Pakistan's Telecom Company's Database Hacked, Hacker Arrested

Pakistan's Federal Investigation Agency has arrested a Pakistani hacker for being involved in compromising a telecom company's database.

The local authorities were able to trace and arrest the attacker suspected to penetrated the systems of Warid Telecom, and stolen the customers information from the databases and exposed it online.

Investigation started when one among the senior manager of a cellular company filed a grievance stating that the ‘information of its shoppers until 2006 had been exposed over the web.’ 

The website which is hosting the stolen data has now been shut down.

Read more

EA Games Website Hacked- Intruders Used It To Host Apple's Phishing Page

A web server relating to EA Games has been compromised by cyber criminals and is used to host Apple's Phishing Page and is making an effort to put down the users' apple ids. Intruders gained access by exploiting web calender's application.

EA Games Site Showing Apple's Fake Login Page

As a Netcraft report stated, the vulnerabilities are residing in the old version of web calender application that gave an advantage to the hackers to breach down their sub domain security.

The Web Calender version 1.2.0 has a loophole to which gave the rights to attackers to run some arbitrary code. The phishing page attempting a apple user to enter his/her credentials into the form to steal down the data, then another form appears asking the users their card numbers, name etc.. After the submission of the initials, the user will get redirected towards the legit apple site. They also stated that intruders might have gained internal access to their servers which may result into information leakage. 

The original report reads:- "In this case, the hacker has managed to install and execute arbitrary PHP scripts on the EA server, so it is likely that he can at least also view the contents of the calendar and some of the source code and other data present on the server. The mere presence of old software can often provide sufficient incentive for a hacker to target one system over another, and to spend more time looking for additional vulnerabilities or trying to probe deeper into the internal network."

Source:- Netcraft

Read more

Ukrainian Government Suffers Cyber Attack, Websites Defaced

Hackers Group named "Kosova Hacker's Society" and "Pentagon Security Team" launched a specialized cyber attack over Ukrainian Government and affected more than ten websites of the same. They stamped the websites with their deface pages and several messages for the government. 

Defaced Website Showing The Message Left by The Hackers

Some of these websites still showing the deface pages while writing this article. They Left the following message on the page-

"Hello People of Ukraine!!! 

We are Kosova Hacker's Security - Pentagon Crew 

We are here to support your fight against the fascist regime that have been for several years conditioned your freedom and your way of living, we are with you in this fight for freedom, independence and justice, and that we all together, be able to win. 

We don't forget! 

We don't forgive! 

To the corrupt we have only one thing to say: Your time is out, you'll no longer oppress the people! For the next days we will target all corrupt in Ukraine. For the opposition, we are watching, and we hope you really being sincery in this fight. 

U K R A I N E IS NOT RUSSIA!!"

Another Defaced Website of Government of Ukraine

List of hacked sites :-

http://www.pir.gov.ua/

http://www.investkr.gov.ua/services

http://mfa.gov.ua/mediafiles/

http://www.court.gov.ua/userfiles/pentagon.txt

http://www.zaksoc.gov.ua/

http://www.dabksumy.gov.ua/

http://dairivne.gov.ua/

http://rivneoblzem.gov.ua/

http://www.sumyzemres.gov.ua

http://just.odessa.gov.ua/

http://www.zaksoc.gov.ua/

http://just.odessa.gov.ua/

http://vlada-yahotyn.gov.ua/

http://kurort.gov.ua/page/about

http://yagogolovarda.vlada-yahotyn.gov.ua/

Read more

Must Have Tools For Hackers

Hackers are the security experts who penetrate the systems to find the security loopholes with respect to prior permissions granted. Hacking tools are coded by some expert programmers and coders  out there. So, these are some tools every hacker must have to test the operating environments.

=> NMAP

This tool is widely used by security researchers to audit the security. This tool is designed to scan the very large networks on the go. The software provides features like investigating computer networks, including host discovery and service and operating system detection. Some more features like- Port Scanning, Version Detection, Scriptable interaction with the target, Reverse DNS names, device types and mac addresses of the devices on the network.

Download NMAP (Network Mapper) here.

=> Nessus

Nessus is a proprietary comprehensive vulnerability scanner. But it is freely available for personal use and non enterprise use. It scans for vulnerabilities like- vulnerabilities that allow a hacker to remotely access the confidential data, denials of service on TCP/IP etc.

