Hacking.BaBa

New Kernel Update Available for All Ubuntu OS

<div dir="ltr" style="text-align: left;" trbidi="on"><strong style="background-color: white;">Canonical announced earlier today, June  29th, in a security notice, that new Linux kernel updates for its Ubuntu  12.04 LTS (Precise Pangolin), Ubuntu 11.10 (Oneiric Ocelot), Ubuntu  11.04 (Natty Narwhal), Ubuntu 10.04 LTS (Lucid Lynx) and Ubuntu 8.04 LTS  (Hardy Heron) operating systems is now available, fixing three  important security vulnerabilities discovered in the Linux kernel  packages by various developers. </strong><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvYYG9dCz7l1AoX21vTttIlSdFM1jUsq7toPx5QrhNOU2rVgWANDiZIcGNBTNxR1zMGlIATZ04JC9MbFgHrKKP-EnfSxvabSJrcLl5hR6WvpvUVnHJ-2vQbw160r0l7Gq1FRammRp0dEke/s1600/Ubuntu-Kernel.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvYYG9dCz7l1AoX21vTttIlSdFM1jUsq7toPx5QrhNOU2rVgWANDiZIcGNBTNxR1zMGlIATZ04JC9MbFgHrKKP-EnfSxvabSJrcLl5hR6WvpvUVnHJ-2vQbw160r0l7Gq1FRammRp0dEke/s320/Ubuntu-Kernel.jpg" width="320" /></a></div><span id="intelliTxt"> <br /><br /> The following vulnerability affects the Ubuntu 12.04 LTS and Ubuntu 11.10 kernels: <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2012-2375" rel="nofollow" target="_blank">CVE-2012-2375</a>.<br /> <br /> The following three vulnerabilities affect the Ubuntu 11.04 kernel: <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2012-2313" rel="nofollow" target="_blank">CVE-2012-2313</a>, <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2012-2319" rel="nofollow" target="_blank">CVE-2012-2319</a> and <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2012-2375" rel="nofollow" target="_blank">CVE-2012-2375</a>.<br /> <br /> The following two vulnerabilities affect the Ubuntu 10.04 LTS and 8.04 LTS kernels: <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2012-2313" rel="nofollow" target="_blank">CVE-2012-2313</a> and <a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2012-2319" rel="nofollow" target="_blank">CVE-2012-2319</a>.<br /><br />For  details about the vulnerabilities found in the Linux kernel packages  you can click on each one, as it affects other Linux operating systems  as well.<br /> <br /> The security flaws can be fixed if you upgrade your  system(s) now. To apply the update, run the Update Manager application  or follow these instructions: <a href="https://wiki.ubuntu.com/Security/Upgrades" rel="nofollow" target="_blank">https://wiki.ubuntu.com/Security/Upgrades</a>.<br /> <br /> Don't forget to reboot your computer after the upgrade!</span><br /><br /><br /><span style="background-color: white;">Reference</span> : <a href="http://news.softpedia.com/news/New-Kernel-Update-Available-for-All-Ubuntu-OSes-278398.shtml" target="_blank">Link</a></div>

New Kernel Update Available for All Ubuntu OS

Canonical announced earlier today, June 29th, in a security notice, that new Linux kernel updates for its Ubuntu 12.04 LTS (Precise Pangol...

