Kik</b>, India-based&nbsp;<b>Hike</b>&nbsp;and many more, but they are not end-to-end encrypted messengers.<br /><!-- adsense --><br />Time is loudly announcing the need to shift to some alternates which provides end-to-end encryption for communication between two devices and respect your Privacy. There are a number of solutions available&nbsp;includes -&nbsp;<b><i>Telegram,&nbsp;</i></b><i><b>Surespot, Threema, TextSecure, RedPhone</b></i>&nbsp;etc.<br /><br /><b>1.)&nbsp;Telegram&nbsp;</b>offers end-to-end encryption and have a '<b>Secret Chat</b>' feature, that self-destruct messages after the conversation. The company is offering <a href="https://telegram.org/crypto_contest" rel="nofollow" target="_blank">$200,000 Prize</a> in Bitcoin to the first person to crack its Encryption.<br /><br />"<i>We support two layers of secure encryption (server-client and client-client). Our encryption is based on 256-bit symmetric AES encryption, RSA 2048 encryption and Diffie–Hellman secure key exchange</i>." Company states on their <a href="https://telegram.org/faq#q-get-technical-already" rel="nofollow" target="_blank">website</a>.<br /><br />Regular and Secret chats are encrypted, but during Secret chat no data stored on the company server.<br /><div class="separator" style="clear: both; text-align: center;"><a href="media/bbc98141.secure-chat-with-telegram.jpg" data-original-source="http://1.bp.blogspot.com/-dRQ3F0zC4pw/Uwr6bhf4GfI/AAAAAAAAaSs/7b2Jjnu-gaM/s1600/secure-chat-with-telegram.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="5 Best WhatsApp alternatives with end-to-end Encryption" border="0" src="media/213a62cd.secure-chat-with-telegram.jpg" data-original-source="http://1.bp.blogspot.com/-dRQ3F0zC4pw/Uwr6bhf4GfI/AAAAAAAAaSs/7b2Jjnu-gaM/s728/secure-chat-with-telegram.jpg" title="5 Best WhatsApp alternatives with end-to-end Encryption" /></a></div>There are a couple of more advantages Telegram brings which really are interesting. <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="c62f090e-5f81-42f3-973f-56340b29fa7b" id="c889eacb-4155-490f-a349-de8b9d4c002c"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="49b3e9b6-5a1b-4ba0-be01-f9e8925858ca" id="075768a7-be3b-47ef-b152-44b1b6ec0bd3">Telegram</span></span> is free and an open source project, which means that the source code of the project is freely available, and according to their official website, '<i>Telegram has an open API and protocol free for everyone</i>'.<br /><br />Download Telegram for <a href="https://play.google.com/store/apps/details?id=org.telegram.messenger" rel="nofollow" target="_blank">Android</a>&nbsp;and <a href="https://itunes.apple.com/in/app/telegram-messenger/id686449807?mt=8" rel="nofollow" target="_blank">iOS</a>.<br /><br /></div><div style="text-align: justify;"><b>2.)&nbsp;<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="14f2e145-0941-48d3-a9f9-1e9575b96f35" id="c958105e-a3f2-4773-b87b-12892f9af212"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="c3373ef1-735b-4366-a87a-82d9a58d00a6" id="3b46a034-8651-4697-ade9-0e3f9d7ad4ab">Surespot</span></span>&nbsp;</b>allows you to send and receive text messages, pictures and audio clip with end-to-end encryption. It uses&nbsp;<i>256 bit AES-GCM encryption&nbsp;</i>using keys created with 521 bit ECDH which can only be decrypted by sender and receiver.<br /><br />Unlike WhatsApp, if you delete a message, it's deleted from the recipient's phone, too.&nbsp;<b><i><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="04ae238d-ac54-4a32-a2dc-f330286bebd1" id="a8913fef-9d90-4cef-8937-3378b0f47cbc"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="51c95de0-9693-4eed-b963-6e24d600cf10" id="f40b9f9b-7e4e-4b3a-b061-b2742bf7f354">Surespot</span></span> supports multiple identities on a single device.&nbsp;</i></b>Download Surespot for&nbsp;<a href="https://play.google.com/store/apps/details?id=com.twofours.surespot" rel="nofollow" target="_blank">Android</a>&nbsp;and <a href="https://itunes.apple.com/us/app/surespot/id790314865" target="_blank">iOS</a>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>3.)&nbsp;<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="5bd243b4-077c-45d0-8fc5-425bc6d10061" id="a886bd75-1ae2-411f-95c5-ffa0479627b5"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e502bdaa-59ee-45ac-a167-11ee5133594d" id="f8174728-ec4a-448e-8b5c-af72e8c9ce15"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="4658273c-ac4a-4ec0-879c-603f5a409541" id="0389a401-1fae-4434-bc16-1fc0588f2938"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="6b7eb47a-c2a2-4c9d-9bcf-d6cbf609d396" id="fb0be3ba-654c-4ac1-88cc-945eaad3b51a">Threema</span></span></span></span>&nbsp;</b>is not free, but a perfect alternate for WhatsApp, use end-to-end encryption and gives you all features of <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e502bdaa-59ee-45ac-a167-11ee5133594d" id="116be0e0-c068-4c8a-aadc-e7504f58f613">WhatsApp</span> like text messaging, image sharing, and voice chat as well.<br /><div class="separator" style="clear: both; text-align: center;"><a href="media/5842dc61.Threema-app-download.png" data-original-source="http://1.bp.blogspot.com/-fNp3TQN2F6M/Uwr8XdgjYWI/AAAAAAAAaTA/KHXDPV_qbc8/s1600/Threema-app-download.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="5 Best WhatsApp alternatives with end-to-end Encryption" border="0" src="media/62832f2b.Threema-app-download.png" data-original-source="http://1.bp.blogspot.com/-fNp3TQN2F6M/Uwr8XdgjYWI/AAAAAAAAaTA/KHXDPV_qbc8/s728/Threema-app-download.png" title="5 Best WhatsApp alternatives with end-to-end Encryption" /></a></div>You can also sync your contact list automatically and manually. German users have started a shift to&nbsp;<i><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e840c0f9-637c-45a7-871c-8e3ab173330f" id="f955ac03-5d7d-4573-8f42-7162119f5f1f"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="008fb6a8-e076-4d36-81c8-5c2f7384f14d" id="0c112029-61ed-4e77-82db-00a7221e0af8"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="0d1d12e6-081a-4591-8c54-3c47a1b9d578" id="6b613a78-48f3-4272-a766-52545e10d589">Threema</span></span></span>&nbsp;</i>after Facebook's acquisition and the app have become top paid app on the app store in Germany. Download Threema&nbsp;for&nbsp;<a href="https://itunes.apple.com/in/app/threema/id578665578?mt=8" target="_blank">iOS</a>&nbsp;and <a href="https://play.google.com/store/apps/details?id=ch.threema.app" rel="nofollow" target="_blank">Android</a>.<br /><br /><b>4.)&nbsp;<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="63032226-26cd-4af2-917c-ec8522097223" id="a9d6b2fe-8835-47bf-811d-818663522339"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="8c483c67-f57a-4072-ba2f-dc00e7273b5d" id="98cca52f-9eed-41dd-aaa2-27e7a94eee34"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="ae52456e-bf6a-410f-a54d-2e473e5b8c1c" id="1fdcdc18-e3c3-472b-acb8-5dfe01b7a1e9"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="8f7b8d50-110a-45f7-ba9d-30d22ad4c990" id="3b55e107-dae0-416d-a15f-60d42347347f">TextSecure</span></span></span></span></b>&nbsp;and <b>5.)&nbsp;RedPhone</b>&nbsp;also provides&nbsp;end-to-end encryption&nbsp;for messaging and voice calls respectively.&nbsp;<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="194a8c9d-cedc-46e0-9d9b-abe071eefb32" id="39300a40-0c01-4df9-ae84-798dc122e1a4"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e1eaa9d1-7ff4-45ff-998a-1c48cbd30d60" id="3e806eed-6803-445a-b17b-02ebc526ea0b"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="844a2bbe-6505-4dba-acf2-8927d8b1bcd0" id="391453e1-5ad7-4155-90fc-453838a9ea08"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e8eb186e-1ded-44ca-9611-d2237c79f8e2" id="e5ed7edb-b7f8-4bdf-b319-97dbfc679abd">RedPhone</span></span></span></span>&nbsp;allows you to upgrade a normal call to secure call whenever it senses the possibility to fulfil the requirements.</div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/c16ce89a.readphone-secure-chat.png" data-original-source="http://2.bp.blogspot.com/-Gad08ubMrXE/Uwr7bHXmN8I/AAAAAAAAaS0/G8fkq44Ned8/s1600/readphone-secure-chat.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="5 Best WhatsApp alternatives with end-to-end Encryption" border="0" src="media/b2fdb2b6.readphone-secure-chat.png" data-original-source="http://2.bp.blogspot.com/-Gad08ubMrXE/Uwr7bHXmN8I/AAAAAAAAaS0/G8fkq44Ned8/s728/readphone-secure-chat.png" title="5 Best WhatsApp alternatives with end-to-end Encryption" /></a></div><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="5de40346-0152-45c9-a155-a8f530320bf7" id="4ca6fd02-df31-43d4-9eb7-beb1689c04e9"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="faa30eb1-d3a3-49b9-aad5-d179d88d12e6" id="c24e82a2-c4b4-4ae0-b447-8351efb8eee2"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="4b128ad1-7f32-430f-820c-45e12fce750f" id="62964d8b-c1a3-4a70-a6a0-7446601cb76f">TextSecure</span></span></span>&nbsp;encrypts the messages stored locally, making your information hard to leak even if you lost your device. Download <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="1e88c302-d307-4e90-b718-fc0ebc07265e" id="29900463-5682-4d68-90e0-2866895cc20b">TextSecure</span> for <a href="https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms&amp;hl=en" rel="nofollow" target="_blank">Android</a> and Download RedPhone for <a href="https://play.google.com/store/apps/details?id=org.thoughtcrime.redphone&amp;hl=en" rel="nofollow" target="_blank">Android</a>.<br /><br />So, if you are also now planning to switch, get any of above best suitable mobile messaging application for you.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XE18eDAK1Sg:aqUeYsvrFzs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XE18eDAK1Sg:aqUeYsvrFzs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6726692915074514072
title: Why You need to Stop using WhatsApp?
uri: Why-You-need-to-Stop-using-WhatsApp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6726692915074514072
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/a0e6ebb0.WhatsApp-security-ssl.png" data-original-source="http://3.bp.blogspot.com/-WVwO57SO4Ic/UwsAghS7YtI/AAAAAAAAaTQ/r1DZjN0sV3w/s1600/WhatsApp-security-ssl.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Why You should move away from WhatsApp ?" border="0" src="media/0689e97e.WhatsApp-security-ssl.png" data-original-source="http://3.bp.blogspot.com/-WVwO57SO4Ic/UwsAghS7YtI/AAAAAAAAaTQ/r1DZjN0sV3w/s728/WhatsApp-security-ssl.png" title="Why You should move away from WhatsApp ?" /></a></div>If you haven’t heard by now, Facebook just made its biggest move ever, buying the <a href="http://thehackernews.com/2014/02/why-facebook-is-buying-whatsapp-for-19.html" target="_blank">messaging service <i>WhatsApp</i></a> in a deal worth some $19 billion. That’s 19 times what Facebook paid for <i>Instagram</i> two years ago.<br /><br />The WhatsApp Service run by the team of just 32 engineers, handles more than 50 Billion messages daily, and approx 385 million active users.<br /><br />WhatsApp acquisition has also brought out fresh criticism over security for the billions of messages delivered on the platform. Security Researcher at <a href="http://www.praetorian.com/blog/whats-up-with-whatsapps-security-facebook-ssl-vulnerabilities" rel="nofollow" target="_blank">Praetorian Labs</a> identified several SSL-related security issues in WhatsApp application using <b>Project Neptune</b>, a mobile application security testing platform.<br /><br />"<i>WhatsApp communication between your phone and our server is fully encrypted. We do not store your chat history on our servers. Once delivered successfully to your phone, chat messages are removed from our system</i>." Company said in a <a href="http://www.whatsapp.com/faq/general/21864047" rel="nofollow" target="_blank">blog post</a>.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">But researchers found that WhatsApp is vulnerable to <a href="http://thehackernews.com/search/label/man-in-the-middle%20attack" target="_blank">Man-in-theMiddle attack</a> because the app has not enforced <a href="http://thehackernews.com/2014/02/Fake-SSL-Certificates-non-browser-applications-MitM-Attacks.html" target="_blank">SSL pinning</a> and hence user credentials can be easily stolen. SSL pinning prevents the user of the application from being a victim of an attack made by spoofing the <a href="http://thehackernews.com/search/label/SSL%20Certificates" target="_blank">SSL certificate</a>. SSL pinning won't prove a great solution is not validated properly.<br /><blockquote class="tr_bq"><i>"WhatsApp does not perform SSL pinning when establishing a trusted connection between the mobile applications and back-end web services. Without SSL pinning enforced, an attacker could man-in-the-middle the connection between the mobile applications and back-end web services. This would allow the attacker to sniff user credentials, session identifiers, or other sensitive information."</i></blockquote></div><div style="text-align: justify;">WhatsApp is allowing its backend servers to use weak 40-bit and 56-bit encryption schemes, which can be easily cracked using brute force attack. '<b><i>This is the kind of stuff the NSA would love</i></b>,' researchers&nbsp;said.<br /><br />WhatsApp team has confirmed that they are actively working on adding SSL Pinning to their app, but still that is not enough to protect our privacy.<br /><br />Facebook and <a href="http://thehackernews.com/search/label/Whatsapp" target="_blank">WhatsApp</a> assured that nothing is going to change after the acquisition and WhatsApp will continue to function as an independent service, but is that statement satisfied? May be we can trust Facebook, Google, WhatsApp.. But we really can't trust the U.S. Government&nbsp; and the Security agencies like the NSA, that don't respect our privacy and freedom of speech.<br /><br />Mobile messaging apps often used to deliver sensitive data or used for personal and corporate communications, so the data stored by the service provider should be encrypted end-to-end, which is not yet in the case of WhatsApp.<br /><br />But there are many other free secure chat applications are available like <b><u><i><a href="http://thehackernews.com/2014/02/5-best-whatsapp-alternatives-with-end.html" target="_blank">Telegram, Surespot, Threema, TextSecure, RedPhone</a> </i></u></b>etc., that you should use to keep your data private and Secure, until WhatsApp will not adopt end-to-end encryption.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FblvZwmDbaY:zsQrX5IxCzc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FblvZwmDbaY:zsQrX5IxCzc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4660867282569402450
title: First Tor-Based Android Malware Spotted in the Wild
uri: First-Tor-Based-Android-Malware-Spotted-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4660867282569402450
