Critical iOS Flaw allowed Hackers to Steal Cookies from Devices

<div dir="ltr" style="text-align: left;" trbidi="on"> <span style="color: #0b5394; font-family: Verdana, sans-serif; font-size: large;"><b>Critical iOS Flaw allowed Hackers to Steal Cookies from Devices</b></span><br /> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Apple has patched a critical vulnerability in its iOS operating system that allowed criminal hackers to impersonate end users' identities by granting read/write access to website's unencrypted authentication cookies.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhud3SRZemHpKuHpD4FwUnupZozWBMDZmVVcxFPoCfLaqutDaT1ZepZdXqOOVIfiNWgX0MhD_Dl81mEhYGwsO1xuyjN4O-MQBWorhEayB3p4uPnVARNV4q-JdN_G3-Do3DDQjsIyd04jfI/s1600/iOS-Cookie-Theft_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhud3SRZemHpKuHpD4FwUnupZozWBMDZmVVcxFPoCfLaqutDaT1ZepZdXqOOVIfiNWgX0MhD_Dl81mEhYGwsO1xuyjN4O-MQBWorhEayB3p4uPnVARNV4q-JdN_G3-Do3DDQjsIyd04jfI/s640/iOS-Cookie-Theft_www.hackthesec.co.in.png" width="640" /></a></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The vulnerability was fixed with the release of iOS 9.2.1 on Tuesday, almost three years after it was first discovered and reported to Apple.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The vulnerability, dubbed "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Captive Portal</b>" bug, was initially discovered by <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Adi Sharabani</i> and <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Yair Amit </i>from online security company Skycure and privately reported to Apple in June 2013.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Here's How the Vulnerability Worked</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The vulnerability caused due to the way iOS handles <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Cookie Stores </b>at <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Captive Portals</b>, generally a login page that requires users to authenticate themselves before connecting to the free or paid public Wi-Fi hotspots when they are first joining.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> So, when a user with a vulnerable iPhone or iPad connects to a captive-enabled network (<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">sample page shown in the screenshot below</i>) – typically at coffee shops, hotels, and airports – a login window is displayed showing terms and conditions over a standard, unencrypted HTTP connection.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfoMzsRHFZuLEk-j4M3N2oLMoaB2Ro5EDrFngIVUnFZVCsa1wsiEnlJTinxxIKa-7F9xVQmzCEV0L0ujJPasZSttHK0DSEeqzT9ZNLLzkkffUMg7NbE-fPm3odJwVX9Kgksu_CFT5wzNk/s1600/hotel-wifi_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfoMzsRHFZuLEk-j4M3N2oLMoaB2Ro5EDrFngIVUnFZVCsa1wsiEnlJTinxxIKa-7F9xVQmzCEV0L0ujJPasZSttHK0DSEeqzT9ZNLLzkkffUMg7NbE-fPm3odJwVX9Kgksu_CFT5wzNk/s640/hotel-wifi_www.hackthesec.co.in.png" width="640" /></a></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Once accepted, the affected user is able to browse the Internet normally, but the embedded browser shares its unencrypted cookie store with the Safari browser.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> According to a <a href="https://www.skycure.com/blog/shared-cookie-stores-bug-fixed-in-ios-9-2-1/" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">blog post</a> published by Skycure on Wednesday, this shared resource allowed hackers to create their own fake captive portal and associate it with the Wi-Fi network, enabling them to steal virtually any unencrypted cookie stored on the device when an affected iOS device is connected.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Here's the List of Attacks a Hacker can Perform</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> According to researchers, this captive portal vulnerability allows an attacker to:</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> <ul style="border: 0px; font-stretch: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;"> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Perform an <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Impersonation Attack</u></b> – Attackers could steal users' unencrypted (HTTP) cookies associated with a website of their choice, allowing them to impersonate the victim's identity on the particular website.</li> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Perform a <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Session Fixation Attack</u></b> – This means, logging the victim into an attacker-controlled account (because of the shared Cookie Store). When the victims browse to the affected site via the Safari mobile browser, they'll be logged into the hacker's account instead of their own.</li> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Perform a <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Cache-Poisoning Attack</u></b> on the websites of the attacker's choice (by returning an HTTP response with caching headers). In this way, the attacker could execute malicious JavaScript every time the victim connects to that website in the future via the Safari mobile browser.</li> </ul> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Patch Your Device Right Now!</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The flaw affected iPhone 4S and iPad 2 devices and later. However, the vulnerability has been resolved with the release of <a href="https://support.apple.com/en-us/HT205732" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">iOS 9.2.1</a> in which there is an isolated cookie store for captive portals that will keep hackers at bay.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Skycure says that this is the longest time ever taken by Apple to fix a bug, but the patch was much more complicated than it would be for a typical bug. Though, the company says it has no reports of exploits in the wild.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> So, in order to keep yourself safe from such attacks, <a href="https://support.apple.com/en-us/HT205732" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">download iOS 9.2.1</a> as an over-the-air update from the Settings menu on your iOS device right now.</div> </div> </div> </div>