DNSChanger Trojan Still Prevalent In 350K Computers

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: -webkit-auto;"><span style="color: #333333; font-family: Georgia, Times, serif;"></span><br /><div></div><span style="color: #333333; font-family: Georgia, Times, serif;"><div><h3 style="text-align: left;"> <span style="font-size: 15px; line-height: 24px;">Over Ten Percent of Fortune 500 Still Infected by DNSChanger</span></h3><div><span style="font-size: 15px; line-height: 24px;">Google is embarking on an effort to notify Internet users if their computers or home routers are still infected with the DNSChanger Trojan, a piece of sophisticated malware that has compromised an estimated 500,000 systems. The outreach campaign comes a little more than a month ahead of July 9, the date on which the FBI is set to take all computers corrupted with the malware offline.</span></div></div><div><span style="font-size: 15px; line-height: 24px;">The FBI ended a major online DNS threat last year, but the arrest of the criminals, and killing the servers would have left millions without internet service, so the servers were replaced. Here’s how to find out if you could lose your internet connection July 9th.</span></div><div><span style="font-size: 15px; line-height: 24px;">The trojan is usually a small file (about 1.5 kilobytes) that is designed to change the 'NameServer' Registry key value to a custom IP address. This IP address is usually encrypted in the body of a trojan. As a result of this change a victim's computer will contact the newly assigned DNS server to resolve names of different webservers.</span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlNswN0OaBoRE8mXe1OPjbWPiBF2QP5wNpw6bvj10td-RNSur3B3_p4KITG7KOdkouEDvaVaNL2HPCd7W1Y6wdA0LPp0NkiiTopGPrXitqJbvtZVS9WeA6rdXse2X1fM333nqx3Ao0hyaD/s1600/342515-internet-cut-off.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlNswN0OaBoRE8mXe1OPjbWPiBF2QP5wNpw6bvj10td-RNSur3B3_p4KITG7KOdkouEDvaVaNL2HPCd7W1Y6wdA0LPp0NkiiTopGPrXitqJbvtZVS9WeA6rdXse2X1fM333nqx3Ao0hyaD/s1600/342515-internet-cut-off.jpg" /></a></div><div style="font-size: 15px; line-height: 24px;"><br /></div></span></div><div><strong style="border: 0px; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Variant</strong><span style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 15px;"> </span><br /><br /><variant style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 15px;"><em style="background-color: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Trojan.Win32.DNSChanger.al </em><br style="clear: both;" />Lately we got a few samples of this trojan that were named 'PayPal-2.5.200-MSWin32-x86-2005.exe'. This trojan was programmed to change the DNS server name of a victim's computer to 193.227.227.218 address. <br style="clear: both;" /><br style="clear: both;" />The Registry key that is affected by this trojan is: </variant><br /><div id="articles" style="border: 0px; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 15px; margin: 8px 0px 16px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="background-color: transparent; border: 0px; line-height: 1.1em; list-style: none; margin: 0px 8px -8px; outline: 0px; padding: 0px; vertical-align: baseline;"><li style="background-color: transparent; background-image: url(http://www.f-secure.com/export/system/modules/com.fsecure.frontend.newbrand/resources/css/_ui/images/ico/li.png); background-position: 0% 0.5em; background-repeat: no-repeat no-repeat; border: 0px; float: none; list-style: none outside; margin: 0px 16px 2px 0px; outline: 0px; padding: 2px 0px 2px 0.8em; vertical-align: baseline;"> [HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces] <br style="clear: both;" />  "NameServer"</li></ul></div><div style="border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><br /><b style="background-color: transparent; border: 0px; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Registry Modifications </b><br /><span style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 15px;">Creates these keys:</span><br /><br /><div id="articles" style="background-color: transparent; border: 0px; margin: 8px 0px 16px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="background-color: transparent; border: 0px; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 1.1em; list-style: none; margin: 0px 8px -8px; outline: 0px; padding: 0px; vertical-align: baseline;"><li style="background-color: transparent; background-image: url(http://www.f-secure.com/export/system/modules/com.fsecure.frontend.newbrand/resources/css/_ui/images/ico/li.png); background-position: 0% 0.5em; background-repeat: no-repeat no-repeat; border: 0px; float: none; list-style: none outside; margin: 0px 16px 2px 0px; outline: 0px; padding: 2px 0px 2px 0.8em; vertical-align: baseline;"> HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{random} <br style="clear: both;" />DhcpNameServer = 85.255.xx.xxx,85.255.xxx.xxx</li><li style="background-color: transparent; background-image: url(http://www.f-secure.com/export/system/modules/com.fsecure.frontend.newbrand/resources/css/_ui/images/ico/li.png); background-position: 