Turkish Hackers Threaten To Break Into Armenian State Agency Websites

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><h2 class="contentheading" style="background-color: white; color: #333333; font-family: Cambria, 'Times New Roman', Times, serif; font-size: 30px; font-weight: normal; line-height: 1.1; margin: 0px; padding: 0px 8px 0px 0px;">Turkish Hackers Threaten To Break Into Armenian State Agency Websites</h2><div><br /></div><div><img src="http://www.historyoftruth.com/images/stories17/910812-hack.jpg" /> </div><div><br /></div><div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">The Turkish hacker group had attacked FC Spartak Moscow’s official website.</div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">The Turkish hacker group named Ayyıldız (Moonstar), which had attacked FC Spartak Moscow’s official website—after Yerkramas newspaper of the Russian Armenians had ran an article entitled “Spartak fans will wave Armenia’s and Artsakh’s [Nagorno-Karabakh Republic] flags in Istanbul”—had threatened to break into Armenian state agency websites, too.</div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">The group had stated that it was decided to attack the websites of Armenia’s General Staff of the Armed Forces and the country’s other state agencies, if Spartak fans carry out provocations in the match to be played in Istanbul between Fenerbahce S.K. of Istanbul and FC Spartak Moscow, Yenisafak daily of Turkey <nobr>reports</nobr>.  </div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">The UEFA Champions League qualifications second-leg match between the two clubs was played Wednesday under very tight <nobr>security</nobr> and no serious incidents were recorded.</div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">As NEWS.am Sport informed earlier, Turkish hackers broke into FC Spartak Moscow’s official website, on the evening of August 22, and the website is down ever since. The hackers attacked the website on <nobr>Monday</nobr>, too. </div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">The portrait of Mustafa Kemal Ataturk—founder of the Rep. of Turkey—appeared on the website’s homepage on August 22, and with the following inscription: “Immediately apologize to the Turkish nation! FIFA [International Federation of Association Football] did not heed this fact, but we will not leave this crime unpunished.”</div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">To note, during the UEFA Champions League qualifications first-leg match played on August 21 in Moscow, and between FC Spartak Moscow and Fenerbahce S.K. of Istanbul, Turkey—which ended by a score of 2-1 in favor of the host club—the Spartak fans in the stands had burned posters with the portrait of Ataturk.</div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;">Also, it became apparent that the Russian fans had attacked the Turkish football fans in the Russian capital, even before the match. Close to twenty Spartak fans had attacked twelve Fenerbahce fans in a downtown Moscow bar.</div><div style="background-color: white; color: #333333; font-family: Arial, sans-serif; font-size: 12px; line-height: 18px; margin-bottom: 10px; margin-top: 10px; padding: 0px;"><a href="http://news.am/" style="color: #006699; text-decoration: none;">News.am</a></div></div></div>

Turkish Hackers Threaten To Break Into Armenian State Agency Websites

Turkish Hackers Threaten To Break Into Armenian State Agency Websites The Turkish hacker group had attacked FC Spartak Moscow’s official we...

Read more »

Oracle Fixes Java Zero-Day Flaw, Users Advised to Download Patch

<div dir="ltr" style="text-align: left;" trbidi="on">Oracle Fixes Java Zero-Day Flaw, Users Advised to Download Patch<div><br /></div><div><img alt="Oracle fixes vulnerability in JRE" src="http://i1-news.softpedia-static.com/images/news2/Oracle-Fixes-Java-Zero-Day-Flaw-Users-Advised-to-Download-Patch-2.png?1346397148" /> </div><div><br /></div><div><div>Although few people expected it (many hoped), Oracle has released an out-of-band patch to address the zero-day flaw that affects Java Runtime Environment (JRE) 7. Since attacks that rely on this vulnerability have already been spotted, the company advises users to immediately apply the patch.</div><div><br /></div><div>The patch addresses a number of three different, but related, bugs that don’t affect standalone desktop applications or servers. However, they affect Java running on desktop web browsers.</div><div><br /></div><div><br /></div><div> “Due to the high severity of these vulnerabilities, Oracle recommends that customers apply this Security Alert as soon as possible,” said Eric Maurice, director of software security assurance at Oracle.</div><div><br /></div><div>“Furthermore, note that the technical details of these vulnerabilities are widely available on the Internet and Oracle has received external reports that these vulnerabilities are being actively exploited in the wild.”</div><div><br /></div><div>Yesterday we reported that users from the Netherlands were targeted with VAT rate increase emails that led to this particular exploit. Similar campaigns are most likely already active and new ones will probably emerge in the upcoming days.</div><div><br /></div><div>It’s likely that this vulnerability will be exploited for quite some time because, as we’ve seen on numerous occasions, many users fail to apply patches in time.</div><div><br /></div><div>Hopefully, at least companies will rush to apply the patch to ensure that cybercriminals are not able to disrupt their business workflow.</div><div><br /></div><div>The fact that this JRE vulnerability caused so much havoc once again highlights a very important thing. Dangerous security holes are discovered all the time in Java, and although many users don’t actually utilize it, they keep it installed on their computers.</div><div><br /></div><div>We advise you to take a good look at the applications you’re using and the websites you’re surfing. In case they don’t require Java (most of them don’t), be sure to uninstall it.</div><div><br /></div><div>The latest (patched) version of Java Runtime Environment is available for download<span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;"> </span><strong style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;"><a href="http://www.softpedia.com/get/Programming/SDK-DDK/Sun-Java-JRE.shtml" style="color: #0058bb; text-decoration: none;" target="_blank">here</a>.</strong></div><br /><h1 id="htitle" style="background-color: white; color: #001f5b; font-family: Arial, Helvetica, sans-serif; font-size: 34px; letter-spacing: -2px; line-height: 34px; margin: 3px 0px 5px;"><br /></h1></div></div>

Oracle Fixes Java Zero-Day Flaw, Users Advised to Download Patch

Oracle Fixes Java Zero-Day Flaw, Users Advised to Download Patch Although few people expected it (many hoped), Oracle has released an out-o...