Critical iOS Flaw allowed Hackers to Steal Cookies from Devices

Critical iOS Flaw allowed Hackers to Steal Cookies from Devices Apple has patched a critical vulnerability in its iOS operating system th...

Read more »

Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable

<div dir="ltr" style="text-align: left;" trbidi="on"> <span style="color: #0b5394; font-family: Verdana, sans-serif; font-size: large;"><b>Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable</b></span><br /> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> A new critical zero-day vulnerability has been discovered in the<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Linux kernel </b>that could allow attackers to gain root level privileges by running a malicious Android or Linux application on an affected device.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIKMeXU2VZbuRE7ZoDs_fv0Mq9V1uI9TDQHRhWOa-natzF_3BMn-785jZD7VZ2QfcHRKEYOfoQVaAbqgZvWCQVVJCaAJzYXUw2La9yUckAMb09DPzL02dwpkBXIYhn3wrAPeITl5qKi3w/s1600/linux-kernel-hacking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIKMeXU2VZbuRE7ZoDs_fv0Mq9V1uI9TDQHRhWOa-natzF_3BMn-785jZD7VZ2QfcHRKEYOfoQVaAbqgZvWCQVVJCaAJzYXUw2La9yUckAMb09DPzL02dwpkBXIYhn3wrAPeITl5qKi3w/s640/linux-kernel-hacking_www.hackthesec.co.in.png" width="640" /></a></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" />The critical Linux kernel flaw (<a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2016-0728" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">CVE-2016-0728</a>) has been identified by a group of researchers at a startup named Perception Point.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The vulnerability was present in the code since 2012, and affects any operating system with <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Linux kernel 3.8 and higher</b>, so there are probably tens of millions of computers, both 32-bit and 64-bit, exposed to this flaw.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, the most bothersome part is that the problem affects <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Android versions KitKat and higher</b>, which means about 66 percent of all Android devices are also exposed to the serious Linux kernel flaw.</div> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Impact of the Zero-Day Vulnerability</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> An attacker would only require local access to exploit the flaw on a Linux server.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> If successfully exploited, the vulnerability can allow attackers to get root access to the operating system, enabling them to delete files, view private information, and install malicious apps.</div> <blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"It's pretty bad because a user with legitimate or lower privileges can gain root access and compromise the whole machine," </i><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Yevgeny Pats</b>, co-founder and CEO at security vendor Perception Point, said in a <a href="http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">blog post</a> published today.<br style="content: ' '; display: block; margin: 6px 0px 0px; outline: 0px; padding: 0px;" /><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"With no auto update for the kernel, these versions could be vulnerable for a long time. Every Linux server needs to be patched as soon the patch is out."</i></blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Usually, flaws in Linux kernel are patched as soon as they are found; therefore, Linux-based operating systems are considered to be more secure than others. However, zero-day vulnerability recently discovered in the Linux kernel made its way for almost 3 years.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The Cause of the Critical Linux Kernel Vulnerability</h3> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjihGwQ8UxM1NUn_brrCEJ9HFiJqzkMK-n8e-BEafmJ_PEeDA0tvHNG3spoxqrmwna3JceapqZb0TthqlZOvPkM4R3tq1DrcjSm9-5C_7BGIRsUz24n9gUCYQsv4QPtcBFg69CFfgXn940/s1600/linux-root-exploit_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjihGwQ8UxM1NUn_brrCEJ9HFiJqzkMK-n8e-BEafmJ_PEeDA0tvHNG3spoxqrmwna3JceapqZb0TthqlZOvPkM4R3tq1DrcjSm9-5C_7BGIRsUz24n9gUCYQsv4QPtcBFg69CFfgXn940/s640/linux-root-exploit_www.hackthesec.co.in.png" width="640" /></a></div> <div> <br /></div> <div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The vulnerability is actually the result of a <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Reference Leak</b> in the keyrings facility built into various flavors of Linux. The keyrings facility is primarily a way to encrypt and store login data, encryption keys and certificates, and then make them available to applications.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, a reference leak could be abused by attackers to ultimately execute arbitrary code in the Linux kernel.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> So far, the researchers said, no exploits have been discovered in the wild that take advantage of this vulnerability.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Perception Point has provided a technical analysis of the vulnerability and how one can exploit it, including <a href="https://gist.github.com/PerceptionPointTeam/18b1e86d1c0f8531ff8f" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">proof-of-concept</a> (PoC) exploit code published on its Github page.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Patch Expected to Roll Out Soon</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The good news is that Perception Point has already reported the flaw to the Linux team, and patches are expected to roll out today to devices with automatic updates.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, it may take a little longer on Android devices to receive the patch, given the fact that most updates aren’t pushed automatically by manufacturers and carriers.<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><h3 style="border: 0px; font-family: inherit; font-size: 1.4em; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: left !important; vertical-align: baseline;"> <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">How Patch Linux Kernel Vulnerability (CVE-2016-0728)</b></h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Type following commands as per your Linux distro:</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <ul style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;"> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Debian or Ubuntu Linux:</b> sudo apt-get update && sudo apt-get upgrade</li> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">RHEL / CentOS Linux:</b> sudo yum update</li> </ul> </div> </div> </div> </div> </div> </div>

Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable

Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable A new critical zero-day vulnerability has been discovered in the...

Read more »

602 Gbps! This May Have Been the Largest DDoS Attack in History

<div dir="ltr" style="text-align: left;" trbidi="on"> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Cyber attacks are getting evil and worst nightmare for companies day-by-day, and the <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Distributed Denial of Service (DDoS) attack</i> is one of the favorite weapon for hackers to temporarily suspend services of a host connected to the Internet.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuYKEs9MmhcTOOG4s0BRrcpCvj1pmr7v6QRcI2zfOsaWm9Hq9ANfHlWmEZL5yjbrlnPg5gy-sWuIROryRcNOsBvtrJGMShrAG4iJ65T_a57GBoP_x5jslOSzMNibzf5SAbQv3hlKI8wlY/s1600/biggest-ddos-attack.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuYKEs9MmhcTOOG4s0BRrcpCvj1pmr7v6QRcI2zfOsaWm9Hq9ANfHlWmEZL5yjbrlnPg5gy-sWuIROryRcNOsBvtrJGMShrAG4iJ65T_a57GBoP_x5jslOSzMNibzf5SAbQv3hlKI8wlY/s1600/biggest-ddos-attack.png" /></a></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Until now, nearly every big website had been a victim of this attack, and the most recent one was conducted against the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">BBC</b>'s websites and Republican presidential candidate <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Donald Trump</b>'s main campaign website over this past holiday weekend.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Out of two, the largest DDoS attack in the history was carried out against the BBC website: <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Over 600 Gbps</b>.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Largest DDoS Attack in the History</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The group calling itself <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">New World Hacking</b> claimed responsibility for taking down both the BBC's global website and Donald Trump's website last week.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The group targeted all BBC sites, including its iPlayer on-demand service, and took them down for at least three hours on New Year's Eve.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> At the moment, the BBC news organization announced that the outage was caused due to some "technical" fault, but later it stated that "New World Hacking" group had claimed responsibility for launching a DDoS attack against BBC, as a <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"test of its capabilities."</i></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> BangStresser DDoS Attack Tool</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> One of the members of the New World Hacking group, identified himself as Ownz, claimed that the group allegedly used their own tool called <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">BangStresser</b> to launch a <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">DDoS attack of up to 602 Gbps </i>on the BBC's website.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> As a proof, the group <a href="http://www.zdnet.com/article/attackers-targeting-bbc-donald-trump-amazon-web-services/" rel="nofollow" style="border: 0px; color: #4184f3; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">provided</a> ZDNet a screenshot of a web interface that was allegedly used to attack the BBC website.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Although the authenticity of the screenshot has not been verified, if the attack size is proven true, it would vastly surpass the largest DDoS attack record of 334 Gbps, recorded by Arbor Networks last year.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The recent massive DDoS attack apparently utilizes two <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Amazon Web Services</b> servers that employ a large number of automated detection and mitigation techniques in order to prevent the misuse of the services, Amazon previously claimed.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"We have our ways of bypassing Amazon,"</i> said Ownz.<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> "The best way to describe it is we tap into a few administrative services that Amazon is use to using. The [sic] simply set our bandwidth limit as unlimited and program our own scripts to hide it."</i></blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> More details about the attack have yet not disclosed, but Ownz claimed that their main purpose behind the development of the BangStresser DDoS tool is to unmask ISIS and possibly end its online propaganda.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"We have been taking down ISIS websites in the past,"</i> said Ownz, <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"this is just the start of a new year."</i></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> A similar group named <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Lizard Squad</b>, conducted a marketing campaign for promoting their DDoS tool, known as the Lizard Stresser, using which the group took down Sony's PlayStation Network and Microsoft's Xbox Live last year on Christmas Eve.</div> </div> </div> </div>