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/fe8d84ce.FirstTor-BasedAndroidMalwareSpottedintheWild.jpg" data-original-source="http://4.bp.blogspot.com/-0WvexwTGYPA/UwxP3kCclRI/AAAAAAAAAC8/sUL6uqAuK24/s1600/First+Tor-Based+Android+Malware+Spotted+in+the+Wild.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="First Tor-Based Android Malware Spotted in the Wild" border="0" src="media/8a70d449.FirstTor-BasedAndroidMalwareSpottedintheWild.jpg" data-original-source="http://4.bp.blogspot.com/-0WvexwTGYPA/UwxP3kCclRI/AAAAAAAAAC8/sUL6uqAuK24/s500/First+Tor-Based+Android+Malware+Spotted+in+the+Wild.jpg" title="First Tor-Based Android Malware Spotted in the Wild" /></a></div>We use our Smartphone devices to do almost everything, from Internet Banking to Sharing private files and at the same pace, the mobile malware sector is also growing.<br /><br />The number of variants of malicious software aimed at mobile devices has reportedly risen about 185% in less than a year.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Security researchers have observed a growth in the numbers of computer <a href="http://thehackernews.com/search/label/tor%20malware">malware</a> families starting to use TOR-based communications, but recently the Security Researchers at anti-virus firm <i>Kaspersky Lab</i> have <a href="http://www.securelist.com/ru/blog/207769023/Pervyy_TOR_troyanets_pod_Android" rel="nofollow" target="_blank">spotted</a>&nbsp;the&nbsp;world's first <b><i>Tor-Based Malware for Android</i></b> Operating system.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The <a href="http://thehackernews.com/search/label/Android">Android</a> Malware dubbed as '<i>Backdoor.<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="d4b3af9d-e251-46e5-88ae-b96c939fa14b" id="12f39ef8-3344-44ce-a5a3-e9947d1ee8fb">AndroidOS</span>.Torec.a</i>', using Tor&nbsp;hidden service protocol for stealth communication with Command-and-Control servers.<br /><!-- adsense --><br />Researchers detected that the Trojan is running from <b>.Onion</b> <a href="http://thehackernews.com/search/label/tor">Tor</a> domain and working on the functionality of an open source Tor client for Android mobile devices, called '<b>Orbot</b>',&nbsp;thus eliminating the threat of the <a href="http://thehackernews.com/search/label/botnet">botnet </a>being detected and blocked by law enforcement authorities,&nbsp;although often it's not clear how many devices has been infected by this malware till now.</div><div style="text-align: justify;"><a href="media/eabb3366.tor-malware.png" data-original-source="http://1.bp.blogspot.com/-zMYck5AFv9Y/UwxGKfCogrI/AAAAAAAAaVM/NmmFxkJd3KY/s1600/tor-malware.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="First Tor-Based Android Malware Spotted in the Wild" border="0" src="media/9d7126ab.tor-malware.png" data-original-source="http://1.bp.blogspot.com/-zMYck5AFv9Y/UwxGKfCogrI/AAAAAAAAaVM/NmmFxkJd3KY/s700/tor-malware.png" title="First Tor-Based Android Malware Spotted in the Wild" /></a>The Trojan is capable of<span style="text-align: left;">&nbsp;intercepting and stealing incoming SMS, can&nbsp;</span><span style="text-align: left;">make USSD requests, stealing device&nbsp;</span>information including&nbsp;'<span style="text-align: left;"><i>the phone number, country, IMEI, model, version of OS</i>', can&nbsp;</span>retrieve<span style="text-align: left;">&nbsp;the list of installed applications on the mobile device, and also can send</span>&nbsp;SMSs to a specified number.</div><div class="separator" style="clear: both; text-align: center;"><a href="media/be6ead9e.tor-based-android-malware.png" data-original-source="http://3.bp.blogspot.com/-a2GSWE77hBA/UwxFM38wRcI/AAAAAAAAaVE/vG_lplqFgNk/s1600/tor-based-android-malware.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="First Tor-Based Android Malware Spotted in the Wild" border="0" src="media/be6ead9e.tor-based-android-malware.png" data-original-source="http://3.bp.blogspot.com/-a2GSWE77hBA/UwxFM38wRcI/AAAAAAAAaVE/vG_lplqFgNk/s1600/tor-based-android-malware.png" title="First Tor-Based Android Malware Spotted in the Wild" /></a></div><div style="text-align: justify;">Kaspersky didn't mention particularly that the malware is focused on stealing banking information or not, but the popularity of Android OS is kept motivating cyber criminals to develop far more advanced Android malware with more stealthy and anti-reverse methods.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Here are some things you can do to dramatically reduce the risk of malware infections on your Android phone:</div><div style="text-align: justify;"></div><ul><li>Install apps from official Android Market instead of third-party app stores or websites.</li><li>Before installing any apps, check the publisher and app reviews.</li><li>Pay attention to app permissions during the installation.</li><li>Install Antivirus and Firewall apps.</li></ul></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8VX7yZo_UQY:-pLhy-EzdHU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8VX7yZo_UQY:-pLhy-EzdHU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1872059028079923505
title: World’s largest Bitcoin exchange Mt. Gox Shuts Down; CEO quits Bitcoin Foundation
uri: World-s-largest-Bitcoin-exchange-Mt-Gox-Shuts-Down-CEO-quits-Bitco
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1872059028079923505
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="tr_bq" dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/d1902d6e.Bitcoin-exchange-Mt-Gox-Shuts-Down.jpg" data-original-source="http://2.bp.blogspot.com/-EJJGRq84FQ4/Uww8B-w4GZI/AAAAAAAAaU0/syEcEYFxF4w/s1600/Bitcoin-exchange-Mt-Gox-Shuts-Down.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="World’s largest Bitcoin exchange Mt. Gox Shuts Down" border="0" src="media/6a49d43d.Bitcoin-exchange-Mt-Gox-Shuts-Down.jpg" data-original-source="http://2.bp.blogspot.com/-EJJGRq84FQ4/Uww8B-w4GZI/AAAAAAAAaU0/syEcEYFxF4w/s728/Bitcoin-exchange-Mt-Gox-Shuts-Down.jpg" title="World’s largest Bitcoin exchange Mt. Gox Shuts Down" /></a></div>World’s largest <a href="http://thehackernews.com/search/label/Bitcoin" target="_blank">Bitcoin</a> exchange <b>Mt. G</b><b>ox</b>&nbsp;has shut down its website, withdrawal system, deleted its Twitter feed and halted all trading systems&nbsp;after it detected "<i>unusual activity</i>."</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The Bitcoin Foundation, a Bitcoin advocacy group, confirmed th<i>at Mark </i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i>Karpeles</i>, the chief executive of Tokyo-based <i>Mt. </i><i></i><i>Gox</i>&nbsp;bitcoin exchange has <a href="https://bitcoinfoundation.org/blog/?p=462" rel="nofollow" target="_blank">resigned</a> from the board of the Bitcoin Foundation.&nbsp;This comes just days after the exchange gave an update regarding the technical issues.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Last week, Mt. Gox <a href="https://mtgox.zendesk.com/entries/27190870-Update-Announcement-Affecting-Bitcoin-Transfers-February-20th-2014" rel="nofollow" target="_blank">said</a> a technical glitch that had forced the exchange to suspend bitcoin withdrawals for a week. They discovered the transaction falsification glitch and same flaw alleged to have been used to steal all of the bitcoins worth about $2.7 million from <b><a href="http://thehackernews.com/search/label/Silk%20Road" target="_blank">Silk Road</a> 2.0</b>.<br /><br />Later, some sources close to the matter have confirmed that more than 700,000 bitcoins are indeed missing from MtGox&nbsp;records, in a '<i>slow-leak</i>' hack&nbsp;that went on for years. The repeated technical glitches over the past several months caused the Shut down of&nbsp;the biggest Bitcoin Industry.</div><div></div></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Bitcoin companies '<i>Coinbase, Blockchain.info, Circle, Kraken, Bitstamp, and BTC China'</i> have <a href="http://www.circle.com/2014/02/24/joint-statement-regarding-insolvency-mt-gox/" rel="nofollow" target="_blank">issued</a> a joint statement regarding MtGox.</div><blockquote><div style="text-align: justify;">"<i>This tragic violation of the trust of users of Mt.Gox was the result of one company’s abhorrent actions and does not reflect the resilience or value of bitcoin and the digital currency industry. There are hundreds of trustworthy and responsible companies involved in bitcoin. These companies will continue to build the future of money by making bitcoin more secure and easy to use for consumers and merchants." "We strongly believe in transparent, thoughtful, and comprehensive consumer protection measures. We pledge to lead the way</i>."</div></blockquote><div style="text-align: justify;">MtGox has also deleted its entire Twitter feed, which is nearly unprecedented. Late last week, Bitcoin prices dropped to the lowest they have been since June, by $300 and currently, the value on MtGox is swinging between $300 and $500.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a2QAQyDFp-A:OaDTLIl4hFg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a2QAQyDFp-A:OaDTLIl4hFg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4876211171485454189
title: Apple's SSL Vulnerability might allow NSA to hack iOS Devices Remotely
uri: Apple-s-SSL-Vulnerability-might-allow-NSA-to-hack-iOS-Devices-Remotely
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4876211171485454189
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/bd6a8ea8.NSA-apple-ios-hacking.jpg" data-original-source="http://2.bp.blogspot.com/-pgrrNzERSEo/UwzRiMjnM0I/AAAAAAAAAHA/bJ59yRZxaQY/s1600/NSA-apple-ios-hacking.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Apple's SSL Vulnerability may allowed NSA to hack iOS Devices Remotely" border="0" src="media/eb9a81fd.NSA-apple-ios-hacking.jpg" data-original-source="http://2.bp.blogspot.com/-pgrrNzERSEo/UwzRiMjnM0I/AAAAAAAAAHA/bJ59yRZxaQY/s728/NSA-apple-ios-hacking.jpg" title="Apple's SSL Vulnerability may allowed NSA to hack iOS Devices Remotely" /></a></div>Just two days before Apple has disclosed a critical <a href="http://thehackernews.com/2014/02/apples-ios-vulnerable-to-man-in-middle.html" target="_blank">Security flaw in the SSL implementation</a> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="89a4d028-2a2d-49f0-9a11-8c6f86373d74" id="aa36ba33-72f8-4853-857b-7c91cbbd04ea">on</span> the iOS software that would allow man-in-the-middle attacks to intercept the SSL data by spoofing SSL servers.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dubbed as <b>CVE-2014-1266</b>, the so-called ‘<b><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="817f424e-9d90-4cda-a1ae-bb61651c6b58" id="5dc22583-7413-460c-941f-7029232e01c3">goto</span>&nbsp;fail;</b>’&nbsp;vulnerability in which the secure transport failed to validate the authenticity of the connection has left millions of Apple users vulnerable to Hackers and Spy Agencies, especially&nbsp;like the<i> <a href="http://thehackernews.com/search/label/NSA" target="_blank">NSA</a></i>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Last Friday, Apple had also released updated version iOS 7.0.6 to patch the vulnerability, which was first discovered in Apple's iOS Devices, but later&nbsp;company had acknowledged its presence in <i>Mac OSX</i> also, that could allow hackers to intercept email and other communications that are meant to be encrypted in iPhone, iPad and Mac computer.&nbsp;Affected versions include iOS up to version 7.0.5 and OS X before 10.9.2.<br /><br />Security Researchers <a href="http://corte.si/posts/security/cve-2014-1266.html" rel="nofollow" target="_blank">confirmed</a>, '<i>Nearly all encrypted traffic, including usernames, passwords, and even Apple app updates can be captured.</i>' with man-in-the-middle&nbsp;attack.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>Apple Vulnerability and NSA</b></div><div style="text-align: justify;">I am sure; you still remember the NSA's <a href="http://thehackernews.com/2014/01/DROPOUTJEEP-NSA-Apple-iPhone-hacking-tool.html" target="_blank"><b>DROPOUTJEEP </b>Hacking Tool</a><b>,&nbsp;</b><span style="text-align: left;">implant for Apple iOS devices that allows the NSA to remotely control and monitor nearly all the features of an iPhone, including&nbsp;</span><span style="text-align: left;">text messages, </span><span style="text-align: left;"></span><span style="text-align: left;"></span><span style="text-align: left;"></span><span style="text-align: left;"></span><span style="text-align: left;"></span><span style="text-align: left;"></span><span style="text-align: left;"></span><span style="text-align: left;">G</span><span style="text-align: left;">eo-Location,</span><span style="text-align: left;">&nbsp;microphone and the Camera.</span></div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/9a5099a2.DROPOUTJEEP.jpg" data-original-source="http://3.bp.blogspot.com/-BiWLLIwbGVk/UwzOEaqoJiI/AAAAAAAAAG0/RyReqP3b3yc/s1600/DROPOUTJEEP.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Dropoutjeep iphone hacking tool" border="0" src="media/f0128b32.DROPOUTJEEP.jpg" data-original-source="http://3.bp.blogspot.com/-BiWLLIwbGVk/UwzOEaqoJiI/AAAAAAAAAG0/RyReqP3b3yc/s728/DROPOUTJEEP.jpg" title="Dropoutjeep iphone hacking tool" /></a></div>DROPOUTJEEP program was developed in 2008 to conduct espionage on <i>iPhone</i> users, which was revealed by the documents provided by <a href="http://thehackernews.com/search/label/Edward%20Snowden" target="_blank">Edward Snowden</a> a month ago.&nbsp;"<i>The initial release of DROPOUTJEEP will focus on installing the implant via close access methods.</i>" document reads.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">According to the vulnerability details published by a Google's Security Researcher '<i>Adam Langley</i>', a basic mistake in a line of the SSL Encryption code almost screwed up the iOS SSL certificate verification process with an open invitation for the NSA's Prying Eyes.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">"<i>This sort of subtle bug deep in the code is a nightmare,</i>" Adam Langley said on his <a href="https://www.imperialviolet.org/2014/02/22/applebug.html" rel="nofollow" target="_blank">blog</a>, "<i>I believe that it's just a mistake, and I feel very bad for whoever might have slipped in an editor and created it.</i>"</div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/2beec251.Apple-ios-flaw.png" data-original-source="http://2.bp.blogspot.com/-xnhksxZ55ys/UwzN0onvIKI/AAAAAAAAAGs/bPISnxlIrpg/s1600/Apple-ios-flaw.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="iOS SSL Encryption code" border="0" src="media/ddeca3c8.Apple-ios-flaw.png" data-original-source="http://2.bp.blogspot.com/-xnhksxZ55ys/UwzN0onvIKI/AAAAAAAAAGs/bPISnxlIrpg/s728/Apple-ios-flaw.png" title="iOS SSL Encryption code" /></a></div>Security researchers, <i>Jacob Applebaum</i> said last December, "<i>Either the NSA has a huge collection of exploits that work against Apple products, meaning that they are hoarding information about critical systems that American companies produce and sabotaging them, or Apple sabotaged it themselves.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Although, those old techniques are no longer in circulation, but the NSA has a track record of continually evading the privacy of users by exploiting vulnerabilities&nbsp;in various softwares and obviously NSA's capabilities have improved significantly in the past five years.&nbsp;</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">In the DROPOUTJEEP document, the NSA also admitted, '<i>A remote installation capability will be pursued for a future release.</i>' That means, it's practically possible that the NSA had already&nbsp;discovered this iOS SSL flaw in an effort to hack iPhone users' remotely by sniffing data and spoofing them to install malware.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>An Unanswered Question</b></div><div style="text-align: justify;">'W<span style="font-style: italic;">as the Apple intentionally injected <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="91756319-2ebc-402f-a851-5272a196dfcb" id="d5b513f9-6626-47d0-93e7-6a4c07ee7dd8">backdoors</span> for NSA or the flaw was an&nbsp;</span><span style="text-align: left;"><i>accident</i></span><span style="font-style: italic;">???</span>'&nbsp;If it was an accident, then Apple would have been able to release patches for both<b> iOS</b> and <b>Mac OS X</b> at the same time, instead of releasing the patches for both, it silently released a fix for iOS devices on Friday night, but when the cryptographers and security experts began criticizing the company for leaving OS X without the patch, they finally acknowledged Mac OS X too; But it's the 4th day after disclosure and no patch yet &nbsp;has been released for Mac OS X.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Also,&nbsp;Apple contacted <i>CVE (Common Vulnerabilities and Errors database)</i> on 8th January 2014 to reserve the bug number <b><i><a href="http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1266" rel="nofollow" target="_blank">CVE 2014-1266</a></i></b> for the SSL vulnerability and later they have released updated iOS 7.1, which was also vulnerable&nbsp;to the flaw that Apple had already discovered.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">However, Apple categorically denied working with the NSA on a backdoor after it was accused last December of creating a way for the US intelligence agency NSA to access contacts and other data in iPhones.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">On Dec. 31, Apple spokesperson released a statement saying:</div><div style="text-align: justify;"><blockquote class="tr_bq">"<i>Apple has never worked with the NSA to create a backdoor in any of our products, including iPhone. Additionally, we have been unaware of this alleged NSA program targeting our products. Whenever we hear about attempts to undermine Apple's industry-leading security, we thoroughly investigate and take appropriate steps to protect our customers. We will continue to use our resources to stay ahead of malicious hackers and defend our customers from security attacks, regardless of who’s behind them.</i>"</blockquote></div><div style="text-align: justify;">In 2013, The US Department of Defense passed Apple's iOS 6 for the Government use, that means if the NSA was aware of this flaw, they didn't seem to have informed them.<br /><br />To Check, whether your web browser is vulnerable to SSL flaw, <a href="https://gotofail.com/" rel="nofollow" target="_blank">Click here</a>&nbsp;and to be safe, you are recommended to use an alternate web browser, rather than <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="de549a81-9f5b-4d92-8e37-3984b2faa5f0" id="67f7c3dd-141b-43df-8ac3-a5d622bd7523">Safari web browser</span> and&nbsp;avoid using public and unsecured networks.<br /><br /><b>UPDATE: </b>Apple has finally today releases&nbsp;<i>Mac OS X 10.9.2</i>, which includes a fix for a major SSL security flaw and&nbsp;bringing with it a number of "<i>improvements to the stability, compatibility and security of your Mac</i>."</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gc-s8vlPPo8:pMBE-pqOkLQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gc-s8vlPPo8:pMBE-pqOkLQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6585133565224417239