=> Cain and Abel

Cain and Abel is basically a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols.The latest version is faster and contains a lot of new features like APR (Arp Poison Routing) which enables sniffing on switched LANs and Man-in-the-Middle attacks. The sniffer in this version can also analyze encrypted protocols such as SSH-1 and HTTPS, and contains filters to capture credentials from a wide range of authentication mechanisms. The new version also ships routing protocols authentication monitors and routes extractors, dictionary and brute-force crackers for all common hashing algorithms and for several specific authentications, password/hash calculators, cryptanalysis attacks, password decoders and  some not so common utilities related to network and system security.

Download Cain And Abel here.

=> NetStumbler

It is a powerful tool for windows platform. Built a nice and user friendly interface for easy use. It is basically meant for detection of Wireless LANs that are using IEEE standards like 802.11a, 802.11b and 802.11g. 

There are plenty of tools available on the internet for testing purposes. Writing the rest tools shortly. 

Stay Connected.

Read more

National Portal of India Hacked by ZHC

ZCompany Hacking Crew recently managed to gain access to National Portal of India. Hackers left a message on the page " Owns Indian National Portal. It has been 65 years since your invasion of our lands but the fire of freedom still burns in our hearts. ZHC"

Hacked Site:- India.gov.in

Screenshot of Hacked Site:

Read more

Indian Telecommunications Provider BSNL's Sub-Domains Hacked By Pakistani Hacker

Pakistani defacers with handle "P4K M4D HUNT3R-Z" have intruded and boxed the sub-domains of much reputed Indian Telecommunications provider BSNL.

Hacked Websites:-  http://ir.bsnl.co.in/

                                 http://www.vas.bsnl.co.in/

                          

BSNL's Value Added Services and BSNL International Roaming domains was hacked and left defaced by hackers. Hackers left a security warning to the site administrators instead of any other warnings like over the Kashmir. 

No other message or information regarding any data compromise or credentials theft has left over the deface. 

Read more

Big Torrent Sites Under DDoS Attack

Torrent sites around the Globe including Extratorrent and KickAss are experiencing DDoS attack from last couple of days. The latest dispatch shows that they are under the attack from several unknown sources. Extratorrent ans KickAss torrents was down while Kickass' DNS servers not resolving to any IP Address and Extratorrent showing a Web Cached copy of site using Cloudfare.

These torrent giants are regular platforms of these attacks. The question is from where these attacks are being originated.

Read more

Air Modem- Ability to hack your computer Via Sound Waves Without any Electronic Connection

The miss-interpretation that is striking on public's mind that if they are not connected to internet or not connecting any secondary media storage device or doesn't settle for any electronic association and you are safe from hackers, then you have to think over this one more time. Of course the answer is not so much, anymore. 

In a European country named Watchberg, scientists developed a Proof of Concept that could allow hackers to infect your Computers and other digital media via Sound Waves. Yes, you taken it right, employing a sonar like conception that was first developed to enable underwater communication.

The targeted computers must be in 65 feet of range. 

Read Full Article Here[Source]:- Air Modem

Read more

Indian NIC Domains Hacked by Leet Haxor- Team Madleets

Popular hacker with handle "1337" from "Team Madleets" again marked his presence in Cyber World with these defaces. Leet haxor defaced more than fifteen high profiled sites of India with .nic and .gov domains. Most of the domains are hosted on the same server. List of hacked sites with their Mirrors are mentioned below:-

http://tempweb2037.nic.in/ 

http://tempweb2033.nic.in/?module=pages&pageid=40 
http://tempweb2085.nic.in/fancynews.php?newsid=16 

ent&view=article&id=23 
http://tempweb2039.nic.in/ 
http://tempweb2040.nic
http://tempweb2038.nic.in/index.php?option=com_con
t.in/?page_id=50 
http://goaspcb.gov.in/?page_id=50 
http://ddpmod.gov.in/ 
http://ddp.gov.in/ 
http://tempweb2044.nic.in/ 

2002.nic.in/document/1337.h
http://tempweb2045.nic.in/ 
http://tempweb2046.nic.in/ 
http://tempweb2050.nic.in/pages/view/37-introduction 
http://tempwe
btml 
http://tempweb2003.nic.in/main/wp-content/gallery/1337.html 
http://tempweb2004.nic.in/captcha/1337.html 

.org/mirror/id/21694615 
http://www.zone-h.o
http://tempweb2006.nic.in/app/tmp/1337.html 

