Indian Public Health Engineering Department website hacked by Pakistan Hackers

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQGQ6mwYKg-Dy5wdiTUSpyPYXNil00Kh-oMzGQr3qpbVBye53vbnjTmP2F14W256Mf8_PAnYgMxxzOPteFx1NAL32-2UKY07BxZVkZ4D6eHsqvJ7goRnK7ZGCHu2Wa6JmItCbnKeOoq9c/s1600/pakistan-hackers-hacks-indian-government-websites.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQGQ6mwYKg-Dy5wdiTUSpyPYXNil00Kh-oMzGQr3qpbVBye53vbnjTmP2F14W256Mf8_PAnYgMxxzOPteFx1NAL32-2UKY07BxZVkZ4D6eHsqvJ7goRnK7ZGCHu2Wa6JmItCbnKeOoq9c/s1600/pakistan-hackers-hacks-indian-government-websites.jpg" width="320" /></a></div><div style="text-align: justify;">West Bengal Branch of Indian Public Health Engineering Department website (www.wbphed.gov.in) has been breached by a hacker from Pakistan.<br /><br />A hacker with handle H4$N4!N H4XOR from Pakistan Haxors CREW has has uploaded a defacement page in the "Uploads" directory of the site (http://www.wbphed.gov.in/applications/GO/uploads/index.html).<br /><br />When we asked about the vulnerability responsible for the breach, the hacker said that the website is vulnerable to SQL Injection vulnerability.<br /><br />"Security Breach!Free Kashmir. Free Syria. Stop Spying On US. Stop Killing Muslims. We Have All Your Data. Don't Try To Catch Us" The defacement message reads.<br /><br />The hackers said the defacement is revenge for hacking Pakistan websites.  He also claimed to have compromised the database from the server.<br /><br />In the last two days, the group hacked into Indian Railways website and Official website of Assam Rifles.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Indian Public Health Engineering Department website hacked by Pakistan Hackers

West Bengal Branch of Indian Public Health Engineering Department website (www.wbphed.gov.in) has been breached by a hacker from Pakistan. A...

Read more »

Vulnerability in Siemens Switches allows hackers to gain admin access

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s1600/Scalance-X200-critical-security-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s320/Scalance-X200-critical-security-vulnerability.jpg" width="313" /></a></div><div style="text-align: justify;">A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administrative operations.<br /><br />The vulnerabilities were discovered by Eireann Leverett, Senior security consultant for IOActive and have been reported to Siemens.<br /><br />The first vulnerability(CVE-2013-5944) could allow hackers to perform administrative operation over the network without authentication.<br /><br />Sponsored Links<br />The Second vulnerability (CVE-2013-5709) could allow hackers to hijack web sessions over the network without authentication. This is due to insufficient entropy in its random number generator.<br /><br />Siemens produced a patch within 3 months.  Customers of Siemens are advised to apply the SCALANCE X-200 firmware update.<br /><br />Eireann is scheduled to demonstrate the vulnerabilities and release proof-of-concept code for organizations to check their own devices, at next week's S4 SCADA security conference in Miami.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Monday, January 13, 2014</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in Siemens Switches allows hackers to gain admin access

A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administ...

Read more »

The Official Microsoft Blog also hacked and defaced by Syrian Electronic Army

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1PnS3pRyclsdxhm9JHYSFJ0_K27zOzArw8EUGVJ3cjQ1PPJHrn75McVoPPA4e_bge7fzmU2UNEY2Mb6FGedHDJbDtdkCO3VRwsPQDOXG-SJGm4SlHHqJxbhXEgVG5MRuLN0et_WoilHo/s1600/microsoft-official-technet-blog-hacked.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1PnS3pRyclsdxhm9JHYSFJ0_K27zOzArw8EUGVJ3cjQ1PPJHrn75McVoPPA4e_bge7fzmU2UNEY2Mb6FGedHDJbDtdkCO3VRwsPQDOXG-SJGm4SlHHqJxbhXEgVG5MRuLN0et_WoilHo/s320/microsoft-official-technet-blog-hacked.jpg" width="320" /></a></div><div style="text-align: justify;">It appears new year starts with bad luck for the Microsoft.  Microsoft has found itself under the radar of Syrian Electronic Army, one of the popular syrian hacker group known for high profile website hacks.<br /><br />Few hours after we yesterday reported that Microsoft official twitter account hijacked,  their blog also got hacked by the Syrian Electronic Army(SEA).<br /><br />The group managed to create an articled entitled "Hacked by Syrian Electronic Army" in the Microsoft official Technet blog(" blogs.technet.com/b/microsoft_blog/‎").<br /><br />It appears the group still have access to the email accounts of Microsoft.  They also published emails sent from one employee to another employee regarding the security breach.<br /><br />Now, the Technet blog is back up and functioning normally. The attack just came after the hijack of Microsoft Xbox twitter account and official twitter account of Skype.  The group also defaced the Skype's blog.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Sunday, January 12, 2014</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

The Official Microsoft Blog also hacked and defaced by Syrian Electronic Army

It appears new year starts with bad luck for the Microsoft.  Microsoft has found itself under the radar of Syrian Electronic Army, one of th...