title: Pony Botnet steals $220,000 from multiple Digital Wallets
uri: Pony-Botnet-steals-220-000-from-multiple-Digital-Wallets
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6585133565224417239
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/3d7f1c93.pony-botnet-malware-bitcoin-miner.png" data-original-source="http://4.bp.blogspot.com/-QdK-_0Ao3L8/Uwx5D-PulGI/AAAAAAAAaWA/56KZKDnZ0qQ/s1600/pony-botnet-malware-bitcoin-miner.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Pony Botnet steals $220,000 from multiple Digital Wallets" border="0" src="media/17fe32fb.pony-botnet-malware-bitcoin-miner.png" data-original-source="http://4.bp.blogspot.com/-QdK-_0Ao3L8/Uwx5D-PulGI/AAAAAAAAaWA/56KZKDnZ0qQ/s728/pony-botnet-malware-bitcoin-miner.png" title="Pony Botnet steals $220,000 from multiple Digital Wallets" /></a></div><div style="text-align: justify;">Are you the one of the Digital Currency Holder? <b>PONY</b> is after You.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">A Group of cyber criminals has used hundreds of thousands of infected computers of the <a href="http://thehackernews.com/search/label/digital%20currency">digital currency </a>holders to filch approximately $220,000 worth of <a href="http://thehackernews.com/search/label/Bitcoin">Bitcoins</a> and other virtual currencies.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The researchers at the security firm, <b><i>Trustwave</i></b> have uncovered the Bitcoin Heist that was accomplished by the computers infected with a new class of malware that has been dubbed as ‘<b>Pony</b>’, a very powerful type of Spying <a href="http://thehackernews.com/2013/12/two-million-stolen-facebook-twitter.html" target="_blank">Keylogger Malware</a> with very dangerous features that was last time found two months ago.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Pony, for those who have not yet heard about it, is a bot controller much like any other, with the capability to capture all kinds of confidential information and access passwords. It contains a control panel, user management, logging features, a database to manage all the data and, of course, the statistics. It can see the passwords and login credentials of infected users when they access applications and Internet sites.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The security firm has found that the botnet has infected over 700,000 accounts in four months of the period, between September 2013 and mid-January 2014, and allowed criminals to control those accounts.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">“<i>Not only did this Pony botnet steal credentials for approximately 700,000 accounts, it’s also more advanced and collected approximately $220,000 worth, at the time of writing, of virtual currencies such as BitCoin (BTC), LiteCoin (LTC), FeatherCoin (FTC) and 27 others,</i>” reads the report.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">In December, the same piece of malware infected a number of popular websites and services such as <i>Facebook, Google, Yahoo, Twitter, LinkedIn</i>, etc., by <a href="http://thehackernews.com/2013/12/two-million-stolen-facebook-twitter.html" target="_blank">stealing a couple of million passwords</a>, that provide them access to all those accounts.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>Latest Pony attack</b></div><div style="text-align: justify;">This Time the Pony botnet stole over 700,000 credentials, including 600,000 website login credentials, 100,000 email account credentials, 16,000 FTP account credentials and other Secure Shell account information.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">“<i>This instance of Pony compromised 85 wallets, a fairly low number compared to the number of compromised credentials. Despite the small number of wallets compromised, this is one of <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="34d85892-bbfd-46bc-996b-f713f9bea7ab" id="08e64c91-d8aa-44c0-a2b4-8059bb3170a7"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="34d85892-bbfd-46bc-996b-f713f9bea7ab" id="05f0bd76-4b5e-4a19-8c0e-317ae2423388">the larger</span></span> caches of BitCoin wallets stolen from end-users.</i>”</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The <a href="http://thehackernews.com/search/label/Malware">Malware</a> was in the wild when the virtual currency, such as Bitcoin value touched the sky, which was developed by cryptographic experts as a way to move money at a lower cost than traditional financial systems.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">"<i>Bitcoins are stored in virtual wallets, which are essentially pairs of private and public keys</i>," the Trustwave researchers said, adding that “<i>whoever has those keys can take the currency, and stealing Bitcoins and exchanging them for another currency, even a regulated one such as US dollars, is much easier than stealing money from a bank.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">They said that cyber thieves with Bitcoins can use any number of trading websites, to get real cash while maintaining anonymity.</div><div style="text-align: justify;"><br /><b>NOT just BITCOINS</b></div><div style="text-align: justify;">Here, if you think that the botnet went after only the Bitcoin, then you are wrong. Currently, the Bitcoin value is swinging between $300 and $500. So, instead of sticking to only Bitcoin wallets, the Pony botnet looks for a list of virtual currencies including <i>Anoncoin, BBQcoin, Bytecoin, Craftcoin, Devcoin, Digitalcoin, Fastcoin, Feathercoin, Florincoin, Franko, Freicoin, GoldCoin, I0coin, Infinitecoin, Ixcoin, Junkcoin, Litecoin, Luckycoin, Mincoin, Namecoin, NovaCoin, Phoenixcoin, PPCoin, Primecoin, Quarkcoin, Tagcoin, Terracoin, Worldcoin, Yacoin and Zetacoin</i>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">If you are wondering that the attack was being shut down by some security companies, then you are guessing wrong, because the attackers themselves “<i>closed shop</i>” during January.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Researchers haven't explained any Malware removal mechanism, but in order to protect your virtual currency, you are advised to encrypt your wallets. Keep your virtual currency wallets safe!</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">In a separate news, you may also like to read, <a href="http://thehackernews.com/2014/02/worlds-largest-bitcoin-exchange-mt-gox.html" target="_blank">Worlds Largest Bitcoin Exchange Mt. Gox Shuts Down</a>.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CaGtxSkemiI:IAf-JkmbGNQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CaGtxSkemiI:IAf-JkmbGNQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7779639657682135115
title: Caphaw Banking Malware Distributed via YouTube Ads
uri: Caphaw-Banking-Malware-Distributed-via-YouTube-Ads
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7779639657682135115
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/6980b8fd.youtube-ad-malware.png" data-original-source="http://4.bp.blogspot.com/-_m_7Q_h8D0M/Uwxt9KpM4BI/AAAAAAAAADM/pQez8o3eXkg/s1600/youtube-ad-malware.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Caphaw Banking Malware Distributed via YouTube Ads" border="0" src="media/6980b8fd.youtube-ad-malware.png" data-original-source="http://4.bp.blogspot.com/-_m_7Q_h8D0M/Uwxt9KpM4BI/AAAAAAAAADM/pQez8o3eXkg/s1600/youtube-ad-malware.png" title="Caphaw Banking Malware Distributed via YouTube Ads" /></a></div>More than one billion of unique visitor spend about 6 billion hours on YouTube to watch videos, according to monthly YouTube Stats. Security researchers from <i>Bromium Labs</i> recently <a href="http://labs.bromium.com/2014/02/21/the-wild-wild-web-youtube-ads-serving-malware/" rel="nofollow" target="_blank">found</a> that YouTube advertising network has been abused by rogue advertisers to distribute malware.<br /><br />YouTube In-Stream Ads were redirecting users to malicious websites, hosting the '<b><i>Styx Exploit Kit</i></b>' and was exploiting client side vulnerabilities by <i>drive-by-download attack</i> to infect users' computer with <b><i>Caphaw Banking Trojan</i></b>.<br /><!-- adsense --><br />The Exploitation process relied upon a <a href="http://thehackernews.com/search/label/java%20Vulnerability">Java vulnerability</a> (<b><i>CVE-2013-2460</i></b>) and after getting dropped into the target computer system, the malware detects the Java version installed on the operating system and based upon it requests the suitable exploit.</div><div style="text-align: justify;"><blockquote class="tr_bq"><i>"We don’t yet know the exact bypass which the attackers used to evade Google’s internal advertisement security checks. Google has informed us that they’re conducting a full investigation of this abuse and will take appropriate measures."&nbsp;</i>researchers said.</blockquote><div class="separator" style="clear: both; text-align: center;"><a href="media/ca86321b.youtube-ad-malware.png" data-original-source="http://2.bp.blogspot.com/-7hhgugBdBIE/Uwxo0iV8h7I/AAAAAAAAaVc/FRmcffS9qVM/s1600/youtube-ad-malware.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Caphaw Banking Malware Distributed via YouTube Ads" border="0" src="media/2e678775.youtube-ad-malware.png" data-original-source="http://2.bp.blogspot.com/-7hhgugBdBIE/Uwxo0iV8h7I/AAAAAAAAaVc/FRmcffS9qVM/s728/youtube-ad-malware.png" title="Caphaw Banking Malware Distributed via YouTube Ads" /></a></div>Further investigation has revealed that the&nbsp;banking malware uses&nbsp;<i>Domain Generation Algorithm</i>&nbsp;(DGA) for communicating with&nbsp;<i>Command and Control server (C&amp;C)</i>. The&nbsp;<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="9441961f-64c4-4b42-a531-45fafb200204" id="c6eaffb6-4344-49f1-99ef-8968cb56cb31"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="64306378-ec9c-4094-9340-d6f3416e83c0" id="032a9102-8b27-497e-8683-afc9e911b0e3">C&amp;C</span></span>&nbsp;panel of this Trojan seems to be hosted somewhere in Europe and the case is still under investigation. Caphaw Banking <a href="http://thehackernews.com/search/label/Malware">Malware</a> has been marked as malicious by a number of anti-virus companies.<br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><br />How many users had become victim of this attack is yet a question. Google has taken down the malvertisment campaign and is beefing up internal procedures to prevent such events from occurring again.<br /><br />Oracle has already patched the respective Java vulnerability last year, So users are advised to keep their Java software up-to-date and install latest Security updates of the softwares and operating system.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eG5VkftIE68:nIJq95okV4w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eG5VkftIE68:nIJq95okV4w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9136323437252074263
title: New Apple vulnerability allows Malicious keylogger App to Record User Inputs
uri: New-Apple-vulnerability-allows-Malicious-keylogger-App-to-Record-User
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9136323437252074263
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/feea7c13.apple-keylogger-ios.jpg" data-original-source="http://4.bp.blogspot.com/-z3VgnOgU4B4/Uw2UXQ-MaBI/AAAAAAAAADc/YYaasBsLN3U/s1600/apple-keylogger-ios.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="How to Hack iPhone" border="0" src="media/e93010ea.apple-keylogger-ios.jpg" data-original-source="http://4.bp.blogspot.com/-z3VgnOgU4B4/Uw2UXQ-MaBI/AAAAAAAAADc/YYaasBsLN3U/s728/apple-keylogger-ios.jpg" title="How to Hack iPhone" /></a></div>Yet another Apple vulnerability has been exposed by security researchers, that can be exploited to track your finger's every action on iOS Devices i.e. <a href="http://thehackernews.com/search/label/iPhone%20hacking" target="_blank">iPhone</a>, iPad etc.<br /><br />The exploit reportedly targets a flaw in iOS multitasking capabilities to capture user inputs, according to Security researchers at&nbsp;<a href="http://www.fireeye.com/blog/technical/2014/02/background-monitoring-on-non-jailbroken-ios-7-devices-and-a-mitigation.html" rel="nofollow" target="_blank">FireEye</a>.<br /><br />They found a way to bypass the Apple's app review process effectively and created a <i>proof-of-concept </i>Monitoring app for non-jailbroken iOS 7.0.x devices.<br /><!-- adsense --><br />The “<i>monitoring</i>” app, that runs in the background of the iPhone is a Keylogger&nbsp;Trojan which&nbsp;could allow hackers to monitor user's activities on the mobile device, including - <i>touches on the screen, home button press, volume button press and TouchID press</i>, and send all collected events to any remote server.<br /><div class="separator" style="clear: both; text-align: center;"><a href="media/84389fdc.iPhone-Keylogger.png" data-original-source="http://1.bp.blogspot.com/-CPqvZZPA_L8/Uw2Q28TBrPI/AAAAAAAAaWg/LC8QT5ikrEs/s1600/iPhone-Keylogger.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="How to Hack iPhone, How to jailbreak iPhone" border="0" src="media/78b034a8.iPhone-Keylogger.png" data-original-source="http://1.bp.blogspot.com/-CPqvZZPA_L8/Uw2Q28TBrPI/AAAAAAAAaWg/LC8QT5ikrEs/s728/iPhone-Keylogger.png" height="400" title="How to Hack iPhone, How to jailbreak iPhone" width="325" /></a></div>According to researchers, their proof-of-concept app works on versions 7.0.4, 7.0.5, 7.0.6, and 6.1.x.<br /><blockquote class="tr_bq">"<i>Based on the findings, potential attackers can either use phishing to mislead the victim to install a malicious/vulnerable app or exploit another remote vulnerability of some app, and then conduct background monitoring.</i>" &nbsp;FireEye researchers said.</blockquote></div><div><div style="text-align: justify;">In iOS devices, the application running in the background keeps on refreshing itself; but the researchers also noted that disabling iOS 7's "<i>Background App Refresh</i>" setting would not restrict a malicious app from keylogging.</div><div class="separator" style="clear: both; text-align: center;"><a href="media/cdef17b0.iPhone-Keylogger.png" data-original-source="http://3.bp.blogspot.com/-qHhWogEWGZ0/Uw2QBtSwGWI/AAAAAAAAaWU/PzyjRxGcWeE/s1600/iPhone-Keylogger.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="How to Hack iPhone, How to jailbreak iPhone" border="0" src="media/53b4f5bf.iPhone-Keylogger.png" data-original-source="http://3.bp.blogspot.com/-qHhWogEWGZ0/Uw2QBtSwGWI/AAAAAAAAaWU/PzyjRxGcWeE/s728/iPhone-Keylogger.png" height="400" title="How to Hack iPhone, How to jailbreak iPhone" width="225" /></a></div><div style="text-align: justify;">"<i>For example, an app can play music in the background without turning on its "background app refresh" switch. Thus a malicious app can disguise itself as a music app to conduct background monitoring.</i>" FireEye explained, So the only present solution to the problem is to manually remove apps from the task switcher.</div></div><div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Earlier this week, Apple has issued an urgent update iOS 7.0.6 in response to a <a href="http://thehackernews.com/2014/02/apples-ios-vulnerable-to-man-in-middle.html" target="_blank">SSL vulnerability</a> that might allow hackers&nbsp;to <a href="http://thehackernews.com/2014/02/apples-ssl-vulnerability-may-allowed.html" target="_blank">bypass SSL/TLS verifications</a> on shared and public networks and steal users information from affected devices, including log-in usernames and passwords, as well as other sensitive information.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The Security firm is actively working with Apple on the issue, but until the release of next iOS update, the only thing <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="a32253f0-0b7c-4e1c-b787-9500ae94b2ff" id="aa3cd53f-8ef9-4643-8df5-1b5ab95a461d">iOS</span>&nbsp;users can do - Check and monitor the unnecessary applications running on the device via&nbsp;<i>Task Manager&nbsp;</i>and KILL THEM.<br /><br />Last month, Trustwave's <i>Neal Hindocha</i>&nbsp;also demonstrated that even <a href="http://thehackernews.com/2014/01/screenlogger-keylogger-app-for-android.html" rel="" target="_blank">Smartphone screen swipe gestures can be analyzed by hackers</a> and as a proof-of-concept he developed a prototype '<b>Screenlogging</b>' malware for the iOS and Android Smartphones that works the same as a keylogger software for desktop.</div></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gALSAoSzmVc:8Nw0NTk8pZQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gALSAoSzmVc:8Nw0NTk8pZQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8951993779937121925
