Infosec Feeder

Sony Picture Entertainment another leak

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD7D58zbYjruupCoenCB-IUY4SdFbanXkwwBAFOwdLza4w8isPr8d2qwzkjFfXE6Slz2thHHa_3VFVg2YPkMDEgqI97-_xaNJC6el7YBHRaPLohGuJpgVlHvbXpv89JhaG_pPM_U8BsRfM/s1600/Info_Leak_Secret_Document.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD7D58zbYjruupCoenCB-IUY4SdFbanXkwwBAFOwdLza4w8isPr8d2qwzkjFfXE6Slz2thHHa_3VFVg2YPkMDEgqI97-_xaNJC6el7YBHRaPLohGuJpgVlHvbXpv89JhaG_pPM_U8BsRfM/s400/Info_Leak_Secret_Document.jpg" /></a></div>
By the end of the last month <a href="http://www.infosecfeeder.com/2014/12/sony-picture-entertainments-computer.html" target="_blank">Sony picture entertainment was hacked</a> by a 
group called themselves Gaurdians Of Peace (GOP).They released 4 unreleased movies in
the file sharing websites.<br />
<br />
After the hack on sony pictures and leak of unreleased movies.The attackers
GOP (Guardians Of Peace)now leaked some sensitive and confidential documents of 
the company. This includes employees information, celebrities phone numbers, film
budgets, unreleased movie scripts and 
many other.<br />
<br />
Two days ago they again revealed some confidential information of sony picture 
entertainment to public. It could be a serious threat for sony picture 
entertainment.<br />
<br />
The recent leak of data includes,<br />
<ul>
<b>
<li>Movie expenses -</li>
</b> The details of the expenses for movies including their invoices.

<b>
<li>Celebritie's personal informations -</li>
</b>Many celebrities's personal info such as Brad 
Pitt's phone number,Seth Rogen and Emma Stone's personal email addresses,
Jesse Eisenberg's home address and many celebrities details.

<b>
<li>Unreleased movie scripts -</li>
</b>Scripts of the unreleased movies such as Wedding Ringer
with Kevin Hart(2015),Paul Blart Mall Cop 2 (2015),etc

<b>
<li>Bank Accounts Details -</li>
</b> Details of bank accounts belongs to company and also 
 some personal accounts.

<b>
<li>Release Schedule -</li>
</b> Movie release schedules of sony picture's movies.

</ul>

Sony Picture Entertainment another leak

By the end of the last month Sony picture entertainment was hacked by a group called themselves Gaurdians Of Peace (GOP).They released 4...

Android 'DeathRing' Malware Being Preloaded on Cheap Smartphones

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_fCJKQd0VTxy8R1DELFXvj1fk0c6Uy63tbtJqYic6_gJ6Z1vC3hYmFMQOg5YSryWR0Gqw6cjE1GE1nX5Sz8YLR2c-KTpEUcYSUjbB-7rchcSmRSP8SWVKNdz-hwszsMR0gruBHjiu5gfl/s1600/deathring-android-malware.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_fCJKQd0VTxy8R1DELFXvj1fk0c6Uy63tbtJqYic6_gJ6Z1vC3hYmFMQOg5YSryWR0Gqw6cjE1GE1nX5Sz8YLR2c-KTpEUcYSUjbB-7rchcSmRSP8SWVKNdz-hwszsMR0gruBHjiu5gfl/s1600/deathring-android-malware.jpg" width="400" /></a></div>
<div>
<br /></div>
<div>
<b>DeathRing is a Chinese Trojan</b> that is pre-installed on a number of low cost smartphones which are most popular in Asian and African countries. An end user cannot uninstalled or delete the DeathRing malware as it comes pre-installed in the system directory of the handsets at an unknown point within the supply chain, making the threat even more severe. </div>
<div>
<br /></div>
<div>
<div>
<b>WHAT DOES IT DO?</b></div>
</div>
<div>
On infected mobiles, DeathRing pretends to be a ringtone app but can be used to download other <a href="http://www.infosecfeeder.com/search/label/Malwares" target="_blank">malware</a>, communicating with its command and control via SMS or even the ancient WAP.</div>
<div>
<blockquote class="tr_bq">
"DeathRing might use SMS content to phish victim’s personal information by fake text messages requesting the desired data. It may also use WAP, or browser, content to prompt victims to download further APKs — concerning given that the malware authors could be tricking people into downloading further malware that extends the adversary’s reach into the victim’s device and data" the security firm LookOut wrote in a blog <a href="https://blog.lookout.com/blog/2014/12/04/deathring/" rel="nofollow" target="_blank">post</a>.</blockquote>
</div>
<div>
<b>AFFECTED DEVICES,</b></div>
<div>
According to the LookOut the following handsets are pre loaded with the malware. </div>
<div>
<div>
<ul>
<li>Counterfeit Samsung GS4/Note II</li>
<li>A variety of TECNO devices</li>
<li>Gionee Gpad G1</li>
<li>Gionee GN708W</li>
<li>Gionee GN800</li>
<li>Polytron Rocket S2350</li>
<li>Hi-Tech Amaze Tab</li>
<li>Karbonn TA-FONE A34/A37</li>
<li>Jiayu G4S – Galaxy S4 clones,</li>
<li>Haier H7</li>
<li>a i9502+ Samsung clone by an unspecified manufacturer</li>
</ul>
<div>
<b>THIS IS NOT A FIRST TIME,</b></div>
</div>
</div>
<div>
<div>
Earlier this year, the security researchers in the firm LookOut have detect another pre-loaded piece of malware called <b>Mouabad</b>. Very similarly to DeathRing, Mouabad is also pre-installed somewhere in the supply chain and affected predominantly Asian countries.</div>
</div>

