z

Wednesday, January 22, 2014

Annual "Worst Passwords" revealed - the winner is 123456

Software firm SplashData has released the 2013 edition of its annual "Worst Passwords" list, and for the first time, "password" has been displaced from the top spot. The dubious distinction now goes to "123456", which had been in second place for the past two years.

After a year of high-profile security breaches, including a massive leak of Adobe user account details, it is evident that a huge number of users continue to put themselves at risk online by choosing easy-to-remember but highly unsecure passwords. SplashData's list was compiled after combing through millions of passwords leaked or posted online following security breaches in 2013.

Many of the top 25 weak passwords are as short as four characters, use simple sequences of only numbers or characters, or are simply the names of the websites or services that the user has signed up for. "qwerty" takes the number four spot, while "iloveyou" is at number nine.   
The annual worst passwords list is a way to spread public awareness about password security.

SplashData, which sells password management software, recommends the use of a strong password manager that can automatically log in to websites, allowing users to create strong passwords that they don't have to remember. Other common-sense tips include avoiding number-letter substitutions such as "p4s$w0rd", and avoiding the same username and password combinations across multiple services.

Ref: NDTV !!!

Thursday, January 2, 2014

Top 10 UK cyber security stories of 2013

Top 10 UK cyber security stories of 2013

Cyber security has moved up the national agenda in the past year, with the UK government paying increasing attention and allocating increasing budget to bolstering UK cyber defences.
The government has stepped up its efforts in this area to help support UK business, with special attention to those that form part of critical national infrastructure and financial infrastructure.
Data-sharing.jpg
The launch of the first national cyber threat sharing partnership marked an important step forward in the past year, with another milestone due in 2014 when the UK national CERT becomes operational.
The UK government plans several more initiatives in 2014 aimed at promoting the UK as a safe place to do business online and at taking a global leadership position on cyber security matters amid growing calls for international treaties on cyber security and cyber weapons.
Read Computer Weekly's top 10 UK cyber security stories of 2013 here:

1. UK government launches cyber threat data-sharing partnership

In March, the UK government announced a partnership with industry to share information and intelligence on cyber security threats. Cyber attacks were rated as one of the top four threats to UK national security, alongside international terrorism, in the National Security Strategy of 2010 and a re-assessment in 2012.The Cyber Security Information Sharing Partnership (CISP) delivers a key component of the UK national cyber security strategy in facilitating information-sharing on cyber threats.

2. UK CERT moves to next phase with director Chris Gibson

In November, Chris Gibson was confirmed as the director of the UK’s new national computer emergency response team (CERT-UK), which is set to become operational in early 2014. Francis Maude, the Minister for Cabinet Office, said Gibson brings a wealth of experience in cyber incident response in the private sector, both in the UK and internationally. “His first-hand knowledge and understanding of cyber security will be invaluable as he leads the national CERT,” he said.

3. FTSE 350 firms complete cyber risk assessment

Most of the FTSE 350 companies place cyber risk on the board agenda, with over half accounting for cyber risk in their strategic risk register, a cyber governance health check has revealed. In July 2013, the heads of the UK’s intelligence agencies and the Department for Business, Innovation and Skills called on the country’s top 350 listed companies to take part in the exercise. The call was made a day after business consultancy firm KPMG published a report revealing that cyber leaks at FTSE 350 firms are putting the UK’s economic growth and national security at risk.

4. First UK Certified Incident Response firms named

Five organisations have been named as the first certified consultancies in the government’s scheme to help UK organisations respond effectively to the increase in cyber attacks. The Certified Incident Response scheme is backed by CESG, the information assurance arm of GCHQ, and the Centre for the Protection of National Infrastructure (CPNI).

5. Security experts welcome UK banking cyber attack test

Security experts welcomed the most extensive cyber threat exercise in two years to test the preparedness of the financial infrastructure to withstand a sustained cyber attack. On 12 November 2013, Operation Waking Shark 2 tested thousands of staff at London’s major financial institutions with a simulated cyber attack on systems on which the UK’s financial system depends. The Bank of England, the Treasury and the Financial Conduct Authority monitored responses to assess the ability of the UK’s core financial services providers to withstand cyber attacks.

6. UK must legislate on critical cyber security, says ViaSat

The UK must set rules for the cyber security of critical national infrastructure to ensure utilities are safe from attack, says Chris McIntosh, chief executive at communications firm ViaSat UK. “We need legislation because simply issuing a government advisory means there will always be organisations that will ignore that,” he told Computer Weekly.

7. UK invests £850m in tackling cyber threats

The UK government is to invest more than £850m to develop and maintain what it calls“cutting-edge” capabilities to tackle cyber threats.“Crime is at record low levels and this government is taking action to tackle the cyber threat, investing more than £850m through the national cyber security programme,” the Home Office said. The statement comes after a report by the Home Affairs Select Committee said that, despite being the preferred target of online criminals in 25 countries, the UK is still complacent about cyber crime.