title: Chameleon Virus that Spreads Across WiFi Access Points like Common Cold
uri: Chameleon-Virus-that-Spreads-Across-WiFi-Access-Points-like-Common-Col
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8951993779937121925
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/2669af49.Wi-f-virus-hacking-malware.png" data-original-source="http://3.bp.blogspot.com/-YJhnqds5TI0/Uw3LMn8X0KI/AAAAAAAAaW8/oqiOyLHc7fQ/s1600/Wi-f-virus-hacking-malware.png" imageanchor="1"><img alt="Chameleon Virus that Spreads Across WiFi Access Points like Common Cold" border="0" src="media/be2e8f82.Wi-f-virus-hacking-malware.png" data-original-source="http://3.bp.blogspot.com/-YJhnqds5TI0/Uw3LMn8X0KI/AAAAAAAAaW8/oqiOyLHc7fQ/s728/Wi-f-virus-hacking-malware.png" title="Chameleon Virus that Spreads Across WiFi Access Points like Common Cold" /></a></div>Do you know, A Computer viruses could go Airborne over WiFi networks? Security researchers at the<i> University of Liverpool</i>&nbsp;in Britain have demonstrated a&nbsp;WiFi virus that can spread between computer networks just like the '<i>common cold</i>' spreads between Humans.<br /><span style="font-family: inherit;"><br /></span> <span style="font-family: inherit;">They have created a proof-of-concept which can infect the entire wireless network instead of a single computer at a time,&nbsp;</span>that replaces the firmware of the vulnerable Access Point (AP) with a virus-loaded version, and then propagates <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="f62cf151-30ba-444b-a423-d401eb0d20aa" id="32d908b3-40b6-4013-8727-c4cb86dc6be2">itself</span> to the next victim on the <a href="http://thehackernews.com/search/label/wifi%20hacking" target="_blank">WiFi network</a>.</div><div style="text-align: justify;"><span style="font-family: inherit;"><br /></span></div><div><div style="text-align: justify;"><span style="font-family: inherit;">The&nbsp;</span>WiFi&nbsp;<span style="font-family: inherit;">based <a href="http://thehackernews.com/search/label/virus" target="_blank">virus</a> named as '</span><b style="font-family: inherit;"><i>Chameleon</i></b><span style="font-family: inherit;">', that can self-propagate over WiFi networks from access point to access point, &nbsp;but&nbsp;</span>doesn't affect the working of the Wireless Access Point.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">This Virus is able to identify WiFi access points that are not protected by encryption and passwords, according to the <a href="media/cacd02c7.1687-417X-2013-2.pdf" data-original-source="http://jis.eurasipjournals.com/content/pdf/1687-417X-2013-2.pdf" rel="nofollow" target="_blank">research paper</a>. It can badly hit less-protected open access WiFi networks available in coffee shops or airports.</div><div style="text-align: justify;"><span style="font-family: inherit;"><br /></span></div><div style="text-align: justify;"><span style="font-family: inherit;"><b>It<i>&nbsp;</i>propagates in the following sequence:</b></span></div></div><div><div style="text-align: justify;"><ol><li><span style="font-family: inherit;">It Establish a list of susceptible APs within the range</span></li><li><span style="font-family: inherit;">Bypass any encryption Security on the targeted AP</span></li><li><span style="font-family: inherit;">Bypass the administrative interface on the targeted AP</span></li><li><span style="font-family: inherit;">Identify and Store AP System Settings</span></li><li><span style="font-family: inherit;">Replace the AP firmware on with the virus-loaded firmware.</span></li><li><span style="font-family: inherit;">Import the victim original AP System Settings on newly loaded firmware</span></li><li><span style="font-family: inherit;">Let's Propagate! Back to Step one to next Target.</span></li></ol></div></div><div><div style="text-align: justify;"><span style="font-family: inherit;">The experimental&nbsp;</span><span style="text-align: left;">simulated&nbsp;</span><span style="font-family: inherit;">demonstration was performed in two cities i.e. </span><i style="font-family: inherit;">Belfast, NI</i><span style="font-family: inherit;"> and </span><i style="font-family: inherit;">London, England.&nbsp;</i></div><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="media/02b1239e.Wi-f-virus-hacking-malware.png" data-original-source="http://3.bp.blogspot.com/-pkXBJ_rNchU/Uw3IRRbB3MI/AAAAAAAAaWw/d6CeaGO1jWw/s1600/Wi-f-virus-hacking-malware.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Airborne Wi-Fi virus Chameleon " border="0" src="media/c6d76e75.Wi-f-virus-hacking-malware.png" data-original-source="http://3.bp.blogspot.com/-pkXBJ_rNchU/Uw3IRRbB3MI/AAAAAAAAaWw/d6CeaGO1jWw/s728/Wi-f-virus-hacking-malware.png" height="402" title="Airborne Wi-Fi virus Chameleon " width="640" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;"><b><i>Laboratory setup</i></b></td></tr></tbody></table><div style="text-align: justify;"><span style="font-family: inherit;">A random access point was made infected with the virus which act as a seed, the results were published in the </span><a href="media/cacd02c7.1687-417X-2013-2.pdf" data-original-source="http://jis.eurasipjournals.com/content/pdf/1687-417X-2013-2.pdf" rel="nofollow" style="font-family: inherit;" target="_blank">paper</a><span style="font-family: inherit;">.</span></div></div><div><div style="text-align: justify;"><span style="font-family: inherit;"><br /></span></div></div><div><div style="text-align: justify;"><span style="font-family: inherit;">The&nbsp;<i style="font-weight: bold;">Chameleon </i>attack is a serious threat for WiFi network security. The research shows that this kind of attack is undetectable to any <a href="http://thehackernews.com/search/label/Antivirus" target="_blank">Antivirus</a> and Wireless Intrusion Detection System (IDS).</span></div><blockquote class="tr_bq" style="text-align: justify;"><span style="font-family: inherit;">"</span><i style="text-align: left;">Hence, this attack is considered advanced and difficult to detect, as IDS rogue AP detection methods typically rely on a change in credentials, location or traffic levels."</i></blockquote><div style="text-align: justify;"><span style="font-family: inherit;">The Density of Access points in a certain geographical area increases the security issues for wireless networks, because it spreads very quickly at high speed in an area having denser Access Point availability.</span></div><blockquote class="tr_bq" style="text-align: justify;">“<i>WiFi connections are increasingly a target for computer hackers because of well-documented security vulnerabilities, which make it difficult to detect and defend against a virus,</i>” says Marshall, Co-author of the research paper.</blockquote><div style="text-align: justify;">However, the virus itself doesn’t exist in the wild and created for the demo purpose in the research lab only, though it is very likely that a malicious version could be created and released into the wild by cyber criminals and&nbsp;<a href="http://thehackernews.com/search/label/Malware" target="_blank">malware</a> writers.</div></div></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k1_-Byef3Bw:TSWy5MThsJw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k1_-Byef3Bw:TSWy5MThsJw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5120279521037391771
title: Tilon/SpyEye2 Banking Trojan Usage Declining after SpyEye Author Arrest
uri: Tilon-SpyEye2-Banking-Trojan-Usage-Declining-after-SpyEye-Author-Arres
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5120279521037391771
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/5dc34572.spyeye2-tilon-banking-malware.png" data-original-source="http://4.bp.blogspot.com/-zfn-WfgXG8s/Uw7inPvzGXI/AAAAAAAAAHQ/80v2pLnpzp0/s1600/spyeye2-tilon-banking-malware.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Tilon/SpyEye2 infections declined after SpyeEye author's Arrest" border="0" src="media/02ded3b1.spyeye2-tilon-banking-malware.png" data-original-source="http://4.bp.blogspot.com/-zfn-WfgXG8s/Uw7inPvzGXI/AAAAAAAAAHQ/80v2pLnpzp0/s728/spyeye2-tilon-banking-malware.png" title="Tilon/SpyEye2 infections declined after SpyeEye author's Arrest" /></a></div>Today, when we come across various malware, exploit kits and botnets that are in the wild, we think about an effective Antivirus solution or a Security Patch, but the most effective solution is always "<i>The arrest of malware authors and culprits who are involved in the development of Malware.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>Tilon</b> has been an active malware family that was spotted first time in 2012, was specially designed to filch money from online bank accounts, that earlier various researchers found to be the new version of <b>Silon</b>, is none other than the <b>SpyEye2 banking Trojan</b>, according to researchers at security firm&nbsp;<a href="media/c0c8e81d.spyeye2_tilon_20140225.pdf" data-original-source="http://foxitsecurity.files.wordpress.com/2014/02/spyeye2_tilon_20140225.pdf" rel="nofollow" target="_blank"><i>Delft Fox-IT</i></a>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b><i>Tilon</i></b>&nbsp;a.k.a&nbsp;<b><i>SpyEye2</i></b> is the sophisticated version of <a href="http://thehackernews.com/search/label/SpyEye" target="_blank">SpyEye Trojan</a>. Majority functional part of the malware is same as of the SpyEye <a href="http://thehackernews.com/search/label/banking%20Trojan" target="_blank">banking Trojan</a> that was developed by a 24-year-old Russian hacker '<i>Aleksandr Andreevich </i><i></i><i>Panin</i>'&nbsp;or also known as&nbsp;<i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i></i><i>Gribodemon</i>, who was arrested in July 2013.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">‘<i>SpyEye</i>’, infected more than 1.4 million Computers worldwide since 2009, designed to steal people’s identities and financial information, including online banking credentials, <a href="http://thehackernews.com/search/label/credit%20card" target="_blank">credit card</a> information, user names, passwords and PINs. It secretly infects the victim’s computer and gives the remote control to the cybercriminals who remotely access the infected computer through command and control servers and steal victims’ personal and financial information through a variety of techniques, including web injects, keystroke loggers, and credit card grabbers without authorization.</div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/fa668ca5.spyeye2-tilon-banking-malware.png" data-original-source="http://1.bp.blogspot.com/-DY-IJWICKks/Uw7i4J2nevI/AAAAAAAAAHY/IqJZV7A5WXs/s1600/spyeye2-tilon-banking-malware.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Tilon/SpyEye2 infections declined after SpyeEye author's Arrest" border="0" src="media/2194ad1b.spyeye2-tilon-banking-malware.png" data-original-source="http://1.bp.blogspot.com/-DY-IJWICKks/Uw7i4J2nevI/AAAAAAAAAHY/IqJZV7A5WXs/s728/spyeye2-tilon-banking-malware.png" title="Tilon/SpyEye2 infections declined after SpyeEye author's Arrest" /></a></div>Researchers&nbsp;have confirmed that, the team who had developed the SpyEye is the same who created <i>Tilon</i>,&nbsp;and that is why it was labeled as <i>SpyEye2</i>.</div><blockquote class="tr_bq" style="text-align: justify;">“<i>The team behind its creation was similar, however, reinforced with at least one better skilled programmer</i>,” said the researchers, adding, “<i>The management of SpyEye2 is done through a single, unified interface, which has been completely redesigned but still contains a few of the unique features of the original SpyEye.</i>”</blockquote><div style="text-align: justify;">An interesting part of SpyEye2, which the researchers found ‘<i>slightly funny</i>’, is that the <a href="http://thehackernews.com/search/label/Malware" target="_blank">malware</a> check for the removal of the older version of SpyEye installed in the infected system and replace it with the new version, i.e. SpyEye2 with better stability features.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">“<i>No other malware families are checked for removal. Early versions of the original SpyEye were likewise equipped with a feature to remove older versions of ZeuS installed on the infected system</i>,” researchers say.</div><blockquote class="tr_bq" style="text-align: justify;">According to the researchers, “<i>only the Loader portion of Tilon is sourced from Silon, but this is where the similarity ends. As shown above and further illustrated in the Appendices, the body (i.e., functional portion) of Tilon was actually based on SpyEye.</i>”</blockquote><div style="text-align: justify;">Also, another reason to consider Tilon as SpyEye's variant is its success, which was in the wild from 2012 to 2014, and suddenly seems to be over as the SpyEye author arrested last year.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Fox-IT researchers say, “<i>the arrests, like Gribodemon and other key figures in the underground economy, such as Paunch, the author of the popular Blackhole Exploit Kit, is the key to decreasing the worldwide activity around online crime.</i>”</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">It doesn’t mean that the malware won’t circulate its fraudulent activity in the future, but will finally come to an end after nearly a year of declining usage.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KpyB_DRLFoA:cOnGY0HWLZE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KpyB_DRLFoA:cOnGY0HWLZE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8537794336962280122
title: Boeing launches Ultra-Secure 'Black' Smartphone that has Self-Destruct Feature
uri: Boeing-launches-Ultra-Secure-Black-Smartphone-that-has-Self-Destruct
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8537794336962280122