Android 'DeathRing' Malware Being Preloaded on Cheap Smartphones

DeathRing is a Chinese Trojan that is pre-installed on a number of low cost smartphones which are most popular in Asian and African co...

Sony picture entertainment Hacked.

<font size="2">Sony picture entertainment's computer network system was breached last week.
Many sensitive datas and 5 unreleased movies also stolen from the system.
4 movies leaked on file sharing websites before they hit theatres.<br>
Leaked films 
<ul>
<li><b>Still Alice</b></li>
<li><b>Mr Turner</b></li>
<li><b>Annie</b></li>
<li><b>Fury</b></li>
<li><b>To Write Love on Her Arms</b></li>
</ul> 
Except Fury (released on october) other four movies are not yet released. 
Sony was attacked on November 25 by the group calling itself <b>Guardians of Peace</b> 
or <b>#GOP</b>.Before the system crash screens display a message "Hacked by #GOP".
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCBrNTqlMaZkE0XC3ORsWIjPWMJkLoQy5_PIUbOAmF6lJ0iLBvPSPO6kOBkCVB_HNcWk-0SftPkJjS-23mmdxTWRuSRU07Dxx1YP0e1J75IU17b-Oy3G8JaEgRtNb7Rc7gWaCkW-RPb2Vg/s1600/sony_0.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCBrNTqlMaZkE0XC3ORsWIjPWMJkLoQy5_PIUbOAmF6lJ0iLBvPSPO6kOBkCVB_HNcWk-0SftPkJjS-23mmdxTWRuSRU07Dxx1YP0e1J75IU17b-Oy3G8JaEgRtNb7Rc7gWaCkW-RPb2Vg/s640/sony_0.jpg" /></a></div>

Company not found how the breach took place.It is working with law enforcement 
officials from FBI and a cyber-security firm FireEye Inc to investigate security flaw.
According to Wall Street Journal investigators identified malicious code similar to 
the codes used to attack south korean companies.</font>
Now the company has restored some important services after the attack.

Sony picture entertainment Hacked.

Sony picture entertainment's computer network system was breached last week. Many sensitive datas and 5 unreleased movies also stolen...

Another way you making all your accounts easily hacked

<h2>
<span style="font-family: Georgia,"Times New Roman",serif;"><span style="font-size: large;"><b><span style="font-weight: normal;"><u><span style="color: red;">Another way you making all your accounts easily hacked</span></u></span></b></span></span></h2>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1SYbiropuPP9t9gcXrEk0jxtLzbXrjz9UVbI5Uza13458_5rV3wtBql2KJWyukYGpclO05R7_3uBH1kdcGpHr-pmNIyHmjFz8E66eDReX7Tjl7eVYJmN-DpUoVKp2rlCboksKmoADTgkF/s1600/charleston-free-wi-fi-flickr.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1SYbiropuPP9t9gcXrEk0jxtLzbXrjz9UVbI5Uza13458_5rV3wtBql2KJWyukYGpclO05R7_3uBH1kdcGpHr-pmNIyHmjFz8E66eDReX7Tjl7eVYJmN-DpUoVKp2rlCboksKmoADTgkF/s1600/charleston-free-wi-fi-flickr.jpg" width="400" /></a></div>
<br />
<span style="text-align: justify;">If you are connected to an insecure wifiyou are pawing a way toeasily hack all your accounts. </span><br />
<div class="MsoNormal" style="text-align: justify;">
<h3>
<b>Use free public wifi at your own risk</b></h3>
Anyone connected to the same wifiwhich you are accessing could possibly can sniff the traffic over the network and have access to any account with malicious intenttion. Facebook, youtube, online banking... anything.Prefer accessing accounts you care about on wifi networks you trust.<br />
<h3>
<b><br /></b></h3>
<h3>
<b>DO NOT use WEP for your router security, use WPA or preferably WPA2</b></h3>
WEP keys are extremely easy to hack (which this ebook will cover) and once some ones on your network<br />
 If your router has WPS enabled (wireless protected setup), DISABLE IT. An exploit allows WPS to be cracked pretty quickly allowing the attacker to figure out your WPA2 key.<br />
<h3>
<b>
If you think someone on your network may be trying to access your accounts, browse using HTTPS </b></h3>
Most popular websites support HTTPS (facebook, Gmail,  etc) and this prevents most network sniffing applications fail to retrieve your account info. You can use the HTTPS version of a website simply by replacing HTTP to HTTPS in the URL. Example: <b>https://facebook.com</b> instead of <b>http://facebook.com</b>. Some hacks out there can redirect you from the secure HTTPS to HTTP, so if you're onsure of the network you're connected to, stay aware of the URL.<br />
<h3>
<b><br /></b></h3>
<h3>
<b>Don't buy things online while connected to a public network</b></h3>
Avoid online purchase when you are accessing any unknown wifi service<span style="mso-spacerun: yes;"></span><br />
<div>
<br /></div>
</div>