Read more »

Gmail now automatically displays images, helps attacker to know when you open the mail

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s400/google-default-image.security-risk.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s320/google-default-image.security-risk.jpg" width="320" /></a></div><div style="text-align: justify;">Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Google. <br /><br />By enabling this feature, Google made a mistake, now sender is able to track whether the user have opened the mail or not.<br /><br />An attacker with a unique image link (eg:www.breakthesecurity.com/123456.jpg) can easily determine when the recipient opened the mail.<br /><br />"Turning those images on means we’ll be more accurate when tracking unique opens."MailChimp, a bulk Mail service, said in their blog post.<br /><br />Sponsored Links<br />"GMail's new image caching doesn't occur until the user views the message, still provides read tracking." HD Moore, security researcher commented about this new feature in his tweet.<br /><br />You can disable this feature by choosing the option "Ask before showing" in the "image" section under the General tab in settings. However, it is still in question how many of users going to disable it, most of them don't bother.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Friday, December 13, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Gmail now automatically displays images, helps attacker to know when you open the mail

Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Goo...

Read more »

64 bit version of notorious Zeus Trojan spotted by Kaspersky

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyF8i3aOx0DvGtfkHmJfMg9XJ0AjeWX-UNRBGP9oa_kWTLwdWIAEi9v1Spj_NW1jC6_qfNO6ZxN0k3gPoUMacf5BY3PqyXRDuVu4jZtqDJWaRl4AJ71f9UR6CiLYl2D4TfsGZaiVmJRzI/s200/zeus-banking-trojan.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyF8i3aOx0DvGtfkHmJfMg9XJ0AjeWX-UNRBGP9oa_kWTLwdWIAEi9v1Spj_NW1jC6_qfNO6ZxN0k3gPoUMacf5BY3PqyXRDuVu4jZtqDJWaRl4AJ71f9UR6CiLYl2D4TfsGZaiVmJRzI/s200/zeus-banking-trojan.jpg" /></a></div><div style="text-align: justify;">As more number of people switch to 64bit version of OS,  Cyber criminals also started to write malware code that compatible with 64 bit.<br /><br />It is not surprising to see the world's most notorious Banking Trojan Zeus also come up with new variants supporting 64bit.<br /><br />Security researchers at Kaspersky <a href="http://www.securelist.com/en/blog/208214171/The_inevitable_move_64_bit_ZeuS_has_come_enhanced_with_Tor" target="_blank">spotted</a> a 32-bit variant of Zeus malware containing 64bit version.  Researchers say 64-bit variant has already been in the wild around June with compilation date on April 2013.<br /><br />This new variant has ability to communicate with its command and control(C&C) server via Tor Network.<br /><br />A number of 64-bit users comparing to 32-bit users is very low.  Then, what is the need of developing 64bit supported variants?!<br /><br />Researchers believe that it might be marketing technique to attack buyers or the ground work for some future needs.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 12, 2013</div><br /><br /></div>

64 bit version of notorious Zeus Trojan spotted by Kaspersky

As more number of people switch to 64bit version of OS,  Cyber criminals also started to write malware code that compatible with 64 bit. It ...

Read more »

Vulnerability in NVIDIA mental ray allows hackers to take control of render farms

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s1600/hacking-render-farm-using-nvidia-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="285" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s320/hacking-render-farm-using-nvidia-vulnerability.jpg" width="320" /></a></div><div style="text-align: justify;">A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "render farm", says security researchers at ReVuln.<br /><br />A Render farm is a cluster of specialized computers designed for rendering images, typically used for creating visual effects in films.  Render farms have high computational capability.<br /><br />The mental ray is available as stand alone software and also embedded into popular software like AutoCAD, Autodesk 3ds Max, Autodesk Maya, Cinema 4D, Domus3D.<br /><br />By just sending a malicious packet to the target machine, a hacker can load arbitrary DLLs on a victim's machine; Injecting malicious remote library allows attacker to take control of the entire render farm.<br /><br />The mental ray version 3.11.1.10 is only affected by this vulnerability.<br /><br />What will you do when you get access to a system that has huge computation capability? A hacker definitely attempt to use it for password cracking or Bitcoin Mining.<br /><br />You can find the white paper here: <a href="http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf" target="_blank">http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf</a></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 12, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in NVIDIA mental ray allows hackers to take control of render farms

A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "re...