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/c66eb82a.Boeing-Black-secure-phone.jpg" data-original-source="http://4.bp.blogspot.com/-vKcJnJFgk2c/Uw93fivXovI/AAAAAAAAaXw/u5hJgDYP4_U/s1600/Boeing-Black-secure-phone.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Boeing launches Ultra-Secure 'Black Smartphone' that can Self-Destruct" border="0" src="media/8f697cf2.Boeing-Black-secure-phone.jpg" data-original-source="http://4.bp.blogspot.com/-vKcJnJFgk2c/Uw93fivXovI/AAAAAAAAaXw/u5hJgDYP4_U/s728/Boeing-Black-secure-phone.jpg" title="Boeing launches Ultra-Secure 'Black Smartphone' that can Self-Destruct" /></a></div><div style="text-align: justify;">Looking for a&nbsp;Secure Smartphone? World's biggest Aerospace company - <b>Boeing</b> is finally close to the launch of its high-security Android Smartphone, called "<b>Boeing Black (H8V-BLK1)</b>",&nbsp;primarily designed for secure communication between Governmental agencies and their contractors.<br /><br />Encrypted email, Secure Instant Messaging and Other privacy services and tools are booming in the wake of the National Security Agency’s recently revealed surveillance programs.<br /><br />Encryption isn’t meant to keep hackers out, but when it’s designed and implemented correctly, it alters the way messages look. Boeing is the company which is already providing secure communications for US Government officials, including the president.<br /><!-- adsense --><br /><b>Don't mess with it, It can&nbsp;&nbsp;Self-Destruct:&nbsp;</b>Boeing Black&nbsp;Smartphone can<b> Self-Destruct</b>&nbsp;if it is tampered with, destroying all the data on it. The device is delivered in complete sealed form, any attempt to open the seal of the device will destruct the operating system and functionality of the device.<br /><br />“<i>Any attempt to break open the casing of the device would trigger functions that would delete the data and software contained within the device and make the device inoperable,</i>” says the paperwork.<br /><br />Well, another important fact to be <a href="https://apps.fcc.gov/oetcf/eas/reports/ViewExhibitReport.cfm?mode=Exhibits&amp;RequestTimeout=500&amp;calledFromFrame=N&amp;application_id=723549&amp;fcc_id=H8VBLK1" rel="nofollow" target="_blank">noticed</a>,&nbsp;Boeing Black (H8V-BLK1) won't be available to average consumers, it is designed for Governmental agencies, Defense and Homeland security only.<br /><br /><b>Ultra-Secure Mobile Operating System:&nbsp;</b>Boeing's modified Android operating system has a specific software security policy configuration, so users can configure the device for maximum mission productivity and security.<br /><blockquote class="tr_bq">"<i>Boeing Black’s security is powered by the Boeing PureSecure architecture, which was designed from the outset for the mobile environment. Our architectural foundation is built upon layers of trust from embedded hardware, operating system policy controls, and compatibility with leading mobile device management systems. The device’s hardware roots of trust and trusted boot ensure the device starts in a trusted state, enabling the maximum security of data. Hardware media encryption and configurable inhibit controls are embedded to protect the device, its data, and the transmission of information, significantly reducing the risk of mission compromise due to data loss.</i>" according to the paperwork they filed with the Federal Communication Commission (<a href="https://apps.fcc.gov/oetcf/eas/reports/ViewExhibitReport.cfm?mode=Exhibits&amp;RequestTimeout=500&amp;calledFromFrame=N&amp;application_id=723549&amp;fcc_id=H8VBLK1" rel="nofollow" target="_blank">FCC</a>).</blockquote></div><div style="text-align: justify;"><b>Boeing Black</b> supports&nbsp;dual MicroSIM with GSM, WCDMA, and LTE on a wide range of&nbsp;bands to facilitate global&nbsp;use and operates on the modified version of Android Operating, that keeps all details as secure as possible.<br /><br />Security and Confidentiality of the information of any person related to the National Security must be on the high priority, but problem arises when the NSA like agencies starts capturing the Data flowing on the backbone of the communication channel and Bribes Software companies to weaken the encryption, and that compels a user to think twice before opting the new inventions and products.</div><div style="text-align: justify;"><br />At the Mobile World Congress in Barcelona,&nbsp;Washington-based software firm <b>Silent Circle</b> and Madrid-based <b>Geeksphone</b> teamed up to launch the <b><a href="http://thehackernews.com/2014/02/silent-circles-blackphone-privacy-and.html" target="_blank">Blackphone</a></b>, highly secure device that doesn't run on any traditional telecom carriers or operating systems.<br /><br />We have reported earlier, there is another interesting&nbsp;<a href="http://thehackernews.com/2014/02/ibm-developing-self-destructing.html" target="_blank">Self-destructing Chips</a> project, that has been handed over to IBM by the Defense&nbsp;Advance Research Projects Agency (<b>DARPA</b>).</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WbrBe_HfIbI:TuvSFoEs5ZQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WbrBe_HfIbI:TuvSFoEs5ZQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8119766048510679602
title: 360 Million Stolen Credential FOR SALE on Underground Black Market
uri: 360-Million-Stolen-Credential-FOR-SALE-on-Underground-Black-Market
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8119766048510679602
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/a0e208cb.Million-Stolen-Credential-ON-SALE-Undergroun-Black-Market.jpg" data-original-source="http://3.bp.blogspot.com/-Xt64oqh0niU/Uw9lCuHpTfI/AAAAAAAAaXg/cPUzxI7vRbA/s1600/Million-Stolen-Credential-ON-SALE-Undergroun-Black-Market.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="360 Million Stolen Credential ON SALE on Underground Black Market" border="0" src="media/5247c81c.Million-Stolen-Credential-ON-SALE-Undergroun-Black-Market.jpg" data-original-source="http://3.bp.blogspot.com/-Xt64oqh0niU/Uw9lCuHpTfI/AAAAAAAAaXg/cPUzxI7vRbA/s728/Million-Stolen-Credential-ON-SALE-Undergroun-Black-Market.jpg" title="360 Million Stolen Credential ON SALE on Underground Black Market" /></a></div>Your Financial Credentials are on SALE on the Underground Black Market&nbsp;without your Knowledge… sounds like a nightmare, but it’s TRUE.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Cyber security firm, <i>Hold Security,</i> <a href="http://www.holdsecurity.com/#!news2013/c13i1" rel="nofollow" target="_blank">said</a> it has traced over 360 million stolen account credentials that are available for Sale on Hacker's black market websites over past three weeks. The credentials include usernames, email addresses, and passwords that are&nbsp;in unencrypted in most cases, according to the report released on Tuesday.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">It is not known till now from where these credentials exactly were stolen, but the security researchers estimated that these credentials are a result of multiple breaches. Since the banking credentials are one of the most ‘<i>valuable bounties</i>’ for the cyber criminals, and the ways to steal these credentials can be directly from the companies and from the services in which users entrust data as well.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">According to Hold Security, in addition to the sale of 360 million credentials, the cyber criminals are&nbsp;<b>selling about 1.25 billion email addresses</b>, which would be of an interest to the spammers.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Alex Holden, chief information security officer at <i>Hold Security</i>, told <a href="http://www.reuters.com/article/2014/02/25/us-cybercrime-databreach-idUSBREA1O20S20140225" rel="nofollow" target="_blank">Reuters</a>, “<i>E-mail addresses in the credentials are from all major services, including Gmail and Yahoo, and almost all Fortune 500 companies and nonprofit organizations</i>,” and that his company is working to discover where the credentials came from and what they can access.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">The sale of this tremendous number of users’ credentials in the underground market can risk consumers and companies, because these wide ranges of compromised users’ credentials could access anything from online bank accounts to corporate networks.</div><div style="text-align: justify;"><blockquote class="tr_bq">"<i>The sheer volume is overwhelming,</i>" Holden told Reuters, adding, “<i>He believes the 360 million records were obtained in separate attacks, including one that yielded some 105 million records, which would make it the largest single credential breaches known to date.</i>”</blockquote></div><div style="text-align: justify;">Hold security is the one, which uncovered the ever big <a href="http://thehackernews.com/2013/10/adobe-gets-hacked-hackers-steal-29.html" target="_blank">Adobe breach</a> in October 2013, in which 153 million users' credentials, including user names and passwords were stolen from Adobe system, and a month later identified another large breach of 42 million plain-text password credentials from a niche dating service Cupid Media.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">There is no way out to secure yourself from these types of attacks because <a href="http://thehackernews.com/search/label/Cyber%20Criminals" target="_blank">cyber criminals</a> are trying to heist your money every second of time and by using the same password for multiple accounts, you yourself give them an open invitation.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">You can reduce the risk of these attacks by <a href="http://thehackernews.com/2014/01/123456-gives-tough-competition-to.html" target="_blank">choosing different passwords</a> for different accounts, as the risks are more for the users who choose the same password for multiple services they adopt, because once an attacker has your single account’s email address and password, he can use those credentials to compromise your every other sites account that uses the same username and password.<br /><br />Only the best practical way to do that is with a <i>password manager</i>.&nbsp;If you aren't using a password manager, you need to start now, like LastPass, KeePass, RoboForm Desktop 7, PasswordBox, and Dashlane 2.0.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Stay Safe! Stay Secure! Stay Tuned!</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F9iHZPXagBw:GsMI6lewtgE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F9iHZPXagBw:GsMI6lewtgE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1728748881420355413
title: Outernet - Free Global Wi-Fi Service from Outer Space
uri: Outernet-Free-Global-Wi-Fi-Service-from-Outer-Space
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1728748881420355413
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/5f1c9db6.Outernet-free-wifi-internet-access.png" data-original-source="http://2.bp.blogspot.com/--5kmvVNPF4k/UxBID9hQqhI/AAAAAAAAaYI/DToQ0u3QFhg/s1600/Outernet-free-wifi-internet-access.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Outernet free wifi Internet access" border="0" src="media/17fffc3a.Outernet-free-wifi-internet-access.png" data-original-source="http://2.bp.blogspot.com/--5kmvVNPF4k/UxBID9hQqhI/AAAAAAAAaYI/DToQ0u3QFhg/s728/Outernet-free-wifi-internet-access.png" title="Outernet free wifi Internet access" /></a></div>If you are reading this THN Article, then you are the one of those lucky guys who has access to the Internet, but everyone is not as lucky as you. On this planet, about 40% of the population is still not having an access to the Internet services.<br /><br />So, there is good news for all those who are still deprived of Internet services - Free Global WiFi Internet Access called '<a href="https://www.outernet.is/" rel="nofollow" target="_blank"><b>Project </b><b>Outernet</b></a>'.<br /><br />A Non-profit organization '<i>Media Development Investment Fund (MIDF)</i>' based in New York has taken this initiative, regardless of the geographical location, the Outernet will broadcast free, bypassing filtering or other means of censorship and universal Internet all over the globe from high in orbit.<br /><br />A few hundred of &nbsp;Low-cost mini satellites (<i><b>cubesats</b></i>) will be sent into the space to create a constellation in the low earth orbit. To widen the range of service area, these Cubesats will utilize universally accepted standard protocols like DVB, Digital Radio Mondiale and&nbsp;<i>User Datagram Protocol (UDP)</i>&nbsp;WiFi Multitasking.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Outernet is nothing but a modern version of shortwave radio, it will receive data from the Ground Stations and will transmit the received data in a continuous loop until it will receive new data.<br /><blockquote class="tr_bq">“<i>Broadcasting data allow citizens to reduce their reliance on costly internet data plans in places where monthly fees are too expensive for average citizens. And offering continuously updated web content from the space bypasses censorship of the Internet.</i>” Outernet says on their website.</blockquote>Outernet&nbsp;will broadcast Global news, applications, information, educational courseware, and emergency communication services. Technical assessment of the project has been started in last December and a prototype will be tested nearly in June this year.<br /><br /></div><div style="text-align: justify;">"<i>By leveraging datacasting technology over a low-cost satellite constellation, Outernet is able to bypass censorship, ensure privacy, and offer a universally-accessible information service at no cost to global citizens.</i>"<br /><br /></div><div style="text-align: justify;">MDIF is planning to enhance the ability of the service by enabling the data transmission from anywhere, depending on the availability of funds required for this feature. MDIF's director of innovation said it would take only three years and $12 billion to get the project up and running.<br /><br />Google has been working on a similar project called “<i><b><a href="http://www.google.com/loon/" rel="nofollow" target="_blank">Project Loon</a> - Balloon-Powered Internet for Everyone</b></i>” for quite some time.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">This technology seems very innovative and useful for the enhancement of the civilization of Humanity in remote areas as well, but it has its own limitation.<br /><br />After such services get fully functional, all of us might face Security and Privacy Threats by relying on the technology by U.S Based Companies where the NSA wants to control and intercept everything. Till now NSA could target only 60% population with Internet access, but this may potentially allow them to target 100% audience with regular and Free Internet access.<br /><br />In this era of Edward Snowden, we need to think about its other side too. What do you think about Outernet? Add your Comments.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LcmwDgVXKFs:_SOIDSVeu74:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LcmwDgVXKFs:_SOIDSVeu74:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LcmwDgVXKFs:_SOIDSVeu74:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LcmwDgVXKFs:_SOIDSVeu74:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LcmwDgVXKFs:_SOIDSVeu74:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LcmwDgVXKFs:_SOIDSVeu74:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LcmwDgVXKFs:_SOIDSVeu74:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LcmwDgVXKFs:_SOIDSVeu74:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1166511814783166196
title: 'Optic Nerve' - Dirty NSA hacked into Webcam of millions of Yahoo users for Private Images
uri: Optic-Nerve-Dirty-NSA-hacked-into-Webcam-of-millions-of-Yahoo-user
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1166511814783166196
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/8c473932.NSA-Optic-Nerve-Webcam-hacking.jpg" data-original-source="http://4.bp.blogspot.com/--yM-3ULBhHY/UxBqVhLnzZI/AAAAAAAAaY8/Vvkvk2vqpug/s1600/NSA-Optic-Nerve-Webcam-hacking.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="'Optic Nerve' - Dirty NSA hacked into Webcam of millions of Yahoo users for Images" border="0" src="media/3a8f336b.NSA-Optic-Nerve-Webcam-hacking.jpg" data-original-source="http://4.bp.blogspot.com/--yM-3ULBhHY/UxBqVhLnzZI/AAAAAAAAaY8/Vvkvk2vqpug/s728/NSA-Optic-Nerve-Webcam-hacking.jpg" title="'Optic Nerve' - Dirty NSA hacked into Webcam of millions of Yahoo users for Images" /></a></div><div style="text-align: justify;">Once again, a new revelation showed the ugly side of the Government who are conducting Global Mass surveillance and previous documents leaked by the whistleblower <i><a href="http://thehackernews.com/search/label/Edward%20Snowden" target="_blank">Edward Snowden</a></i> have&nbsp;defaced the US Intelligence Agency <i>NSA</i>, who were taking care of a number of projects like <i>PRISM, XKeyscore, DROPOUTJEEP</i>, and various others to carry out surveillance of millions of people.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Now, it has been revealed that the US National Security Agency (<a href="http://thehackernews.com/search/label/NSA" target="_blank">NSA</a>) helped its British counterpart, the Government Communications Headquarters (<a href="http://thehackernews.com/search/label/GCHQ" target="_blank">GCHQ</a>), to allegedly capture and store nude images and others from webcam chats of millions of unsuspecting Yahoo users, <i><a href="http://www.theguardian.com/world/2014/feb/27/gchq-nsa-webcam-images-internet-yahoo" rel="nofollow" target="_blank">The Guardian</a> </i>reported.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Documents handed to the Guardian by the former NSA contractor <i>Edward Snowden </i>show that the GCHQ's worked with the US intelligence agency NSA on a joint project dubbed as ‘<b>Optic Nerve</b>’. The project carried out a bulk <a href="http://thehackernews.com/search/label/surveillance%20program" target="_blank">surveillance program</a>, under which they nabbed webcam images every five minutes from random Yahoo users' video chats and stored them in a database.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">The project didn’t target individual users; rather it targeted Yahoo webcam chats between 2008 and 2010. Indeed, the method of collection appears somewhat recklessly, and in just six months of period alone, the still images of about 1.8 million users were captured and stored in the government servers in 2008.