Browsing tag

NSA

NSA Malware Used to Infect Windows PCs with Cryptocurrency Miner

Malware authors are using an NSA hacking tool to infect Windows computers with a new cryptocurrency miner. Detected under the generic name of Trojan.BtcMine.1259, this trojan was first spotted last week by Russian antivirus vendor Dr.Web. The trojan uses an NSA implant called DOUBLEPULSAR to infect computers that run unsecured SMB services. This implant (NSA […]

Federal Contractor Caught Leaking Classified NSA Documents to News Outlet

The new arrest that has happened recently has brought a 25-year-old Reality Leigh Winner to the federal court this Monday. The statement made by the Justice Department says that Winner has confessed to removing classified info from her workspace. The workspace in question is located in Augusta, Georgia, and is the new home to the Cyber Command […]

The Shadow Brokers Announce Details About Upcoming Monthly Dump Service

In a message posted online early this morning, the Shadow Brokers — the cyber-espionage group believed to have stolen hacking tools from the NSA — announced new details about their upcoming “monthly dump service.” The group previously teased the new monthly dump service in mid-May, four days after the WannaCry ransomware wreaked havoc across the […]

Security Firm Releases Windows XP Patch for NSA Exploit ESTEEMAUDIT

Cyber-security firm enSilo has released a patch for Windows XP and Windows Server 2003 that will protect against attacks via ESTEEMAUDIT, a hacking tool dumped online by the Shadow Brokers last month, and allegedly developed by the NSA. At the technical level, ESTEEMAUDIT is a zero-day in the RDP protocol used by Windows to open […]

386 WannaCry Ransomware and 26 EternalRocks Samples Discovered

Have you heard the expression “it ain’t over till it’s over”? Well, it matches with the ongoing situation of WannaCry ransomware attacks as researchers from TrustLook, a cyber security company have collected 386 new samples of WannaCry ransomware. WannaCry is a wicked encryption based malware (aka ransomware) which used Server Message Block protocol (SMB) vulnerability in the […]

Hackers trying to bring back WannaCry attacks by DDoSing its KillSwitch

It was over a week ago when the nasty WannaCry ransomware attack started infecting critical cyber infrastructure in more than 150 countries. Its target was Windows users demanding a ransom payment of $300 in Bitcoin in order to unlock their files. Not to mention that it was all possible due to an NSA exploit leaked […]

EternalRocks Worm Uses Same SMB Flaw in Windows like WannaCry

The WannaCry incident was just a beginning as now a new and more evolved malware lurks out there in the wild. No, it’s not Uiwix or Adylkuzz but more dangerous than all. WannaCry, as you may already know, is a ransomware on the loose. It uses the NSA leaked tools EternalBlue and DoublePulsar and exploits the SMB vulnerability in Windows […]

New SMB Network Worm “MicroBotMassiveNet” Using 7 NSA Hacking Tools , Wannacry using only Two

[jpshare]A New Network Worm called “MicroBotMassiveNet” (Nick Name:EternalRocks) Discovered Recently  which is also  Performing in SMB Exploit as Wannacry .“MicroBotMassiveNet” self Replicate with the targeting network and Exploit the SMB Vulnerability. NSA Hacking tools are the major medium for “MicroBotMassiveNet” (Nick Name:EternalRocks) to Spread and Self Replicate Across the Network by using Remote Exploitation by the Help of […]

WannaCry Ransomware Attackers are sending new message to victims

The WannaCry ransomware attack is still infecting unsuspecting users, hospitals, and businesses around the world. While some users on Twitter are claiming they have already paid victims a massive amount of ransom money and are still waiting for the decryption key; the cyber criminals behind the whole campaign are still sending new messages in the […]

Fearing Shadow Brokers leak, NSA reported critical flaw to Microsoft

WaPo confirms long-held suspicions as NSA cyberweapons crisis threatens to grow worse. After learning that one of its most prized hacking tools was stolen by a mysterious group calling itself the Shadow Brokers, National Security Agency officials warned Microsoft of the critical Windows vulnerability the tool exploited, according to a report published Tuesday by The […]

A complete Lookback of Historical Wannacry Ransomware Cyber Attack

Wannacry (WannaCrypt,WanaCrypt0r 2.0,Wanna Decryptor), A Computer Malware family called Ransomware that actually target the Microsoft Windows Operating systems  SMB exploit leaked by the Shadow Broker that encrypting data and demanding ransom payments in the cryptocurrency bitcoin This Ransomware rule spreads by means of spam messages and malicious download links uniquely intended to lock the documents […]

WikiLeaks Posts User Manuals for CIA Malware AfterMidnight and Assassin

WikiLeaks recently leaked some files as part of its Vault 7 series, that contained user manuals for two malware called, Assassin and AfterMidnight. According to the documents, these viruses belong to the CIA. RELEASE: CIA remote control & subversion malware systems ‘After Midnight’ and ‘Assassin’ https://t.co/S64RmEsHYl #Vault7 pic.twitter.com/5fMTeqW007 — WikiLeaks (@wikileaks) May 12, 2017 [irp […]

WannaCry ransomware: Researcher halts its spread by registering domain for $10.69

Last year the Internet was taken down by cyber criminals through a massive Distributed Denial of Service Attack (DDoS) attack using the infamous Mirai malware. But last Friday afternoon, almost 99 countries including Russia, UK, USA and Australia became victims of a worldwide mass cyber-attack that has been reported to have caused major disruptions to […]

NSA’S DOUBLEPULSAR KERNEL EXPLOIT IN USE INTERNET-WIDE

If you’re on a red team or have been on the receiving end of a pen-test report from one, then you’ve almost certainly encountered reports of Windows servers vulnerable to Conficker (MS08-067), which has been in the wild now for nearly 10 years since the bug was patched. A little more than two weeks after […]

New Leak from Shadow Brokers Show NSA targeted Windows and Banks

Shadow brokers, a hacking group famous for its cyber shenanigans has strike back again. Earlier yesterday, the group dumped online, a huge list of hacking tools and techniques used by the US National Security Agency (NSA) to target Global banking system and Windows users around the world. The Million Dollar List According to several security […]

IXmaps Map reveals if your Internet traffic is being monitored by the NSA

A new interactive online tool named Internet Exchange Mapping (IXmaps) appeared earlier this week, and it shows if your data traffic passes through the NSA or not. Many prying eyes are out there, trying to discover everybody’s secrets and take a peek into everyone’s life. [squaread][/squaread] That’s why a team of faculty and students from […]

IXmaps: This Map Tells If Your Web Traffic Is Being Spied On By The NSA

Short Bytes: IXmaps is an online interactive map that can be used to see if your web traffic is being spied on by the NSA. IXmaps is created with the help of OpenMedia and some Canadian organizations. This tool finds out if the path taken by your data involves some NSA listening port. You might be knowing […]

Encrypted Email Service Tutanota Celebrates 2 Million Users

Tutanota, an email encryption service is gaining popularity all across the globe and has seen a rapid growth since the start of 2017. In the past month, the company has gained over half a million users and is now celebrating 2 million users in total. After the Snowden leak, it became abundantly clear that different […]