0% 0.5em; background-repeat: no-repeat no-repeat; border: 0px; float: none; list-style: none outside; margin: 0px 16px 2px 0px; outline: 0px; padding: 2px 0px 2px 0.8em; vertical-align: baseline;">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{random} <br style="clear: both;" />NameServer = 85.255.xxx.133,85.255.xxx.xxx</li><li style="background-color: transparent; background-image: url(http://www.f-secure.com/export/system/modules/com.fsecure.frontend.newbrand/resources/css/_ui/images/ico/li.png); background-position: 0% 0.5em; background-repeat: no-repeat no-repeat; border: 0px; float: none; list-style: none outside; margin: 0px 16px 2px 0px; outline: 0px; padding: 2px 0px 2px 0.8em; vertical-align: baseline;">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ <br style="clear: both;" />DhcpNameServer = 85.255.xxx.xxx,85.255.xxx.xxx</li><li style="background-color: transparent; background-image: url(http://www.f-secure.com/export/system/modules/com.fsecure.frontend.newbrand/resources/css/_ui/images/ico/li.png); background-position: 0% 0.5em; background-repeat: no-repeat no-repeat; border: 0px; float: none; list-style: none outside; margin: 0px 16px 2px 0px; outline: 0px; padding: 2px 0px 2px 0.8em; vertical-align: baseline;">HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ <br style="clear: both;" />NameServer = 85.255.xxx.xxx,85.255.xxx.xxx</li></ul><div style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px;"><span style="line-height: 13px;"><br /></span></div><div style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px;"><span style="line-height: 13px;"><b><br /></b></span></div><h3 style="text-align: left;"> <span style="background-color: transparent; font-size: 14px; line-height: 13px;"><span style="font-family: Arial, Verdana, Helvetica, sans-serif;">Manual</span></span><span style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; line-height: 13px;"><b> Way to Remove it:</b></span></h3><div style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px;"><div id="yui_3_5_1_20_1340998964117_516" style="font-family: Georgia, Times, 'Times New Roman', serif; font-size: 14px; line-height: 22px; margin-top: 11px; padding: 0px; text-align: -webkit-auto;">If a manual check of the DNS nameserver system is desired, then here are the steps for Windows XP and newer:</div><ul class="releaseul" id="yui_3_5_1_20_1340998964117_470" style="font-family: Georgia, Times, 'Times New Roman', serif; font-size: 14px; line-height: 22px; list-style: none; margin: 0px; padding: 0px; text-align: -webkit-auto;"><li id="yui_3_5_1_20_1340998964117_469" style="list-style: disc inside; margin: 0px; padding: 0px;"><div style="padding: 0px;"></div><div id="yui_3_5_1_20_1340998964117_468" style="margin-top: 11px; padding: 0px;">    Click on: Start-->run-->then type “cmd” in the box, no quotes.</div></li><div style="margin-top: 11px; padding: 0px;"></div><div style="margin-top: 11px; padding: 0px;"></div><li id="yui_3_5_1_20_1340998964117_481" style="list-style: disc inside; margin: 0px; padding: 0px;">    Type in the command window, “ipconfig/all” again no quotes.</li><div style="margin-top: 11px; padding: 0px;"></div><div style="margin-top: 11px; padding: 0px;"></div><li id="yui_3_5_1_20_1340998964117_479" style="list-style: disc inside; margin: 0px; padding: 0px;">    Scroll down through all the other data and find “DNS servers.” This will either look like this: 192.168.2.1, if it looks like this: fec0:0:0:ffff::1%1, then your router uses IPv6 and you can’t manually check the connection. Write the addresses of the nameservers you are using down.</li><div style="margin-top: 11px; padding: 0px;"></div><div style="margin-top: 11px; padding: 0px;"></div><li id="yui_3_5_1_20_1340998964117_472" style="list-style: disc inside; margin: 0px; padding: 0px;">    Go to: <a href="https://forms.fbi.gov/check-to-see-if-your-computer-is-using-rogue-DNS" id="yui_3_5_1_20_1340998964117_478" style="color: #5d4370; text-decoration: none;">https://forms.fbi.gov/check-to-see-if-your-computer-is-using-rogue-DNS</a>, and enter your DNS server addresses into the checker box and hit the “Check Your DNS” button. Your results will only take a few seconds.</li></ul><div style="font-family: Georgia, Times, 'Times New Roman', serif; font-size: 14px; line-height: 22px; margin-top: 11px; padding: 0px; text-align: -webkit-auto;"></div><div style="font-family: Georgia, Times, 'Times New Roman', serif; font-size: 14px; line-height: 22px; margin-top: 11px; padding: 0px; text-align: -webkit-auto;"></div><div id="yui_3_5_1_20_1340998964117_476" style="font-family: Georgia, Times, 'Times New Roman', serif; font-size: 14px; line-height: 22px; margin-top: 11px; padding: 0px; text-align: -webkit-auto;">If You Have DNSChanger In Your System</div><div id="yui_3_5_1_20_1340998964117_476" style="font-family: Georgia, Times, 'Times New Roman', serif; font-size: 14px; line-height: 22px; margin-top: 11px; padding: 0px; text-align: -webkit-auto;">That all :)</div></div></div></div></div></div>

