Blackshades RAT Users Being Raided Globally by FBI

When Crime is there, FBI doesn't ready to spare anyone. According to various announcements and reports, FBI is operating a large operation of International raids with the help of local law enforcement authorities to arrest a group of cyber criminals.

The FBI has targeted the users of a popular Remote Administration Tool called "Blackshades" which allows them to connect and remotely access the infected systems on whole internet. 

==> Blackshades RAT

Blackshades is a remote administration tool (rat) which allow the hackers to control your systems remotely round the globe over net.

This RAT is bundled with several famous attacks called Java Drive By's , keylogger (for stealing the keystrokes of the infected systems which includes various usernames and passwords typed by the user), infected systems' webcams can be accessed by this without the prior knowledge of the user, and many more such destructive attacks. The infected systems are called zombies and can be used to perform Distributive Denial of Service (DDoS) attacks. It can easily be installed on a general user's computer system bypassing their antiviruses. The term used to make them undetectable making them bypass the antiviruses is called FUD (Fully Undetectable). 

FBI also seized the European domain of Blackshades official Website (www.eurid.eu) and punched "Federal Bureau of Investigation" title against name and organization under the whois details.

FBI has warned cyber criminals by making an announcement that FBI is planning multiple arrests over the next coming days for combating cybercrime.

Read more

EA Games Website Hacked- Intruders Used It To Host Apple's Phishing Page

A web server relating to EA Games has been compromised by cyber criminals and is used to host Apple's Phishing Page and is making an effort to put down the users' apple ids. Intruders gained access by exploiting web calender's application.

EA Games Site Showing Apple's Fake Login Page

As a Netcraft report stated, the vulnerabilities are residing in the old version of web calender application that gave an advantage to the hackers to breach down their sub domain security.

The Web Calender version 1.2.0 has a loophole to which gave the rights to attackers to run some arbitrary code. The phishing page attempting a apple user to enter his/her credentials into the form to steal down the data, then another form appears asking the users their card numbers, name etc.. After the submission of the initials, the user will get redirected towards the legit apple site. They also stated that intruders might have gained internal access to their servers which may result into information leakage. 

The original report reads:- "In this case, the hacker has managed to install and execute arbitrary PHP scripts on the EA server, so it is likely that he can at least also view the contents of the calendar and some of the source code and other data present on the server. The mere presence of old software can often provide sufficient incentive for a hacker to target one system over another, and to spend more time looking for additional vulnerabilities or trying to probe deeper into the internal network."

Source:- Netcraft

Read more

Ukrainian Government Suffers Cyber Attack, Websites Defaced

Hackers Group named "Kosova Hacker's Society" and "Pentagon Security Team" launched a specialized cyber attack over Ukrainian Government and affected more than ten websites of the same. They stamped the websites with their deface pages and several messages for the government. 

Defaced Website Showing The Message Left by The Hackers

Some of these websites still showing the deface pages while writing this article. They Left the following message on the page-

"Hello People of Ukraine!!! 

We are Kosova Hacker's Security - Pentagon Crew 

We are here to support your fight against the fascist regime that have been for several years conditioned your freedom and your way of living, we are with you in this fight for freedom, independence and justice, and that we all together, be able to win. 

We don't forget! 

We don't forgive! 

To the corrupt we have only one thing to say: Your time is out, you'll no longer oppress the people! For the next days we will target all corrupt in Ukraine. For the opposition, we are watching, and we hope you really being sincery in this fight. 

U K R A I N E IS NOT RUSSIA!!"