Another way you making all your accounts easily hacked

Another way you making all your accounts easily hacked If you are connected to an insecure wifiyou are pawing a way toeasily hack all y...

WHY YOU ALLOW TO STEEL YOUR PASSWORD

<br />

<br />
<h2 class="MsoNormal">
<span style="color: blue;"><u><span style="font-size: large;">WHY YOU ALLOW TO STEEL YOUR PASSWORD</span></u><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLNjPX4fl9Y29BBYZd7zXtVd_9pv4-W_UtzrgL6cdYT9lJhjcjfkEcHTnmRSY4NU6w1I3YAiHdgYCLqWnjolL4hSF34GXYGN73uAyDO5fPJv4LSm5kg9RgDzzYlnsT6no70YZ5jchj_ghw/s1600/Password-fuerte.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="162" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLNjPX4fl9Y29BBYZd7zXtVd_9pv4-W_UtzrgL6cdYT9lJhjcjfkEcHTnmRSY4NU6w1I3YAiHdgYCLqWnjolL4hSF34GXYGN73uAyDO5fPJv4LSm5kg9RgDzzYlnsT6no70YZ5jchj_ghw/s1600/Password-fuerte.jpg" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Bad passwords</td></tr>
</tbody></table>
</span>20% of all passwords are easily guessed by others. Example
of bad passwords: <span style="mso-spacerun: yes;"> </span>I love you, big ben, London,
password, 12345, qwerty, your name, your birthday, etc.</h2>
<div class="MsoNormal">
<br /></div>
<h4 class="MsoNormal">
<span style="color: red;"><b style="mso-bidi-font-weight: normal;">Have a strong
password<span style="mso-spacerun: yes;">  </span></b></span></h4>
<div class="MsoNormal">
<span style="mso-spacerun: yes;"> </span>The best way to
prevent someone from getting your passwords, is to have a strong password to
being with The best passwords are more than 8 characters long, contain at least
1 capital letter, and contain at least 1 number. This will make it almost
impossible for your password to be brute forced. you may ask, What is Brute forcing?
It’s when a hacker runs a program that<span style="mso-spacerun: yes;"> 
</span>tries <span style="mso-spacerun: yes;"> </span>every letter/number/symbol
combination to guess your password. If you follow these tips for a stronger
password, it will take years to brute force your password.</div>
<div class="MsoNormal">
<br /></div>
<h4 class="MsoNormal">
<span style="color: red;"><span style="mso-spacerun: yes;"> </span><b style="mso-bidi-font-weight: normal;">Security questions</b></span></h4>
<div class="MsoNormal">
The easiest way someone can gain access into your accounts,
is to guess the answers to the security questions of your account. These are
the questions you're asked when you first make an email account, like What was
your first dogs name?. Make sure the security questions you choose have answers
that aren't easily guessable. If you have a security question that asks Where
did you meet your spouse?, which is your birth place? These are bad questions <span style="mso-spacerun: yes;"> </span>to choose. Anyone who browses your face book
or asks someone you know can get the answer to this. So make sure you choose
questions no one knows the answer to, or make the answers something only you
would know.</div>
<div class="MsoNormal">
<br /></div>
<span style="color: red;">