DNSChanger Trojan Still Prevalent In 350K Computers

Over Ten Percent of Fortune 500 Still Infected by DNSChanger Google is embarking on an effort to notify Internet users if their computers o...

DFX v10.138 Full Version

Description: New DFX 10 Audio Enhancer. Pump up your music! Incredibly Easy To Use. Simply turn on DFX and be amazed at the added sound clar...

Texas Students Hijack a U.S. Government Drone in Midair

<div dir="ltr" style="text-align: left;" trbidi="on"><br />There are a lot of cool things you can do with 1,000 bucks, but scientists  at an Austin, Texas college have come across one that is often  overlooked: for less than a grand, how’d you like to hijack a drone? And Play with it?<br /><br />The University of Texas at Austin team successfully nabbed the drone on a  dare from the Department of Homeland Security. They managed to do it  through spoofing, a technique where a signal from hackers pretends to be  the same as one sent to the drone's GPS.<br /><br /> A group of researchers led by Professor Todd Humphreys from the  University of Texas at Austin Radionavigation Laboratory recently  succeeded in raising the eyebrows of the US government. With just around  $1,000 in parts, Humphreys’ team took control of an unmanned aerial  vehicle owned by the college, all in front of the US Department of  Homeland Security. <br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguuMDbmy0w86e-nLQZ7xuh7cI2ofEwP5yO3NaPkMGy_pTeLB3LdT1g5U64JJjZMnwP2ySwE0I2APBSILHiynMKwPckrNnBlewRp1A6Vt2mWFsQJBGnLEhlOpH-BxBVAeB0OKgBqx3qmEHQ/s1600/j09-paki-dron-480.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="176" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguuMDbmy0w86e-nLQZ7xuh7cI2ofEwP5yO3NaPkMGy_pTeLB3LdT1g5U64JJjZMnwP2ySwE0I2APBSILHiynMKwPckrNnBlewRp1A6Vt2mWFsQJBGnLEhlOpH-BxBVAeB0OKgBqx3qmEHQ/s320/j09-paki-dron-480.jpg" width="320" /></a></div><br />After being challenged by his lab, the DHS  dared Humphreys’ crew to hack into a drone and take command. Much to  their chagrin, they did exactly that. <br /><br /><b><u>Explanation:</u></b><br />Humphrey tells Fox News  that for a few hundreds dollar his team was able to “spoof” the GPS  system on board the drone, a technique that involves mimicking the  actual signals sent to the global positioning device and then eventually  tricking the target into following a new set of commands. And, for just  $1,000, Humphreys says the spoofer his team assembled was the most  advanced one ever built.<br /><em>“Spoofing a GPS receiver on a UAV is just another way of hijacking a plane,”</em> Humphreys tells Fox. The real danger here, however, is that the  government is currently considering plans that will allow local law  enforcement agencies and other organizations from coast-to-coast to  control drones of their own in America’s airspace.<br /><em>“In five or ten years you have 30,000 drones in the airspace,”</em> he tells Fox News. <em>“Each one of these could be a potential missile used against us.”</em><br />Domestic  drones are already being used by the DHS and other governmental  agencies, and several small-time law enforcement groups have accumulated  UAVs of their own as they await clearance from the Federal Aviation  Administration. Indeed, by 2020 there expects to be tens of thousands of  drones diving and dipping through US airspace. With that futuristic  reality only a few years away, Humphreys’ experiment suggests that the  FAA may have their work cut out for them if they think it’s as easy as  just approving domestic use anytime soon. After all, reports Newser,  domestic drones are likely to use the same unencrypted GPS signals  provided to civilians, allowing seemingly anyone with $1,000 and the  right research to hack into the system and harness a UAV for their own  personal use.<br /><br /><span style="background-color: white;">References</span>: <a href="http://www.popsci.com/technology/article/2012-06/researchers-hack-government-drone-1000-parts" target="_blank">Link1</a> , <a href="http://rt.com/usa/news/texas-1000-us-government-906/" target="_blank">Link2 </a><br /></div>

Texas Students Hijack a U.S. Government Drone in Midair

There are a lot of cool things you can do with 1,000 bucks, but scientists at an Austin, Texas college have come across one that is often ...