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Instead of saving full videos, the program logged one image every five minutes from a user's chat. The document says that between 3 and 11 percent of the images taken contain "<i>undesirable nudity.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">One GCHQ document states, "<i>It would appear that a surprising number of people use webcam conversations to show intimate parts of their body to the other person.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The collected <a href="http://thehackernews.com/search/label/hacking%20webcam" target="_blank">webcam</a> information was stored in the NSA's XKeyscore search tool, and the NSA research was used to build the tool which identified Yahoo's webcam traffic, reads the report.</div><div class="separator" style="clear: both; text-align: center;"><a href="media/d4fbcd78.NSA-Optic-Nerve-Webcam-hacking.jpg" data-original-source="http://1.bp.blogspot.com/-mKic2mdA18A/UxBne5l5sRI/AAAAAAAAaYo/YF7ZYIkSBgQ/s1600/NSA-Optic-Nerve-Webcam-hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="NSA-Optic-Nerve-Webcam-hacking" border="0" src="media/d4fbcd78.NSA-Optic-Nerve-Webcam-hacking.jpg" data-original-source="http://1.bp.blogspot.com/-mKic2mdA18A/UxBne5l5sRI/AAAAAAAAaYo/YF7ZYIkSBgQ/s1600/NSA-Optic-Nerve-Webcam-hacking.jpg" title="NSA-Optic-Nerve-Webcam-hacking" /></a></div><div style="text-align: justify;">GCHQ webcam spying program, <i>Optic Nerve</i>, was still active in 2012, according to an internal GCHQ wiki page accessed that year.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>Why Images???&nbsp;</b>It is known from the revealed documents that the images were collected by the government agency, so that the group could <i><b>experiment with facial recognition</b></i>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">"<i>Face detection has the potential to aid selection of useful images for 'mugshots' or even for face recognition by assessing the angle of the face,</i>" it reads. "<i>The best images are ones where the person is facing the camera with their face upright.</i>"</div><div class="separator" style="clear: both; text-align: center;"><a href="media/5b6334ce.NSA-Optic-Nerve-Webcam-hacking.jpg" data-original-source="http://4.bp.blogspot.com/-XovvH80w1og/UxBn9VCj64I/AAAAAAAAaYw/y1wl_xueLMY/s1600/NSA-Optic-Nerve-Webcam-hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="NSA-Optic-Nerve-Webcam-hacking" border="0" src="media/5b6334ce.NSA-Optic-Nerve-Webcam-hacking.jpg" data-original-source="http://4.bp.blogspot.com/-XovvH80w1og/UxBn9VCj64I/AAAAAAAAaYw/y1wl_xueLMY/s1600/NSA-Optic-Nerve-Webcam-hacking.jpg" title="NSA-Optic-Nerve-Webcam-hacking" /></a></div><div style="text-align: justify;">The GCHQ agency staffs were allowed to display "<i>webcam images associated with similar Yahoo identifiers to your known targe</i>t", the document reads, also it states “<i>Bulk surveillance of Yahoo users was begun” as "Yahoo webcam is known to be used by GCHQ targets.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Not Surprising, because your knotty private webcam sex session you loved and enjoyed with your lover four years back was potentially pored over by the suits at GCHQ.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Yahoo has reacted furiously and denied any prior knowledge of the webcam interception program, and said that it had no awareness of or involvement with the GCHQ collection, describing the activity as "<i>a whole new level of violation of our users' privacy.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">And a GCHQ spokesman said in a statement, "<i>It is a longstanding policy that we do not comment on intelligence matters. Furthermore, all of GCHQ's work is carried out in accordance with a strict legal and policy framework which ensures that our activities are authorized, necessary and proportionate, and that there is rigorous oversight, including from the secretary of state, the interception and intelligence service commissioners and the Parliamentary Intelligence and Security Committee,</i>” adding, “<i>All our operational processes rigorously support this position.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The NSA spokesperson declined to respond saying, "<i>As we've said before, the National Security Agency does not ask its foreign partners to undertake any intelligence activity that the US government would be legally prohibited from undertaking it.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">This is how our privacy is getting ruined by the government intelligence officials that we all trust blindly.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9uBl8Tp70hM:2Bf6v6u9oRY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9uBl8Tp70hM:2Bf6v6u9oRY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9uBl8Tp70hM:2Bf6v6u9oRY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9uBl8Tp70hM:2Bf6v6u9oRY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9uBl8Tp70hM:2Bf6v6u9oRY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9uBl8Tp70hM:2Bf6v6u9oRY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9uBl8Tp70hM:2Bf6v6u9oRY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9uBl8Tp70hM:2Bf6v6u9oRY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6088769847044608408
title: Yahoo vulnerability allows Hacker to delete 1.5 million records from Database
uri: Yahoo-vulnerability-allows-Hacker-to-delete-1-5-million-records-from-D
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6088769847044608408
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/b2e040c6.hacking-yahoo-password-database.png" data-original-source="http://3.bp.blogspot.com/-zdY0sumsjE4/UxHDc9wWj6I/AAAAAAAAaac/4R1Ec3BcYBk/s1600/hacking-yahoo-password-database.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Yahoo Vulnerability allows hacker to delete 1.5 million records from Database" border="0" src="media/dfaa843f.hacking-yahoo-password-database.png" data-original-source="http://3.bp.blogspot.com/-zdY0sumsjE4/UxHDc9wWj6I/AAAAAAAAaac/4R1Ec3BcYBk/s728/hacking-yahoo-password-database.png" title="Yahoo Vulnerability allows hacker to delete 1.5 million records from Database" /></a></div><b>Yahoo!</b> The 4th most visited website on the Internet has been found vulnerable multiple times, and this time a hacker has claimed to spot&nbsp;a critical vulnerability in the Yahoo! sub-domain '<i>suggestions.yahoo.com</i>', which could allow an attacker to delete the all the posted thread&nbsp;and comments on Yahoo's Suggestion Board website.<br /><br />Egyptian Cyber Security Analyst, '<i>Ibrahim&nbsp;Raafat</i>',&nbsp;found and demonstrated 'Insecure Direct Object Reference Vulnerability' in Yahoo's website on his <a href="http://pwnrules.com/yahoo-suggestions-vulnerability/" rel="nofollow" target="_blank">blog</a>.<br /><br />Exploiting the flaw&nbsp;escalates the user privileges that allow a hacker to delete more than&nbsp;365,000 posts and 1,155,000 comments from <i>Yahoo! Database</i>. Technical details of the vulnerability are as explained below:<br /><!-- adsense --><br /><b>Deleting&nbsp;</b><b>Comments: </b>While deleting his own comment,&nbsp;Ibrahim noticed the&nbsp;<span style="text-align: left;">HTTP Header of POST request, i.e.</span></div><div style="text-align: justify;"><blockquote class="tr_bq"><i><span style="text-align: left;">prop=addressbook&amp;<span style="color: #cc0000;">fid=367443</span>&amp;crumb=Q4</span><span style="text-align: left;"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="ec702982-e1fb-473b-bd77-9fee65004312" id="311cbdcf-daef-44da-85f5-17a35def8c41"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="aaa412e5-02a8-4c4f-ac85-3c48f2d053c5" id="c1fd3101-709a-495f-b90e-63cb6e724779">.</span></span></span><span style="text-align: left;">PSLBfBe</span><span style="text-align: left;"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="ec702982-e1fb-473b-bd77-9fee65004312" id="12c9a71a-08d1-450f-81cb-74833618d97d"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="aaa412e5-02a8-4c4f-ac85-3c48f2d053c5" id="942e18c3-f12c-4c96-8911-fb4a065377a7">.</span></span></span><span style="text-align: left;">&amp;<span style="color: #cc0000;">cid=1236547890</span>&amp;cmd=delete_comment</span></i></blockquote></div><div style="text-align: justify;">Where parameter '<b><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="d932736b-5882-4dcf-b881-eda722f89a86" id="2111c32b-accc-4125-aa42-5609f5fa182e"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="b99dc2f0-277a-4f1c-8091-9a7010a38483" id="e9bfb1d8-a9bc-4b39-a05b-2c5a4188eadd">fid</span></span></b>' is the <i>topic id</i> and '<b><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="d932736b-5882-4dcf-b881-eda722f89a86" id="552724b8-9b10-44ee-a1aa-1794ecea56a6"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="b99dc2f0-277a-4f1c-8091-9a7010a38483" id="b1741c6a-7334-443d-9604-4b69dbeecb8e">cid</span></span></b>' is the respective<i> comment ID</i>. While testing, he found changing the <b><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="5e3ea4d4-8cc0-4ade-adf8-0ebfbf16e768" id="356f07e5-68f0-45d1-97c5-eaa9eb21e548"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="b6c887cf-f35e-478f-94c4-2674948ad8fe" id="f5377447-b7ae-4219-974c-59c9ea23b818">fid</span></span></b> and <b><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="5e3ea4d4-8cc0-4ade-adf8-0ebfbf16e768" id="7e48ea91-3427-4ad9-bc32-fc14cae459ab"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="b6c887cf-f35e-478f-94c4-2674948ad8fe" id="7cca1e67-18fc-472a-af39-43a9cd6f920e">cid</span></span></b>&nbsp;parameter values allow him to delete other comments from the forum, that are actually posted by another user.<br /><b><br /></b> <b>Deleting Posts: </b>Next, he also tested post deletion&nbsp;mechanism and found a similar loophole in that. A normal&nbsp;<span style="text-align: left;">HTTP Header POST request of deleting a post is:</span><br /><blockquote class="tr_bq"><i><span style="text-align: left;">POST cmd=delete_item&amp;crumb=SbWqLz</span><span style="text-align: left;"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="12292865-2bda-418f-aedc-f988871956ab" id="d31cb335-9cf5-4a8d-bc05-d61aa23250c4"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="76af0201-09c6-4b1a-bad8-e44ad212634e" id="c68c43da-8785-472d-8b2f-bbb94dd0019e">.</span></span></span><span style="text-align: left;">LDP0</span></i></blockquote></div>He found that, appending the <b><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="484e721e-3f6b-4d38-8de5-ac720b0c9a3f" id="4061102a-f7e5-48b4-80d9-0dee6e9f2196"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="84e6e85b-4e8f-4979-99c7-1622e3a887bd" id="be29db90-dc86-4e07-bdf6-d9eb55b4075b">fid</span></span> (topic id)&nbsp;</b>variable to the URL allows him to delete the respective post, that was not posted by himself i.e.<br /><blockquote class="tr_bq"><i>POST cmd=delete_item&amp;crumb=SbWqLz<span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="81a7d6b9-96a7-49a3-b98c-91fc7ea3b8b4" id="de9637f2-e6a8-43f7-a532-76b5fa5eb019"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="7866a04b-038e-4da5-9e03-bc4778e3ab54" id="d1d67d71-1d1c-40d7-ac7d-cdf63cd63434">.</span></span>LDP0&amp;<span style="color: #cc0000;">fid=xxxxxxxx</span></i></blockquote><i>Ibrahim</i> has reported the flaw to Yahoo Security team and also provided a <b>Video Demonstration</b>, as shown below:<br /><center><iframe allowfullscreen="" frameborder="0" height="360" src="//www.youtube.com/embed/fgOOMYnI1NM" width="640"></iframe></center><div style="text-align: justify;">A potential attacker with little knowledge of <a href="http://thehackernews.com/2014/02/programming-tutorials-with-DuckDuckGo_21.html" target="_blank">programming</a> could write an automated script to delete all the comments and posts.<br /><br /></div><div style="text-align: justify;">The vulnerability hunter claimed that he had received the Bug Bounty for reporting this security flaw to yahoo and which now has been fixed by the company.</div></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GhEfu4GE3G4:yAzf4OI_bWI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GhEfu4GE3G4:yAzf4OI_bWI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GhEfu4GE3G4:yAzf4OI_bWI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GhEfu4GE3G4:yAzf4OI_bWI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GhEfu4GE3G4:yAzf4OI_bWI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GhEfu4GE3G4:yAzf4OI_bWI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GhEfu4GE3G4:yAzf4OI_bWI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GhEfu4GE3G4:yAzf4OI_bWI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8357348098937641496
title: Tor Instant Messaging Bundle - A New Anonymous and Encrypted messaging Software
uri: Tor-Instant-Messaging-Bundle-A-New-Anonymous-and-Encrypted-messaging
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8357348098937641496
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/7f3dd469.Tor-Instant-Messaging-Bundle-Download.png" data-original-source="http://4.bp.blogspot.com/--IptO1ZJLMQ/UxG4fSYCUcI/AAAAAAAAAIQ/NkZJZ0sZM4o/s1600/Tor-Instant-Messaging-Bundle-Download.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Tor Instant Messaging Bundle - A New Anonymous and Encrypted Chat Software" border="0" src="media/564f7347.Tor-Instant-Messaging-Bundle-Download.png" data-original-source="http://4.bp.blogspot.com/--IptO1ZJLMQ/UxG4fSYCUcI/AAAAAAAAAIQ/NkZJZ0sZM4o/s728/Tor-Instant-Messaging-Bundle-Download.png" title="Tor Instant Messaging Bundle - A New Anonymous and Encrypted Chat Software" /></a></div>We are living in an era of <i>Mass Surveillance,&nbsp;</i>conducted by the Government Agencies like the <a href="http://thehackernews.com/search/label/NSA" target="_blank">NSA</a> and GCHQ, and we ourselves gave them an open invitation as we all have sensors in our pockets that track us everywhere we go i.e. Smartphone. <i><a href="http://thehackernews.com/search/label/encryption" target="_blank">Encryption</a></i> and security are more important today than any other time in our history. So, the best proactive way to keep your tracks clear is - <i>Always use only trusted privacy tools and services</i>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The same folks behind the Anonymity&nbsp;Tool, <i><b><a href="http://thehackernews.com/search/label/tor" target="_blank">Tor Browser Bundle</a></b></i> is currently working on a new Privacy tool called '<b>Tor Instant Messaging Bundle</b>' (TIMB), that will help you with encrypted communication to keep your online conversations private.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The Tor is the free software that lets users browse the Internet anonymously and mostly used by activists, journalists and to conceal their online activities from prying eyes.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Tor Instant Messaging Bundle, or TIMB is a real time anonymous chat system, that will simply route all of your chat data through the Tor's encrypted network, which uses proxy servers to hide the identities of its users, according to the documents <a href="https://trac.torproject.org/projects/tor/wiki/org/meetings/2014WinterDevMeeting/notes/RoadmapTIMB" rel="nofollow" target="_blank">posted</a> from the <i>Tor Project's 2014 Winter Dev Meeting</i>.&nbsp;The client itself will be built on top of <a href="http://www.instantbird.org/" rel="nofollow" target="_blank">Instantbird</a>, an open source instant messaging service.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;"><i>The Tor Instant Messaging Bundle</i> will encrypt user messages multiple times, including destination IP, making it sufficiently difficult to trace the original source.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Since the governments are engaged in the widespread data collection and analysis, using various gateways such as Cell phone location information, the Internet, Camera observations, and Drones. As technology and <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="7819bd65-417b-40b0-939b-f69ebd584448" id="e212031d-172a-4ab6-8925-3833bb802eb0">analytics</span> advance, mass surveillance opportunities continue to grow. In which, the Tor Instant Messaging Bundle can come out to be the world's most secure real-time communication tool.</div><blockquote class="tr_bq" style="text-align: justify;">"<i>People in countries where communication for the purpose of activism is met with intimidation, violence, and prosecution will be able to avoid the scrutiny of criminal cartels, corrupt officials, and authoritarian governments</i>," states the Tor TIMB project.