</span><br />
<h4 class="MsoNormal">
<span style="color: red;"><span style="mso-spacerun: yes;"> </span><b style="mso-bidi-font-weight: normal;">Never</b> <b style="mso-bidi-font-weight: normal;">Try not to use the
same passwords for all of your accounts</b></span></h4>
<div class="MsoNormal">
Make your e-mail password different from your face book
password, and so on. If someone manages to get one of your passwords, they will
have access to ALL your accounts if they use the same password.<span style="color: #38761d;"><b> </b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgj4Xj2fIRpUeRU7PfKgS0j5g5ATol2WYBpRCCeJJALcksLBNkE12A487-0ZRhZ03d9rJZ7z0cVbSynd0ftXdojgLv9Vnh4OFQZIxPvUGUqLDgQOTBDYiHF8XjDfNSuTSIJ0MkEP7rb7QLK/s1600/strong_password.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="176" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgj4Xj2fIRpUeRU7PfKgS0j5g5ATol2WYBpRCCeJJALcksLBNkE12A487-0ZRhZ03d9rJZ7z0cVbSynd0ftXdojgLv9Vnh4OFQZIxPvUGUqLDgQOTBDYiHF8XjDfNSuTSIJ0MkEP7rb7QLK/s1600/strong_password.png" width="320" /></a></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b><br /></b></span></div>
<div class="MsoNormal">
<span style="color: #38761d;"><b>IF YOU MAKE A PASSWORD INCLUDING  8+ NUMBERS, 1 UPPERCASE LETTER,1LOVERCASE LETTER AND A SPECIAL CHARACTER. <span style="color: magenta;">IT WOULD TAKE ABOUT MORE THAN 204 THOUSAND YEARS TO STEAL THIS PASSWORD</span></b></span></div>

WHY YOU ALLOW TO STEEL YOUR PASSWORD

WHY YOU ALLOW TO STEEL YOUR PASSWORD Bad passwords 20% of all passwords are easily guessed by others. Example of bad passwords: I...

Tyupkin Malware Infected ATMs give away dollars without credit cards

<div class="separator" style="clear: both; text-align: center;">
<img alt="ATM" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhT28TZ5W6sWT1ILP4PcrQoKWKw1RRDR5AS69lrTMV6d4trqcKseh4nETygIIvt1XG2f90TUclXHDns1wlJlJk3Z6IgHbzOQwj59-KQvDEmUkfFW1005EMOQlbd5bDhmxf0aXYMJw_p8K4k/s1600/shot6%5B1%5D.png" title="ATM" /></div>
<br />
In the past criminals used <a href="http://en.wikipedia.org/wiki/Credit_card_fraud#Skimming" target="_blank">card skimmers</a> to steal debit card numbers and then steal the debit cards to get money.Now due to the technology advancement they use specialized malwares to withdraw cash without using the card.<br />
<br />
This malware was detected by <a href="http://www.kaspersky.com/" target="_blank">Kaspersky Lab</a> as <b>Backdoor.MSIL.Tyupkin </b> ,affects ATMs running 32-bit Microsoft Windows platforms.Criminals use
bootable CD to install malware.It is only active at a specific time on Sunday and Monday nights.Without inserting a card they type a combination of 
numbers to get unique random number. Then they need a session key generated for every session based on the random number.(without this key nobody can interact with infected ATM.)They get session key from another one who knows the algorithm and able to generate session key based on the number shown via phone.After entering the session key correctly ATM displays details of how much money available in each cash cassette.Then they choose the cassette to rob and ATM dispenses 40 money notes from the selected cassette.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<img alt="Tyupkin Malware" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkDaGSW4xCHXDOVA6IkSjEEzb8O94Eed9BccX5VZpe9ISDYRsESBJJZuDQQ0oJtJbzcg8-wvIQ-dONM8yyoR6f4jkbDdUEC3Bki7_I6tXil3xhsDMHEHVIXmxa1ED7Erhjqi0kSXNmlJSX/s1600/Tyupkin_pic_fin.jpg" title="Tyupkin Malware" /></div>
<b><br /></b>
<h3>
<b>Infected ATMs display after entering correct session key</b></h3>
<b><br /></b>
<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyMyKawI__Ed6Qk6PSpbYb-mlc64gob-A3mSixgGIKh6Ng6XzGp8D6Q80ud12_6SxlTQRoxqE96Zu5G-ZETowNrINXhrL_gn_o53CdKwu9ZJrPMJH6xQ5UBYu2oinDZ8qa_5nfH_zWcwud/s1600/650x245xTyupkin-malware-ATM-650x245.jpg.pagespeed.ic.0Gn5boS49X.jpg" /></div>
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji-NfOXEjdN_V6CcG0HBgtq5uEKhxACpJ-le-TmGw7xVeztv3rbhtKj11BsJloXsmLCGvA1SNTQ_CjCw05d-pYRhW70u8FIdrMRlEq-uJHHBIrimgKQBVXrNCj7yk983ptreaZpbz51Cu8/s1600/hqdefault.jpg" /></div>
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdisC8mZziCLoUIF3ie_D9-gD_nY8CvZjGx8M5JYOkS7-zDVPZS020KOHnDY6fywopEAkhFtQ_Ew-12t20JPSyTZI8cKORmK3awtkkspsy6oZ9PfDUbtr9sZL05uIvHHZ5lOjOdAEfDGn6/s1600/Tyupkin_3.jpg" /></div>
<b><br /></b>
<br />
<h3>
<b>Video on how the attack works </b></h3>
<br />
<br />
<center>
<iframe allowfullscreen="" frameborder="0" height="340" src="//www.youtube.com/embed/QZvdPM_h2o8" width="480"></iframe></center>
<br />
<br />
<br />
<br />
<br />
<br />
<br />

Tyupkin Malware Infected ATMs give away dollars without credit cards

In the past criminals used card skimmers to steal debit card numbers and then steal the debit cards to get money.Now due to the technolo...