8. MoD teams up with defence firms for cyber security

The Ministry of Defence (MoD) is teaming up with nine large defence firms and telecoms providers to strengthen the UK’s cyber security. The Defence Cyber Protection Partnership (DCPP) is the latest in a series of cyber security initiatives by the government since cyber threats were categorised as one of the national defence priorities in 2010. The partnership will look to implement controls and share threat intelligence to increase the security of the defence supply chain.

9. GCHQ sets up £4.5m cyber vulnerability research institute

In March, UK communications intelligence agency GCHQ announced a second academic research institute, which will find new ways of analysing software automatically to combat cyber threats. The GCHQ group’s work is aimed at providing businesses, individuals and government with additional confidence that software will behave in a secure way when installed on operational networks. Funded by a £4.5m grant, the new research institute is made up of teams from six universities and forms part of the government’s plan to increase the UK’s academic capability in all fields of cyber security.

10. Kaspersky calls for international cooperation on cyber security

Governments must understand that cyber weapons are extremely dangerous and have to agree not to use them, according to Eugene Kaspersky, founder and chief of security firm Kaspersky Lab. “It would be good if governments were to sign a treaty against the use of cyber weapons in the same way as they have done against nuclear, biological and chemical weapons,” he told Computer Weekly.


  Courtesy: http://www.computerweekly.com/news/2240210690/

Friday, August 2, 2013

The social networking method of hacking !!!!

Morning,

 Just hoping this email reaches you well, I'm sorry for this emergency and for not informing you about my urgent trip to United Kingdom but I just have to let you know my present predicament. Everything was fine until I was attacked on my way back to the hotel, I wasn't hurt but I lost my money, bank cards, mobile phone and my bag in the course of this attack. I immediately contacted my bank in order to block my cards and also made a report at the nearest police station. I've been to the embassy and they are helping me with my documentation so i can fly out but I'm urgently in need of some money to pay for my hotel bills and my flight ticket home, will definitely REFUND as soon as back home .

Kindly let me know if you would be able to help me out so I can forward you the details required for a wire transfer.

Waiting to hear back from you...

With kind regards.

JGD.

Vilas

=====================
Sandeep Erat <sandeeperat@gmail.com>
Jul 26 (7 days ago)

to vilaspatki
Jgd!

What is this?

What u wanna me to do!
Regards,
Sandeep
vilas patki
Jul 26 (7 days ago)

to me
I'm so glad you replied back, I have nothing left on me right now, all I need you to do is to have it wired to my name through Western Union Money Transfer and I will pick it up here, you have my word and I can make it up to you, I promise to pay you back as soon as I get back home.

Here's my info below

Name: vilas patki
Location: 456B  Brecon Road, Abervagenny, Gwent,
              Wales, NP7  5UH
               United Kingdom.
Amount : 1,880 GPB

As soon as it has been done, kindly get back to me with the transfer details (MTCN #) given to you at the Western Union Money Transfer Outlet.


Waiting to hear back from you...


With kind regards.

JGD.

Vilas

=====================
Dear Vilas,
Jgd!

Thank you for the details! And so sorry for the situation!

But I do not have this much money!

Please let me know how to go about!
 
SO GUYS BE CAREFUL !!!!
The so called hacker can come in any form !!!!
Love 
Sandeep

Thursday, March 28, 2013

Hackers mount widespread cyber attack !!!



March 27, 2013 7:40 pm

Hackers mount widespread cyber attack

Hackers have hit a European anti-spam group with a cyber attack so large that experts say it could slow down the internet itself.
The original target was Spamhaus, which said it had been subject to large-scale distributed denial of service (DDoS) attacks for the past week. Such attacks overwhelm servers by bombarding them with spurious requests simultaneously from computers all over the internet.
According to security companies monitoring the attack, it has risen in scale from 10 gigabits per second of data to 300Gbps, making it one of the largest of its kind and about six times the size of most such incidents.
Cloudflare, a security company hired by Spamhaus to fight off the bombardment, said the attack ceased on March 21 but resumed the next day with increased power, targeting Cloudflare’s network providers in an effort to neutralise the defence.
The company said the result was that the attack moved up the chain to the so-called Tier 1 providers, who service the internet with raw bandwidth. In effect, all internet users were sharing the increased load.
“While we don’t have direct visibility into the traffic loads they saw, we have been told by one major Tier 1 provider that they saw more than 300Gbps of attack traffic related to this attack. That would make this attack one of the largest ever reported,” Cloudflare said.
Spamhaus’ volunteers maintain a list of internet addresses known to be used for spam, enabling users of its service to filter out large amounts of junk or infected email. As a result it has many enemies, and has accused one such blocked site of colluding with online criminals in eastern Europe and Russia to launch the attack.
However, the attack has failed to bring the address-blocking service offline. ““We’re up – they haven’t been able to knock us down. Our engineers are doing an immense job in keeping it up – this sort of attack would take down pretty much anything else,” Steve Linford, chief executive for Spamhaus, told the BBC in London.
Raj Samani, McAfee’s chief technology officer in Europe, said an attack of this scale was likely to affect all internet users, from consumers to small and large businesses. “We are seeing an increase in volume and sophistication of these types of attacks stemming from all parts of the world,” he said.
Kaspersky Lab, another security company, said that owing to the nature of the internet the attack would probably impede normal web services for users of other sites, not just Spamhaus. Users may experience a slow network or total unavailability of certain websites.
Although many users have experienced delays in bandwidth-hungry services such as Netflix, Thinkbroadband, a broadband consultancy in the UK, said its tests showed no evidence that internet speeds had been slower.
Copyright The Financial Times Limited 2013. 