</blockquote><div style="text-align: justify;">By the end of March, the experimental test builds of <i>Tor Instant Messaging Bundle (TIMB)</i> is expected to be available, but the first experimental release won't include '<b>Off The Record' (OTR)</b> capability. OTR mode provides strong encryption for instant messaging conversations.</div><blockquote class="tr_bq" style="text-align: justify;">"<i>Tor has grown popular over the past few years as a way of surfing the Web while blocking network surveillance, analysis of your traffic, or other monitoring that threatens personal freedom and privacy, confidential business activities and relationships, and state security,</i>" states the Tor Project founders. "<i>The group's work is all the more significant following reports of NSA's foreign and domestic surveillance activities.</i>"</blockquote><div style="text-align: justify;">But, every technology has positive and negative aspects as well. Since, Tor is also a <b><i><a href="http://thehackernews.com/2012/05/what-is-deep-web-first-trip-into-abyss.html" target="_blank">Deep Web</a></i></b> friendly tool that allows hackers and cyber criminals to carry out illicit activities.&nbsp;</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">It's a matter of concern, but we have to adopt measures to protect our privacy now, as the former NSA contractor <i><a href="http://thehackernews.com/search/label/Edward%20Snowden" target="_blank">Edward Snowden</a></i> said:</div><blockquote class="tr_bq" style="text-align: justify;">"<i>A child born today will grow up with no conception of privacy at all. They’ll never know what it means to have a private moment to themselves an unrecorded, unanalyzed thought. And that’s a problem because privacy matters, privacy is what allows us to determine who we are and who we want to be. Together we can find a better balance, end mass surveillance and remind the government that if it really wants to know how we feel asking is always cheaper than spying.</i>"</blockquote><div style="text-align: justify;">The NSA has been trying to hack into the Tor network for years, and the FBI was recently caught seizing data from&nbsp;<b><a href="http://thehackernews.com/2014/01/FBI-seized-TorMail-database-hacking-news.html" target="_blank">TorMail</a></b>, an anonymous email service, and trying to use that data to catch hackers.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_AVOVdQwq_M:gszrQsVBTRY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_AVOVdQwq_M:gszrQsVBTRY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_AVOVdQwq_M:gszrQsVBTRY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_AVOVdQwq_M:gszrQsVBTRY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_AVOVdQwq_M:gszrQsVBTRY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_AVOVdQwq_M:gszrQsVBTRY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_AVOVdQwq_M:gszrQsVBTRY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_AVOVdQwq_M:gszrQsVBTRY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8677936099388177251
title: Russia Today (RT) Hacked, "Russian" replaced with "Nazi" in News Headlines
uri: Russia-Today-(RT)-Hacked-Russian-replaced-with-Nazi-in-News-Headl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8677936099388177251
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/f40eeefa.Russia-Today-hacked.png" data-original-source="http://4.bp.blogspot.com/-gPHyHS3zkzI/UxLw4YBwSdI/AAAAAAAAaa0/0T-sCwea-C0/s1600/Russia-Today-hacked.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Russia Today hacked" border="0" src="media/a25ee71e.Russia-Today-hacked.png" data-original-source="http://4.bp.blogspot.com/-gPHyHS3zkzI/UxLw4YBwSdI/AAAAAAAAaa0/0T-sCwea-C0/s728/Russia-Today-hacked.png" title="Russia Today hacked" /></a></div><div style="text-align: justify;">'<b>Russia Today</b>',&nbsp;Moscow based&nbsp;Russia's biggest news channel website (<i>RT.com</i>) has been hacked and defaced by an unknown group of hackers. Hackers have replaced “<i>Russia</i>” or “<i>Russians</i>” with “<i>Nazi</i>” or “<i>Nazis</i>”&nbsp;<span style="text-align: left;">word from the headlines, as shown.</span><br /><!-- adsense --><br /><span style="text-align: left;"><br /></span> <span style="text-align: left;">"<i>RT website has been hacked, we are working to resolve the problem,</i>"&nbsp;</span>Russia Today <a href="https://twitter.com/RT_com/status/439974517268840448" rel="nofollow" target="_blank">tweeted</a> from&nbsp;<span style="text-align: left;">the official Twitter account.</span></div><div style="text-align: justify;"><blockquote class="tr_bq">Modified headline, i.e.<i><span style="text-align: left;">i.e.</span></i><i><span style="text-align: left;"></span></i><i><span style="text-align: left;">&nbsp;</span><span style="text-align: left;">Russian Senators Vote To Use Stabilizing Nazi Forces on Ukrainian territory.</span></i></blockquote></div><blockquote class="tr_bq" style="text-align: justify;">Another modified headline stated: “<i>Up to 143,000 Nazis requested asylum in Russia in two weeks</i>,”<span style="text-align: left;">&nbsp;</span></blockquote><div style="text-align: justify;"><span style="text-align: left;">The changes to the '</span><span style="text-align: left;"><i>Russia Today</i>'</span><span style="text-align: left;">&nbsp;website remained in place for nearly 30 minutes and&nbsp;</span><span style="text-align: left;">at the time of reporting, the hack was restored.&nbsp;</span><span style="text-align: left;">"<i>Hackers deface http://RT.com website, crack admin access, place "Nazi" in every headline. Back to normal now.</i>"&nbsp;</span><span style="text-align: left;">RT acknowledged the issue.</span></div><div style="text-align: justify;"><span style="text-align: left;"><br /></span></div><div style="text-align: justify;"><span style="text-align: left;">Recently the</span><span style="text-align: left;">&nbsp;<a href="http://thehackernews.com/search/label/Anonymous%20Hacker" target="_blank">Anonymous</a> group has also announced '<b><i><a href="https://twitter.com/search?q=%23OpRussia&amp;src=hash" rel="nofollow" target="_blank">#OpRussia</a></i></b>' in support of the Ukrainian protesters and u</span><span style="text-align: left;">nder banner of&nbsp;</span><span style="text-align: left;"><b style="font-style: italic;">#OpRussia</b>, Anonymous hackers are hacking and defacing&nbsp;hundreds of Russian websites today.</span></div><div style="text-align: justify;"><span style="text-align: left;"><br /></span></div><div style="text-align: justify;"><span style="text-align: left;">The Hackers targeted the website after the Russian parliament approved the use of military force in Ukraine's Crimea.&nbsp;</span><span style="text-align: left;">Russia Today is funded and supported by the G</span><span style="text-align: left;">overnment of the Russian Federation and the website could be hacked by some&nbsp;</span><span style="text-align: left;">pro-Ukraine group of hackers.</span></div></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GpJtI2sp5w:Mx59hZ7P_vU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GpJtI2sp5w:Mx59hZ7P_vU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GpJtI2sp5w:Mx59hZ7P_vU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4GpJtI2sp5w:Mx59hZ7P_vU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GpJtI2sp5w:Mx59hZ7P_vU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4GpJtI2sp5w:Mx59hZ7P_vU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GpJtI2sp5w:Mx59hZ7P_vU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4GpJtI2sp5w:Mx59hZ7P_vU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1711566101417801407
title: Firefox to block all plugins by Default in upcoming release, except Whitelist plugins
uri: Firefox-to-block-all-plugins-by-Default-in-upcoming-release-except-Wh
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1711566101417801407
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/9b7ea17b.Firefox-click-to-play-plugin-security.png" data-original-source="http://4.bp.blogspot.com/-9a8PucB1vfI/UxSqe90ptrI/AAAAAAAAabY/8AJqZvN4YkU/s1600/Firefox-click-to-play-plugin-security.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Mozilla to Block all Plugins by Default in upcoming release, except Whitelist Plugins" border="0" src="media/e16c022d.Firefox-click-to-play-plugin-security.png" data-original-source="http://4.bp.blogspot.com/-9a8PucB1vfI/UxSqe90ptrI/AAAAAAAAabY/8AJqZvN4YkU/s728/Firefox-click-to-play-plugin-security.png" title="Mozilla to Block all Plugins by Default in upcoming release, except Whitelist Plugins" /></a></div>The Mozilla Firefox web browser is used by roughly 30% of all Internet users and the company is seriously concerned about the Security of its users for many years.<br /><br />To Improve the Stability, Security and performance of Firefox <a href="http://firefox%20to%20block%20all%20plugins%20by%20default%20in%20upcoming%20release%2C%20except%20whitelist%20plugins/" target="_blank">web browser</a>, Mozilla announced back in&nbsp;<i>2013</i> that it planned to enable&nbsp;‘<i><a href="http://thehackernews.com/2012/10/firefox-17-beta-released-with-click-to.html" target="_blank">Click to Play</a></i>’ feature in upcoming Firefox versions, which will block most vulnerable&nbsp;plugins like <i>Java </i>by default.<br /><br />“<i>Plugins are a significant source of poor performance, crashes and security vulnerabilities</i>”, Mozilla <a href="https://blog.mozilla.org/security/2014/02/28/update-on-plugin-activation/" rel="nofollow" target="_blank">said</a>.<br /><!-- adsense --><br />The Feature '<i>Click to play</i>' blocks the execution of all plugins automatically, though this feature was annoying to the users, so to prevent all plugins from default blocking, Mozilla announced to maintain a <a href="https://wiki.mozilla.org/Plugins/Firefox_Whitelist" rel="nofollow" target="_blank">whitelist</a> of approved plugins.</div><div><div style="text-align: justify;"><blockquote class="tr_bq"><i>"By allowing users to decide which sites need to use plugins, Firefox will help protect them and keep their browser running smoothly." </i>~Benjamin Smedberg, Engineering Manager.</blockquote></div></div><div><div style="text-align: justify;">Plugin authors can apply for inclusion in a whitelist. The developer has to submit their plugins using a template to Bugzilla and the application submitted till 31st March, 2014 will be reviewed by the Mozilla.<br /><br />The Firefox web browser will only start blocking by default, no sooner than Firefox 30. If accepted, the plugin will be whitelisted for next 4 Firefox releases i.e. 30 weeks (<i>6 weeks in beta version and 24 weeks in the general release channel</i>),&nbsp;with the possibility to apply for a further extension later.<br /><br />'<b>Adobe Flash</b>' is included in the whitelist by Mozilla, '<i>security and plugin teams work closely with Adobe to make sure that Firefox users are protected from instability or security issues in the Flash plugin</i>', the company said; However, '<b>Java</b>' plugin is excluded from the whitelist because of its continues security problems and slow performance.<br /><br /></div><div style="text-align: justify;">Most widely used web browser <i>Google Chrome</i> is also working in this direction and last January it has blocked all NPAPI plugins except <i>Silverlight, Unity, Google Earth, and Facebook Video</i>.</div></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UddEvqO0NSY:3-_o3BpbzMU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UddEvqO0NSY:3-_o3BpbzMU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UddEvqO0NSY:3-_o3BpbzMU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UddEvqO0NSY:3-_o3BpbzMU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UddEvqO0NSY:3-_o3BpbzMU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UddEvqO0NSY:3-_o3BpbzMU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UddEvqO0NSY:3-_o3BpbzMU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UddEvqO0NSY:3-_o3BpbzMU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4910542328582398075
title: Cisco Offers $300,000 Prize For 'Internet of Things' Security Apps
uri: Cisco-Offers-300-000-Prize-For-Internet-of-Things-Security-Apps
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4910542328582398075
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-kFHKV-A0-tI/UxSX7jZFuAI/AAAAAAAAabE/TpVxBe9kCBU/s1600/Cisco+Offers+$300,000+Prize+For+'Internet+of+Things'+Security+Apps.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Cisco Offers $300,000 Prize For 'Internet of Things' Security Apps" border="0" src="http://1.bp.blogspot.com/-kFHKV-A0-tI/UxSX7jZFuAI/AAAAAAAAabE/TpVxBe9kCBU/s728/Cisco+Offers+$300,000+Prize+For+'Internet+of+Things'+Security+Apps.jpg" title="Cisco Offers $300,000 Prize For 'Internet of Things' Security Apps" /></a></div>In the last few years, this emerging domain for the&nbsp;<b>Internet of Things&nbsp;</b>has been attracting the significant interest, and will continue for the years to come. It&nbsp;would be a $20 Trillion Market over the next several years, but Security and privacy are the key issues for such applications, and still face some enormous challenges.<br /><br />Cisco&nbsp;has announced a global and industry-wide initiative to bring the Security community and Researchers together to contribute in securing the Internet of Things (IoT) and launched a contest called the "<b>Internet of Things Grand Security Challenge</b>", offering&nbsp;prizes of up to <i>$300,000</i>&nbsp;for winners.<br /><br />Since Smart devices are growing at an exponential pace with increase in connecting devices embedded in cars, retail systems, refrigerators, televisions and countless other things people use in everyday life and is expected to grow to 50 billion by 2020. So, in an effort to deliver the security solutions necessary to protect the increasing range of connected devices in the Internet of Things, Cisco has challenged security experts around the world.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">"<i>We're connecting more of our world every day through smart, IP-enabled devices ranging from home appliances, healthcare devices, and industrial equipment. These new connected devices are offering new ways to share information and are changing the way we live,</i>" reads the <a href="http://blogs.cisco.com/security/join-the-challenge-secure-the-internet-of-things/" rel="nofollow" target="_blank">blog post</a>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The <a href="http://www.ninesights.com/community/cisco" rel="nofollow" target="_blank">Contest</a> was announced by the senior vice president of the security group at Cisco, Christopher Young, in his keynote at this week's RSA Conference, said "<i>the idea is 'a contest of experts around the world to submit blueprints' for how security issues created by the Internet of Things could be addressed. It's expected that up to six winning entries would be selected and the prize money awarded at the Internet of Things Forum in the fall.</i>"</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">It's expected that up to six winning entries would be selected and the prize money from $50,000 to $75,000 would be awarded by Cisco to winning contestants at the Internet of Things Forum in the fall.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">A Cisco team of security experts will evaluate proposals based on the following criteria:</div><div style="text-align: justify;"><br /><ul><li>Feasibility, scalability, performance, and ease-of-use</li><li>Applicability to address multiple IoT verticals (manufacturing, mass transportation, healthcare, oil and gas, smart grid, etc.)</li><li>Technical maturity/viability of the proposed approach</li><li>Proposers’ expertise and ability to feasibly create a successful outcome</li></ul></div><div style="text-align: justify;">About a month back, we already posted that how hundreds of thousands of Smart TVs, Refrigerator, and other <a href="http://thehackernews.com/2014/01/100000-refrigerators-and-other-home.html" target="_blank">smart household appliances were compromised by hackers</a> to send out malicious spam emails.<br /><br />So, in future the "<a href="http://thehackernews.com/search/label/The%20Internet%20of%20Things" target="_blank">Internet of Things</a>" can become an easy weapon for cyber criminals to launch large scale of cyber attacks and to protect ourselves, we should have a good and effective security solution, in which Cisco is contributing a way.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The winners of the Internet of Things Security Grand Challenge will be named in the northern autumn of 2014, by The <a href="http://www.ninesights.com/community/cisco/about#/evaluation-panel" rel="nofollow" target="_blank">Evaluation Panel</a> of Cisco.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xGpEPT0p4Y:_KIal-y3wyo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xGpEPT0p4Y:_KIal-y3wyo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xGpEPT0p4Y:_KIal-y3wyo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2xGpEPT0p4Y:_KIal-y3wyo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xGpEPT0p4Y:_KIal-y3wyo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2xGpEPT0p4Y:_KIal-y3wyo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xGpEPT0p4Y:_KIal-y3wyo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2xGpEPT0p4Y:_KIal-y3wyo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5589951552472766099