Mirror
http://www.zone-h.org/mirror/id/21694829 
http://www.zone-
hrg/mirror/id/21694475 
http://www.zone-h.org/mirror/id/21694952 
http://www.zone-h.org/mirror/id/21694966 
http://www.zone-h.org/mirror/id/21695278 

rror/id/21695584 
http://www.zone-h.org/m
http://www.zone-h.org/mirror/id/21694475 
http://www.zone-h.org/mirror/id/21695532 
http://www.zone-h.org/mirror/id/21695572 
http://www.zone-h.org/m
iirror/id/21695654 
http://www.zone-h.org/mirror/id/21695668 
http://www.zone-h.org/mirror/id/21695778 
http://www.zone-h.org/mirror/id/21696820 
http://www.zone-h.org/mirror/id/21696793 


http://www.zone-h.org/mirror/id/21696782

Now, All domains have been taken down. 

Message from Team:- "NIC India STAMPED by TeaM MaDLeeTs Nothing related to cyber war or anything like that Security is just an Illusion"

Hackers also stated that more than 100 plus .nic domains are there in their hands. 

Apart from this, the hacker last year also managed to hack domains of Google of Malaysia, Albania and Kenya. 

Read more

Ebay and Paypal UK domains Hacked by Syrian Electronic Army

The Syrian Hackers group "Syrian Electronic Army" have added Paypal and ebay's UK domain to their Hit List. In a tweet they confirmed that they were able to hack into the Domain Registry of these two that is managed by Mark Monitor. 

They stated that the reason behind the Hack is the both domains are denying Syrian Citizens the ability to purchase Online Products, paypal was hacked by #SEA

The screenshot in tweet showed that SEA was able to access the admin panel, which they next targeted to change the DNS configuration of the website, thus helps to deface these websites.



Paypal is currently one of the biggest e-commerce business allowing payments and transfers throughout the world. Side by side e-Bay is an American internet consumer to consumer corporation that is being used for online shopping around the globe.

The defaced page showed the message "hacked by Syrian Electronic Army, Long Live Syrian"

The group said that it is a hacktivist operation and no user accounts or data breach . "If your paypal account is down for few minutes, think about Syrians who were denied online payments for more than three years"-- they said in a tweet. 

Read more

24 Million Credit Card Data Stolen Under Chewbacca Malware Attack

A new Malware named "Chewbacca" is in headlines nowadays. According to RSA researchers, the targets of this malware is only the systems that process Credit Card information. The trojan installs a copy of itself in the windows start up folder  and its memory scanner searches for Credit card information e.g. Credit card regular expressions for card magnetic stripe data. Extracted data is sent to their servers via TOR. As the data is sent to TOR, so their real IPs cannot be retrieved. 

The number of impacted retailers mostly situated in United States including Russia, Canada and Australia. 

Malware Effect:- The login page of the server collecting data from infected Point of Sale Machine featured a picture of the Star Wars Wookie . Chewbacca is nothing but a Basic keylogger and memory scanner that runs at windows start up. 

Tip:- Deleting a single malware doesn't secure your systems but installing a security application can do. Remember, 24 million computers failed to detect this small keylogger. 

Read more

Many Bangladeshi Government websites Hacked & damaged back

From previous few days Bangladeshi hackers are endlessly targeting over Indian cyber house that has finally created Indian hackers to require actions and reply back.

After the Hack of BCCI, Bangladeshi hackers were actively defacing Indian websites. Whereas the Indian hackers are already engaged in Associate in Nursing in progress terrorist act with Pakistani hackers. It's like these days they need marred five Government websites of People's Republic of Bangladesh  in return of Bangladeshi hackers attack over Indian cyber house. 

Indian hacker going with the code-name "Bl@Ck Dr@GoN" a member of "I-HOS TEAM" (Indian hackers on-line Squad) marred these websites warning The Bangladeshi hackers to not Hack Indian Sites.

Defaced Sites:-

http://www.seqaep.gov.bd/ 

http://www.dshe.gov.bd/ 

http://www.mpl.gov.bd/ 

http://www.cabinet.gov.bd/ 

http://www.prison.gov.bd/

Possibility is much more that these types of attacks will continue in future unless the Bangladeshi Hackers stop defacing Indian Sites.

Read more

Yahoo Mail Hacked

Recently Yahoomail have suffered from data breach. Today Yahoo have confirmed that it has identified an Unauthorized access to user accounts. Company didn't confirmed the number of stolen user accounts but prompted to users to reset their mail passwords. They added, Usernames and Passwords of its email customer service have been stolen and are used to gain access to other connected accounts with yahoomail.