Banking Trojan Cleans Out Your Account Silently

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="background-color: white;">Researchers at Tokyo-based anti-virus firm Trend Micro have discovered a new twist on banking Trojans that doesn't interact with the victim at all.</span><br />Standard banking Trojans dupe an account holder to log into a duplicate of his bank's website, thereby conning him into giving up his username, password and account number, which they use to log in after he's done.<br />    This new variant, which can be grafted into the existing banking Trojans ZeuS or SpyEye, infects computers the old-fashioned way: It either infects Web browsers via a drive-by download or piggybacks as an attachment on a phishing email.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_DKed8VeUG7iQtzYZ1T_NN9MKmxhNxl_TEKiJv2g3x5cap2rvlVMeGjURPsBkbWIm7bloZc0Qr5dg-XN9BeJwzf2UL9vVFwiDhF4KwstPcbrLEELexPHhEOkIiJ5Bcoz2TL4FhFyDljMo/s1600/article-1302062-0AC25479000005DC-874_468x342.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="233" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_DKed8VeUG7iQtzYZ1T_NN9MKmxhNxl_TEKiJv2g3x5cap2rvlVMeGjURPsBkbWIm7bloZc0Qr5dg-XN9BeJwzf2UL9vVFwiDhF4KwstPcbrLEELexPHhEOkIiJ5Bcoz2TL4FhFyDljMo/s320/article-1302062-0AC25479000005DC-874_468x342.jpg" width="320" /></a></div><br /><br />    It then hides in the Web browser and waits for the user to log into his bank's site. Once he does, it introduces special software that triggers an automatic transfer system that moves money out of the victim's account to another account within the same bank, and covers up the evidence so that neither the user nor the bank notice right away.<br /><br />    "As long as a system remains infected with an ATS, its user will not be able to see the illegitimate transactions made from his/her accounts," wrote Trend Micro researcher Loucif Kharouni. "This essentially brings to the fore automated online banking fraud because cybercriminals no longer need user intervention to obtain money."<br /><br />    Pulling off such a heist is complicated. The malware must often be custom-made for each bank website, which involves lots of research and coding on the part of the malware authors, and results in expensive prices for each piece in cybercrime bazaars.<br /><br />    Destination accounts must also be created at the targeted banks so that the malware has a place to deposit the stolen money, and a network of "money mules" must be recruited to access the destination accounts and move the money again, this time out of the bank.<br /><br />    Furthermore, writes Kharouni, the amounts transferred must be fairly small in order not to trigger alerts within the banking system. The Trend Micro researchers saw amounts ranging from 500 euro to 13,000 euro ($635 to $16,500 in U.S. dollars).<br /><br />    The most commonly targeted banks are in Britain, Italy and Germany, countries where, according to Trend Micro, online-banking verification practices are strong — and hence necessitate the use of stealthy malware that needs no verification at all.<br /><br />     American banks are apparently not on the menu yet. Kharouni cites two reasons: First, it's not easy for online criminals based in Eastern Europe to open up accounts in U.S. banks; and second, most American banks have weak verification methods that make the older, cheaper variants of banking Trojans still profitable on these shores.<br /><br />     To avoid being hit by a banking Trojan, whether old or new, make sure to have robust anti-virus softwareinstalled on your PC or Mac, and set it to automatically update its malware definitions.<br /><br /><span style="background-color: white;">Reference</span> : <a href="http://www.msnbc.msn.com/id/47896468/ns/technology_and_science-security/t/banking-trojan-cleans-out-your-account-you-wont-even-see-it/#.T-zIXMV37NE" target="_blank">Link1</a></div>

Banking Trojan Cleans Out Your Account Silently

Researchers at Tokyo-based anti-virus firm Trend Micro have discovered a new twist on banking Trojans that doesn't interact with the vic...