National Chamber conducts Seminar on Cyber Crimes on September 25

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiPJOykpYJOhS0R-P8fhcJoRMbWCikTXruhbhF3Nk7_H0oYgJf0bYWtPCUSF7TlUV28PlvG-jt9Z_m0ClgixlcTEnNKFO385GdauAtSMfbcklumPPTKLU9mJdGW5_wdoAE1ypFJnmO9CWm/s1600/cybercrime.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="national-chamber-conducts-seminar-on-cyber-crime" border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiPJOykpYJOhS0R-P8fhcJoRMbWCikTXruhbhF3Nk7_H0oYgJf0bYWtPCUSF7TlUV28PlvG-jt9Z_m0ClgixlcTEnNKFO385GdauAtSMfbcklumPPTKLU9mJdGW5_wdoAE1ypFJnmO9CWm/s1600/cybercrime.jpg" title="national-chamber-conducts-seminar-on-cyber-crime" width="400" /></a></div>
<br />
An <b>cyber security awareness</b> seminar ‘<b>Cyber Crimes: A New Threat To Your Corporate Environment</b>’ will be held on Thursday, September 25, 2014  from 2.30 pm to 5pm at the National Chamber Auditorium,  450, D. R. Wijewardena Mawatha, Colombo 10.<br />
<br />
The event will be host by The <a href="http://www.mea.gov.lk/index.php/missions/mission-activities/3142-national-chamber-of-commerce-of-sri-lanka--nccsl-in-collaboration-with-sri-lanka-high-commission-in-the-united-kingdom-launches-a-web-based-information-gathering-system-to-help-sri-lankan-students-to-find-placement-employment-opportunities-in-sri-lank" target="_blank">National Chamber</a> of Commerce in collaboration with Sri Lanka (CERT|CC) Computer Emergency Readiness Team & Coordination Centre, (the Competent Authority to monitor cyber security in Sri Lanka)<br />
<br />
The <b>Sri Lankan cyber</b> situation is now getting out of hand and Cyber crimes may have an impact on national security, banking, financial /non financial sector and national data bases which are under severe threat today. Prevention of such incidents is of paramount importance.<br />
<br />
The seminar speakers, Lal Dias, CEO and Eng Roshan Chandraguptha of CERT|CC will covers the following areas, Threat of targeted attacks on individual or corporate networks (Case studies) Cyber-crime and fraud risks in Sri Lanka Financial / non-financial sectors, Various aspects of  cyber crimes and how they can be effectively mitigated and how Sri Lanka CERT|CC can help the private sector in identifying  cyber  crimes.<br />
<br />
The main objective of this seminar is to make corporate leaders aware on how to protect their customers informations from cyber attacks and how to protect their information systems from cyber attacks.<br />
<br />
The event will be useful for CEOs, CIOs, CFOs, I.T. Professionals, Financial Controllers, Managing Directors, CEOs CIOs. Seats will be available on first come, first served basis. For registrations contact the Chamber, Buddika 071 4842863 or Dilrukshi on 4741788.

National Chamber conducts Seminar on Cyber Crimes on September 25

An cyber security awareness seminar ‘ Cyber Crimes: A New Threat To Your Corporate Environment ’ will be held on Thursday, September 25,...

Payment system of Home Depot is Hacked : 60 Million users are affected

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Payment system of Home Depot is Hacked : 60 Million users are affected" border="0" height="166" src="http://4.bp.blogspot.com/-siUAuaEIcnE/VBwMtfLC8dI/AAAAAAAAAAc/C39CpDchF4w/s1600/n-HOME-DEPOT-HACK-large570.jpg" title="" width="400" /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
The Home Depot is one of the American retailer of home improvement and construction products and services. It operates many big-box format stores across the United States, all ten provinces of Canada, as well as Mexico. Home depot has admitted now that its system was hacked and the credit card details of 60 million users are at risk. Home Depot said that the hackers used a <a href="http://www.infosecfeeder.com/2014/09/kyle-and-stan-malvertising-network.html" target="_blank">malware</a> which make use of a zero day (a vulnerability about which system vendors are unaware of). they also mentioned that this malware is impossible to be detected by a traditional antivirus software. Now they have removed those malwares and they have started to use point to point encryption technology.</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
“We apologize to our customers for the inconvenience and anxiety this has caused, and want to reassure them that they will not be liable for fraudulent charges,” Home Depot CEO Frank Blake said in a statement. “<i>From the time this investigation began, our guiding principle has been to put our customers first, and we will continue to do so</i>.”</div>
<div style="text-align: left;">
<br />
Are you one of those affected users?<br />
<br />
Don't forget to find more <a href="http://www.infosecfeeder.com/p/ethical-hacking-in-sri-lanka.html" target="_blank">exclusive Ethical Hacking News over here</a>.</div>
</div>

Payment system of Home Depot is Hacked : 60 Million users are affected

The Home Depot is one of the American retailer of home improvement and construction products and services. It operates many big-box fo...

