Browsing category

Incidents

Another Misguided Teen Arrested for DDoSing High School Network

Police in Shelton, Connecticut have arrested a teenager for launching DDoS attacks on his/her former high school’s network. According to a Shelton Police press release, the yet unnamed teenager was arrested on Thursday and was set to appear in court today. Police say the teenager, now a former student who attended the Shelton High School, […]

Kaspersky discovered a One-stop-shop for hacking goods

Security experts from Kaspersky Lab discovered an interesting one-stop-shop for purchasing hacking goods while investigating activity of a popular RAT. Security experts from Kaspersky Lab discovered an interesting one-stop-shop for purchasing hacking goods. The malware researchers were analyzing traffic from a number of infected machines that appear to be generated by the HawkEye RAT.   HawkEye […]

Pentesting Windows environments: remote delivery of PowerShell payloads

PowerShell is an amazing post-exploitation tool available to the attacker during engagements in Windows environments. Tools like PowerSploit or PowerShell Empire help out a lot during internal test. Problem is, restrictive execution policy is enabled by default on windows machines which makes it problematic to run ps1 scripts. Not having admin rights on the target […]

Alice Bank ATM Malware Discovered After Being Around For Over Two years

Bank ATMs are being targeted by a new type of malware that has security researchers puzzled. Alice, as this malicious software is called, was recently discovered by Trend Micro. What is rather intriguing is how the malware is not packed with bells and whistles, which makes its objective very clear: emptying bank ATMs of all […]

Hackers Threaten to Take Down PSN and Xbox Live on Christmas Day

R.I.U. Star Patrol says it plans new DDoS attacks on Dec 25. ​Hacking group R.I.U. Star Patrol managed to take down Tumblr earlier this week and keep it offline for almost two hours, and now it’s planning on launching another large-scale DDoS attack that’s likely to impact many more users. R.I.U. Star Patrol announced in […]

As Bitcoin Price Surges, Phishing Attacks on Cryptocurrency Wallets Intensify

Today’s Bitcoin to US Dollar exchange rate has reached $902, the first time Bitcoin price has gone above the $900 mark since January 2014, almost three years ago. Nobody knows what’s driving this sudden surge of Bitcoin popularity, but cyber-criminals won’t bother looking into macroeconomic factors when deciding that the market is ripe and ready […]

Don’t pay up to decrypt – cure found for CryptXXX ransomware, again

Back to the drawing board, boys. It’s third time unlucky for the scumbags behind CryptXXX ransomware, as their shoddy coding has been cracked yet again. CryptXXX is a particularly nasty form of the species – a ransomware app that not only encrypts over 40 file formats on a host PC and any external storage devices, […]

Kapustkiy hacked the website of the Costa Rica Embassy in China

The popular hacker Kapustkiy continues to target websites of embassies across the world, the last victim is the Costa Rica Embassy in China. The hacker Kapustkiy continues its string of hack, today he announced a news data breach, the victim is the Costa Rica Embassy in China. Kapustkiy accessed a database containing 280 login credentials, but just published online 50 of […]

Russian Cyber-Espionage Group Tracked Ukrainian Military Using Android Malware

A cyber-espionage group linked to the Russian military has developed Android malware which it used to infect the smartphones of Ukrainian soldiers and track Ukrainian field artillery units, according to a report released today by Crowdstrike. The report from the same security firm that discovered the “alleged” Russian hack of the Democratic National Committee (DNC) […]

Netflix US Twitter account hacked

The feed was taken over by a hacking group, OurMine, who used the hijack to promote its website and invite Netflix to get in touch. The social media team running the Netflix US Twitter account, which has 2.5 million followers, got off easily. Previous account takeovers have been used to spread fake news or, in […]

Russian Methbot Operation Makes up to $5 Million per Day from Click-Fraud

A bot farm involving hundreds of servers and over 570,000 different IP addresses has caused losses for online video advertisers ranging from $3 to $5 million per day. This bot farm, nicknamed Methbot, dates back to September 2015, when US security firm White Ops had first detected signs of automated traffic coming from the crooks’ […]

Cyber-Attack Causes Second Power Grid Outage in the Ukraine in the Past Year

According to statements from Ukrenergo, a Ukrainian energy provider, a cyber-attack may have caused a power outage in northern Ukraine, almost a year after another cyber-attack had shut down power supply across several regions during Christmas 2015. The most recent power outages took place on Saturday, December 17, at 23:53, and affected the regions around […]

Inside LeakedSource and Its Database of 3 Billion Hacked Accounts

BY NOW IT’S hard to keep track of which companies have been hacked and which haven’t. Remember the FourSquare hack? What about Adobe? Even breaches that were high-profile at the time are fading into obscurity as bigger and scarier ones crop up. (Ahem, Yahoo.) And if you can’t remember what’s been hacked, you’re probably struggling […]

FBI Arrests Customer of Xtreme Stresser DDoS-for-Hire Service

The FBI arrested this past week Sean Krishanmakoto Sharma, 26, from La Canada, California, for launching DDoS attacks against Chatango, an online chat service. According to court documents, Sharma, who is a USC graduate, purchased DDoS firepower from Xtreme Stresser, an online DDoS-for-hire service. He used this service to attack Chatango and brought down the […]

Home routers under attack in ongoing malvertisement blitz

DNSChanger causes network computers to visit fraudulent domains. As you read these words, malicious ads on legitimate websites are targeting visitors with malware. But that malware doesn’t infect their computers, researchers said. Instead, it causes unsecured routers to connect to fraudulent domains. Using a technique known as steganography, the ads hide malicious code in image […]

Bluetooth-enabled safe lock popped after attackers win PINs

If you use one, stop now. If you write heist movies, write safe-crackers out of your script. Attackers can locate and pop safes protected with high security commercial locks thanks to poor Bluetooth implementations, say researchers at Somerset Recon say. The SecuRam ProLogic B01 locks are badged as the industry’s only Bluetooth-packing lock for safes […]

Yahoo: One Billion More Accounts Hacked

Just months after disclosing a breach that compromised the passwords for a half billion of its users, Yahoo now says a separate incident has jeopardized data from at least a billion more user accounts. The company also warned attackers have figured out a way to log into targeted Yahoo accounts without even supplying the victim’s […]

Hacked cheating site Ashley Madison will pay $1.6 million to FTC for breach

Commission settlement officially $17.5 million, but fine reduced due to inability to pay. Ashley Madison, the dating website for married people seeking extramarital affairs, will pay the Federal Trade Commission (FTC) $1.6 million for its failure to protect the account information of 36 million users, for failing to delete account information after regretful users paid a […]