title: Data Backup and Recovery with 'EaseUS Todo Backup Workstation'
uri: Data-Backup-and-Recovery-with-EaseUS-Todo-Backup-Workstation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5589951552472766099
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/65fc3477.EaseUS-Todo-Backup-Workstation.jpeg" data-original-source="http://2.bp.blogspot.com/-VMO7Igtdkmc/UxGhZYTZHjI/AAAAAAAAaZc/QifdwIPBbNg/s1600/EaseUS-Todo-Backup-Workstation.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Data Backup and Recovery with EaseUS Todo Backup Workstation" border="0" src="media/cd711744.EaseUS-Todo-Backup-Workstation.jpeg" data-original-source="http://2.bp.blogspot.com/-VMO7Igtdkmc/UxGhZYTZHjI/AAAAAAAAaZc/QifdwIPBbNg/s728/EaseUS-Todo-Backup-Workstation.jpeg" title="Data Backup and Recovery with EaseUS Todo Backup Workstation" /></a></div>Since, we are living in the era where nothing could be possible without the help of the Internet. From every unimportant to every major and important data are stored in our computers and servers, and there is a massive growth in the volume of data all around us.<br /><br />But, computer drives can fail, and usually they give no advance warning. One minute they're working fine, and the next minute they're toasted. Data loss can be very costly, and due to the increase in cyber threat these days, all computer data is at risk from threats or damage. Even with the most reliable equipment and the most secure operating environment, there is always the possibility of something going wrong.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">So, a solution to all problems is to have a backup of entire data stored on your computer, and for that it is important for you to have a right choice. Want to know - <i>How&nbsp;to backup the server/workstation? </i>Well, there are many options, some are reliable and some are not.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Now, at this point, you won’t find a better option than <b><a href="http://www.todo-backup.com/business/workstation-backup.htm" target="_blank"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="29d024b3-2909-41ce-b986-7732ad52ae32" id="0e9f8576-8109-4746-97b0-a0c4875628e0">EaseUS</span> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="29d024b3-2909-41ce-b986-7732ad52ae32" id="a7bafa83-3c81-4e29-8833-96e145a6e65d">Todo</span> Backup Workstation</a></b> as your commercial backup solution, because it had already been the most comprehensive free backup solution supporting both file and image backup, so it covers all aspects of protecting your sensitive data through backup and recovery means.</div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="media/797ff72e.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://1.bp.blogspot.com/-8dntVOWaVRw/UxGjB8h0RfI/AAAAAAAAaZw/zvMK7q-RxGI/s1600/EaseUS-Todo-Backup-Workstation.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Data Backup and Recovery with EaseUS Todo Backup Workstation" border="0" src="media/83807a86.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://1.bp.blogspot.com/-8dntVOWaVRw/UxGjB8h0RfI/AAAAAAAAaZw/zvMK7q-RxGI/s728/EaseUS-Todo-Backup-Workstation.png" title="Data Backup and Recovery with EaseUS Todo Backup Workstation" /></a></div>The <i><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="3f28d814-06ec-413c-9766-2c591e9016f4" id="a7b3d672-0e93-477d-8678-c97f03d20774">EaseUS</span> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="3f28d814-06ec-413c-9766-2c591e9016f4" id="25987a39-467d-4679-9f0f-fbc5aa7061d8">Todo</span> Backup Workstation</i> is one of the powerful data backup software, that offers you some more interesting features in comparison to its previous version, that other software usually doesn’t offers.</div><div style="text-align: justify;"><br /><b>BACKUP System Drives &amp; Android Devices: </b>It enables you a reliable data backup &amp; recovery solution, to secure specific files, emails, and even complete system/drives and also the new version provides you to backup data, including contacts, messages, call logs, documents, music, photos, and videos in Android devices as well.</div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/a72b8087.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://4.bp.blogspot.com/-rKyNchupqxU/UxGjPQ-UNDI/AAAAAAAAaZ4/oC5qXfDWpy8/s1600/EaseUS-Todo-Backup-Workstation.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Data Backup and Recovery with EaseUS Todo Backup Workstation" border="0" src="media/d7108ea2.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://4.bp.blogspot.com/-rKyNchupqxU/UxGjPQ-UNDI/AAAAAAAAaZ4/oC5qXfDWpy8/s728/EaseUS-Todo-Backup-Workstation.png" title="Data Backup and Recovery with EaseUS Todo Backup Workstation" /></a></div>It also offers you to create different backup plans by assigning each with a custom name, description and allow you to send it to a specific location on your computer system on an external drive.</div><div style="text-align: justify;"><br /><b>Double Layer - Online Backup:&nbsp;</b>We consider cloud-based backup as being the most reliable backup solution these days.&nbsp;You can keep&nbsp;<i><b>backups of your data on an online storage service </b></i>for double protection of your data, can set the level of <b><i>compression for files</i></b>, can also split files into a number of fragments, can schedule your backups as needed, and it sends email notifications when the task is done.&nbsp;You can limit network speed and even send a backup copy to&nbsp;FTP Server.<br /><div class="separator" style="clear: both; text-align: center;"><a href="media/5cdf6b04.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://3.bp.blogspot.com/-ccprsfeShcw/UxGj4f1Fn0I/AAAAAAAAaaI/mhjPNBnYemg/s1600/EaseUS-Todo-Backup-Workstation.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Data Backup and Recovery with EaseUS Todo Backup Workstation" border="0" src="media/5cdf6b04.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://3.bp.blogspot.com/-ccprsfeShcw/UxGj4f1Fn0I/AAAAAAAAaaI/mhjPNBnYemg/s1600/EaseUS-Todo-Backup-Workstation.png" title="Data Backup and Recovery with EaseUS Todo Backup Workstation" /></a></div>The&nbsp;<i><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e25f4091-0cd0-4cb5-b2e9-121b77751db6" id="25c5501b-2881-4264-96ad-8f0d78e8f6bc">EaseUS</span> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e25f4091-0cd0-4cb5-b2e9-121b77751db6" id="83997077-6a2b-453a-8f99-b85eefa65797">Todo</span> Backup</i>&nbsp;provides you an efficient system backup and recovery. It offers you remote control feature for remote backups and recovery sessions and takes a snapshot of the current system for fast system recovery from crashed or failed system.</div><div style="text-align: justify;"><br /><b>Encryption: </b><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="4db213d0-5d95-4e44-9595-06ce05e6ef36" id="af28c040-bc40-4458-9457-894efe7fc90f">EaseUS</span> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="4db213d0-5d95-4e44-9595-06ce05e6ef36" id="bb908089-bf78-408b-9404-499227a7e6ba">Todo</span> Backup Workstation allows you to encrypt data to a maximum strength of 256-bit <i>Advanced encryption standard (AES)<b>&nbsp;</b></i>with passwords from unauthorized access.</div><div style="text-align: justify;"><div class="separator" style="clear: both; text-align: center;"><a href="media/071baaa9.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://4.bp.blogspot.com/-YLk_TCNzvb0/UxGjkAAOs0I/AAAAAAAAaaA/zyVn9AzoGf4/s1600/EaseUS-Todo-Backup-Workstation.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Data Backup and Recovery with EaseUS Todo Backup Workstation" border="0" src="media/1b3f332c.EaseUS-Todo-Backup-Workstation.png" data-original-source="http://4.bp.blogspot.com/-YLk_TCNzvb0/UxGjkAAOs0I/AAAAAAAAaaA/zyVn9AzoGf4/s728/EaseUS-Todo-Backup-Workstation.png" title="Data Backup and Recovery with EaseUS Todo Backup Workstation" /></a></div>In addition to backup, <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="53f1e5ea-feae-4e0b-9d2e-4a6ec3c8ba78" id="6e799ac9-e2fb-4b41-acc8-9d2c71debe13">EaseUS</span> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="53f1e5ea-feae-4e0b-9d2e-4a6ec3c8ba78" id="3e528d0d-02de-4b2f-9ed0-f86229496fc4">Todo</span> Backup Workstation also offers you an advanced set of tools that you can use to clone disks and partitions, check images, wipe data, create an emergency disk, mount and unmount images as well.</div><div style="text-align: justify;"><br />Backups can be a life-saver in these extreme cases and <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="9e4b62e2-4b57-4dc7-a065-07cc18a2de93" id="e8f1ace5-d89b-4557-92f0-f877a6960a23">EaseUS</span> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="9e4b62e2-4b57-4dc7-a065-07cc18a2de93" id="9447d387-7de4-41a9-b0e5-e5eb81289d46">Todo</span> Backup Workstation software helps you in recovering system and data from crashes and malware infections, such as <a href="http://thehackernews.com/search/label/ransomware" target="_blank">Ransomware</a> attack.<br /><br /><i><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="93156cd8-c298-418e-bc74-2b10a789121f" id="3b4a251d-b0a9-4cf1-8cf5-c7a53c1c861d">EaseUS</span> <span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="93156cd8-c298-418e-bc74-2b10a789121f" id="eae3d048-f20e-4d84-a800-d90d2c9c1dec">Todo</span> Backup Workstation</i> lets you save and organize the really important things, it is available for Download from the <a href="http://www.todo-backup.com/" rel="" target="_blank"><span class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="93156cd8-c298-418e-bc74-2b10a789121f" id="42ab7665-6acc-41df-8d19-f1bf0b40e1fe">EaseUS</span> official website</a>&nbsp;and supported on Windows 2000/XP/Vista/7 (x86 and x64) systems.</div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YVqhq9OxgMo:9Tqtjk5ZOPQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YVqhq9OxgMo:9Tqtjk5ZOPQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YVqhq9OxgMo:9Tqtjk5ZOPQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YVqhq9OxgMo:9Tqtjk5ZOPQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YVqhq9OxgMo:9Tqtjk5ZOPQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YVqhq9OxgMo:9Tqtjk5ZOPQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YVqhq9OxgMo:9Tqtjk5ZOPQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YVqhq9OxgMo:9Tqtjk5ZOPQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2900594205263877846
title: Encrypted Chat Service 'Cryptocat' released iOS app
uri: Encrypted-Chat-Service-Cryptocat-released-iOS-app
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2900594205263877846
content:
<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="media/3bc90b86.Cryptocat-ios-app.png" data-original-source="http://1.bp.blogspot.com/-vE06qKhoADI/UxbeYW2mPFI/AAAAAAAAacU/ZJ8afXrnhN4/s1600/Cryptocat-ios-app.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="media/0e0ea1b8.Cryptocat-ios-app.png" data-original-source="http://1.bp.blogspot.com/-vE06qKhoADI/UxbeYW2mPFI/AAAAAAAAacU/ZJ8afXrnhN4/s728/Cryptocat-ios-app.png" /></a></div><div style="text-align: justify;"><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank"></a></b><b><a href="http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C%20cryptocat%20for%20android%2C%20iphone%2C/" target="_blank">Cryptocat</a></b>, an open source encrypted web-based chat client, is now available for iOS Devices from the&nbsp;<a href="https://itunes.apple.com/us/app/cryptocat/id784085689?ls=1&amp;mt=8" rel="nofollow" target="_blank">Apple's App store</a>, which was initially rejected by the Apple last December.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">It is not clear why it was rejected previously, but the good news is that, now '<i><a href="https://blog.crypto.cat/2014/03/cryptocat-now-on-iphone/" rel="nofollow" target="_blank">Cryptocat</a></i>' is available for&nbsp;all iOS Devices. So far Cryptocat was only available for Linux and Mac OS X, and as an extension for web&nbsp;browsers <i>Mozilla Firefox, Google Chrome 3, Apple Safari </i>and<i> Opera</i>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Cryptocat has become quite popular in the wake of the <a href="http://thehackernews.com/search/label/NSA" target="_blank">NSA</a> Controversy, because of its <a href="http://thehackernews.com/search/label/end-to-end%20encryption" target="_blank">end-to-end encryption</a> that doesn’t allow anyone in the middle to read your messages.</div><div style="text-align: justify;"><!-- adsense --><br /></div><div style="text-align: justify;">Cryptocat for iPhone uses the OTR protocol for private conversations, a cryptographic protocol for secure instant messaging, and perfect forward secrecy, a system that constantly generates new user keys. So, snoops cannot decrypt older messages.<br /><br /></div><div style="text-align: justify;"><span style="text-align: left;">It doesn't require any username or account rather just one time nickname makes the conversion possible and everything is lost after the conversation has been finished.&nbsp;</span>Cryptocat Servers are held in a Cold War Nuclear bunker in Sweden to protect them from government intrusion.</div><div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">In a demo at <i>RightsCon&nbsp;</i>Silicon Valley, Cryptocat unveiled its first mobile app and also answered various questions from Technologists and Civil society members.&nbsp;<i>"After a year of collaborative development, testing and tweaking, we’re finally ready to bring the world’s most privacy-loving cat to your pocket!"</i>&nbsp;developer said.</div><div style="text-align: justify;"><br /></div></div><div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: justify;">Over the past two years, cryptocat has made encrypted chat fun for journalists, coworkers, teachers, activists, Hackers etc. "<i>Easily have group conversations with your friends without fearing monitoring or interception. Cryptocat is free, open chat that aims to provide an open, accessible Instant Messaging environment with a transparent layer of encryption that's easy to use.</i>" developer said.</div></div><div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Cryptocat is working on an app interface to make it user-friendly&nbsp;and is providing a more secure platform to their users. Its source code is available on <a href="https://github.com/cryptocat/cryptocat-ios" rel="nofollow" target="_blank">Github</a>, so that security researchers can review prior to any official release.<br /><br />Also check <b><a href="http://thehackernews.com/2014/03/textsecure-end-to-end-encrypted-and.html" target="_blank"></a><a href="http://thehackernews.com/2014/03/textsecure-end-to-end-encrypted-and.html" target="_blank"></a><a href="http://thehackernews.com/2014/03/textsecure-end-to-end-encrypted-and.html" target="_blank">TextSecure</a>, </b>another end-to-end encrypted and open source messaging app for secret chats. Cryptocat for Android is also coming soon!&nbsp;Stay Tuned!</div></div></div><div class="blogger-post-footer">Read more Cyber Security Updates at <a href="http://thehackernews.com/">The Hacker News</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cNyQEmeALR0:nfr1whTeiw8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cNyQEmeALR0:nfr1whTeiw8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cNyQEmeALR0:nfr1whTeiw8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cNyQEmeALR0:nfr1whTeiw8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cNyQEmeALR0:nfr1whTeiw8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cNyQEmeALR0:nfr1whTeiw8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cNyQEmeALR0:nfr1whTeiw8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cNyQEmeALR0:nfr1whTeiw8:F7zBnMyn0Lo" border="0"></img></a>
</div>