Read more »

Android Malware Owners Fined by UK Regulatory Body

<div dir="ltr" style="text-align: left;" trbidi="on">Android Malware Owners Fined by UK Regulatory Body<br /><br /><img alt="PhonepayPlus fines Russian company and forces it to refund users" src="http://i1-news.softpedia-static.com/images/news2/Android-Malware-Developers-Fined-by-UK-Regulatory-Body-2.png?1346424698" /> <br /><br /><br />PhonepayPlus, the organization that regulates all premium rate phone services in the UK, has ordered a Russian company – Connect Ltd – to pay a fine and refund users after researchers highlighted the fact that an application it owned was attempting to trick Android users into signing up to expensive mobile services.<br /><br />Developers create malicious applications that sign up users to shady mobile services and send SMS to premium rate numbers. When security firms find the malware, they place it on a blacklist and warn users about it, thus preventing the crooks from stealing more money. Then it starts all over again with the release of a new malware.<br /><br /><br /> However, this may not always be the case and there may be some good news for those who have fallen victim to such crimes, Graham Cluley of Sophos reports.<br /><br />Back in February, we learned of an application that tricked Facebook users into installing a malicious application on their Android phones. Once it found itself on a phone, the malware sent out an SMS message and subscribed the unwitting individual to a premium service.<br /><br />After confirming that the application in question presented a suspicious behavior and after determining that the victims might have paid as much as £250,000 ($395,950 or €314,000) for the shady services, PhonepayPlus decided to fine the company.<br /><br />In case the company doesn’t comply and pay the £50,000 ($79,000 or €63,000) fine and refund all the victims (whether they filed a complaint or not), the agency has the ability to “bring a breach of sanction case” in which a court could impose even tougher penalties.<br /><br />Besides the considerable fine, in the next couple of years, Connect Ltd will also have to ask PhonepayPlus for permission to offer premium rate services to UK citizens.<br /></div>

Android Malware Owners Fined by UK Regulatory Body

Android Malware Owners Fined by UK Regulatory Body PhonepayPlus, the organization that regulates all premium rate phone services in the UK,...

Read more »

Unknown Virus Disrupts World’s Second Largest Liquefied Natural Gas Company

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><h1 id="htitle" style="background-color: white; color: #001f5b; font-family: Arial, Helvetica, sans-serif; font-size: 34px; letter-spacing: -2px; line-height: 34px; margin: 3px 0px 5px;">Unknown Virus Disrupts World’s Second Largest Liquefied Natural Gas Company</h1><div><br /></div><div><img alt="RasGas headquarters" height="300" src="http://i1-news.softpedia-static.com/images/news2/Unknown-Virus-Disrupts-World-s-Second-Largest-Liquefied-Natural-Gas-Company-2.jpg?1346398892" width="400" /> </div><div><br /></div><div><div>Another mysterious virus hits the Middle East. This time, the victim is RasGas – a Qatar-based company that’s considered to be the second largest liquefied natural gas (LNG) producer in the world, after Qatargas.</div><div><br /></div><div>According to Arabian Oil and Gas, the virus disrupted the company’s offices, forcing them to shut down their systems, including the public-facing website rasgas.com.</div><div><br /></div><div><br /></div><div> The organization’s representatives state that cargo deliveries and operations in Ras Laffan Industrial City haven’t been impacted by the incident.</div><div><br /></div><div>This is the second time this month when such a firm becomes the target of hackers. Earlier in August, multiple hacktivist groups took credit for disrupting the operations of Saudi Aramco, the world’s largest oil company.</div><div><br /></div><div>At the time, experts found that the attack – which affected some 30,000 computers – might have involved a piece of malware known as Shamoon. The malware covers its tracks by overwriting the stolen files and by completely wiping the infected device’s master boot record.</div><div><br /></div><div>Saudi Aramco admitted that its systems have been infected with a virus, but a statement released a few days ago reveals the fact that the organization has addressed the problem.</div><div><br /></div><div>“We addressed the threat immediately, and our precautionary procedures, which have been in place to counter such threats, and our multiple protective systems, have helped to mitigate these deplorable cyber threats from spiraling,” stated Khalid A. Al-Falih, president of Saudi Aramco.</div><div><br /></div><div>On the other hand, one of the hacker crews which took credit for the attack, claims to have hit the company once again on August 25. On this occasion they leaked the details of core, backup and middle routers.</div><div><br /></div><div>Similar to Saudi Aramco, RasGas is expected to publish a statement after its systems will be back online. For now, rasgas.com is still unavailable to visitors.</div></div></div>

Unknown Virus Disrupts World’s Second Largest Liquefied Natural Gas Company

Unknown Virus Disrupts World’s Second Largest Liquefied Natural Gas Company Another mysterious virus hits the Middle East. This time, the v...

Read more »