Read more »

WordPress Plugins containing Backdoor distributed via phishing emails

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">What would you do when you receive an email offering Pro version of Wordpress plugin for free, if you are a WordPress user? Don't get tempted by such kind of emails, they also give malicious code for free!<br /><br />Sucuri <a href="http://blog.sucuri.net/2013/12/phishing-emails-to-install-malicious-wordpress-plugins.html" target="_blank">reported</a> about a phishing emails asking their clients to download Pro-version of "All in one SEO Pack" WordPress plugin.  The email claims that the plugin is $79.00 worth and giving it for free.<br /><br />"You have been chosen by WordPress to take part in our Customer Rewarding Program.  You are the 23rd from 100 <i style="color: red;">uniques</i> winners." The phishing email reads.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil0FFW-n-B9G1FIafXYqT-Ox7kSFVYDAeXhLzyU6bFGAGORucbz5c011VMjvu6d5C086PMvRfviy2ChAPbRXuqxtt31x_eNG3V9mcrhSr-6E6_cmU-V6vEldBWMImgCGwpGY5yvzRiFns/s400/phishing-email-malicious-wordpress-plugin.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="273" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil0FFW-n-B9G1FIafXYqT-Ox7kSFVYDAeXhLzyU6bFGAGORucbz5c011VMjvu6d5C086PMvRfviy2ChAPbRXuqxtt31x_eNG3V9mcrhSr-6E6_cmU-V6vEldBWMImgCGwpGY5yvzRiFns/s400/phishing-email-malicious-wordpress-plugin.jpg" width="320" /></a>The download link provided in the email is not linked to WordPress plugin store, it is linked to a zip file hosted in a compromised website.<br /><br />Security researchers at Sucuri analyzed the plugin and found out that it is modified with a Backdoor which gives attackers full access to the server.<br /><br />The malicious code in the plugin replaces the index.php file with the malicious code retrieved from the attacker's server.  So, when user visit the site, they either redirected to SPAM sites or to Exploit kits where it will infect the visitor's system.</div><br /><br />Dated: Thursday, December 5, 2013<br /><br /><br /></div>

WordPress Plugins containing Backdoor distributed via phishing emails

What would you do when you receive an email offering Pro version of Wordpress plugin for free, if you are a WordPress user? Don't get te...

Read more »

Hackers steal 2 Million Facebook, Gmail, twitter accounts with Pony Botnet

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjS-9LvE8h-G_4F_sf-uD1RzJ49fGvrYAJV5j_6QqqhCguiPmGMqSm6_NrQFAhQVkXcB2kb4UGhlITPys7YgCRTL2RzBnNqWJz3CLss6LHhRnInimAcWf2jkFI_GYjRif8sUMoFiht_kOM/s640/Pony-botnet-steals-2-million-passwords.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjS-9LvE8h-G_4F_sf-uD1RzJ49fGvrYAJV5j_6QqqhCguiPmGMqSm6_NrQFAhQVkXcB2kb4UGhlITPys7YgCRTL2RzBnNqWJz3CLss6LHhRnInimAcWf2jkFI_GYjRif8sUMoFiht_kOM/s640/Pony-botnet-steals-2-million-passwords.jpg" width="320" /></a></div><div style="text-align: justify;">Cyber criminals have stolen more than two Million facbeook, Gmail, Twitter, Linkedin and yahoo accounts with the help of Pony malware, according to report from Trustwave.<br /><br />Security researchers at Trustwave gained access to the admin control panel of the "Pony botnet" which is storing a large amount stolen credentials from the infected machines.<br /><br />According to their <a href="http://blog.spiderlabs.com/2013/12/look-what-i-found-moar-pony.html" target="_blank">report</a>, around 1,580,000 website login credentials, 320,000 email credentials, 41,000 FTP credentials were stolen.<br /><br />Sponsored Links<br />Approximately 318121 facebook , 59549 yahoo, 54437 Google, 21708 Twitter login credentials were affected.<br /><br />The most commonly used password is appeared to be the unsurprisingly the weakest one.  As usual, '123456' password keep it's position in the top.  The second & third is '123456789' and '1234' respectively.<br /><br />Facebook, Linkedin, Twitter and other services is reportedly resetting the account's passwords.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 5, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Hackers steal 2 Million Facebook, Gmail, twitter accounts with Pony Botnet

Cyber criminals have stolen more than two Million facbeook, Gmail, Twitter, Linkedin and yahoo accounts with the help of Pony malware, accor...