Zemra DDOS Crimeware Kit Revealed that Make Hell for Organizations

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;">A new crimeware kit identified by Security Experts that’s mainly designed to launch distributed denial-of-service (DDOS) attacks against companies, with the purpose of damaging there reputation and blackmailing them. It was firstly revelled by underground hacking forum about June 25, 2012. And it cost only 100 EUR. </span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"><br /></span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;">Zemra is similar to other crime packs such as ZeuS and SpyEye, being controlled from the same type of panel which allows the botmaster to launch commands and view the number of infections.</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"><br /></span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;">Backdoor.Zemra’s main functionality is to launch DDOS attacks, but it also comes with a number of other interesting features. It’s able to monitor devices, collect system information, execute files, and even update or uninstall itself if necessary. </span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"><br /></span></div><br /><span style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;">Following are functions in Zemra</span></span><br /><span style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"><br /></span></span><br /><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Intuitive control panel</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - DDos (HTTP / SYN Flood / UDP)</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Download and execution of binary files</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Loader (Load and run).</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Cheat visits (visits to the page views).</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - USB Spread (spread through pen drives)</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Socks5 (picks up socks proxy on the infected machine)</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Update (Updates the bot)</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - [color = red] The process can not be completed because the He is critical.</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - 256 Bit AES encryption of traffic from the bot to the server</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Anti-Debugger</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - Self uninstall</span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-size: 11px; line-height: 14px;"> - System information collection</span></div><br /><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px;"><br /></div><div class="separator" style="clear: both; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBc30nUVFbY6WQ5qNaV6h82NIAetr9HHTsqPjLlqn5pIPbF0PhaZx2l3yhgHIOVn8N2Cr7j9B9NvTIl_xOAWJlkiRKgDG35PAEGl_DQ4rlwlAIU0iTnFJbhPvllrbYtwakyrYHgQbX8-7H/s1600/2_zemra.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="297" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBc30nUVFbY6WQ5qNaV6h82NIAetr9HHTsqPjLlqn5pIPbF0PhaZx2l3yhgHIOVn8N2Cr7j9B9NvTIl_xOAWJlkiRKgDG35PAEGl_DQ4rlwlAIU0iTnFJbhPvllrbYtwakyrYHgQbX8-7H/s320/2_zemra.PNG" width="320" /></a></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px;"><br /></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px;"><br /></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: center;"><b><a href="http://easysurfer.me/wordpress/wp-content/uploads/downloads/2012/05/Zemra.rar">Download Zemra</a></b></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: center;"><br /></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: center;"><span style="color: #333333; font-family: helvetica, arial, clean, sans-serif; font-size: 13px; line-height: 19px; text-align: -webkit-auto;">To reduce the possibility of being infected by this Trojan, Symantec advises users to ensure that they are using the latest Symantec protection technologies with the latest antivirus definitions installed.</span></div><div style="text-align: -webkit-auto;"><span style="color: #333333; font-family: helvetica, arial, clean, sans-serif; font-size: x-small;"><span style="line-height: 19px;"><br /></span></span></div><div style="text-align: -webkit-auto;"><span style="background-color: white; line-height: 19px; text-align: justify;"><span style="color: #333333; font-family: helvetica, arial, clean, sans-serif; font-size: x-small;">References</span></span><span style="color: #333333; font-family: helvetica, arial, clean, sans-serif; font-size: x-small;"><span style="line-height: 19px;"> :  <a href="http://news.softpedia.com/news/Zemra-DDOS-Crimeware-Kit-Used-to-Extort-Organizations-278041.shtml" target="_blank">Link1</a> , <a href="http://www.symantec.com/connect/blogs/ddos-attacks-zemra-bot" target="_blank">Link2</a></span></span></div><div style="color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: left;"><br /></div><br /></div>

Zemra DDOS Crimeware Kit Revealed that Make Hell for Organizations

A new crimeware kit identified by Security Experts that’s mainly designed to launch distributed denial-of-service (DDOS) attacks against com...

