Infosec Feeder

Another way you making all your accounts easily hacked

<h2>
<span style="font-family: Georgia,"Times New Roman",serif;"><span style="font-size: large;"><b><span style="font-weight: normal;"><u><span style="color: red;">Another way you making all your accounts easily hacked</span></u></span></b></span></span></h2>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1SYbiropuPP9t9gcXrEk0jxtLzbXrjz9UVbI5Uza13458_5rV3wtBql2KJWyukYGpclO05R7_3uBH1kdcGpHr-pmNIyHmjFz8E66eDReX7Tjl7eVYJmN-DpUoVKp2rlCboksKmoADTgkF/s1600/charleston-free-wi-fi-flickr.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1SYbiropuPP9t9gcXrEk0jxtLzbXrjz9UVbI5Uza13458_5rV3wtBql2KJWyukYGpclO05R7_3uBH1kdcGpHr-pmNIyHmjFz8E66eDReX7Tjl7eVYJmN-DpUoVKp2rlCboksKmoADTgkF/s1600/charleston-free-wi-fi-flickr.jpg" width="400" /></a></div>
<br />
<span style="text-align: justify;">If you are connected to an insecure wifiyou are pawing a way toeasily hack all your accounts. </span><br />
<div class="MsoNormal" style="text-align: justify;">
<h3>
<b>Use free public wifi at your own risk</b></h3>
Anyone connected to the same wifiwhich you are accessing could possibly can sniff the traffic over the network and have access to any account with malicious intenttion. Facebook, youtube, online banking... anything.Prefer accessing accounts you care about on wifi networks you trust.<br />
<h3>
<b><br /></b></h3>
<h3>
<b>DO NOT use WEP for your router security, use WPA or preferably WPA2</b></h3>
WEP keys are extremely easy to hack (which this ebook will cover) and once some ones on your network<br />
 If your router has WPS enabled (wireless protected setup), DISABLE IT. An exploit allows WPS to be cracked pretty quickly allowing the attacker to figure out your WPA2 key.<br />
<h3>
<b>
If you think someone on your network may be trying to access your accounts, browse using HTTPS </b></h3>
Most popular websites support HTTPS (facebook, Gmail,  etc) and this prevents most network sniffing applications fail to retrieve your account info. You can use the HTTPS version of a website simply by replacing HTTP to HTTPS in the URL. Example: <b>https://facebook.com</b> instead of <b>http://facebook.com</b>. Some hacks out there can redirect you from the secure HTTPS to HTTP, so if you're onsure of the network you're connected to, stay aware of the URL.<br />
<h3>
<b><br /></b></h3>
<h3>
<b>Don't buy things online while connected to a public network</b></h3>
Avoid online purchase when you are accessing any unknown wifi service<span style="mso-spacerun: yes;"></span><br />
<div>
<br /></div>
</div>

Another way you making all your accounts easily hacked

Another way you making all your accounts easily hacked If you are connected to an insecure wifiyou are pawing a way toeasily hack all y...