AppBuyer: New iOS Malware Steals Apple ID and Password to Buy Apps

<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.infosecfeeder.com/2014/09/appbuyer-new-ios-malware-steals-apple.html"><img alt="AppBuyer: New iOS Malware Steals Apple ID and Password to Buy Apps" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRDco-CIx2C398tqEus4op3GmNagBbJLRAr8OXbXZoEWRNwn0w7a-dKJctit4BXHF0mKT_6N0SFZ6j2NGnT1bVoITGsHc98hp48yrizIiKsEGpP7x7j8KN4N8bBR5dEKpuJ51_jkKm7rAI/s1600/AppBuyer-Malware-iOS-Jailbreak.jpg" title="" /></a></div>
<br />
The researchers at Palo Alto Networks report that was recently found and analyzed a <a href="http://www.infosecfeeder.com/p/ethical-hacking-in-sri-lanka.html" target="_blank">new <b>malware</b></a> called <b>AppBuyer</b> which affects broken iOS devices to steal Apple ID and Passwords. The <a href="http://www.infosecfeeder.com/search/label/Malwares" target="_blank">malware</a> will connects to server C & C, in order to download and <a href="http://www.infosecfeeder.com/2014/09/kyle-and-stan-malvertising-network.html" target="_blank">execute malicious files</a>, with the target to steal the Apple ID and password in order to purchase applications from App Store.<br />
<br />
At the moment it is not clear how AppBuyer installed in jailbroken devices , but the PA Network said that the program was set to execute three actions, First, it downloads an EXE file to generate a singular UUID, second it downloads a Cydia Substrate tweak to steal the consumer’s ID and password, and third, it downloads a utility to login to the App Store and purchase apps.<br />
<br />
For users who have already done the jailbreak to their devices, here is a way to determine if one or some of these files exist in the file system. You can use iFile, iExplorer or similar software to find if any of the following files are on your device,  If these files are present, there is a good chance that you are affected.<br />
<ul>
<li>/System/Library/LaunchDaemons/com.archive.plist</li>
<li>/ Bin / updatesrv</li>
<li>/tmp/updatesrv.log</li>
<li>/ Etc / uuid</li>
<li>/Library/MobileSubstrate/DynamicLibraries/aid.dylib</li>
<li>/ Usr / bin / gzip</li>
</ul>
We highly recommend iOS users not jailbreak their devices. AdThief, another iOS malware found by Palo Alto Networks in this year, which also targets jailbroken iOS devices, has infected more than 75,000 devices. Another example is Unflod, which is a malicious Cydia Substrate tweak, will steal a victim’s Apple ID in the similar way. said, Claud Xiao, security researcher at PA Network on a <a href="http://researchcenter.paloaltonetworks.com/2014/09/appbuyer-new-ios-malware-steals-apple-id-password-buy-apps/" target="_blank">blog post</a>.<br />
<br />
<br />

AppBuyer: New iOS Malware Steals Apple ID and Password to Buy Apps

The researchers at Palo Alto Networks report that was recently found and analyzed a new malware called AppBuyer which affects broken iO...

WikiLeaks Releases FinFisher Malware, A weaponised German surveillance malware

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="finfisher" border="0" height="228" src="http://3.bp.blogspot.com/-Tq3CdsTUbkY/VBhmTOB0gpI/AAAAAAAAAAM/nBxIaZLNh-Q/s1600/download.jpg" title="finfisher" width="400" /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br />
WikiLeaks has released copies of <a href="https://wikileaks.org/spyfiles/files/0/289_GAMMA-201110-FinSpy.pdf" target="_blank">FinFisher</a> to the public in its website. FinFisher is used by (some) government agencies to monitor the people anonymously. With the release of these files it is expected to develop some methods to detect FinFisher infection and tools to remove it.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
FinFisher is a German based company established first a part of Gamma Group in 2007. From 2013 it is functioning as a independent company. WikiLeaks also releases brochures, video documents, database containing details of customers of FinFisher.</div>
<blockquote class="tr_bq" style="text-align: justify;">
<blockquote class="tr_bq">
<span style="background-color: white; color: #555555; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; line-height: 20px;">FinFisher continues to operate brazenly from Germany selling weaponised surveillance malware to some of the most abusive regimes in the world. The Merkel government pretends to be concerned about privacy, but its actions speak otherwise. Why does the Merkel government continue to protect FinFisher? This full data release will help the technical community build tools to protect people from FinFisher including by tracking down its command and control centers</span></blockquote>
</blockquote>
<div style="text-align: justify;">
 said <a href="http://en.wikipedia.org/wiki/Julian_Assange" target="_blank">Julian Assange</a>, WikiLeaks Editor in Chief.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Visit Here to take a look at the wikileak's page: https://wikileaks.org/spyfiles4/<br />
<br /></div>
<div style="text-align: justify;">
Visit here to take a look FinFisher's Documents: https://wikileaks.org/spyfiles4/documents.html</div>
</div>

WikiLeaks Releases FinFisher Malware, A weaponised German surveillance malware

WikiLeaks has released copies of FinFisher to the public in its website. FinFisher is used by (some) government agencies to monitor ...