Read more »

Scientists developed Malware capable of sending data using Mic and Speakers

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">How a malware can steal the data from an infected system that doesn't have internet connection? You might think it is impossible.  Computer scientists say it is possible.<br /><br />German Researchers at Fraunhofer Institute for Communication, Information Processing, and Ergonomics, say that a malware can transmit data using inaudible sounds.<br /><br />It can steal confidential data or keystrokes using nothing more than a normal speakers and Microphones without any internet connection.</div><div style="text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHm8wMsAek-j1joh6Hlpn9Y3iBBJDCm0muL9TSO3SyYaDaB1DJATKv11TPbv3NmxC8bOTEHUsv0iJrf1iekgLxvOpAfewKhYuJaSeBz4WlgEQvtei5EPl5hxTcSA_SveBh61RrF7GmCPE/s1600/transmitting-data-using-inaudible-sounds-speakers.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="171" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHm8wMsAek-j1joh6Hlpn9Y3iBBJDCm0muL9TSO3SyYaDaB1DJATKv11TPbv3NmxC8bOTEHUsv0iJrf1iekgLxvOpAfewKhYuJaSeBz4WlgEQvtei5EPl5hxTcSA_SveBh61RrF7GmCPE/s1600/transmitting-data-using-inaudible-sounds-speakers.jpg" width="320" /></a> </div><div style="text-align: justify;">Security researchers often suggest not to connect the system that has sensitive data to Internet so that cyber criminals can't reach them.  But now, It can steal from audio sounds without network connection.  So what now?! Then, Let us remove the audio devices. <br /><br />The researchers says it can be prevented by switching off audio I/O devices.  Sometimes, we might need audio devices.  In that case, the inaudible communication can be prevented "by application of a software-defined lowpass filter".<br /><br />The researchers has described their idea in their paper entitled "On Covert Acoustical Mesh Networks in Air".  You can find the research paper <a href="http://www.jocm.us/index.php?m=content&c=index&a=show&catid=124&id=600" target="_blank">here</a>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><br /><br /></div>

Scientists developed Malware capable of sending data using Mic and Speakers

How a malware can steal the data from an infected system that doesn't have internet connection? You might think it is impossible.  Compu...

Read more »

Central Bank Of India Hacked by Pakistan Cyber Army and Team MaDLeeTs

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3PpjGS6dLARsQ2Si3C6GbluUxMnIH_5AXVY8f_ZogEN_iH1Z74X21IIYIGfGdP3wnO21-WpeloV5j65Zm_9blsq0ukmQcupH7O37hXxr_xrH5A4MOzIkorHswjqdxZXz8K9eA54swmcs/s640/Hacked+By+Pakistan+Cyber+Army.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3PpjGS6dLARsQ2Si3C6GbluUxMnIH_5AXVY8f_ZogEN_iH1Z74X21IIYIGfGdP3wnO21-WpeloV5j65Zm_9blsq0ukmQcupH7O37hXxr_xrH5A4MOzIkorHswjqdxZXz8K9eA54swmcs/s320/Hacked+By+Pakistan+Cyber+Army.png" width="320" /></a></div><div style="text-align: justify;">The official site of "Central Bank Of India" has been defaced by Pakistan Cyber Army and Team MaDLeeTs .<br /><br />The deface seems to be a retaliation to defaces this morning by "Indian Cyber Army" on many Pakistani Sites.<br /><br />The reasons for the Indian attack was that today is the 5th anniversary of the 26/11 terrorists attacks on Mumbai.<br /><br /><div style="text-align: left;">Mirror: <a href="http://www.zone-hack.com/134702.html" target="_blank">http://www.zone-hack.com/134702.html</a></div><div style="text-align: left;"><br /></div><div style="text-align: left;">Deface Link: <a href="https://www.centralbankofindia.co.in/site/" target="_blank">https://www.centralbankofindia.co.in/site/</a></div><br /><br />Dated: Tuesday, November 26, 2013<br /><br /><br /></div></div>

Central Bank Of India Hacked by Pakistan Cyber Army and Team MaDLeeTs

The official site of "Central Bank Of India" has been defaced by Pakistan Cyber Army and Team MaDLeeTs . The deface seems to be a ...