Scientists Warn of Brain Hacking Via BCI Gadgets

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><h1 style="background-color: white; border-top-color: rgb(204, 204, 204); border-top-style: solid; border-width: 1px 0px 0px; font-family: arial; font-size: 28px; line-height: 32px; margin: 0px; outline: 0px; padding: 6px 0px 15px; vertical-align: baseline;">Scientists Warn of Brain Hacking Via BCI Gadgets</h1><div><span style="background-color: white; border: 0px; float: left; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px; margin: 0px 10px 0px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><img alt="Brain Hacking" border="0" class="photo" height="275" src="http://www7.pcmag.com/media/images/356361-brain-hacking.jpg?thumb=y" style="border: 0px; font-family: inherit; font-style: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;" width="275" /></span><span id="intellitxt" name="intellitxt" style="background-color: white; border: 0px; color: #3b3b3c; font-family: georgia; font-size: 16px; line-height: 23px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">If you're already skeptical about brain-computer interface (BCI) <span class="itxtrst itxtrstspan itxthookspan" id="itxthook0w0" style="background-color: transparent; border-bottom-color: transparent; border-bottom-width: 2px; border-style: none none solid; bottom: auto; display: inline; float: none; font-family: inherit; font-size: inherit; font-style: inherit; height: auto; left: auto; margin: 0px !important; outline: 0px; padding: 0px !important; position: static; right: auto; top: auto; vertical-align: baseline;">technology</span> you'll probably be laugh twice as hard at the notion that hackers could potentially hack brainwave-scanning products like NeuroSky's Necomimi Brainwave Cat Ears or Mattel's MindFlex Duel game to steal your very thoughts.</div><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">And you'd be right to be so dubious—up to a point. Yes, true mind-reading is still the stuff of science fiction. But BCI really does work in its limited capacity. And now an international team of researchers says it's shown that captured electro-encephalography (EEG) signals from common consumer BCI devices can be mined to significantly increase the odds of guessing a user's private information.</div><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">In a <a href="http://www.scribd.com/doc/102968008/On-the-Feasibility-of-Side-Channel-Attacks-with-Brain-Computer-Interfaces" style="border: 0px; color: #007ba1; font-family: inherit; font-style: inherit; margin: 0px; outline: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">recently published study</a>, researchers from Oxford University, UC Berkeley, and the University of Geneva report having better success at gleaning BCI device users' bank card information, PIN numbers, area of living, and other private info than by simply guessing randomly.</div><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">It's not mind-reading, but the scientists say they've shown "that the entropy of the private information is decreased on the average by approximately 15 to 40 percent compared to random guessing attacks."</div><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">That's obviously not an insignificant edge and one that might worry owners of popular BCI devices used for gaming, entertainment, relaxation, or wiggling prosthetic cat ears. Particularly since the researchers say nobody's really even thought to try to <a class="itxtrst itxtrsta itxthook" href="http://www.pcmag.com/article2/0,2817,2409160,00.asp#" id="itxthook1" rel="nofollow" style="background-color: transparent; border-bottom-color: rgb(0, 100, 0); border-bottom-width: 0.1em; border-style: none none solid; bottom: auto; color: darkgreen; display: inline !important; float: none !important; font-family: inherit; font-style: inherit; left: auto; line-height: normal; margin: 0px !important; outline: 0px; padding: 0px 0px 1px; position: static !important; right: auto; top: auto; vertical-align: baseline;"><span class="itxtrst itxtrstspan itxthookspan" id="itxthook1w0" style="background-color: transparent; border-bottom-color: transparent; border-bottom-width: 2px; border-style: none none solid; bottom: auto; display: inline; float: none; font-family: inherit; font-size: inherit; font-style: inherit; height: auto; left: auto; margin: 0px !important; outline: 0px; padding: 0px !important; position: static; right: auto; top: auto; vertical-align: baseline;">secure</span></a> the EEG signals propagated by such gadgets.</div><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">How could a BCI device user have his or her brain hacked? The team posits that "by manipulating the visual stimuli presented on screen [to a BCI device user] and by analyzing the corresponding responses in the EEG signal" a malicious individual could significantly increase the odds of figuring out the user's private information.</div><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">Kitting out subjects with an Emotiv EPOC device, the team flashed them on screen images of things like maps, an ATM machine, and a bank card to try to flush out brainwave activity that might offer hints to a person's PIN number, geolocation, and where they bank. Some experiments utilized passive methods while others involved directly asking a subject what month they were born, for example.</div><div style="border: 0px; font-family: Georgia; outline: 0px; padding: 0px 0px 9px; vertical-align: baseline;">After crunching the EEG numbers they got back through their algorithms, the researchers report that experiments designed to mine PIN numbers resulted in first guesses being correct 20 percent of the time, a 30 percent success rate for tests designed to determine a subject's location, and a very impressive 60 percent success rate for identifying users' month of birth.</div></span></div></div>

Scientists Warn of Brain Hacking Via BCI Gadgets

Scientists Warn of Brain Hacking Via BCI Gadgets If you're already skeptical about brain-computer interface (BCI)  technology  you'l...

Read more »

Local UK Police Site Hacked, Personal Details Dumped Online

<div dir="ltr" style="text-align: left;" trbidi="on">Local UK Police Site Hacked, Personal Details Dumped Online<br /><br /><img alt="herts-police-hack" src="http://media.gizmodo.co.uk/wp-content/uploads/2012/08/herts-police-hack.jpg" /> <br /><br /><div style="background-color: white; border: 0px; font-family: arial, helvetica, sans-serif; font-size: 13px; line-height: 17px; margin-top: 20px; padding: 0px; vertical-align: baseline;">Part of a Hertfordshire Police web site has been hacked, with the attacker uploading his stupid treasure trove of IP addresses and phone numbers of officers online.</div><div style="background-color: white; border: 0px; font-family: arial, helvetica, sans-serif; font-size: 13px; line-height: 17px; margin-top: 20px; padding: 0px; vertical-align: baseline;">Hertfordshire Police says the stolen data was hosted externally on a database associated with some sort of Neighbourhood Watch scheme, so the hacker wasn’t exactly setting his sights particularly high. The police site has been taken offline while staff investigate what was accessed and what actually turned up online as a result.</div><div style="background-color: white; border: 0px; font-family: arial, helvetica, sans-serif; font-size: 13px; line-height: 17px; margin-top: 20px; padding: 0px; vertical-align: baseline;">The hacker added the banner “OpFreeAssange” to the data he published along with quotes from the famous Ecuadorian immigrant, so it looks like this is some sort of weird revenge attack against authorities for pestering poor Julian — although the person responsible also said he wasn’t part of the notorious Anonymous collective</div></div>

Local UK Police Site Hacked, Personal Details Dumped Online

Local UK Police Site Hacked, Personal Details Dumped Online Part of a Hertfordshire Police web site has been hacked, with the attacker uplo...

Read more »

50 EU Government sites Hacked & Defaced By Robot Pirates

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on">Paksitani hacker name Cfr and Dr Ninja From Robot Pirates hacked 50 government sites. EU Governement servers are consider as one of most secure servers in world and it is defiantly not easy to break security of server like these. This also raise lot of question for security experts that how much more security is need in cyber space.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2YtYDHd_7j4A2-Mma8On89OLkykWV8gjqVKhwrR8ixVKiVeEuJfsoiHxyg29SyfP50ZVDlfAZFRWWqBnBSpxm4SAfesY3ugBDD9z85B5Wr8NDecE5565PiKGjFB4Toc4pBPCafkUZwm5I/s1600/pirates.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="196" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2YtYDHd_7j4A2-Mma8On89OLkykWV8gjqVKhwrR8ixVKiVeEuJfsoiHxyg29SyfP50ZVDlfAZFRWWqBnBSpxm4SAfesY3ugBDD9z85B5Wr8NDecE5565PiKGjFB4Toc4pBPCafkUZwm5I/s320/pirates.png" width="320" /></a></div><br />The list of impacted sites was published on <a href="http://www.paste.to/MTA0MTgyMw==" target="_blank">Pastebin</a> yesterday, but at press time, most of them still weren’t restored.<br /><br /><br /><b>Hacked site says:</b><br />" <span style="color: red;">Game is not 0ver Yet!</span><br /><span style="color: red;">Pwn3d By Cfr</span><br /><span style="color: red;">[#] Too hot to handle, Too cold to hold . . . Inernet belong to Us! Not we Belong to net</span><br /><span style="color: red;">We Are</span><br /><span style="color: red;">Cfr - Zqor - Cos - Reaper - Dr Ninja </span>"<br /><br /><br /><b>Hacked Site & Mirrors List:</b><br /><a href="http://www.paste.to/MTA0MTgyMw==">http://www.paste.to/MTA0MTgyMw==</a><br /><br /></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