Monday, March 4, 2013

YAJ0: Yet Another Java Zero-Day

YAJ0: Yet Another Java Zero-Day

Through our Malware Protection Cloud (MPC), we detected a brand new Java zero-day vulnerability that was used to attack multiple customers. Specifically, we observed successful exploitation against browsers that have Java v1.6 Update 41 and Java v1.7 Update 15 installed.
Not like other popular Java vulnerabilities in which security manager can be disabled easily, this vulnerability leads to arbitrary memory read and write in JVM process. After triggering the vulnerability, exploit is looking for the memory which holds JVM internal data structure like if security manager is enabled or not, and then overwrites the chunk of memory as zero. Upon successful exploitation, it will download a McRAT executable (MD5: b6c8ede9e2153f2a1e650dfa05b59b99 as svchost.jpg) from same server hosting the JAR file and then execute it.

Figure 1. Example HTTP GET of the McRAT after the browser is successfully exploited, prior to the endpoint becoming fully compromised.
The exploit is not very reliable, as it tries to overwrite a big chunk of memory. As a result, in most cases, upon exploitation, we can still see the payload downloading, but it fails to execute and yields a JVM crash. When the McRAT successfully installs in the compromised endpoint as an EXE (MD5: 4d519bf53a8217adc4c15d15f0815993), it generates the following HTTP command and control traffic:
POST /59788582 HTTP/1.0
Content-Length: 44
Accept: text/html,application/xhtml+xml,application/xml,*/*
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Host: 110.XXX.55.187
Pragma: no-cache

4PdWXOD3Vlzg91Zc4PdWXOD3Vlzg91Zc4PdWXMP1RXw.

McRAT persists by writing a copy of itself as a DLL to (C:\Documents and Settings\admin\AppMgmt.dll) and performing the following registry modifications:

\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\AppMgmt\Parameters\"ServiceDll" = C:\Documents and Settings\admin\AppMgmt.dll
\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\AppMgmt\Parameters\"ServiceDll" = %SystemRoot%\System32\appmgmts.dll
This post was intended to serve as a warning to the general public. We have notified Oracle and will continue to work with Oracle on this in-the-wild discovery. Since this exploit affects the latest Java 6u41 and Java 7u15 versions, we urge users to disable Java in your browser until a patch has been released; alternatively, set your Java security settings to "High" and do not execute any unknown Java applets outside of your organization.
We will continue to update this blog as new information about this threat is found. FireEye would like to acknowledge and thank Hermes Bojaxhi and his team at CyberESI for their assistance in confirming this Java zero-day vulnerability.

This blog was written by FireEye researchers Darien Kindlund and Yichong Lin.
Update: Oracle assigned CVE-2013-1493 on this vulnerability.

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00d835018afd53ef017c372f3a56970b
Listed below are links to weblogs that reference YAJ0: Yet Another Java Zero-Day:

Monday, February 18, 2013

Facebook employees hit with malware

Facebook Inc confirmed on Friday that laptops used by its employees had been compromised by malware when staff visited the infected website of a mobile software developer last month.


The incursion was detected when Facebook's network monitoring personnel unearthed a suspect domain and traced it to an employee's computer. The malware discovered on the machine made use of a known vulnerability within Oracle's Java runtime platform. The hole was resolved with a patch released by Oracle on 1 February.


Facebook stressed there was no evidence user data had been accessed, but Bloomberg reported yesterday that the social media company is working with the US Federal Bureau of Investigation (FBI) in an effort to determine the source of the attack.

"As soon as we discovered the presence of the malware, we remediated all infected machines, informed law enforcement, and began a significant investigation that continues to this day," Facebook said.