WHY YOU ALLOW TO STEEL YOUR PASSWORD

<br />

<br />
<h2 class="MsoNormal">
<span style="color: blue;"><u><span style="font-size: large;">WHY YOU ALLOW TO STEEL YOUR PASSWORD</span></u><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLNjPX4fl9Y29BBYZd7zXtVd_9pv4-W_UtzrgL6cdYT9lJhjcjfkEcHTnmRSY4NU6w1I3YAiHdgYCLqWnjolL4hSF34GXYGN73uAyDO5fPJv4LSm5kg9RgDzzYlnsT6no70YZ5jchj_ghw/s1600/Password-fuerte.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="162" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLNjPX4fl9Y29BBYZd7zXtVd_9pv4-W_UtzrgL6cdYT9lJhjcjfkEcHTnmRSY4NU6w1I3YAiHdgYCLqWnjolL4hSF34GXYGN73uAyDO5fPJv4LSm5kg9RgDzzYlnsT6no70YZ5jchj_ghw/s1600/Password-fuerte.jpg" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Bad passwords</td></tr>
</tbody></table>
</span>20% of all passwords are easily guessed by others. Example
of bad passwords: <span style="mso-spacerun: yes;"> </span>I love you, big ben, London,
password, 12345, qwerty, your name, your birthday, etc.</h2>
<div class="MsoNormal">
<br /></div>
<h4 class="MsoNormal">
<span style="color: red;"><b style="mso-bidi-font-weight: normal;">Have a strong
password<span style="mso-spacerun: yes;">  </span></b></span></h4>
<div class="MsoNormal">
<span style="mso-spacerun: yes;"> </span>The best way to
prevent someone from getting your passwords, is to have a strong password to
being with The best passwords are more than 8 characters long, contain at least
1 capital letter, and contain at least 1 number. This will make it almost
impossible for your password to be brute forced. you may ask, What is Brute forcing?
It’s when a hacker runs a program that<span style="mso-spacerun: yes;"> 
</span>tries <span style="mso-spacerun: yes;"> </span>every letter/number/symbol
combination to guess your password. If you follow these tips for a stronger
password, it will take years to brute force your password.</div>
<div class="MsoNormal">
<br /></div>
<h4 class="MsoNormal">
<span style="color: red;"><span style="mso-spacerun: yes;"> </span><b style="mso-bidi-font-weight: normal;">Security questions</b></span></h4>
<div class="MsoNormal">
The easiest way someone can gain access into your accounts,
is to guess the answers to the security questions of your account. These are
the questions you're asked when you first make an email account, like What was
your first dogs name?. Make sure the security questions you choose have answers
that aren't easily guessable. If you have a security question that asks Where
did you meet your spouse?, which is your birth place? These are bad questions <span style="mso-spacerun: yes;"> </span>to choose. Anyone who browses your face book
or asks someone you know can get the answer to this. So make sure you choose
questions no one knows the answer to, or make the answers something only you
would know.</div>
<div class="MsoNormal">
<br /></div>
<span style="color: red;">

</span><br />
<h4 class="MsoNormal">
<span style="color: red;"><span style="mso-spacerun: yes;"> </span><b style="mso-bidi-font-weight: normal;">Never</b> <b style="mso-bidi-font-weight: normal;">Try not to use the
same passwords for all of your accounts</b></span></h4>
<div class="MsoNormal">
Make your e-mail password different from your face book
password, and so on. If someone manages to get one of your passwords, they will
have access to ALL your accounts if they use the same password.<span style="color: #38761d;"><b> </b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgj4Xj2fIRpUeRU7PfKgS0j5g5ATol2WYBpRCCeJJALcksLBNkE12A487-0ZRhZ03d9rJZ7z0cVbSynd0ftXdojgLv9Vnh4OFQZIxPvUGUqLDgQOTBDYiHF8XjDfNSuTSIJ0MkEP7rb7QLK/s1600/strong_password.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="176" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgj4Xj2fIRpUeRU7PfKgS0j5g5ATol2WYBpRCCeJJALcksLBNkE12A487-0ZRhZ03d9rJZ7z0cVbSynd0ftXdojgLv9Vnh4OFQZIxPvUGUqLDgQOTBDYiHF8XjDfNSuTSIJ0MkEP7rb7QLK/s1600/strong_password.png" width="320" /></a></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b>IF YOU MAKE A PASSWORD INCLUDING  8+ NUMBERS, 1 UPPERCASE LETTER,1LOVERCASE LETTER AND A SPECIAL CHARACTER. <span style="color: magenta;">IT WOULD TAKE ABOUT MORE THAN 204 THOUSAND YEARS TO STEAL THIS PASSWORD</span></b></span></div>

WHY YOU ALLOW TO STEEL YOUR PASSWORD

WHY YOU ALLOW TO STEEL YOUR PASSWORD Bad passwords 20% of all passwords are easily guessed by others. Example of bad passwords: I...