Read more »

Digital Sleeper Cell: NSA infected 50,000 computer network with data stealing malware

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">The NSA has infected more than 50,000 computer networks across globe with a malware which is capable of stealing sensitive data from the victim's machine.<br /><br />According to the NRC.nl <a href="http://www.nrc.nl/nieuws/2013/11/23/nsa-infected-50000-computer-networks-with-malicious-software/" target="_blank">report</a> which is based on documents provided by US whistleblower Edward Snowden, the practice called as Computer Network Exploitation (CNE)".<br /><br />The malware is being referred as "digital Sleeper cell" , it is being controlled by NSA and they can remotely turn it on or off.<br /><br />The number of infected networks in 2008 is reportedly over 20,000.  By mid of the 2012, the number of infected network is increased to 50k.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Sunday, November 24, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Digital Sleeper Cell: NSA infected 50,000 computer network with data stealing malware

The NSA has infected more than 50,000 computer networks across globe with a malware which is capable of stealing sensitive data from the vic...

Read more »

CryptoLocker ransomware reduce the price for decrypting files

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7UxE1eRtH8MdgrrVjmCf7CYbuetxNo5j2ZnRkhyphenhyphensk79UgJfT_-JLz0YeM0J-S_MHYPpb7XqPh2EokaFC6FHZCxipB9yoTb9eucGmgAIqu18sxO7ebbi6twq7bFF6LE2xalx5nc1VanZw/s400/cryptolocker-ransomware.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7UxE1eRtH8MdgrrVjmCf7CYbuetxNo5j2ZnRkhyphenhyphensk79UgJfT_-JLz0YeM0J-S_MHYPpb7XqPh2EokaFC6FHZCxipB9yoTb9eucGmgAIqu18sxO7ebbi6twq7bFF6LE2xalx5nc1VanZw/s320/cryptolocker-ransomware.jpg" width="320" /></a></div><div style="text-align: justify;">As a bitcoin value continuous its climb, now it is more than $800, the criminals behind cryptolocker ransomware have also come with up an idea to reduce the price for decrypting files to 0.5 Bitcoins.<br /><br />Initially, the ransomware were asking victims to pay 2 Bitcoins as ransom in order to decrypt their files.<br /><br />The victims who failed to pay the ransom within a particular time will be asked to use their decryption service if they want to get back their encrypted files.  However, victims need to pay more than before.<br /><br />The new variant of CryptoLocker ransomware spotted by F-Secure security team on November 20 is asking users to pay 0.5 Bitcoins instead.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

CryptoLocker ransomware reduce the price for decrypting files

As a bitcoin value continuous its climb, now it is more than $800, the criminals behind cryptolocker ransomware have also come with up an id...

Read more »

Notorious Stuxnet malware infected Russian Nuclear Plant, claims Eugene Kaspersky

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiK9nFmWfuHzXx63yW2F-mdicf1h-0BtDM-akkoOsW1LwQvlB-x5OJklwnMdm_aN9Hjm07xbojEMCszYQQHG5svzmYCieCZ6F3zgwhvSzSNFN4f3mqAUhVxFc0HX0zF83eCzzCXqhoy-wg/s200/stuxnet-worm-infected-russian-nuclear-plant.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiK9nFmWfuHzXx63yW2F-mdicf1h-0BtDM-akkoOsW1LwQvlB-x5OJklwnMdm_aN9Hjm07xbojEMCszYQQHG5svzmYCieCZ6F3zgwhvSzSNFN4f3mqAUhVxFc0HX0zF83eCzzCXqhoy-wg/s200/stuxnet-worm-infected-russian-nuclear-plant.jpg" /></a></div><div style="text-align: justify;"><span id="goog_1296650943"></span><span id="goog_1296650944"></span>The notorious Stuxnet malware which is widely believed to have been developed by US and Israel to target Iran Nuclear plants, managed to "badly" infect the internal network of Russian Nuclear power plant.<br /><br />Eugene Kaspersky, founder of the Russian antivirus company Kaspersky, said a friend of him working at unnamed nuclear plant told him that their nuclear plant network was disconnected from the internet which is badly infected by Stuxnet.<br /><br />"So unfortunately these people who were responsible for offensive technologies, they recognise cyber weapons as an opportunity." SC Magazine quoted Kaspersky as saying.<br /><br />"All the data is stolen," Kaspersky said. "At least twice."<br /><br />This is first time the Stuxnet infects the major nuclear plant outside of its intended target in Iran.<br /><br /><br />Dated: Monday, November 11, 2013</div><br /><br /><br /></div>

Notorious Stuxnet malware infected Russian Nuclear Plant, claims Eugene Kaspersky

The notorious Stuxnet malware which is widely believed to have been developed by US and Israel to target Iran Nuclear plants, managed to ...