Earlier this month Twitter revealed it had been subject to an attack and said that as many as 250,000 accounts may have been accessed, including the personal data attached to them. Other attacks on the websites of prominent newspapers The New York Times, The Washington Post, and The Wall Street Journal were attributed to Chinese hackers.

Multi-million euro cybercrime gang leader arrested in UAE

Spanish police have arrested a gang of cyber criminals who were extorting as much as one million euros a year ($1.3m) using ransomware.

The leader of the gang, a 27-year old Russian, was arrested while on holiday in Dubai in December. Ten other gang members six Russians, two Ukrainians and two Georgians, who were apparently responsible for laundering proceeds of the scam, were arrested in Spain.

The cyber crime used a malware that was first seen in 2005, although the gang adapted it to target end users in 30 countries. The ransomware, known as Reveton, was tailored to look like a message from different police authorities, which would freeze the user PC until they paid a fine of 100 euros for accessing file sharing, child pornography or terrorist sites.

The money was laundered through PaySafeCard/UKash vouchers, with the ransom paid in the US, transferred to the gang in Spain, and laundered and the proceeds wired to Russia.

Trend Micro's eCrimes unit was heavily involved in the investigation, which the company warns is ongoing, and that the Reveton malware is still in the wild.

Thursday, January 31, 2013

Hacker floods Dubai 999 service !!!

Dubai Police today warned the public against clicking on an infected Web link, which was triggering 999 calls and jamming the emergency line, 7Days reported.


The announcement, made through Twitter appealed to online visitors not to click the link that was claiming to lead to a close-up picture of the sun, and condemned the irresponsible act as having endangered lives. It is not clear from the warning how the infected link was propagated.


"We have received numerous calls because of this link," Brigadier Omar Al Shamsi, director of Dubai Police command and control, told Arabic daily Al Bayan.

"They are really very disturbing and annoying as they put great pressure on the emergency operator. It is not the first time such irresponsible actions [have been] taken by irresponsible persons. Previously, we have succeeded in identifying those persons and presented them to court on charges of disturbing authorities."


Al Shamsi was referring to the October 2012 case of an Emirati man who sent a link through the Blackberry network that he claimed was UAE vocalist Shamma Hamdan's phone number. The number was linked to the emergency 999 service and inundated the line with calls from Shamma fans before police publicised the problem, again through Twitter.

Source: http://www.itp.net/592050-hacker-floods-dubai-999-service?tab=article#.UQphRPJBCQA

Friday, January 4, 2013

Nationwide Insurance data breach affects 1.1 million people

NBC News 

Nationwide has notified customers and those who contacted the insurance company for information about the security breach.
Nationwide Mutual Insurance Company fell victim to hackers in October, affecting an estimated 1.1 million individuals, including non-customers who had sought insurance quotations, the company told customers Thursday.
Nationwide's subsidiary Allied Insurance was also affected.
Thieves made off with names and corresponding Social Security numbers, driver's license numbers and birth dates after thieves broke into the company network.

Nationwide reported the incident to authorities immediately, but did not inform consumers until now.
"We are not aware of any misuse of consumers' information at this time," the company said in a statement.
A patchwork of news reports alluded to the scope of the breach, with a combined 120,000 individuals known to be affected across Iowa, Florida and Ohio, Kaspersky's Threatpost blog reported. It wasn't until this week that the full extent of the breach became known.
Nationwide is in the process of informing its affected customers, but nonclients who sought quotes should be extra vigilant in monitoring their accounts' activity.
Nationwide said it would supply victims with one year of credit monitoring services and up to $1 million for identity theft protection. It also posted a FAQ page to answer customers' questions.
Copyright 2012 TechNewsDaily, a TechMediaNetwork company. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Wednesday, November 14, 2012

How to recover deleted files: Tutorial

How to recover deleted files: Tutorial

Accidentally deleting files - it's something we've all done, but erasing a file isn't the only thing that can go wrong when you're working in a hurry.
It's also very easy to edit a document, save it and then later change your mind about the editing you've done.
The good news is the Previous Versions feature of Windows 7 can help you eliminate these problems by saving snapshots of your hard drive automatically, so you have the option of reverting individual files to an earlier version if necessary - or even restoring files that have been accidentally deleted.
Protect your work
Use Previous Versions to rescue files after accidental edits or deletion
1. Enable System Protection

Click the 'Start' orb and then the 'Control Panel' shortcut to the right. Now click the 'System' icon followed by the 'System Protection' link to the left of the window.
In the Protection Settings section towards the centre of the dialog that appears, click the entry for your C: drive and then the 'Configure' button.
2. Configure restoration options

Select the option labelled 'Restore system settings and previous versions of files'. Use the slider that appears in the bottom portion of the dialog box to choose how much disk space should be set aside for previous versions of files and system backups. Click the 'OK' button once you've finished.