Tyupkin Malware Infected ATMs give away dollars without credit cards

<div class="separator" style="clear: both; text-align: center;">
<img alt="ATM" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhT28TZ5W6sWT1ILP4PcrQoKWKw1RRDR5AS69lrTMV6d4trqcKseh4nETygIIvt1XG2f90TUclXHDns1wlJlJk3Z6IgHbzOQwj59-KQvDEmUkfFW1005EMOQlbd5bDhmxf0aXYMJw_p8K4k/s1600/shot6%5B1%5D.png" title="ATM" /></div>
<br />
In the past criminals used <a href="http://en.wikipedia.org/wiki/Credit_card_fraud#Skimming" target="_blank">card skimmers</a> to steal debit card numbers and then steal the debit cards to get money.Now due to the technology advancement they use specialized malwares to withdraw cash without using the card.<br />
<br />
This malware was detected by <a href="http://www.kaspersky.com/" target="_blank">Kaspersky Lab</a> as <b>Backdoor.MSIL.Tyupkin </b> ,affects ATMs running 32-bit Microsoft Windows platforms.Criminals use
bootable CD to install malware.It is only active at a specific time on Sunday and Monday nights.Without inserting a card they type a combination of 
numbers to get unique random number. Then they need a session key generated for every session based on the random number.(without this key nobody can interact with infected ATM.)They get session key from another one who knows the algorithm and able to generate session key based on the number shown via phone.After entering the session key correctly ATM displays details of how much money available in each cash cassette.Then they choose the cassette to rob and ATM dispenses 40 money notes from the selected cassette.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<img alt="Tyupkin Malware" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkDaGSW4xCHXDOVA6IkSjEEzb8O94Eed9BccX5VZpe9ISDYRsESBJJZuDQQ0oJtJbzcg8-wvIQ-dONM8yyoR6f4jkbDdUEC3Bki7_I6tXil3xhsDMHEHVIXmxa1ED7Erhjqi0kSXNmlJSX/s1600/Tyupkin_pic_fin.jpg" title="Tyupkin Malware" /></div>
<b><br /></b>
<h3>
<b>Infected ATMs display after entering correct session key</b></h3>
<b><br /></b>
<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyMyKawI__Ed6Qk6PSpbYb-mlc64gob-A3mSixgGIKh6Ng6XzGp8D6Q80ud12_6SxlTQRoxqE96Zu5G-ZETowNrINXhrL_gn_o53CdKwu9ZJrPMJH6xQ5UBYu2oinDZ8qa_5nfH_zWcwud/s1600/650x245xTyupkin-malware-ATM-650x245.jpg.pagespeed.ic.0Gn5boS49X.jpg" /></div>
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji-NfOXEjdN_V6CcG0HBgtq5uEKhxACpJ-le-TmGw7xVeztv3rbhtKj11BsJloXsmLCGvA1SNTQ_CjCw05d-pYRhW70u8FIdrMRlEq-uJHHBIrimgKQBVXrNCj7yk983ptreaZpbz51Cu8/s1600/hqdefault.jpg" /></div>
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdisC8mZziCLoUIF3ie_D9-gD_nY8CvZjGx8M5JYOkS7-zDVPZS020KOHnDY6fywopEAkhFtQ_Ew-12t20JPSyTZI8cKORmK3awtkkspsy6oZ9PfDUbtr9sZL05uIvHHZ5lOjOdAEfDGn6/s1600/Tyupkin_3.jpg" /></div>
<b><br /></b>
<br />
<h3>
<b>Video on how the attack works </b></h3>
<br />
<br />
<center>
<iframe allowfullscreen="" frameborder="0" height="340" src="//www.youtube.com/embed/QZvdPM_h2o8" width="480"></iframe></center>
<br />
<br />
<br />
<br />
<br />
<br />
<br />

Tyupkin Malware Infected ATMs give away dollars without credit cards

In the past criminals used card skimmers to steal debit card numbers and then steal the debit cards to get money.Now due to the technolo...