602 Gbps! This May Have Been the Largest DDoS Attack in History

Cyber attacks are getting evil and worst nightmare for companies day-by-day, and the  Distributed Denial of Service (DDoS) attack  is one ...

Read more »

EPIC Fail — For the Third Time, Linux Ransomware CRACKED!

<div dir="ltr" style="text-align: left;" trbidi="on"> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Ransomware is now a common practice for money-motivated cyber criminals. It's basically a type of software written in any system-based programming language that has the ability to hijack victim’s computer, encrypts files and then ask for a ransom amount to get them back.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5uJX7Ry1HFa5N6WGMe4dyaECw2p32s8WT9xNm2sq261tZyRQ90T4kddMruy9RhxT_WRE-Hw_unmbnIlPkBok90LedWo3faQqUfNZUhzl4qW9AD5rxKlwRmYeMSspCnntChFwbD9xKsFQF/s1600/linux-ransomware-decryption-keys.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="167" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5uJX7Ry1HFa5N6WGMe4dyaECw2p32s8WT9xNm2sq261tZyRQ90T4kddMruy9RhxT_WRE-Hw_unmbnIlPkBok90LedWo3faQqUfNZUhzl4qW9AD5rxKlwRmYeMSspCnntChFwbD9xKsFQF/s1600/linux-ransomware-decryption-keys.png" width="320" /></a></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> One such ransomware dubbed Linux.Encoder targets Linux-powered websites and servers by encrypting MySQL, Apache, and home/root folders associated with the target site and asks for 1 Bitcoin (<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">$453.99</i></b>) to decrypt those crucial files.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> But, the good news is it is very easy to get rid of it.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The Malware author released the third version of the Linux.Encoder ransomware, which security researchers from Bitdefender have managed to crack, yet again, after breaking previous two versions.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, before the team managed to release the Linux.Encoder decryption tool, the third iteration of Linux.Encoder ransomware, which was first discovered by antivirus maker Dr.Web, has infected a nearly 600 servers worldwide.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Linux.Encoder Decryption Tool</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Though victims who got infected by the third version of <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Linux.Encoder</i> ransomware doesn't have to pay any ransom to get your important files back, and they can simply unlock it using Bitdefender's <a href="http://labs.bitdefender.com/wp-content/plugins/download-monitor/download.php?id=encoder_3_decrypter.zip" rel="nofollow" style="border: 0px; color: #4184f3; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Linux.Encoder decryption tool</a> to unlock their files.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> But the epic part here is even after the successful decryption of its previous Linux.Encoder ransomware versions, the group of ransomware creators, were still not able to write a perfect code for its third version.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"As we expected, the creators of Linux.Encoder have fixed their previous bugs and have come up with a new and improved variant,"</i> <a href="https://labs.bitdefender.com/2016/01/third-iteration-of-linux-ransomware-still-not-ready-for-prime-time/" rel="nofollow" style="border: 0px; color: #4184f3; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">says</a> BitDefender boffin Radu Caragea. <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"Luckily for the victims, the new variant of Linux.Encoder is still vulnerable to key recovery attacks."</i></blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> It seems that the malware authors of Linux.encoder ransomware are newbie programmers who are just motivated by the success of other popular ransomware such as CryptoWall and CryptoLocker.</div> </div> </div> </div>

EPIC Fail — For the Third Time, Linux Ransomware CRACKED!