3. Create restore point

Windows will automatically start to create restore points and save multiple versions of files for you. Get things started by clicking the 'Create' button on the System Properties tab. Enter a name for your first restore point before clicking 'Create' - note that the date and time will be added for you automatically.
4. Complete system restore

You may have to wait for a little while as the system restore point is created, depending on the amount of data stored on your hard drive. Once it's complete, click the 'Close' button that appears to complete the backup process. You can then close the System Properties window and the Control Panel.
5. Accessing previous versions

If you discover that you've made and saved unwanted changes to a document, right-click it and select the 'Restore previous versions' option. Alternatively, you can right-click a file and select the 'Properties' option from the context menu before moving to the Previous Versions tab.

6. Check file contents

A list of previous versions of the selected file will be displayed, and you can then choose which one you would like to work with - click the 'Open' button to check the contents of a particular document. Work through the list until you identify the version that you would like to restore.
7. Restore previous version

Once you've decided which file you're interested in, click the 'Restore' button. Take note of the warning message that appears explaining that continuing will overwrite any existing file, and then only click the 'Restore' button if you're happy to continue. Once the process is complete, click 'OK'.
8. Create a copy

To avoid overwriting an existing file with one you're restoring - which could cause a problem if you accidentally restore the wrong file - it's a good idea to create a copy of the older version. To do this, click the 'Copy' button, navigate to the folder you would like to use and then click 'Copy' again.
9. Restore deleted files

If you've deleted a file by accident, right-click the folder it was stored in and select the 'Restore previous version' option from the menu that appears. You can then double-click one of the previous versions of the folder and create a copy of the file you're trying to retrieve.
10. Work with your documents


http://www.theverge.com/2012/11/14/3643954/skype-account-email-address-password-recovery-hack-security-hole

Friday, January 27, 2012

Don't download sets of pictures from the Internet

A user downloaded a set of photos of pop icon Paris Hilton for her Windows desktop. Windows asked her to say yes to executing the file when she got it. Assuming it was just pictures, she agreed. Within a couple of hours, she knew something was wrong when her computer started to slow down to the point where she was unable to use it. Even when she rebooted, she couldn't launch her own programs. The IT department determined that she had downloaded a Trojan program along with the photo: her freebie photo had a malicious payload attached that used her computer to send out spam for a bad guy. Her computer had to be rebuilt to eliminate the program. She lost most of the day and a lot of her personal computer settings in the process


Source : Sans.org

Thursday, December 1, 2011

UKas Virus





Please aware of such Scam !!!! This is another type of phishing !!!! Be aware !!!!!

Wednesday, November 16, 2011

Browser Security and Privacy

GUEST EDITOR
Mike Poor is the guest editor for this issue. He is a senior
security analyst for the consulting firm InGuardians Inc.
(www.inguardians.com). Mike is also a senior instructor for
the SANS Institute and the track lead for one of SANS’ top
courses, SEC503: Intrusion Detection In-Depth.
OVERVIEW
Your Internet browser, such as Internet Explorer, Firefox,
Chrome, or Safari, is one of the primary tools you use to
interact with the Internet. Cyber attackers know this, which
makes your browser one of their primary targets. Also, your
browser may collect a great deal of personal information
about you that you may not be aware of. In this newsletter
we cover the steps you can take to protect both your
computer and your privacy.
KEEPING YOUR BROWSER CURRENT
The first step to protecting yourself is always using the
latest version of your browser. It does not matter which
browser you use; what is important is that you use the most
recent version of your browser. Cyber attackers are
constantly searching for, and finding, programming errors
and other flaws in browsers. These mistakes (often called
vulnerabilities) can be exploited, giving attackers access to,
and sometimes even complete control, over your system.
The companies that developed your browser (such as
Microsoft, Google, or Apple) release patches to fix these
vulnerabilities. By always having the latest version, you
ensure your browser has these known issues fixed. To
ensure your browser is updated, make sure the autoupdate
feature is always enabled in your browser and
operating system. Some browsers, such as Chrome,
automatically update themselves every time you restart the
browser.
PLUGINS AND ADD-ONS
Plugins (sometimes called Add-Ons) are additional
programs you can install in your browser. The problem
with these additional programs is they can expose you and
your system to greater risk. Each program you add to your
browser has its own unique vulnerabilities or weaknesses.

Courtesy:

http://www.securingthehuman.org/newsletters/ouch/issues/OUCH-201111_en.pdf

Thursday, September 29, 2011

Supreme Court of Pakistan website defaced by Zombie_Ksa

Supreme Court of Pakistan website defaced by Zombie_Ksa The official website of Pakistan's Supreme Court has been hacked.Visitors to the website found derogatory and abusive remarks about the court and Chief Justice Iftikhar Muhammad Chaudhry. Earlier the Supreme Court website was hacked by two boys also in the month of September last year to whom the court had granted bail on April 11 as they were less than 18 years of age.