National Chamber conducts Seminar on Cyber Crimes on September 25

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiPJOykpYJOhS0R-P8fhcJoRMbWCikTXruhbhF3Nk7_H0oYgJf0bYWtPCUSF7TlUV28PlvG-jt9Z_m0ClgixlcTEnNKFO385GdauAtSMfbcklumPPTKLU9mJdGW5_wdoAE1ypFJnmO9CWm/s1600/cybercrime.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="national-chamber-conducts-seminar-on-cyber-crime" border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiPJOykpYJOhS0R-P8fhcJoRMbWCikTXruhbhF3Nk7_H0oYgJf0bYWtPCUSF7TlUV28PlvG-jt9Z_m0ClgixlcTEnNKFO385GdauAtSMfbcklumPPTKLU9mJdGW5_wdoAE1ypFJnmO9CWm/s1600/cybercrime.jpg" title="national-chamber-conducts-seminar-on-cyber-crime" width="400" /></a></div>
<br />
An <b>cyber security awareness</b> seminar ‘<b>Cyber Crimes: A New Threat To Your Corporate Environment</b>’ will be held on Thursday, September 25, 2014  from 2.30 pm to 5pm at the National Chamber Auditorium,  450, D. R. Wijewardena Mawatha, Colombo 10.<br />
<br />
The event will be host by The <a href="http://www.mea.gov.lk/index.php/missions/mission-activities/3142-national-chamber-of-commerce-of-sri-lanka--nccsl-in-collaboration-with-sri-lanka-high-commission-in-the-united-kingdom-launches-a-web-based-information-gathering-system-to-help-sri-lankan-students-to-find-placement-employment-opportunities-in-sri-lank" target="_blank">National Chamber</a> of Commerce in collaboration with Sri Lanka (CERT|CC) Computer Emergency Readiness Team & Coordination Centre, (the Competent Authority to monitor cyber security in Sri Lanka)<br />
<br />
The <b>Sri Lankan cyber</b> situation is now getting out of hand and Cyber crimes may have an impact on national security, banking, financial /non financial sector and national data bases which are under severe threat today. Prevention of such incidents is of paramount importance.<br />
<br />
The seminar speakers, Lal Dias, CEO and Eng Roshan Chandraguptha of CERT|CC will covers the following areas, Threat of targeted attacks on individual or corporate networks (Case studies) Cyber-crime and fraud risks in Sri Lanka Financial / non-financial sectors, Various aspects of  cyber crimes and how they can be effectively mitigated and how Sri Lanka CERT|CC can help the private sector in identifying  cyber  crimes.<br />
<br />
The main objective of this seminar is to make corporate leaders aware on how to protect their customers informations from cyber attacks and how to protect their information systems from cyber attacks.<br />
<br />
The event will be useful for CEOs, CIOs, CFOs, I.T. Professionals, Financial Controllers, Managing Directors, CEOs CIOs. Seats will be available on first come, first served basis. For registrations contact the Chamber, Buddika 071 4842863 or Dilrukshi on 4741788.

National Chamber conducts Seminar on Cyber Crimes on September 25

An cyber security awareness seminar ‘ Cyber Crimes: A New Threat To Your Corporate Environment ’ will be held on Thursday, September 25,...

Payment system of Home Depot is Hacked : 60 Million users are affected

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Payment system of Home Depot is Hacked : 60 Million users are affected" border="0" height="166" src="http://4.bp.blogspot.com/-siUAuaEIcnE/VBwMtfLC8dI/AAAAAAAAAAc/C39CpDchF4w/s1600/n-HOME-DEPOT-HACK-large570.jpg" title="" width="400" /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
The Home Depot is one of the American retailer of home improvement and construction products and services. It operates many big-box format stores across the United States, all ten provinces of Canada, as well as Mexico. Home depot has admitted now that its system was hacked and the credit card details of 60 million users are at risk. Home Depot said that the hackers used a <a href="http://www.infosecfeeder.com/2014/09/kyle-and-stan-malvertising-network.html" target="_blank">malware</a> which make use of a zero day (a vulnerability about which system vendors are unaware of). they also mentioned that this malware is impossible to be detected by a traditional antivirus software. Now they have removed those malwares and they have started to use point to point encryption technology.</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
“We apologize to our customers for the inconvenience and anxiety this has caused, and want to reassure them that they will not be liable for fraudulent charges,” Home Depot CEO Frank Blake said in a statement. “<i>From the time this investigation began, our guiding principle has been to put our customers first, and we will continue to do so</i>.”</div>
<div style="text-align: left;">
<br />
Are you one of those affected users?<br />
<br />
Don't forget to find more <a href="http://www.infosecfeeder.com/p/ethical-hacking-in-sri-lanka.html" target="_blank">exclusive Ethical Hacking News over here</a>.</div>
</div>

Payment system of Home Depot is Hacked : 60 Million users are affected

The Home Depot is one of the American retailer of home improvement and construction products and services. It operates many big-box fo...