Another Defaced Website of Government of Ukraine

List of hacked sites :-

http://www.pir.gov.ua/

http://www.investkr.gov.ua/services

http://mfa.gov.ua/mediafiles/

http://www.court.gov.ua/userfiles/pentagon.txt

http://www.zaksoc.gov.ua/

http://www.dabksumy.gov.ua/

http://dairivne.gov.ua/

http://rivneoblzem.gov.ua/

http://www.sumyzemres.gov.ua

http://just.odessa.gov.ua/

http://www.zaksoc.gov.ua/

http://just.odessa.gov.ua/

http://vlada-yahotyn.gov.ua/

http://kurort.gov.ua/page/about

http://yagogolovarda.vlada-yahotyn.gov.ua/

Read more

National Portal of India Hacked by ZHC

ZCompany Hacking Crew recently managed to gain access to National Portal of India. Hackers left a message on the page " Owns Indian National Portal. It has been 65 years since your invasion of our lands but the fire of freedom still burns in our hearts. ZHC"

Hacked Site:- India.gov.in

Screenshot of Hacked Site:

Read more

Emerging Threats to Wireless LANs

The Internet (a.k.a The Mother of All Networks) has become the biggest threat to the security and privacy of its users, still, the number of users are rising by millions every year. 

Earlier it is said that the Safe computer is the one that isn't networked at all i.e. has no internet connection but have a look to this Computers can be hacked without any Internet Connectivity. 

Your data is more at risk than on Wired LANs too. Your system can be compromised via your Network Cards also. However, To hack your systems into WLAN (Wireless LANs) by bypassing the security installed on the Router is only in the hands of a professional hacker. 

Classification of Vulnerabilities to WLANs:-

1. Unauthorized Access Threats
2. Denial of Authorized Access

The first one involves threats from hackers and their created Trojans or Viruses to get into your network and have the unauthorized access to your computer systems.

The other one is like a Denial Of Service Attack(DoS Attack) in which your network got jammed or affected by some other source. 

So, How to overcome the threats of Unauthorized access-

1. Dont Broadcast SSID's : Wireless APs (Access Points) have the fully functional feature to stop broadcasting SSID's. This will affect the third party users to not maintain access to your network. On its worst side, Hackers can still detect your AP SSID with the penetration tools pre-installed in Operating Systems like Kali Linux (Most advanced OS for the security researchers and Penetration Testers).
2. Use IP Access Control : Use this feature if your network consists only few devices, make sure to provide access to only those devices. In that case your AP would only respond if your specified IP wants access to Internet not other than that. Or you can do is set the computer's MAC address to the allowed devices list. Find your MAC by "ipconfig /all "a command line utility.  
3. WEP or WPA2 : It is Wired Equivalent Protocol used as an encryption standard for 802.11b networks. When purchasing Modems make sure that it supports latest Security techniques.

Be careful in case of wireless security, to make hackers keep trying to penetrate your network without any successful attempts in their hands. 

Source:- Digit Magazine

Read more

Air Modem- Ability to hack your computer Via Sound Waves Without any Electronic Connection

The miss-interpretation that is striking on public's mind that if they are not connected to internet or not connecting any secondary media storage device or doesn't settle for any electronic association and you are safe from hackers, then you have to think over this one more time. Of course the answer is not so much, anymore. 

In a European country named Watchberg, scientists developed a Proof of Concept that could allow hackers to infect your Computers and other digital media via Sound Waves. Yes, you taken it right, employing a sonar like conception that was first developed to enable underwater communication.

The targeted computers must be in 65 feet of range. 

Read Full Article Here[Source]:- Air Modem

Read more

Facebook Malware - Click Here To Know Who Visited your Profile

We all are severely inflamed to know that Whom visited our profile and click on any link that says "Click Here to Know Who Visited Your Profile" hoping some accurate results to be disposed towards that but Instead of results we are being spammed. These applications would only trap you, thus making you confess your facebook passwords to spammer. 

                                            

Remember there's nothing to know the viewers of your Facebook profile. The only way to know who's viewing your Facebook profile is to actually see them doing it.

Be extremely updated about latest scams on Facebook and malwares they are spreading to be safe and to keep your password yours. 

Facebook is nowadays the favorite platform for hackers and spammers to spread their infections all around. Though its not very easy to violate the Policies of this Social Giant as it is modernizing its technology day by day. 

                           

Your Knowledge your safety, Spam or Slam !

Read more