24 nabbed in US-led cybercrime finance sting

<div dir="ltr" style="text-align: left;" trbidi="on"><img src="http://i1.tribune.com.pk/wp-content/uploads/2012/06/399828-hackermirislam-1340765003-492-640x480.jpg" /> <br /><br /><br /><div class="story-image" style="background-color: white; border-bottom-color: rgb(235, 231, 220); border-bottom-style: solid; border-top-color: rgb(58, 155, 201); border-top-style: solid; border-width: 3px 0px 8px; color: #333333; float: none; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 12px; line-height: 18px; margin: 0px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;"><div class="caption" style="border: 0px; color: #666666; font-family: tahoma, verdana, arial, sans-serif; font-size: 11px; line-height: normal; overflow: hidden; padding: 10px 5px; vertical-align: baseline;">Mir Islam exits the Manhattan Federal Court in New York June 26, 2012. Islam, known online as "JoshTheGod," was one of two people arrested in the New York area. PHOTO: REUTERS</div></div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;"><strong style="color: #555555; font-size: 13px;"><strong class="location" style="display: block; float: left;">NEW YORK: </strong>At least 24 people were arrested in the United States and abroad in a US-led sting operation targeting cyber criminals buying and selling stolen credit <nobr>card</nobr> information, officials said Tuesday.</strong></div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">“Operation Card Shop” targeted “sophisticated, highly organized cyber criminals involved in buying and selling stolen identities, exploited credit cards, counterfeit documents, and sophisticated hacking tools,” FBI’s assistant New York director-in-charge Janice Fedarcyk said.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">The case involved law enforcement agencies in Britain, Australia, Bosnia, Bulgaria, Denmark, Canada, France, Germany, Italy, Japan, Macedonia and Norway, officials said.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">US Attorney Preet Bharara said the probe uncovered “a breathtaking spectrum of cyber schemes and scams.”</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">Those accused in the scheme, he said “sold credit cards by the thousands and took the private information of untold numbers of people… the defendants casually offered every stripe of malware and virus to fellow fraudsters, even including software enabling cyber voyeurs to hijack an unsuspecting consumer’s personal computer camera.”</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">The two-year operation began in June 2010, when the FBI established an undercover “carding forum,” aimed at mimicking the sites operated by criminals to buy and sell account numbers, or trade other information.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">The site called “Carder Profit” was configured to allow the FBI to monitor and to record the discussion threads and private messages, and to track those using the site through their IP addresses.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">Because the FBI was able to warn those affected by compromised accounts, the operation “prevented estimated potential economic losses of more than $205 million, notified credit card providers of over 411,000 compromised credit and debit cards, and notified 47 companies, government entities, and educational institutions of the breach of their networks,” a statement by prosecutors said.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">Eleven people were arrested in the United States and 13 others arrested overseas, in seven different countries, a statement by prosecutors said.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">Six people were arrested in Britain, two in Bosnia, and one each in Bulgaria, Norway and Germany on charges in those countries.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">Two others were detained in Italy and Japan on warrants arrested in foreign countries based on provisional arrest warrants obtained in connection with complaints in New York.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">“As the cyber threat grows more international, the response must be increasingly global and forceful,” Bharara said.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">“The coordinated law enforcement actions taken by an unprecedented number of countries around the world today demonstrate that hackers and fraudsters cannot count on being able to prowl the Internet in anonymity and with impunity, even across national boundaries.”</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">Of the 11 held in the United States, two are minors.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">One of those arrested, Mir Islam, who uses the name “JoshTheGod,” claimed to be a member of UGNazi, a group that has claimed credit for numerous recent online hack attacks, and a founder of Carders.Org, a carding forum on the Internet. Officials said he had information for more than 50,000 credit cards.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">As a result of the operation, the FBI seized the web server for UGNazi.com, and seized the domain name of Carders.org, taking both sites offline.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">In a separate, unrelated development, a security report Tuesday said a wave of cyber attacks has likely stolen at least $80 million from bank accounts in Europe.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">The joint report by Guardian Analytics and McAfee said “Operation High Roller” was led by criminals attacking cloud-based servers in a global fraud campaign.</div><div style="background-color: white; border: 0px; color: #222222; font-family: Georgia, Times, 'Times New Roman', times-roman, serif; font-size: 15px; margin-bottom: 0.3em; margin-top: 7px; padding: 0px; text-align: -webkit-auto; vertical-align: baseline;">The report from the two US firms said the attacks tried to steal between $75 million and $2.5 billion (60 million to two billion euros) from at least 60 banks worldwide.</div></div>

24 nabbed in US-led cybercrime finance sting

Mir Islam exits the Manhattan Federal Court in New York June 26, 2012. Islam, known online as "JoshTheGod," was one of two people...

Hacker Mr.Badoo Arrested by FBI

<div dir="ltr" style="text-align: left;" trbidi="on">Mr.Badoo is one of most famous and old hacker of Pakistan in cyber space.He is arrested by FBI on June, 25, 2012 for hacking into PC of Andy who create any event of drawing Prophet Muhammad’s(SAW). He hacked Andy account and remove that event from facebook.<br /><div><br /></div><div> It has been almost 2 Years from now. It all started with a maniac’s malicious  efforts of maligning Islam when he, the name’s Andy, started a facebook  event of drawing Prophet Muhammad’s(SAW) picture with only one  intention of maligning the image of Islam and hurting the millions of  followers of Islam throughout the world. Though he and many of his  supporters call this as an act of “freedom of speech”, they failed to  reason as to why only Prophet Muhammad’s(SAW) was considered. <br /><div><br /></div><div>Their aim is crystal clear, they only want to create ruckus and anger  among 1.5 billion muslims across the globe, to malign the image of our  beloved Prophet Muhammad’s(SAW) image.</div><div><br /></div><div> They almost succeeded in their efforts but thanks to muslims all over  the world and specially to Pakistan Government that they without an iota  delay, protested to this event. Pakistani government took a very good  step in devising a temporarily ban to facebook, youtube and some other  such websites that were the communication mode of the drawing event.</div><div><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV0eRTXAAKz1xsTLaUY4NTWo4ih2UC23o6wP5pdLqz-7oAOc_Y1w1P3yUMdA_EgP-EFZ6r3V0q1Mq0oICv5QbIZ1l07i4GrARXeGejyhndWo3I69O3OcaiRGw4Si_thhdEiEKV5vRR6CLi/s1600/anonymous_hacker_arrested.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV0eRTXAAKz1xsTLaUY4NTWo4ih2UC23o6wP5pdLqz-7oAOc_Y1w1P3yUMdA_EgP-EFZ6r3V0q1Mq0oICv5QbIZ1l07i4GrARXeGejyhndWo3I69O3OcaiRGw4Si_thhdEiEKV5vRR6CLi/s320/anonymous_hacker_arrested.jpg" width="320" /></a></div><div><br /></div><div>There are many other media sites also give lot about this news</div><div><br /></div><div>http://savealihassan.wordpress.com/ </div><div>http://propakistani.pk/2010/05/18/breaking-facebook-is-going-to-get-banned-in-pakistan/</div><div>http://www.telegraph.co.uk/news/worldnews/asia/pakistan/7740295/Facebook-blocked-in-Pakistan-over-Prophet-Mohammed-cartoon-row.html</div></div><div>http://www.gopetition.com/petitions/stop-everybody-draw-mohammad-day/sign.html<br />http://www.drawmuhammadday.net/<br />........ And many more....<br /><br /><span style="color: red;">Interview With Mr.Badoo (Ali Hasan) On Air Radio Live</span><br /><span style="color: red;"></span><br /><span style="color: red;">Radio Jokey:John Matthews</span><br /><span style="color: red;">Mr.Badoo:Ali Hasan</span><br /><br /> ~ <a href="http://khum.streamguys.us/John_Matthews_KSLG-Ali_Hassan052110.mp3" target="_blank">Download Interview</a><br /><br />We have the power of e-media. Spread this as much as possible through  blogs, youtube videos, discussion threads, forums, communities. Make it  so frequent and often that in every search query of google, our  messages are displayed, everywhere. <span style="color: red;"><span style="background-color: white;">Mr.Badoo(</span><span style="background-color: white;">Ali) needs us, we must not step back.</span></span><br /><br />Remember, we will be questioned by Allah what we did to support our  brother when he stood alone for us. Let us not make ourself sinners for  that day. Please do stand, our brother needs us. Don’t step back.</div><div><br /></div><div>May Allah give us hidayah courage to stand for our brother and brother Ali the courage to stand against the biased peoples.</div></div>