AppBuyer: New iOS Malware Steals Apple ID and Password to Buy Apps

<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.infosecfeeder.com/2014/09/appbuyer-new-ios-malware-steals-apple.html"><img alt="AppBuyer: New iOS Malware Steals Apple ID and Password to Buy Apps" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRDco-CIx2C398tqEus4op3GmNagBbJLRAr8OXbXZoEWRNwn0w7a-dKJctit4BXHF0mKT_6N0SFZ6j2NGnT1bVoITGsHc98hp48yrizIiKsEGpP7x7j8KN4N8bBR5dEKpuJ51_jkKm7rAI/s1600/AppBuyer-Malware-iOS-Jailbreak.jpg" title="" /></a></div>
<br />
The researchers at Palo Alto Networks report that was recently found and analyzed a <a href="http://www.infosecfeeder.com/p/ethical-hacking-in-sri-lanka.html" target="_blank">new <b>malware</b></a> called <b>AppBuyer</b> which affects broken iOS devices to steal Apple ID and Passwords. The <a href="http://www.infosecfeeder.com/search/label/Malwares" target="_blank">malware</a> will connects to server C & C, in order to download and <a href="http://www.infosecfeeder.com/2014/09/kyle-and-stan-malvertising-network.html" target="_blank">execute malicious files</a>, with the target to steal the Apple ID and password in order to purchase applications from App Store.<br />
<br />
At the moment it is not clear how AppBuyer installed in jailbroken devices , but the PA Network said that the program was set to execute three actions, First, it downloads an EXE file to generate a singular UUID, second it downloads a Cydia Substrate tweak to steal the consumer’s ID and password, and third, it downloads a utility to login to the App Store and purchase apps.<br />
<br />
For users who have already done the jailbreak to their devices, here is a way to determine if one or some of these files exist in the file system. You can use iFile, iExplorer or similar software to find if any of the following files are on your device,  If these files are present, there is a good chance that you are affected.<br />
<ul>
<li>/System/Library/LaunchDaemons/com.archive.plist</li>
<li>/ Bin / updatesrv</li>
<li>/tmp/updatesrv.log</li>
<li>/ Etc / uuid</li>
<li>/Library/MobileSubstrate/DynamicLibraries/aid.dylib</li>
<li>/ Usr / bin / gzip</li>
</ul>
We highly recommend iOS users not jailbreak their devices. AdThief, another iOS malware found by Palo Alto Networks in this year, which also targets jailbroken iOS devices, has infected more than 75,000 devices. Another example is Unflod, which is a malicious Cydia Substrate tweak, will steal a victim’s Apple ID in the similar way. said, Claud Xiao, security researcher at PA Network on a <a href="http://researchcenter.paloaltonetworks.com/2014/09/appbuyer-new-ios-malware-steals-apple-id-password-buy-apps/" target="_blank">blog post</a>.<br />
<br />
<br />

AppBuyer: New iOS Malware Steals Apple ID and Password to Buy Apps

The researchers at Palo Alto Networks report that was recently found and analyzed a new malware called AppBuyer which affects broken iO...

WikiLeaks Releases FinFisher Malware, A weaponised German surveillance malware

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="finfisher" border="0" height="228" src="http://3.bp.blogspot.com/-Tq3CdsTUbkY/VBhmTOB0gpI/AAAAAAAAAAM/nBxIaZLNh-Q/s1600/download.jpg" title="finfisher" width="400" /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br />
WikiLeaks has released copies of <a href="https://wikileaks.org/spyfiles/files/0/289_GAMMA-201110-FinSpy.pdf" target="_blank">FinFisher</a> to the public in its website. FinFisher is used by (some) government agencies to monitor the people anonymously. With the release of these files it is expected to develop some methods to detect FinFisher infection and tools to remove it.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
FinFisher is a German based company established first a part of Gamma Group in 2007. From 2013 it is functioning as a independent company. WikiLeaks also releases brochures, video documents, database containing details of customers of FinFisher.</div>
<blockquote class="tr_bq" style="text-align: justify;">
<blockquote class="tr_bq">
<span style="background-color: white; color: #555555; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; line-height: 20px;">FinFisher continues to operate brazenly from Germany selling weaponised surveillance malware to some of the most abusive regimes in the world. The Merkel government pretends to be concerned about privacy, but its actions speak otherwise. Why does the Merkel government continue to protect FinFisher? This full data release will help the technical community build tools to protect people from FinFisher including by tracking down its command and control centers</span></blockquote>
</blockquote>
<div style="text-align: justify;">
 said <a href="http://en.wikipedia.org/wiki/Julian_Assange" target="_blank">Julian Assange</a>, WikiLeaks Editor in Chief.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Visit Here to take a look at the wikileak's page: https://wikileaks.org/spyfiles4/<br />
<br /></div>
<div style="text-align: justify;">
Visit here to take a look FinFisher's Documents: https://wikileaks.org/spyfiles4/documents.html</div>
</div>

WikiLeaks Releases FinFisher Malware, A weaponised German surveillance malware

WikiLeaks has released copies of FinFisher to the public in its website. FinFisher is used by (some) government agencies to monitor ...