50 EU Government sites Hacked & Defaced By Robot Pirates

Paksitani hacker name Cfr and Dr Ninja From Robot Pirates hacked 50 government sites. EU Governement servers are consider as one of most sec...

Read more »

US Air Force is spending $10 million For Hacking

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: left;">The US Air Force is spending $10 million on an effort to hack into opponents’ computer networks to “destroy, deny, degrade, disrupt, deceive, corrupt or usurp” their ability to use the Internet to their advantage.</div><br />The ability to hack into networks is part of a list of the military’s “Cyberspace Warfare Operations Capabilities” that it wishes to acquire, reports Wired.<br /><br />Instead of giving the ability to conduct cyber strikes solely to the White House, the Air Force wants its Trojans and worms to be available to its own officials, including top personnel and operational commanders.<br /><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhJJhdPvbWXBfyrCBPWDSGIUzoZXHVtbgSicEoJjA5hBCuHsTDG1xHmOpKhJKHu6QZoEvrbYnATUs7_dB9cWvsfDLQ9PJg_A9mQny56_iXl5HXTHZzq0gr-LKpZ6JF7Og7ZDJSzZn5qs-N/s1600/US_Air_Force_7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="316" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhJJhdPvbWXBfyrCBPWDSGIUzoZXHVtbgSicEoJjA5hBCuHsTDG1xHmOpKhJKHu6QZoEvrbYnATUs7_dB9cWvsfDLQ9PJg_A9mQny56_iXl5HXTHZzq0gr-LKpZ6JF7Og7ZDJSzZn5qs-N/s320/US_Air_Force_7.jpg" width="320" /></a></div><span aria-live="polite" class="fbPhotosPhotoCaption" id="fbPhotoPageCaption" tabindex="0"><br /><br /> Last week, the Pentagon announced a new $110 million program to make cyber strikes a more routine effort in wartime military operations. “Plan X,” as the Pentagon named it, will officially begin on September 20, but Darpa has already invested $600,000 to cyber security firm Invincea to begin its research immediately.<br /> <br /> In early 2007, the Pentagon declared that it “had no plans to shift its cyber warfare focus from a defensive mindset to an offensive one.” But later that year, the Air Force began developing offensive cyber attack strategies, which have materialized into budgeted plans this year.<br /> <br /> Other branches of the military are also discussing hacking as a war strategy.<br /> <br /> “I can tell you that as a commander in Afghanistan in the year 2010, I was able to use my cyber operations against my adversary with great impact,” said Lt. Gen. Richard Mills at a technology conference last week. The lieutenant general also discussed a Marine company that will be stationed at the National Security Agency to “increase the availability of intelligence analysts, intelligence collectors and offensive cyber operations … so that forward deployed commander in the heat of combat has full access to the cyber domain.”<br /> <br /> Invincea, the company in charge of putting together the cyber security project, was contracted one month after it contacted the government with its proposal. The firm has worked with the government before, analyzing cyber attacks facing the US.<br /> <br /> As malware becomes increasingly more common, the US has changed its cyber status from defensive to offensive.</span><br /><span aria-live="polite" class="fbPhotosPhotoCaption" tabindex="0"><br /></span></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

US Air Force is spending $10 million For Hacking

The US Air Force is spending $10 million on an effort to hack into opponents’ computer networks to “destroy, deny, degrade, disrupt, deceive...

Read more »

Cyber attack takes Qatar's RasGas offline

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><span aria-live="polite" class="fbPhotosPhotoCaption" id="fbPhotoPageCaption" tabindex="0">RasGas, the second largest producer of Qatari LNG after Qatar Petroleum, has been hit with an "unknown virus" which has taken the company offline.<br /> <br /> A RasGas spokesperson confirmed that “an unknown virus has affected its office systems" since Monday 27 August.<br /> <br /> RasGas confirmed the situation by fax yesterday. “RasGas is presently experiencing technical issues with its office computer systems,” said the RasGas fax seen by Oil & Gas Middle East, dated 28 August. “We will inform you when our system is back up and running.”</span><br /><span aria-live="polite" class="fbPhotosPhotoCaption" tabindex="0"><br /></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBgamnwmvuCf3K70qWHJh2-gXFw7XoPC_KFtkRZAqyTd4VnqAZZHrNdgYBbvFicpxzlzW92Novj1ThWksBdEuBizxJ-a60Ug82ZhTOIvVkYyJklqPEL-uy2PiD-LyFfwcs5GqQVM4wjiXM/s1600/gas.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBgamnwmvuCf3K70qWHJh2-gXFw7XoPC_KFtkRZAqyTd4VnqAZZHrNdgYBbvFicpxzlzW92Novj1ThWksBdEuBizxJ-a60Ug82ZhTOIvVkYyJklqPEL-uy2PiD-LyFfwcs5GqQVM4wjiXM/s400/gas.jpg" width="400" /></a></div><br /><span aria-live="polite" class="fbPhotosPhotoCaption" tabindex="0"> Emails to verified addresses at RasGas bounced back with a permanent delivery failure error message. and the RasGas website (<a d8eb61e898119e9c56="true" href="http://www.facebook.com/l.php?u=http%3A%2F%2Fwww.rasgas.com&h=pAQFI7BS7&s=1" rel="nofollow nofollow" target="_blank">www.rasgas.com</a></span>) is down.<br /><br />The RasGas spokesman said the virus has “no impact whatsoever on operations in Ras Laffan Industrial City and there are no issues with cargo deliveries.”<br /><br />“Everyone is reporting to work as normal,” the spokesman said. “We are working with ICT Qatar to resolve the situation as soon as possible.”<br /><br />The news follows a malware attack against Saudi Aramco on 15 August which forced the world's largest oil company to take down its company-wide office systems for 12 days.<br /><br />RasGas, a joint venture between QP and ExxonMobil, comprises seven giant LNG process trains in Ras Laffan, Qatar. The company exports 36.3m tonnes a year of LNG, most of which under long-term contracts with customers in Korea, India, Italy, Spain, Belgium, Taiwan, and the Americas. The company us also responsible for around 10% of global helium production.<br /><span aria-live="polite" class="fbPhotosPhotoCaption" tabindex="0"><br /></span></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

Cyber attack takes Qatar's RasGas offline

RasGas, the second largest producer of Qatari LNG after Qatar Petroleum, has been hit with an "unknown virus" which has taken th...