Ransomware is now a common practice for money-motivated cyber criminals. It's basically a type of software written in any system-based...

Read more »

Jail Authorities Mistakenly Early Released 3,200 Prisoners due to a Silly Software Bug

<div dir="ltr" style="text-align: left;" trbidi="on"> <div style="background-color: white; border: 0px; color: #222222; font-family: Roboto, arial, Helvetica, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 30px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div id="aim17780150997930533764" style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div dir="ltr" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: left; vertical-align: baseline;" trbidi="on"> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Washington State Department of Corrections (DoC) is facing an investigation after it early released around<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">3,200 prisoners per year</b>, since 2002, when a bug was introduced in the software used to calculate time credits for inmates' good behavior.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The software glitch led to a miscalculation of sentence reductions that US prisoners were receiving for their good behaviour.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Over the next 13 years, the median number of days of those released early from prison was 49 days before their correct release date.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxIaWSwpcms94l1TRQ7Vy-FEHXgAfm1un2UTB_yiStkpDOKJju9c-okjjHnK2pDtWlz-GqNeIa_aCmUITXgctVayu9DcF1kSnCAId2atitCKpIC4wlWXMOfIX0hS-Z_7OIlDnmueu3wRhU/s1600/prison-software-hack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxIaWSwpcms94l1TRQ7Vy-FEHXgAfm1un2UTB_yiStkpDOKJju9c-okjjHnK2pDtWlz-GqNeIa_aCmUITXgctVayu9DcF1kSnCAId2atitCKpIC4wlWXMOfIX0hS-Z_7OIlDnmueu3wRhU/s1600/prison-software-hack.jpg" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> </div> </div> </div> <div class="clear" id="insidearticlead" style="border: 0px; font-stretch: inherit; margin: 15px 10px 10px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div class="clear" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <ins class="adsbygoogle" data-ad-client="ca-pub-7983783048239650" data-ad-slot="1876319540" data-adsbygoogle-status="done" style="border: 0px; display: inline-block; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 90px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline; width: 200px;"><ins id="aswift_1_expand" style="background-color: transparent; border: none; display: inline-table; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 90px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: relative; vertical-align: baseline; visibility: visible; width: 200px;"><ins id="aswift_1_anchor" style="background-color: transparent; border: none; display: block; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 90px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: relative; vertical-align: baseline; visibility: visible; width: 200px;"><iframe allowfullscreen="true" allowtransparency="true" frameborder="0" height="90" hspace="0" id="aswift_1" marginheight="0" marginwidth="0" name="aswift_1" scrolling="no" style="border-style: initial; border-width: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; left: 0px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: absolute; top: 0px; vertical-align: baseline;" vspace="0" width="200"></iframe></ins></ins></ins></div> </div> <div id="aim27780150997930533764" style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /><blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"This problem was allowed to continue for 13 years is deeply disappointing to me, totally unacceptable and, frankly, maddening," </i>Washington State Governor Jay Inslee said in a <a href="http://www.governor.wa.gov/news-media/inslee-announces-immediate-actions-fix-13-year-old-sentencing-errors-discovered-state" rel="nofollow" style="border: 0px; color: #4184f3; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">statement</a>. <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"I've [many] questions about how and why this happened, and I understand that members of the public will have those same queries."</i></blockquote> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-family: inherit; font-size: 1.4em; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> What's the Bug and How did it Remain Undetected for 13 Years?</h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The issue lies in DoC software that is used for calculating the release date for prisoners who showed good behavior while imprisoned.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The software bug was introduced in 2002, when the state's supreme court implemented a change to the "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">good time</b>" credit system, allowing prisoners to claim credits for good behaviour while they are in:</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> <ul style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;"> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">State Prisons </li> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">County jails</li> </ul> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> These credits are then used to shorten the length of prisoner’s sentence. To apply these changes, DoCs around the United States released the new versions of software but unfortunately, the code that calculated prison sentences was faulty.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> </div> <div class="clear" style="border: 0px; font-stretch: inherit; margin: 15px 0px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <center class="clear" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <ins class="adsbygoogle" data-ad-client="ca-pub-7983783048239650" data-ad-slot="3325994802" data-adsbygoogle-status="done" style="border: 0px; display: inline-block; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 90px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline; width: 728px;"><ins id="aswift_2_expand" style="background-color: transparent; border: none; display: inline-table; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 90px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: relative; vertical-align: baseline; visibility: visible; width: 728px;"><ins id="aswift_2_anchor" style="background-color: transparent; border: none; display: block; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 90px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: relative; vertical-align: baseline; visibility: visible; width: 728px;"><iframe allowfullscreen="true" allowtransparency="true" frameborder="0" height="90" hspace="0" id="aswift_2" marginheight="0" marginwidth="0" name="aswift_2" scrolling="no" style="border-style: initial; border-width: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; left: 0px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: absolute; top: 0px; vertical-align: baseline;" vspace="0" width="728"></iframe></ins></ins></ins></center> </div> <div id="aim37780150997930533764" style="border: 0px; font-stretch: inherit; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /><h3 style="border: 0px; font-family: inherit; font-size: 1.4em; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> DoC First Informed of the Issue 3 Years Ago</h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> What's even more disappointing is that the authorities first learned of the bug in December 2012, when the family of an assault victim alerted DoC that the attacker was going to be set free too soon.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> At that time, DoC filed a request, <a href="http://www.seattletimes.com/seattle-news/politics/inslee-error-releases-inmates-early-since-2002/" rel="nofollow" style="border: 0px; color: #4184f3; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">labelling</a> the error as <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"time sensitive" </i>and to be implemented as quickly as possible.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, the Washington DoC hired a new IT manager in November, who alerted the authorities of how serious the bug had become. Inslee assures that a full fix for the bug is expected to be rolled out by 7th January.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 16px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Until then the DoC has been ordered not to release any prisoner without manually checking their actual release date.</div> </div> </div> </div>