Read more »

Puthiyathalaimurai Website Hacked by same hacker as JayaTV and AIADMAK site

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoDOH2WMmsXSYy4uc0vXEtQimvEXgXN6IBob9pRAUloGIXArHUKh5fhhFXYNY8i6aUyK8vq47-FvxAMbw05rS3RKhXrzkmt2FT34qrzQtpXgSt8ZkMPIgWNAh27L8PXtrNjirudgkETxA/s640/Screenshot-2.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoDOH2WMmsXSYy4uc0vXEtQimvEXgXN6IBob9pRAUloGIXArHUKh5fhhFXYNY8i6aUyK8vq47-FvxAMbw05rS3RKhXrzkmt2FT34qrzQtpXgSt8ZkMPIgWNAh27L8PXtrNjirudgkETxA/s320/Screenshot-2.png" width="320" /></a></div><div style="text-align: justify;">A pakistani hacker by name "H4$N4!N H4XOR" belonging  to "Pakistan Haxors Crew" who hacked the JayaTV website and AIADMAK site before has now hacked the Puthiyathalaimurai website again and left the following message.<br /><br />" Security Breach!<br />Hello Admin, I Hack AIADMAK website & jaya Tv So Kick Out That Innocent Kid From The Jail.<br />Your Site Security Is 0% And Easy To F***k,<br />PATCH YOUR SECURITY! "<br /><br />He was talking about the recent arrest of  <a href="http://www.thehindu.com/news/cities/chennai/hack-of-aiadmk-website-1-held/article5333244.ece" target="_blank">P. Eswaran by Central Crime Branch whom they arrested</a> on suspicion of hacking the AIADMAK site. Eswaran said that he was only trying to fix the vulnerability and this hack seems to also  suggest that also. The pakistani hacker who initially posted  about the defaces is still active.<br /><br />Though Eswaran was only trying to protect the website what he did is still illegal under section 66 of the IT Act . It would be very interesting to see how this case would play in court since it is the first of its kind.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Friday, November 15, 2013.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Puthiyathalaimurai Website Hacked by same hacker as JayaTV and AIADMAK site

A pakistani hacker by name "H4$N4!N H4XOR" belonging  to "Pakistan Haxors Crew" who hacked the JayaTV website and AIADMA...

Read more »

MacRumors Forums hacked, 860,000+ users data compromised

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3ktXWvdg-rxUzfBqS7xH6MMkGlWuoX-eXN0Oasmca4n1NlErM19bZsYPIbQQWXmAyqaI8E48UI7ZQli747z6Lqz0FIvV7f12NZdu6RyXqNLIPRb_KSZ-cBSXnWWoxfhoys_mkV_W-3Ac/s1600/macrumors-forums-hacked-database-stolen.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="175" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3ktXWvdg-rxUzfBqS7xH6MMkGlWuoX-eXN0Oasmca4n1NlErM19bZsYPIbQQWXmAyqaI8E48UI7ZQli747z6Lqz0FIvV7f12NZdu6RyXqNLIPRb_KSZ-cBSXnWWoxfhoys_mkV_W-3Ac/s200/macrumors-forums-hacked-database-stolen.jpg" width="200" /></a></div><div style="text-align: justify;">MacRumors forums have been breached by hackers who managed to obtain the information belonging to 860106 users that includes hashed passwords.<br /><br />"In situations like this, it's best to assume that your MacRumors Forum username, email address and (hashed) password is now known." Editorial Director Arnold Kim wrote.<br /><br />The hacker who behind the attack also made a post in MacRumors forum regarding the breach saying "We're not 'mass cracking' the hashes. It doesn't take long whatsoever to run a hash through hashcat with a few dictionaries and salts, and get results."<br /><br />Hackers also claimed that they are not going to use the compromised credentials to log into gmail, apple accounts or any other accounts unless they target users specifically for some reason.<br /><br />"Stop worrying, and stop blaming it on Macrumors when it was your own fault for reusing passwords in the first place." the hacker added.<br /><br />It appears hackers have gained access to the database by logging into the forum with the stolen credentials of a single moderator.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

MacRumors Forums hacked, 860,000+ users data compromised

MacRumors forums have been breached by hackers who managed to obtain the information belonging to 860106 users that includes hashed password...