Source: http://thehackernews.com/2011/09/supreme-court-of-pakistan-website.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Daily+Cyber+News+Updates%29

Monday, September 12, 2011

Hackers break into Linux Foundation !!!!

Just weeks after the kernel.org Linux archive site suffered a hacker attack, the Linux Foundation has pulled its websites from the web to clean up from a “security breach.”

A notice posted on the Linux Foundation said the entire infrastructure including LinuxFoundation.org, Linux.com, and their subdomains are down for maintenance due to a security breach that was discovered on September 8, 2011.

Source : http://www.zdnet.com/blog/security/hackers-break-into-linux-foundation/9363

Thursday, August 4, 2011

Mobile money services !!!!!

Mobile money services puts you in control of your daily finances – transfer funds, pay bills, top up quickly and securely with your mobile phone.
What’s in it for you?

Transfer money securely to your friends and family in a convenient and cost-effective way.

Pay your utility bills from almost anywhere and keep track of everything with reminders for due dates, overdue charges and payments.

Check your balance on the go and manage your expenses and payments at the same time.

Recharge your pre-paid account wherever and whenever you like – adding funds is easy and it only takes a few moments.

Manage your money with confidence – the latest mobile technology is used to handle all your finances securely.

Save time when dealing with your personal finances – no more waiting in line at the bank or making unnecessary trips into town.


Source: http://www.nokia.co.in/find-products/money
Sign up to Mobile money services today – it only takes a few minutes

Biggest-ever series of cyber attacks discovered by McAfee, fingers point to China !!!!

Security experts have discovered the biggest series of cyber attacks to date, involving the infiltration of the networks of 72 organizations including the United Nations, governments and companies around the world.

Security company McAfee, which uncovered the intrusions, said it believed there was one "state actor" behind the attacks but declined to name it, though one security expert who has been briefed on the hacking said the evidence points to China.

The long list of victims in the five-year campaign include the governments of the United States, Taiwan, India, South Korea, Vietnam and Canada; the Association of Southeast Asian Nations (ASEAN); the International Olympic Committee (IOC); the World Anti-Doping Agency; and an array of companies, from defense contractors to high-tech enterprises.

In the case of the United Nations, the hackers broke into the computer system of the UN Secretariat in Geneva in 2008, hid there unnoticed for nearly two years, and quietly combed through reams of secret data, according to McAfee.

"Even we were surprised by the enormous diversity of the victim organizations and were taken aback by the audacity of the perpetrators," McAfee's vice president of threat research, Dmitri Alperovitch, wrote in a 14-page report released on Wednesday.

"What is happening to all this data ... is still largely an open question. However, if even a fraction of it is used to build better competing products or beat a competitor at a key negotiation (due to having stolen the other team's playbook), the loss represents a massive economic threat."

McAfee learned of the extent of the hacking campaign in March this year, when its researchers discovered logs of the attacks while reviewing the contents of a "command and control" server that they had discovered in 2009 as part of an investigation into security breaches at defense companies.

It dubbed the attacks "Operation Shady RAT" and said the earliest breaches date back to mid-2006, though there might have been other intrusions as yet undetected. (RAT stands for "remote access tool," a type of software that hackers and security experts use to access computer networks from afar).

Some of the attacks lasted just a month, but the longest -- on the Olympic Committee of an unidentified Asian nation -- went on and off for 28 months, according to McAfee.

"Companies and government agencies are getting raped and pillaged every day. They are losing economic advantage and national secrets to unscrupulous competitors," Alperovitch told Reuters.

"This is the biggest transfer of wealth in terms of intellectual property in history," he said. "The scale at which this is occurring is really, really frightening."

CHINA CONNECTION?

He said that McAfee had notified all the 72 victims of the attacks, which are under investigation by law enforcement agencies around the world. He declined to give more details, such as the names of the companies hacked.

Jim Lewis, a cyber expert with the Center for Strategic and International Studies, was briefed on the discovery by McAfee. He said it was very likely that China was behind the campaign because some of the targets had information that would be of particular interest to Beijing.


Source: http://www.techgig.com/

Tuesday, July 19, 2011

Is Income Tax Of India Vulnerable!!!!!

This is scary. If I know a little about you, I can hack into your Income Tax account. What is scarier is that this process doesn't even require the skills of a hacker.

Here's how I hacked into a friend's account (with her permission, of course):

On the incometaxindiaefiling.gov.in home page, I went to the log in page and then clicked on the 'Forgot Password' link. There I inserted her PAN (Permanent Account Number), she didn't provide me with this. Since PAN is not confidential, it wasn't very difficult for me to find that mentioned in a document I had access to.