                        

Its the latest of Security Breaches that allowed hackers to retrieve confidential information. Usernames and passwords were stolen from a third party database not from the yahoo systems. They said "The attack lead to compromised names and email addresses from the affected accounts' most recent sent emails". By retrieving names from sent folders, intruders may try to make their spam messages look like the real ones to the receivers.  This breach is the second time in two months that Yahoo suffered. In December the yahoo suffered a multi-day outage.  

The company already taking necessary security measures and have noticed the users under the breach to reset their Passwords via email or SMS. 

Read more

Supreme court of Bangladesh website hacked

Today Indian hacker group I-Hos have hacked and defaced the Official website of Bangladesh's Supreme Court :- http://www.supremecourt.gov.bd/scweb/
Its a payback of what Bangladeshi hackers done in past few days i.e. defaced huge amount of Indian sites that include Official site of BCCI and other cricket fans sites.
The court's website is not opening now, seems to be down.

Read more

Official Website of The Board of Control for Cricket in India (BCCI) got hacked and defaced by Bangladeshi Hackers

Bangladeshi hacker with their name "Ashik Iqbal Chy", a member of BD Grey Hat Hacker group recently stamped the official website of The Board of Control for Cricket in India (BCCI).
It was not an Index page deface but the hacker is successful editing the articles of the site showing the title 'Hacked by Ashik Iqbal Chy'. The defaced page showing some picture of Bangladeshi Cricket team with their Flag and a message quoting "Don't mess up with tigers".
At the time of writing this article the website is restored now.
Mirror of the hacked website can be found here:- http://www.zone-h.com/mirror/id/21650626
Some more Indian sites hacked by the same group on same time.
Screenshot of the hacked website:-

Read more

Website of Indian Singer Daler Mehndi Hacked

Official website of Indian Pop singer Daler Mehndi (http://www.dalermehndi.com) and Canadian Singer Raghav has been hacked by Pakistani hackers named H4xoR99 and H4x0ri0uX M1nD from team Madleets.
"Your Site security is compromised" the hacker wrote on defacement page.

Read more

#~New malware- WhatsApp for PC

WhatsApp is becoming a huge hit day by day in messaging category. It allows the users to share their real time emotions and chat  with their dear ones on the go. Hackers taking advantage of those who doesn't own a smart phone or whatsapp compatible mobile phone, spreading malwares saying that a PC version of this messaging app is out now. And when the layman (who doesn't possesses the knowledge of these internet threats) clicks the vulnerable link that is sent via email attachments, is infected with this virus. Once this malware is downloaded to your machine, your security and privacy is being compromised as the hackers got the access of your system remotely. This trojan automatically downloads more viruses of the same category making the situation more worst. Main thing is that this file is with "low virus threat definition index" in most AVs. 

Note:- Whatsapp is strictly not available for windows (PC Users) except if you wish it to be installed with third party softwares like "Bluestacks".

Stay safe stay happy :)

Read more

Cryptography

Cryptography, by definition means the way of converting human readable data to encrypted data. Data is being encrypted by the original user(i.e. by the sender) and being decrypted at other end (i.e. by the receiver).
The encrypted data is then decrypted by the receiver by using certain decryption algorithms. There are various hashing algorithms that are used to encrypt the data into cipher text.
Cryptography algos are categorized into three parts:-
1. Hash Functions
2. Secret Key Cryptography
3. Public Key Cryptography

Read more

Password cracking Methods and their Antitoxins

There are number of methods from which intruders can gain access to your personal information. In the very first post of my blog i'm going to explain how to be safe online.

1. Brute Force:- In this the very possible combinations of numbers, letters and all the special characters until the match is found. This method takes time to guess the correct match depending upon the complexity of the password.

Antitoxin:- Use complex passwords. Use mixture of Alphabets, numbers and special characters to make the password difficult to guess by the tools. Passwords like '123456789' or 'password' can be easily guessed by them. Use password like 'aeroSPACE#908' instead of using simple passwords.

2.Social Engineering:- It is the technique of managing someone to trust you and get the information from them without letting them know.  Sometimes intruders being the bank's worker call the victim and ask for their credit card details or some other information related to their accounts. This method is used to get someone's password from them.

Antitoxin:- If you receive any call and asking your personal details or other confidential details, don't respond them exactly and ask them few questions. Make sure the personnel asking you details is authorized or bonafide.

Be safe while browsing the internet as it is full of malwares and spywares.

Read more