Read more »

RedHack Lashes Out at Anonymous Turkey (AnonsTurkey)

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><span class="userContent">The members of the now-infamous RedHack collective are displeased with the fact that Anonymous Turkey (AnonsTurkey) is relying on the Anonymous name “for their personal interests.”<br /> <br /> The hacktivists released a statement to ensure that everyone understands that they’re not against Anonymous, but they’re against the teenagers who run AnonsTurkey.<br /> <br /> “Relationship between Redhack and Anonymous goes back to the time of 4chan in 2005. We continue to be in solidarity with active and true hackers within Anonymous and offer our help within our capabilities when it is required,” members of RedHack said.</span><br /><div class="text_exposed_show"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbRL0rQvApt-XBSd3Cf-Oa0RtYuPICbGjcyIUJlCwEZ5UWFd1G8zfX66eKW6S-uz6NNImvowdz0bkVLtQuSFHEqG10gZcDgvntOFuoJd985-lY4TbQEty5RLI_XQsz8yD8Fj4BhrAuSnRV/s1600/red.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="191" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbRL0rQvApt-XBSd3Cf-Oa0RtYuPICbGjcyIUJlCwEZ5UWFd1G8zfX66eKW6S-uz6NNImvowdz0bkVLtQuSFHEqG10gZcDgvntOFuoJd985-lY4TbQEty5RLI_XQsz8yD8Fj4BhrAuSnRV/s400/red.jpg" width="400" /></a></div><div class="text_exposed_show"><br /></div><div class="text_exposed_show">RedHacks coordinated numerous Anonymous Turkey operations, but at one point some of the members of the latter group decided to take matters into their own hands.<br /><br />“We always thought that they were young and might change positively. But then they were not happy about us being socialist and our revolutionary values were hard for them to accept,” they explained.<br /><br />“According to them we should act within the norms of ‘official ideology’ and act around the chauvinism that was imposed on people and the brotherhood relations with the Kurdish people should have been cut off.”<br /><br />The members of Anonymous Turkey who didn’t condone with RedHack’s views formed their own “Anonymous Turkey” (AnonsTurkey).<br /><br />When the controversial hackers were appointed as terrorists by the Turkish government, this new collective revealed its support, but because of their “track record” RedHack turned down their offer.<br /><br />Immediately after, AnonsTurkey announced that they no longer support RedHack and a feud began.<br /><br />RedHack members conclude their statement by saying that their relations with AnonTurkey will not influence their relationship with Anonymous activists in any way.<br /><br />On the other hand, it’s almost impossible for all hackers to get along with one another when the Anonymous name is free-for-all. A similar situation occurred when the protest against the Republican National Convention in Tampa was announced.</div><div class="text_exposed_show"><br /></div></div><a class="twitter-follow-button" data-show-count="false" href="https://twitter.com/thehackersmedia">Follow @thehackersmedia</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script></div>

RedHack Lashes Out at Anonymous Turkey (AnonsTurkey)

The members of the now-infamous RedHack collective are displeased with the fact that Anonymous Turkey (AnonsTurkey) is relying on the Anon...

Read more »

Researchers Unable to Link Mysterious Wiper Malware to Flame

<div dir="ltr" style="text-align: left;" trbidi="on">Researchers Unable to Link Mysterious Wiper Malware to Flame<br /><br /><img alt="Researchers attempt to find link between Wiper and Flame, but to no avail" height="179" src="http://i1-news.softpedia-static.com/images/news2/Researchers-Unable-to-Link-Mysterious-Wiper-Malware-to-Flame-2.png?1346255782" width="400" /><br /><br /><strong style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">After further analyzing the traces of the mysterious Wiper malware, researchers are still unable to precisely determine how it works. They also haven’t been able to find a clear link between it and Duqu, Stuxnet or Flame.</strong><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">Back in April, the Iranian Oil Ministry </span><a href="http://english.farsnews.com/newstext.php?nn=8101301227" rel="nofollow" style="background-color: white; color: #0058bb; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify; text-decoration: none;" target="_blank">reported</a><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;"> </span><em style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">sightings </em><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">of a destructive piece of malware that attempted to extract information and then wipe it from the infected devices, hence the name Wiper.</span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br /><div align="center" class="article_ad" style="background-color: white; color: #222222; float: right; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; margin: 10px 0px 10px 15px; padding: 0px;"><ins style="border: none; display: inline-table; height: 250px; margin: 0px; padding: 0px; position: relative; visibility: visible; width: 300px;"><ins id="aswift_2_anchor" style="border: none; display: block; height: 250px; margin: 0px; padding: 0px; position: relative; visibility: visible; width: 300px;"><iframe allowtransparency="true" frameborder="0" height="250" hspace="0" id="aswift_2" marginheight="0" marginwidth="0" name="aswift_2" replaced="true" scrolling="no" style="left: 0px; position: absolute; top: 0px;" vspace="0" width="300"></iframe></ins></ins></div><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">Kaspersky was called in to analyze the attack that took place sometime between April 21 and April 30. The malware’s developers destroyed all the pieces of information that could be used to properly analyze Wiper. </span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">However, their investigation led them to another interesting </span><em style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">thing</em><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">: the now-infamous Flame.</span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">“The malware was so well written that once it was activated, no data survived,” Kaspersky experts </span><a href="http://www.securelist.com/en/blog/208193808/What_was_that_Wiper_thing" rel="nofollow" style="background-color: white; color: #0058bb; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify; text-decoration: none;" target="_blank">explained</a><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">. </span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">“So, although we’ve seen traces of the infection, the malware is still unknown because we have not seen any additional wiping incidents that followed the same pattern as Wiper, and no detections of the malware have appeared in the proactive detection components of our security solutions.”</span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">They claim that we may never find out precisely what Wiper was and although it led them to discover Flame, they believe that the two are not connected. </span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">Some common filenames indicate a possible connection to Duqu and Stuxnet, but there isn’t enough evidence to say this for sure. </span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">Furthermore, experts believe that the creators of </span><strong>Shamoon</strong><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">, the recently discovered malware, have been inspired by Wiper to develop their own Trojan. </span><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><br style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;" /><span style="background-color: white; color: #222222; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; text-align: justify;">“The fact that the use of Wiper led to the discovery of the 4- or 5-year-old Flame cyber-espionage campaign raises a major question. If the same people who created Duqu/Stuxnet/Flame also created Wiper, was it worth blowing the cover of a complex cyber-espionage campaign such as Flame just to destroy a few computer systems?” experts concluded.</span> </div>