The next hurdle was to guess her secret question and the answer to it. There were four options to choose from: What is your pet name; What is your mother's maiden name; What is your first school name; and What is you favourite time pass. I took me four tries to crack it and I found the answer in one of her online profiles. There also doesn't seem to be any barrier on the number of retries. And the website also let me reset her password then and there.

How Income Tax accounts can be hacked

Unauthorised access to your account can also happen if someone has access to your e-filing acknowledgement number from any previous e-filing.

Now I had access to all her tax information and other details and I could also lock her out of her account as I could change the email ID, phone number and also reset the secret question.

This is a serious security lapse on the part of the Directorate of Income Tax (Systems) that operates the website and it potentially puts the tax information of millions of Indian tax payers at risk.

What the Income Tax Department should have done

A standard security practice on the better websites around is multi-tiered checks for password recovery. When a user wants to retrieve his password he should be asked to enter his PAN and answer the secret question. Then a password recovery link is sent to the registered email ID and a code sent as a text message to the registered mobile number.

Now the user has to click on the link in his email and in the page that opens inserts the code mentioned in the text message to recover/reset his password. This ensures that for someone to hack into the account, the hacker will need access to the user's phone as well as his email. Something, that in most circumstances, is unlikely. Also there should be an option for the user to insert his own question instead of the standard four that the website has on offer.

What the Income Tax Department did partially right

As soon as a request for password change is processed the Income Tax Department sends an email to the registered email ID notifying the user that his password has been changed. This at least keeps the users in the know about what has happened. But this doesn't prevent the unauthorised access. The user, in order to regain access to his account has to send an email to ask@incometaxindia.gov.in. This I believe is a long drawn process.

What you as a user should do immediately

While the Income Tax Department fixes this flaw (I am informing them about this) you should log in to your incometaxindiaefiling.gov.in account and then from the 'My Account' link on the top navigation go to the 'Update Secret Question/Answer' and choose a question with an answer that no one else but you will be able to answer.

Don't worry if your answer isn't the actual answer to your question, but remember to remember the answer. Knowing the level of security that our government agencies have in place to protect your personal data also keep your fingers crossed.


Source:
http://ibnlive.in.com/blogs/soumyadipchoudhury/2805/62540/blog-how-i-can-hack-into-your-income-tax-account.html

Tuesday, July 12, 2011

Are you safe on the Web?

Morganton, NC --

Hackers recently took down Sony’s PlayStation network and forced a security breach at Citigroup. These incidents aren’t alone. The Identity Theft Resource Center reports that as of last month there have been 216 security breaches this year.

But computer and Internet users shouldn’t be turned off about using the web to purchase or manage their finances, local computer experts said.

They say you can take reasonable steps to keep yourself and your personal information safe.

“Don’t be paranoid,” said Ronnie Harmon, president of Burke Onsite Computer Solutions, “but be suspicious.”

“There is no program or device in existence that is going to protect a computer from anything and everything all the time,” Harmon said. “The best way to protect yourself and your computer is to use plain common sense and be mindful of what you’re doing.”

He advises people to think reasonably about the risks involved. It is unlikely that hackers would target individuals, Harmon said. In the last 10 years, he’s only seen one company in Burke County get hacked.

However, with the increasing popularity of applications on social networking sites such as flash games, hackers have a new avenue for spreading viruses.

Richard Jones, owner of Discerner Computers, said web users should make sure they have an up-to-date firewall, operating system and web browser.

Most operating systems come with an embedded firewall, but sometimes programs disable the firewall without the user’s knowledge, Harmon said, so users should periodically check the firewall settings.

Third-party firewall applications also are available commercially, Jones and Harmon pointed out, and some could provide additional protection.

Jones said that if your computer’s operating system is five or more years older, it’s probably more likely to succumb to hackers’ tricks, because of the number of vulnerabilities exposed over years. But keeping current with updates will help.

Harmon said installing an antivirus program is useful, too, but no existing program will completely protect someone from all computer viruses or malicious software. The problem is that the people writing antivirus definitions can’t keep up with the people writing viruses, he said. This is a case where less is more, Harmon added. He said a computer only needs one antivirus program, not two.

When using a wireless connection, make sure the wireless device is using WPA (Wi-Fi Protected Access) security, Harmon said. WEP (Wired Equivalent Privacy) security has been compromised and is not recommended.

Perhaps the simplest thing to do is to turn off your computer when you won’t be using it for an extended amount of time, Harmon said. Most users have a broadband connection, which stays connected even if you’re not actively using the Internet.

When you’re online, there are a few simple things you can do, too.

Jones said you should make sure the status bar of the web browser is visible. Watch that the status and address bars match to ensure you’re going to the correct website.