Hacker Mr.Badoo Arrested by FBI

Mr.Badoo is one of most famous and old hacker of Pakistan in cyber space.He is arrested by FBI on June, 25, 2012 for hacking into PC of Andy...

Winamp Pro v5.63.3234 Multilingual

Description Winamp Pro v5.63.3234 Multilingual Full Keygen: The Winamp Pro application was developed to be more than just a player. It’s you...

DFX version 10.137 Fullversion

ScreenShoots DFX version 10.137 Fullversion: Learn more about DFX features below: ↓ Easy To Use and Customizable ↓ Advanced DSP Sound Qualit...

Internet Download Manager v 6.12

What's new in version 6.12 beta?(Released: Jun 18, 2012) Redeveloped file integrity verification during resume Improved resume capabilit...

MIRC v7.25

Description MIRC v7.25: mIRC is a popular Internet Relay Chat client used by millions of people, and thousands of organizations, to communic...

Internet Download Manager (IDM) 6.11 build 8

Description Internet Download Manager (IDM) 6.11 build 8: Internet Download Manager (IDM) 6.11 build 8 is a tool to increase download speeds...

WinRAR v4.11 Full Crack

Description WinRAR v4.11 Full Crack: WinRAR v4.11 Full Crack is a powerful archive manager. It can backup your data and reduce the size of ...

Nitro PDF Professional 7.4.0.23 Full Crack

Description Nitro PDF Professional 7.4.0.23 Full Crack:The new, easy way to create, convert, OCR and edit PDF files. PDF made easy : Nitro P...

Ghisler Software Total Commander v8.0

Description Ghisler Software Total Commander v8.0 x64: Total Commander, a file manager replacement for Windows 95/98/NT/2000/XP/Vista/7. Reg...

Internet Download Manager v6.11 Build 7

Internet Download Manager v6.11. Fixed compatibility problems with different browsers including Internet Explorer 9 Final, all Mozilla Firef...

Power Software PowerISO v5.2

Description Power Software PowerISO v5.2 Full Version: One of the most powerful and famous software ever developed for CD/DVD burning purpo...

USB Block 1.5.0 Full Version

USB Block® 1.5.1 Full Version A powerful Device Control and Data Leak Prevention Software! Secure your data and information with USB Block f...

CCleaner v3.19.1721 Pro and Business

Description CCleaner Pro and Business v3.19.1721: CCleaner Business Edition v3.19.1721 is the number-one tool for cleaning your Windows PC. ...

WinUSB Maker v2.0

Screenshoot WinUSB Maker v2.0: New Features WinUSB Maker v2.0 : Without any OS File-Mod - Your OS is clean transloaded to USB device. USB OS...

Top