Read more »

Anonymous Philippines Hacked Government Websites Against Corruption

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIU0mcHgMq2eoLY4Fdhiu44PTlB1E7vT02orVW6ObsA3s21-7xtSQZMPF-SkJXKZZZ0B-8LSUy83pxVvc624ynTngAuwR7GlWR8MRIUtJtBKlrU2XzS8eElSYMfmX83HydW4OrM0xvA5k/s320/anonymous-philippines-government-sites-hacked.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIU0mcHgMq2eoLY4Fdhiu44PTlB1E7vT02orVW6ObsA3s21-7xtSQZMPF-SkJXKZZZ0B-8LSUy83pxVvc624ynTngAuwR7GlWR8MRIUtJtBKlrU2XzS8eElSYMfmX83HydW4OrM0xvA5k/s320/anonymous-philippines-government-sites-hacked.jpg" /></a></div><div style="text-align: justify;">Anonymous Philippines group has contacted DHacking News with a list of hacked government websites. The group mentioned the hacking attack is part of protest against corruption.</div><br /><div style="text-align: justify;">"We apologize for this inconvenience, but this is the only easiest way we could convey our message to you, our dear brothers and sisters who are tired of this cruelty and this false democracy, tired of this government and the politicians who only think about themselves."  The defacement message reads.</div><br /><div style="text-align: justify;">"The government, in many ways, has failed its Filipino citizens. We have been deprived of things which they have promised to give; what our late heroes have promised us to give. Let us remind the government that fairness, justice and freedom are more than words. They are perspectives.</div><br /><div style="text-align: justify;">Here is the list of affected domains:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">http://www.philembassy-seoul.com/</div><div style="text-align: justify;">http://www.pasigcity.gov.ph/</div><div style="text-align: justify;">http://www.pateros.gov.ph/</div><div style="text-align: justify;">http://www.insurance.gov.ph/UserPictures/index.html</div><div style="text-align: justify;">http://candoncity.gov.ph/</div><div style="text-align: justify;">http://braulioedujali.gov.ph/</div><div style="text-align: justify;">http://spda.gov.ph/</div><div style="text-align: justify;">http://3rddistrictoflaguna.com/</div><div style="text-align: justify;">http://bansud.gov.ph/</div><div style="text-align: justify;">http://gloria.gov.ph/</div><div style="text-align: justify;">http://magarao.gov.ph/</div><div style="text-align: justify;">http://bolinao.gov.ph/home/</div><div style="text-align: justify;">http://kalingaprovince.com/</div><div style="text-align: justify;">http://kalinga.tabuk.gov.ph/</div><div style="text-align: justify;">http://tabuk.gov.ph/</div><div style="text-align: justify;">http://www.vigancity.gov.ph/</div><div style="text-align: justify;">http://mgbcar.ph/</div><br /><br /><br /></div>

Anonymous Philippines Hacked Government Websites Against Corruption

Anonymous Philippines group has contacted DHacking News with a list of hacked government websites. The group mentioned the hacking attack is...

Read more »

Hackers. What Are Hackers?

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div style="text-align: justify;"><a href="http://4.bp.blogspot.com/-llTqyrF8pP0/UnYEbST-3FI/AAAAAAAABf0/hNKoAe8Io_E/s1600/what+are+hackers.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="198" src="http://4.bp.blogspot.com/-llTqyrF8pP0/UnYEbST-3FI/AAAAAAAABf0/hNKoAe8Io_E/s320/what+are+hackers.jpg" width="320" /></a><b>Hackers. What Are Hackers?</b><br />Continue Reading If You are a Hacker or Wanna Be a<br />Hacker.<br />Hackers Made Internet.<br />People Try To Find Free Softwares,Apps,Etc.<br />that was cracked by a Hacker.<br />Behind Every Code There is a Successful De-Coder.<br />Hackers Never Ask You Anything.<br />When U Are Downloading Movies We Uploads It.<br />When You Make a Website We Penetrate It.<br />When You are Using Any Linux Version Don't Forget<br />MR.Linux Torvalds.<br />If U Can't Help Your Ownself You Can't Help Others.<br />Did You Ever Helped Anyone?<br />are You Really a Hacker!?<br />Or Pretend To Be.<br />Think Again.<br /># Hackers<br /># Respect</div><div style="text-align: right;"><br /></div><div style="text-align: justify;"><br /></div><br /></div>

Hackers. What Are Hackers?