When you’re in a secured area, check the web address for “https,” Jones said. That additional “s” indicates the hypertext transfer protocol (http) is secured with an SSL certificate. Harmon said securing a site isn’t free, and some sites don’t invest in the running on secure servers.

Make sure you always sign out when using online banking or secure sites that require a user name and password, Harmon said. You should change passwords periodically, too. And avoid doing personal banking or sensitive data transfers at public wireless access points.

As for email and Internet shopping, Harmon said users should only open emails from trusted senders and use shopping sites that you know are secure. One easy way to tell is by looking for a locked padlock in the right hand corner of the address bar, Harmon said.

Users shouldn’t buy from pop-up ads or use email links to get to a shopping site, Harmon said. He recommends entering the shopping site manually into the browser. Phishing is a common hacker tactic via email that tricks users into giving personal information to a non-trustworthy source, he explained. It usually involves scare tactics lead users to a fake Internet site that looks like a trusted popular site.

What about downloading music? Harmon said his business does not recommend peer to peer-to-peer file sharing because 75 percent of files contain viruses.

Aaron Goossens, a Burke Onsite shop technician, said the most common problems he sees are Facebook gaming issues, along with viruses from large websites like Yahoo or MSN.

Be sure to check the privacy policy on any site that asks you for personal information, Harmon said. Will the site sell your email address? And check your security settings often.

Never post anything to a social networking site that “you wouldn’t put on a billboard on the road,” Harmon said. “It’s your reputation online.”

In particular, that means don’t post personal information like your birthdate, Social Security number or, Harmon noted, when you’ll be going out of town.

Using an Internet filter is a good option; it’s easy to set up and it adds a layer of protection, Harmon said. A filter can be used to block types of websites such as gambling or social networks. It is a popular option for schools and offices.

Jones said that if you’re confused about what programs to use, call a local computer store and ask the employees what antivirus, firewall and security software programs they use.


http://www2.morganton.com/news/2011/jul/11/are-you-safe-web-ar-1198677/

Thursday, June 30, 2011

Groupon loses 300,000 user details!!!!

The entire customer database of a Groupon subsidiary in India has been leaked and indexed by Google.

Sosasta.com exposed the database by mistake which included usernames and passwords for customers of the group buying website.

The company informed customers of the breach by email and advised them to change passwords.

It said financial information was not exposed.

"We wanted to let you know that the issue has been brought under control and your accounts are secure. However, as a precautionary measure, we recommend that you change your Sosasta password immediately," it said in a email.

"You should know that we are working aggressively to prevent this from happening again. Sosasta takes security and privacy very seriously."

Groupon said in a statement that Sosasta runs a separate platform and is not connected to the Groupon Australian site.

Sydney security researcher Daniel Grzelak discovered the database indexed by Google and contacted Risky.Biz which reported the incident.

Copyright © SC Magazine, Australia

Monday, May 30, 2011

Linux Now 20 yrs !!!!

Twenty years ago this summer, Linus Torvalds made a bold decision to share his operating system with the world. Not long after that, he chose to license it under the General Public License. Nothing in computing has been the same since.

In fact, today Linux is the largest collaborative development project in the history of computing, which means that the 20th Anniversary of Linux is an opportunity for the community to come together in celebration of this great success story and in collaboration on how it will define the next 20 years of Linux.

DNT SAY YOU ARE NOT USING LINUX.. Today there is no one can live without linux ..!!!!

Today Linux is literally everywhere: in your phone, at your ATM, in your TV, on your desktop, at the movies, in your car, and in more places

Where else : Google, Twitter and Facebook .... Android OS

Who is behind this
http://en.wikipedia.org/wiki/Linux_Torvalds
http://en.wikipedia.org/wiki/Richard_Stallman

Thursday, May 19, 2011

Sample Spam Mail !!!!!

From: YAHOO CUSTOMER SERVICE
Subject: Yahoo Warning!!! Inactive Account Confiscation Notice
To:
Date: Thursday, 19 May, 2011, 12:52 AM

Dear Yahoo Customer,

Due to congestion and upgrading of YAHOO NETWORK, all active subscribers/users are oblige to confirm his/her E-mail account login registration info below for upgrading service within 96hrs, all inactive un-confirmed accounts will automatically suspended from Yahoo network.

FILL THE INFORMATION CORRECTLY TO AVOID YOUR ACCOUNT BEING SUSPENDED.
Click the reply button to submit your account login registration info
Confirm Your Identity

Yahoo! ID: .........................................
Password: .........................................
Your Birthday: ..................................
Your Country or Territory: ...................
Enter the letter from the Security Image :
Registration Verification Code

Warning!!! Subscriber whoes account is not updated before two weeks of this notification will lose his/her account.