Jail Authorities Mistakenly Early Released 3,200 Prisoners due to a Silly Software Bug

Washington State Department of Corrections (DoC) is facing an investigation after it early released around 3,200 prisoners per year , s...

Read more »

Hackers Can Remotely Steal Fingerprints From Android Phones Thursday

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/hackers-can-remotely-steal-fingerprints.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Hackers Can Remotely Steal Fingerprints From Android Phones</a></h1> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">  iPhone and Android’s Fingerprint authentication.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Till now hackers were impersonated simply by lifting prints off the side of a phone and gaining unauthorized access to user's phone and thus data.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCNWPxKiGiR7n02tDJmUEiuM70u_8kM6UVb_iU5hZ5whfcfNDSKprv3misEvGP-3iLFzaknrT85lHii8cnfBJIbctztVB1yUiTbOYUSwtfY7WU5JRPObc9Cn6GpZRJA2YJfjTW8ZFH24ZA/s1600/android-fingerprint-scanner-hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCNWPxKiGiR7n02tDJmUEiuM70u_8kM6UVb_iU5hZ5whfcfNDSKprv3misEvGP-3iLFzaknrT85lHii8cnfBJIbctztVB1yUiTbOYUSwtfY7WU5JRPObc9Cn6GpZRJA2YJfjTW8ZFH24ZA/s1600/android-fingerprint-scanner-hacking.jpg" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> However, security researchers have now discovered four new ways to attack Android devices to extract user fingerprints remotely without letting the user know about it.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The attack, which the researchers dubbed the "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fingerprint Sensor Spying attack</u></b>," could be used by hackers to "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">remotely harvest fingerprints in a large scale,</i>" Yulong Zhang, one of the researchers <a href="http://www.zdnet.com/article/hackers-can-remotely-steal-fingerprints-from-android-phones/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">told</a>ZDNet.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Remotely Hacking Android Fingerprints</h3> </div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> FireEye researchers Tao Wei and Yulong Zhang presented their research in a talk titled, <u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fingerprints on Mobile Devices: Abusing and Leaking</u>, at the<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Black Hat conference</i> in Las Vegas on Wednesday, where they outlined new ways to attack Android devices in an effort to extract user fingerprints.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The new attack is limited mostly to Android devices with Fingerprint Sensors that helps the user to authenticate their identity by simply touching their phone’s screen, instead of by entering a passcode.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Researchers confirmed the attack on the HTC One Max and Samsung's Galaxy S5, which allowed them to stealthily obtain a fingerprint image from the device because vendors don't lock down fingerprint sensors well enough.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The attack affects mobile phones by major manufacturers including handsets delivered by Samsung, HTC, and Huawei.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> <h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Fingerprints vs. Passwords</h3> </div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> If we give a thought, then stolen fingerprints would be an even worse scenario than stolen passwords because you can change your passwords when breached but not just replace your fingerprints.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">In this attack, victims' fingerprint data directly fall into attacker's hand. For the rest of the victim's life, the attacker can keep using the fingerprint data to do other malicious things,</i>" said Zhang.</blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The good news is that the issue is relatively easy to fix by adding encryption to the fingerprint data on Android devices, and affected vendors have since released patches after being alerted by the researchers.<br /> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> Researchers have not shared any "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">proof-of-concept</i>" detailing exactly how the fingerprint stealing attack can be executed remotely.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Meanwhile Apple users can just sit and relax, as it appears that iPhone and iPad's Touch ID is "quite secure" because it encrypts fingerprint data from the scanner with a crypto key, making it unreadable even if hackers gain access.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Users need to note that Google doesn't yet officially support fingerprints in its mobile operating system, but it will soon do support fingerprint sensors with the Android M update.</div> </div> </div>