Researchers Unable to Link Mysterious Wiper Malware to Flame

Researchers Unable to Link Mysterious Wiper Malware to Flame After further analyzing the traces of the mysterious Wiper malware, researchers...

Read more »

Phishers Promise Woolworths Gift Certificates in Return for Sensitive Information

<div dir="ltr" style="text-align: left;" trbidi="on">Phishers Promise Woolworths Gift Certificates in Return for Sensitive Information<br /><br /><img alt="Woolworths phishing page" height="400" src="http://i1-news.softpedia-static.com/images/news2/Phishers-Promise-Woolworths-Gift-Certificates-in-Return-for-Sensitive-Information-2.jpg?1346248517" width="395" /> <br /><br /><br />Last week we reported about the existence of a Facebook scam that was trying to trick users into visiting various websites by promising them $500 gift vouchers from Woolworths. Now, the Australian supermarket chain’s reputation is once again used in a malicious campaign.<br /><br />It all starts with an email entitled “Customer Satisfaction Survey” which reads: You have been selected to access the Woolworths 5 questions Survey and win a $50.00 gift certificate. Please click here and complete the form to receive your reward. Thank you.<br /><br /><br /> Those unfortunate enough to fall for it and click on the link are taken to a webpage that displays a standard survey with questions such as “Do you think Woolworths employees are friendly and helpful?”<br /><br />However, the fact that the user provides the answers to the five questions isn’t the main issue, Hoax Slayer notes.<br /><br />In order for the $50 (€40) credit to be added to their accounts, customers must provide their personal details, including name, address, suburb, postal code, driver license, Medicare card number, individual reference number, date of birth, credit card number, expiration date and CVV.<br /><br />Once the Continue button is pressed, all this valuable information is stored in a database owned and controlled by the cybercriminals who run the campaign.<br /><br />To ensure that they can trick as many people as they can, the phishers added the following message to the top of the malicious webpage: Only one survey per credit card is allowed. If you own multiple cards you can run the survey again for each.<br /><br />This way they can obtain the details from multiple credit or debit cards from one single victim.<br /><br />Those who have already fallen for this scam and provided the fraudsters with their details are advised to immediately contact the card issuer. The large amount of information could also be used to commit identity theft, which is why we recommend victims to contract the services of a company that deals with fraud prevention.<br /></div>

Phishers Promise Woolworths Gift Certificates in Return for Sensitive Information

Phishers Promise Woolworths Gift Certificates in Return for Sensitive Information Last week we reported about the existence of a Facebook s...

Read more »

Intuit Security Tool Spam Campaign Making the Rounds Once Again

<div dir="ltr" style="text-align: left;" trbidi="on">Intuit Security Tool Spam Campaign Making the Rounds Once Again<br /><br /><img alt="Fake Intuit email" height="305" src="http://i1-news.softpedia-static.com/images/news2/Intuit-Security-Tool-Spam-Campaign-Making-the-Rounds-Once-Again-2.png?1346246964" width="400" /> <br /><br />Around one and a half years ago, malicious emails claiming to originate from Intuit attempted to convince recipients that they need to install a piece of software in order to access their QuickBooks accounts, giving them a three-day deadline to comply.<br /><br />It seems that this spam campaign has been reinitialized in an attempt to steal sensitive information from Intuit customers. Here’s what these emails look like:<br /><br /><br /> You will not be able to access your Intuit QuickBooks account without Intuit Security Tool (IST) after 31th of August, 2012.<br /><br />You can download Intuit Security Tool here.<br /><br />After a successful download please run the setup for an automatic installation, then login to Intuit Quickbooks online to check that it is working properly.<br /><br />Basically, the email looks exactly the same as the old variant, but the cybercrooks updated the date, and most likely they’ll continue doing so.<br /><br />The links from the email currently lead to a compromised website from Denmark on which the cybercriminals planted a phishing webpage.<br /><br />The company has warned users to avoid such emails ever since the campaign started. They highlight the fact that legitimate emails will never contain “software update” or “software download” attachments.<br /><br />Furthermore, Intuit will never ask customers for their usernames and passwords. Finally, similar to other organizations, they promise never to request banking information or credit card details via email.<br /><br />And this is not the only type of Intuit email you should beware of. Back in June we reported that fake Intuit tax information update notifications were making the rounds, luring recipients to another hijacked website from Denmark.<br /><br />Users are advised to report any suspicious emails to spoof@intuit.com. By reporting suspicious emails you can help the company keep all its customers informed on the latest threats that may be leveraging its reputation to cause damage to the computers of unsuspecting internauts.<br /><br /></div>

Intuit Security Tool Spam Campaign Making the Rounds Once Again

Intuit Security Tool Spam Campaign Making the Rounds Once Again Around one and a half years ago, malicious emails claiming to originate fro...