“Kyle and Stan” Malvertising network threat

<b><a href="http://en.wikipedia.org/wiki/Malvertising" target="_blank">Malvertising</a> </b>(also known as Malicious advertising) mean using online advertising to to <a href="http://www.infosecfeeder.com/p/ethical-hacking-in-sri-lanka.html" target="_blank">spread malware</a>. In the internet you can see thousands of ads and it’s a very hard to find which is real. Attackers targets major advertising networks to display these types of malicious ads and if it is displayed for a few minutes without being detected then many computers can be infected.<br />
<br />
<a href="http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html" target="_blank">Cisco security researchers</a> uncovered a major network used for malvertising. In their research they have found more than 700 domains related to that and over 9541 connections to the malicious domains. This was named <b>“Kyle and Stan”</b> because “Kyle” and “Stan” used in the sub domain name.
<br />
<br />
The <b>“Kyle and Stan”</b> network is a highly sophisticated malvertising network. The goal is to infect Windows and Mac users alike with spyware and adware. The attackers use clever techniques and encryption to avoid detection. The large number of domains allows them to use a domain for a short time.This helps avoiding reputation and black list based security solutions. This is a well engineered Malware delivery network.
<br />
<br />
<b>How?</b><br />
<b><br /></b>
1. You visit a webpage with the malicious advertisement.<br />
2. You get redirected to a different website that redirects you based on user agent. We observed that Windows and Mac users get redirected to different malware in order to infect both operating systems.<br />
3. The final page starts the download of a malicious file.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJZnPBk-QeUSrMpgH8PQhHYNO5dJKsWvZ7nkAGQYysD9bbEXsHy7iyE2Mbk6C78RqR52DgZRw-KZRF9LRIagkjNheSBkXILmKFMNp9ILOd6bvvA61mT9qlN3e0Mhmymg6CzOb9QewhEsku/s400/Malversting.png" /></div>

“Kyle and Stan” Malvertising network threat

Malvertising (also known as Malicious advertising) mean using online advertising to to spread malware . In the internet you can see thousa...

5 Million Gmail Username and Passwords Leaked Online

<div class="separator" style="clear: both; text-align: center;">
<img alt="Gmail" border="0" height="303" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkFLKS9tsNSMR-F5OaLjyCBPW_d5pyTmRvivi3CieXi7p0tu48CCJ9UAa_jVHKz30K9k8GaJEQ9lGGiN3XHGcQz4T3-bqtun_BHLaEzyP-U12ne-10S9I_bzUYl9v-j6VVtBIPnKz_3IwK/s1600/Gmail-icon.jpg" title="Gmail" width="400" /></div>
<br />
Millions of Gmail credential leaked in Russian bitcoin security forum. It caused the Gmail users worldwide to change their Gmail passwords. File containing Gmail credentials was posted on <b><a href="https://forum.btcsec.com/index.php?/topic/9426-gmail-meniai-parol/" rel="nofollow" target="_blank">Russian Bitcoin Security forum</a></b> by a user <b>tvskit</b><br />
<br />
Google says that it was not a result of a security breach in the Google system. Google believe that credentials were stolen by phishing campaigns.<br />
<div>
<br />
In the <a href="http://googleonlinesecurity.blogspot.in/2014/09/cleaning-up-after-password-dumps.html" rel="nofollow" target="_blank">google security blog</a> they wrote”<i>We found that 2% of the username and password combinations might have worked and our automated anti-hijacking systems would have blocked many of those login attempts. We have protected the affected accounts and have required those users to reset their passwords</i>".<br />
<br />
So, does your Google account secure? Go ahead and set up <a href="https://www.google.com/landing/2step/" target="_blank">two step verification</a> to your Google account.</div>

5 Million Gmail Username and Passwords Leaked Online

Millions of Gmail credential leaked in Russian bitcoin security forum. It caused the Gmail users worldwide to change their Gmail password...