Hackers Can Remotely Steal Fingerprints From Android Phones Thursday

Hackers Can Remotely Steal Fingerprints From Android Phones  iPhone and Android’s Fingerprint authentication. Till now hackers were ...

Read more »

This Antenna Can Remotely Steal Data From Devices using Sound Waves

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/this-antenna-can-remotely-steal-data.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; vertical-align: baseline;">This Antenna Can Remotely Steal Data From Devices using Sound Waves</a></h1> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Remember the previously demonstrated technique to Hack into air-gapped computers using Heatwaves?</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> What if the same was possible to hack computers to steal data using <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Sound waves</b>?</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Imagine, If a remote hacker could steal classified information from a targeted computer without having to physically and Internet access to it.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUsuHmZn8OhvGwVmtfCxhmRvPZAuhQLgaB53HX-OyICh0se-mj9iimP_NbWbykc0LAWSsyi8XuovHBLSoF3zGapJEluFXfL_QBFufUyV4OKbmJlsOyvd7JZ3Ifua8mOczL5BYgNwanxTL-/s1600/hacking-computer-sound-wave.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUsuHmZn8OhvGwVmtfCxhmRvPZAuhQLgaB53HX-OyICh0se-mj9iimP_NbWbykc0LAWSsyi8XuovHBLSoF3zGapJEluFXfL_QBFufUyV4OKbmJlsOyvd7JZ3Ifua8mOczL5BYgNwanxTL-/s1600/hacking-computer-sound-wave.jpg" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> A team of security researchers has demonstrated exactly the same by developing a new hacking technique called <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Funtenna</b> that uses sound and radio waves to siphon data from computers even without Internet access.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> According to a lead researcher <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Ang Cui</b> of Red Balloon Security, the Funtenna radio signal hack has the potential to turn Internet-connected devices (printer, washing machine and air conditioner) – popularly known as the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Internet of Things </b>– into bugs that can transmit data out of a network using sound waves that can not be heard by a human ear.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> How Funtenna Works?</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The attacker only needs to install malware on a target's device such as a printer, office phone, or a computer.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2KGLtFM4Gdi0h-3c_YhSbgyuhyg04IXb1SZytLdM0M88D3omXu8enI8Z8D9TuqXTO_OmMKzMWq8Sd7M9h2s3GE69Mje7rYGeiq6kVVq5qdsvMk0hWeh6xtnZThBSBhMFuU1lrlUUizO23/s1600/hacking-computer-funtenna-sound-waves.jpg" imageanchor="1" style="border: 0px; clear: left; color: #3d5a99; cursor: default; float: left; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px 1em 1em 0px; outline: none; padding: 0px; pointer-events: none; text-decoration: none; vertical-align: baseline;"><img alt="This Antenna Can Steal Data From Remote Computers Using Sound Waves" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2KGLtFM4Gdi0h-3c_YhSbgyuhyg04IXb1SZytLdM0M88D3omXu8enI8Z8D9TuqXTO_OmMKzMWq8Sd7M9h2s3GE69Mje7rYGeiq6kVVq5qdsvMk0hWeh6xtnZThBSBhMFuU1lrlUUizO23/s1600/hacking-computer-funtenna-sound-waves.jpg" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; max-width: 728px; outline: none; padding: 0px; vertical-align: baseline;" title="This Antenna Can Steal Data From Remote Computers Using Sound Waves" /></a></div> </div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The malware overtakes the control of the electronic circuit of the device (general-purpose input/output circuits) and vibrates them at a frequency (which transmits radio signal) of the attacker's preference.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> An attacker then can pick up these signals using an AM radio antenna (Funtenna) from a short distance away.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> "You have network detection, firewalls… but this transmits data in a way that none of those things are monitoring, this fundamentally challenges how certain we can be of our network security," <a href="https://www.rt.com/usa/311689-funtenna-hacking-sound-waves/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">said</a> Cui.</blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Here, the hacked devices are themselves acting as transmitters. Therefore, the new Funtenna technique bypasses all conventional network security methodologies.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> You can also <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">watch a video demonstration</i></b> of how Funtenna works below:</div> <div class="video-container" style="border: 0px; font-stretch: inherit; height: 0px; margin: 0px; outline: 0px; overflow: hidden; padding: 30px 0px 409.5px; position: relative; vertical-align: baseline;"> <iframe allowfullscreen="" frameborder="0" height="281" mozallowfullscreen="" src="https://player.vimeo.com/video/135270882?title=0&byline=0&portrait=0" style="border-style: initial; border-width: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 439.5px; left: 0px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: absolute; top: 0px; vertical-align: baseline; width: 728px;" webkitallowfullscreen="" width="500"></iframe><br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Funtenna is actually using a technique known as "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Hardware Agnostic</i></b>," which is generally available to operate with all modern computer systems and embedded devices.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The team showcased its new technique in action at the Black Hat security summit in Las Vegas on Wednesday. It will also release a "proof-of-concept" code for researchers and hackers.</div> </div> </div>