Read more »

Times reporter arrested over police blogger hacking

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><h1 style="background-color: white; color: #1e1e1e; font-family: georgia, 'times new roman', times, serif; font-size: 2.4em; font-weight: normal; line-height: 1.16em; margin: 0px; padding: 0px 0px 8px;">Times reporter arrested over police blogger hacking</h1><h2 style="background-color: white; color: #404040; font-family: georgia, 'times new roman', times, serif; font-size: 1.6em; font-weight: normal; line-height: 1.2em; margin: 0px; padding: 0px 0px 10px;">Senior executives at The Times newspaper could be questioned by police investigating allegations of computer hacking after a former reporter was arrested on suspicion of conspiracy to pervert the course of justice.</h2><br /><img alt="A former Times reporter has been arrested for allegedly hacking into an anonymous police blogger’s email account in an attempt to expose his identity." src="http://i.telegraph.co.uk/multimedia/archive/02227/scotland-yard_2227975b.jpg" /> <br /><br /><br /><div class="firstPar" style="background-color: white; color: #282828; font-family: georgia, 'times new roman', times, serif; font-size: 10px;"><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">Patrick Foster, 28, a former media reporter at Rupert Murdoch’s paper, was arrested at his North London home this morning for allegedly hacking into the email account of an anonymous police blogger named Nightjack in 2009.</div></div><div class="secondPar" style="background-color: white; color: #282828; font-family: georgia, 'times new roman', times, serif; font-size: 10px;"><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">The Times subsequently went to the High Court and successfully overturned an injunction banning them from naming Nightjack as Lancashire Police detective Richard Horton.</div></div><div class="thirdPar" style="background-color: white; color: #282828; font-family: georgia, 'times new roman', times, serif; font-size: 10px;"><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">At the hearing before Mr Justice Eady in June 2009, lawyers for the newspaper argued that Mr Foster had used legitimate journalistic methods to identify Mr Horton.</div></div><div class="fourthPar" style="background-color: white; color: #282828; font-family: georgia, 'times new roman', times, serif; font-size: 10px;"><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">But the paper’s editor James Harding was later forced to apologise to Mr Justice Eady and Mr Horton, after admitting senior figures had failed to disclose that they knew about the computer hacking when the hearing took place.</div></div><div class="fifthPar" style="background-color: white; color: #282828; font-family: georgia, 'times new roman', times, serif; font-size: 10px;"><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">In March this year the newspaper’s former legal chief, Alastair Brett, came under fire when he gave evidence to the Leveson Inquiry into press standards admitting he had made a “mistake” by failing to divulge that he knew about the hacking before the Times went to court.</div><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;"><span style="font-size: 1.4em; line-height: 1.48em;">Scotland Yard today confirmed that a 28-year-old journalist had been arrested over the alleged computer hacking, but stating that he was also being questioned over conspiracy to pervert the course of justice, related to the alleged cover up.</span></div></div><div class="body" style="background-color: white; color: #282828; font-family: georgia, 'times new roman', times, serif; font-size: 10px;"><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">Mr Foster’s arrest is the 11th as part of Operation Tuleta, a Metropolitan Police Investigation into alleged computer hacking by journalists, but the first related to the Nightjack incident.</div><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">News International, publisher of Times, declined to comment on Mr Foster’s arrest.</div><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">The Metropolitan Police said in a statement on Wednesday: “Officers from Operation Tuleta, the investigation into criminal breaches of privacy including computer hacking which is being carried out in conjunction with MPS phone-hacking inquiries, arrested a man in North London this morning, 29 August.</div><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">“The 28-year-old man, a journalist (Tuleta arrest 11) was arrested at his home address at approximately 07.00 hrs for suspected offences under the Computer Misuse Act 1990 and suspected conspiracy to pervert the course of justice, contrary to the Criminal Law Act 1977</div><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">“He is being questioned at a North London police station about alleged computer hacking relating to the identification of a previously anonymous blogger in 2009.”</div><div style="font-family: arial, helvetica, sans-serif; font-size: 1.4em; line-height: 1.48em; padding: 0px 0px 0.7em;">News International, publisher of Times, declined to comment on Mr Foster’s arrest.</div></div></div>

Times reporter arrested over police blogger hacking

Times reporter arrested over police blogger hacking Senior executives at The Times newspaper could be questioned by police investigating all...

Read more »

Internet Download Manager v6.12.11

<br />Description Internet Download Manager v6.12.11:<br />Internet Download Manager v6.12.11 is a tool to increase download speeds by up to 5 times, resume and schedule downloads. Comprehensive error recovery and resume capability will restart broken or interrupted downloads due to lost connections, network problems, computer shutdowns, or unexpected power outages. Simple graphic user interface makes IDM

Internet Download Manager v6.12.11

Description Internet Download Manager v6.12.11: Internet Download Manager v6.12.11 is a tool to increase download speeds by up to 5 times, r...

Read more »

HostDime Hacked By 1337

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: center;"><b><span style="font-size: large;">HostDime Hacked By 1337</span></b></div><div style="text-align: center;"><b><span style="font-size: large;"><br /></span></b></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglzqBOU3FnegcYgET3p9dXDWy-BPbjO5TV-D0TqIK8Kb1PDoxJMrYF9njIQLT9RDBYwI2SVou6ureGehDVQgyisYFjNioKPBtDOdKfK8jLsolB4gdbkr-umkHfcb1L4Ywju_Aytwt-Nzg/s1600/Hostdime.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="178" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglzqBOU3FnegcYgET3p9dXDWy-BPbjO5TV-D0TqIK8Kb1PDoxJMrYF9njIQLT9RDBYwI2SVou6ureGehDVQgyisYFjNioKPBtDOdKfK8jLsolB4gdbkr-umkHfcb1L4Ywju_Aytwt-Nzg/s320/Hostdime.png" width="320" /></a></div><br />Official forum of HostDime has been Hacked by 1337. The Pakistani Hacker posted a message about there security on there forum by posting a thread. The hacker had told that the site was not able to be defaced due to the .htaccess file which was added in the admincp file. The .htaccess file had spasific I.P address to be accessed to the admincp. Therefor the site was not able to be defaced. If the hacker had gotten into the admincp, the story might have been totally different.<br />HostDime is one of largest web hosting company which provides web hosting. They have there own data centers around the world with over 2,000,000 websites hosted with them.<br /><br />Hacked URL: <a href="https://forums.hostdime.com/showthread.php?4045-Hacked-By-1337">https://forums.hostdime.com/showthread.php?4045-Hacked-By-1337</a><br />Mirror: <a href="http://zone-hc.com/archive/mirror/a76b4e7_forums.hostdime.com_mirror_.html">http://zone-hc.com/archive/mirror/a76b4e7_forums.hostdime.com_mirror_.html</a><br /></div>

HostDime Hacked By 1337

HostDime Hacked By 1337 Official forum of HostDime has been Hacked by 1337. The Pakistani Hacker posted a message about there security on th...