Critical Vulnerability in popular Joomla e-commerce extension puts online shops at risk

<div class="separator" style="clear: both; text-align: center;">
<img alt="Joomla" border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2FFCzXRM-7Px5qwjy6SeUKGe_70yC2LtMIUCs4VmsVYQtRFD_WIoK1du02qZfxeX89XKoJIfbAnkZY0y1qWdImXtLzepQk4S-naq_qrlCq5PFPbicX7VwVARXlAzvgD1DqLihPHMJ8UuQ/s1600/joomlaecommerce-100428418-primary.idge.jpg" title="Joomla" width="400" /></div>
<br />
A <b>critical vulnerability</b> in a popular e-commerce extension called <a href="http://extensions.joomla.org/extensions/extension-specific/virtuemart-extensions" target="_blank">VirtueMart extension</a>, which allows users to set up online shops on their sites in the Joomla content management system could allow an attacker to gain super-admin privileges to sites that run the software.<br />
<br />
<b>VIRTUEMART USED BY MILLIONS OF WEBSITES</b><br />
<b><br /></b>
This issue is actually serious because VirtueMart is being used by millions of websites. Extension has been downloaded more than 3.5 million times, said Marc-Alexandre Montpas, a researcher at Web security firm <a href="https://sucuri.net/" target="_blank">Sucuri</a>, in a blog post on Wednesday.<br />
<div>
<br /></div>
<div>
<b>WHAT ARE THE RISKS? </b><br />
<b><br /></b></div>
<div>
A successful exploit would allow an attacker to become a Super-Administrator and do anything as they like, this could include running spam campaigns, uploading backdoors to your server or <a href="http://www.infosecfeeder.com/2014/09/kyle-and-stan-malvertising-network.html" target="_blank">distributing malware</a> to your site users.</div>
<div>
<br /></div>
<div>
<div>
VirtueMart uses Joomla’s JUser class “bind” and “save” methods to handle user accounts information. That’s not a problem in it of itself, but this class is very tricky and easy to make mistakes with. <a href="http://blog.sucuri.net/2014/09/security-advisory-virtuemart-for-joomla.html" rel="nofollow" target="_blank">said</a> Marc-Alexandre Montpas, a researcher at Web security firm Sucuri. </div>
<div>
<br /></div>
<div>
<div>
The issue was discovered last week and was patched in VirtueMart 2.6.10, released on Sept. 4. Already the VirtueMart advises users that "<i>everyone using a version lower than 2.6.10 should update as soon as possible for security reasons</i>".</div>
<div>
<br /></div>
<div>
Sucuri originally posted technical details about the vulnerability, but now they have removed the details because of the developer's request.<br />
<br /></div>
</div>
</div>
<div>
We are removing the technical details as requested. Other extensions might be vulnerable to the same issue, so we will do more research on that. Montpas added. </div>
<div>
<br /></div>
<div>
<b>UPDATE NOW</b><br />
<b><br /></b></div>
<div>
The vulnerability was found in VirtueMart 2.6.8c. VirtueMart have released an update on september 4 to address this problem and all users should update to the latest version ( <b><a href="http://www.smartaddons.com/component/k2/item/1063-important-update-virtuemart-2610-299b-with-security-release" target="_blank">2.6.10</a></b> ) as soon as possible.</div>

Critical Vulnerability in popular Joomla e-commerce extension puts online shops at risk

A critical vulnerability in a popular e-commerce extension called VirtueMart extension , which allows users to set up online shops on th...

Cyber Attack on Western world ?????

<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.infosecfeeder.com/2014/09/cyber-attack-on-western-world.html"><img alt="Cyber Attack" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKhYwsIZqpFdsZWD2JpJbv5SioCPWZq63e7mmULtvrrHrQjclKrUceMKc0jcvJNdETVj-4uSswCsuGp2kPWMugEzqNU_VcSZxtKixvrGsxA0cOZg-MCmyS_pGwVu-h3BdeR0BBKvBxBBbS/s1600/cyberattack_1805164b.jpg" title="Cyber Attack" width="400" /></a></div>
<br />
ISIS and <a href="http://en.wikipedia.org/wiki/Al-Qaeda" target="_blank">Al-Qaeda</a> are preparing to launch a massive cyber attack against the western world. They are stepping up efforts to seek a digital caliphate. Their main aim is disrupting the financial and infrastructure system of the western world.<br />
<br />
Both ISIS and Al-Qaeda claim to be actively recruiting skilled hackers in a bid to create a team of computer experts capable of causing devastating cyber attacks. <a href="http://www.foxnews.com/world/2014/09/11/digital-jihad-isis-al-qaeda-seek-cyber-caliphate-to-launch-attacks-on-us/" target="_blank">Fox News</a> reported the terror groups were using social media to attract more young recruits. Large numbers of Islamic State fighters are young, highly educated Westerners who are fighting the holy war with sophisticated backgrounds and training with digital technology.<br />
<br />
Militants use of Socialmedias like Twitter and <a href="https://www.facebook.com/InfosecFeeder" target="_blank">Facebook</a> allows them to target an entire new generation of young possible recruits while the beheading videos of James Foley and Steven Sotloff were created using skilled video and audio editing techniques.<br />
<br />

Cyber Attack on Western world ?????

ISIS and Al-Qaeda are preparing to launch a massive cyber attack against the western world. They are stepping up efforts to seek a digit...