This Antenna Can Remotely Steal Data From Devices using Sound Waves

This Antenna Can Remotely Steal Data From Devices using Sound Waves Remember the previously demonstrated technique to Hack into air-gapp...

Read more »

Global Internet Authority — ICANN Hacked Again! Thursday

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/global-internet-authority-icann-hacked.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Global Internet Authority — ICANN Hacked Again!</a></h1> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN</b> (Internet Corporation for Assigned Names and Numbers) – the organisation responsible for allocating domain names and IP addresses for the Internet – <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">has been hacked</b>, potentially compromising its customers’ names, email addresses, hashed passwords, and more.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The US-administered non-profit corporation <a href="https://www.icann.org/news/announcement-2015-08-05-en" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">admitted</a> on Wednesday that its server security was breached within the past week and that…</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> …an "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">unauthorised person</i>" <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">gained access to usernames</b>,<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> email addresses</b></i>, and encrypted passwords for profile accounts on <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN.org</i> public website.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The organisation believes that the leaked information includes harmless information such as user preferences, public biographies, interests, newsletters, and subscriptions.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Less than ten months ago, ICANN was hacked by a hacker who gained access to its internal system following a spear phishing attack in November last year. Employees were tricked into handing over their credentials after receiving malicious emails apparently sent from the ICANN's own domain.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> With those details, the hackers then managed to access ICANN systems, including the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Centralized Zone Data System</i></b> (CZDS), the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">domain registration Whois portal</i></b>, the wiki pages of the ICANN<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Governmental Advisory Committee</i></b> (GAC), and ICANN blog.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The passwords compromised in the latest data breach were encrypted one-way using the bcrypt algorithm.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"These encrypted passwords (hashes) are not easy to reverse,"</i> ICANN said, <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"but as a precaution we [require] that all users reset their passwords."</i></blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, there's no evidence that any profile accounts, or its internal systems have been accessed without authorization, nor any operational data, financial data, or <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">IANA (Internet Assigned Numbers Authority) systems</i></b> were involved.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The IANA is also a part of ICANN, which performs the actual management of the DNS root zone, globally-unique names and numbers.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Users are recommended to change their online account passwords, or just not using the same password across multiple websites.</div> </div> </div>

Global Internet Authority — ICANN Hacked Again! Thursday

Global Internet Authority — ICANN Hacked Again! ICANN  (Internet Corporation for Assigned Names and Numbers) – the organisation responsi...

Read more »