Hackers. What Are Hackers? Continue Reading If You are a Hacker or Wanna Be a Hacker. Hackers Made Internet. People Try To Find Free Softwar...

Read more »

Jaya TV website hacked and defaced by Pakistani Hackers

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhati9GAymtUssVm6u0dgDsNlJqf0TVwEUOZqJVYMX2jrT8C2g0VSWrAL7zmRs4LRhTwEkBTLxqfZMWCzfbHHIf4SBTNpTW_-akPnzQFCo8az9m7ty96zqHMCC8PIpNhVHXS0YZUiPCZFU/s640/jaya+tv+website+hacked+by+pakistani+hackers.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="165" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhati9GAymtUssVm6u0dgDsNlJqf0TVwEUOZqJVYMX2jrT8C2g0VSWrAL7zmRs4LRhTwEkBTLxqfZMWCzfbHHIf4SBTNpTW_-akPnzQFCo8az9m7ty96zqHMCC8PIpNhVHXS0YZUiPCZFU/s320/jaya+tv+website+hacked+by+pakistani+hackers.jpg" width="320" /></a></div><div style="text-align: justify;">Hackers from Pakistan Haxors Crew has hacked into Jaya TV network official website. The main domain and subdomain have been defaced.<br /><br />Jaya TV is one of the major Tamil language satellite television channels based in Chennai, India.<br /><br />The following domains are affected : jayatv.tv , artist.jayatv.tv and cinema.jayatv.tv.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The group also defaced the Canara Bank Employees' Union website(cbeu.in). They also leaked database compromised from the server.<br /><br />At the time of writing, all of the affected websites still showing the defacement page.  "jayanews.in" shows "under maintenance" error page.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><b>*Update:</b><br /><span style="color: red;">Jaya TV network has denied that it is not their official website.</span></div><div style="color: red; text-align: justify;"><br /></div><div style="color: red; text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Jaya TV website hacked and defaced by Pakistani Hackers

Hackers from Pakistan Haxors Crew has hacked into Jaya TV network official website. The main domain and subdomain have been defaced. Jaya TV...

Read more »

Buffer social Media app admits security breach, facebook and twitter access tokens stolen

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlizJ25REa0LhKgmdXziE0SEL26rKhdvWX7LkLYwT9o04AN-V6euD0u5y0Uddp0YeKnGkAwDoWeNxZtsDUlGr7qD7fg5TX0lCLidBwBsQ66-flbS599tnapEId2oF1XVAxJcyapdkQgU/s200/bufferapp-hacked.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlizJ25REa0LhKgmdXziE0SEL26rKhdvWX7LkLYwT9o04AN-V6euD0u5y0Uddp0YeKnGkAwDoWeNxZtsDUlGr7qD7fg5TX0lCLidBwBsQ66-flbS599tnapEId2oF1XVAxJcyapdkQgU/s200/bufferapp-hacked.jpg" /></a></div><div style="text-align: justify;">Buffer, an app that allows users to schedule their social media posts, has recently acknowledged that hackers breached their website.<br /><br />The hackers managed to steal the facebook, twitter access tokens of users stored in their server that allowed the hackers to post Spam on behalf of Buffer's users.<br /><br />However, CTO Sunil noted in their blog that hackers were not able to get access to any passwords, billing information or any other sensitive information.<br /><br />The company immediately took a step and invalidate all twitter access tokens and added encryption for all of them. He also noted they are using an extra security parameter for facebook API calls to make it more secure.<br /><br />The company managed to identify the source of the security breach and closed the vulnerability.</div><div style="text-align: justify;"><br /></div><br /><br /></div>

Buffer social Media app admits security breach, facebook and twitter access tokens stolen

Buffer, an app that allows users to schedule their social media posts, has recently acknowledged that hackers breached their website. The ha...

Read more »

WordPress 3.7 released for lazy admins, automatic security update

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" /></a></div><div style="text-align: justify;">Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have added a new feature "Automatic update".<br /><br />The new version 3.7 has no special security bug fixes but they have enabled a good feature that will prevent your CMS being hacked because of outdated versions.<br /><br />Besides the "Updates while you sleep" feature, they have also added a feature to estimate the strength of your password and "support for automatically installing the right language files and keeping them up to date".<br /><br />This is quite impressive move from Wordpress.  At least, from now onwards, the lazy admins no need to care about updating the wordpress whenever there is security release, it will be automatically done.<br /><br />It's just come to mind how many of the lazy admins are going to update to the latest version 3.7!</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

WordPress 3.7 released for lazy admins, automatic security update

Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have ad...

Read more »