Read more »

Latest Java software opens PCs to hackers: Experts

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="background-color: white; line-height: 18px;"><span style="color: #404040; font-family: arial; font-size: large;"><b>Latest Java software opens PCs to hackers: Experts</b></span></span><br /><span style="background-color: white; line-height: 18px;"><span style="color: #404040; font-family: arial; font-size: x-small;"><br /></span></span> <img src="http://cybersaviours.files.wordpress.com/2011/03/hacking.jpg?w=549" /> <br /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"><br /></span> <span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">BOSTON: Computer security firms are urging </span>PC<span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"> users to disable </span>Java software<span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"> in their browsers, saying the widely installed, free </span>software<span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"> from </span>Oracle Corp<span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"> opens machines to hacker attacks and there is no way to defend against them. </span><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">The warnings, which began emerging over the weekend from Rapid7, AlienVault and other cyber security firms, are likely to unnerve a PC community scrambling to fend off growing security threats from hackers, viruses and malware. Researchers have identified code that attacks machines by exploiting a newly discovered flaw in the latest version of Java. </span><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">Once in, a second piece of software called "Poison Ivy" is released that lets </span>hackers<span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"> gain control of the infected computer, said Jaime Blasco, a research manager with AlienVault Labs. </span><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">Several security firms advised users to immediately disable Java software - installed in some form on the vast majority of personal </span>computers<span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"> around the world - in their Internet browsers. Oracle says that Java sits on 97% of enterprise desktops. </span><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">"If exploited, the attacker will be able to perform any action the victim can perform on the victim's machine," said Tod Beardsley, an engineering manager with Rapid7's Metasploit division. </span><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">Computers can get infected without their users' knowledge simply by a visit to any website that has been compromised by hackers, said Joshua Drake, a senior research scientist with the security firm Accuvant. Java is a computer language that enables programmers to write one set of code to run on virtually any type of machine. </span><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">It is widely used on the Internet so that Web developers can make their sites accessible from multiple</span><a href="http://economictimes.indiatimes.com/topic/browsers" style="background-color: white; color: #024e97; font-family: arial; font-size: 13px; line-height: 18px; text-decoration: none;">browsers</a><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;"> running on Microsoft Windows PCs or Macs from Apple. An Oracle spokesperson said she could not immediately comment on the matter. </span><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #404040; font-family: arial; font-size: 13px; line-height: 18px;">Security experts recommended that users not enable Java for universal use on their browsers. Instead, they said it was safest to allow use of Java browser plug-ins on a case-by-case basis when prompted for permission by trusted programs such as GoToMeeting, a Web-based collaboration tool from Citrix Systems. Rapid7 has set up a Web page that tells users whether their browser has a Java plug-in installed that is vulnerable to attack: www.isjavaexploitable.com </span> </div>

Latest Java software opens PCs to hackers: Experts

Latest Java software opens PCs to hackers: Experts BOSTON: Computer security firms are urging  PC  users to disable  Java software  in th...

Read more »

Hackers release one million bank, web account details

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><h1 style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 2.142857em; margin: 0px 0px 5px; padding: 0px;">Hackers release one million bank, web account details</h1><div><br /></div><div><img alt="Hackers release one million bank, web account details" src="http://www.itp.net/images/content/589317/article/14177-fire-pc_article.jpg" /> </div><div><br /></div><div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;"><strong class="seo" style="display: inline;">A hacking group has released one million records and accounts from banks, government agencies and other sources.</strong></div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;"></div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;">The group, calling itself Team GhostShell posted compromised <nobr>databases</nobr> from a Chinese mainframe, a US stock exchange mainframe and access points to three or four Department of Homeland Security servers among other sources.</div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;"></div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;">Security analysts have confirmed that the data released includes at least 30,000 records, with data including credit histories from banks, administrator login information, usernames and passwords and files from content management systems.</div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;"><nobr>Security company</nobr> Imperva said that a lot of the data appeared to have been taken using SQL injection attacks.</div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;"></div><div style="background-color: white; color: #333333; font-family: georgia, serif; font-size: 1.071429em; line-height: 1.4em; margin-bottom: 1.285714em; padding: 0px;">In a statement accompanying the records, Team GhostShell said that the ‘Project HellFire' release was its "final form of protest this summer against <nobr>the banks</nobr>, politicians and for all the fallen hackers this year".</div></div></div>

Hackers release one million bank, web account details

Hackers release one million bank, web account details A hacking group has released one million records and accounts from banks, government ...

Read more »

Hackers allegedly breached Saudi Aramco again

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="background-color: white;"><span style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: x-small;">Hackers allegedly breached Saudi Aramco again</span></span><br /><span style="background-color: white;"><span style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: x-small;"><br /></span></span> <img src="http://theroadtothehorizon.net/photo/hacker-1.jpg" /> <br /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;"><br /></span> <span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">Saudi Aramco, the national oil company of Saudi Arabia and the biggest oil company in the world, has issued a </span><a href="http://www.saudiaramco.com/content/www/en/home/news.html#news%257C%252Fen%252Fhome%252Fnews%252Flatest-news%252F2012%252Fsaudi-aramco-restores-network.baseajax.html" style="background-color: white; color: #0080b1; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" target="_new">statement</a><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;"> announcing that it has restored all its main internal network services that were impacted in a </span>recent cyber attack<span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;"> which affected about 30,000 workstations - a number that corresponds with that shared by the Cutting Sword of Justice, the hacker group that took credit for the breach.</span><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">The company's primary enterprise systems of hydrocarbon exploration and production were unaffected as they operate on isolated network systems, the statement confirmed. The production plants were also fully operational.</span><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">“We addressed the threat immediately, and our precautionary procedures, which have been in place to counter such threats, and our multiple protective systems, have helped to mitigate these deplorable cyber threats from spiraling,” said Khalid A. Al-Falih, president and CEO of Saudi Aramco.</span><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">Published on Sunday, the statement doesn't contain any mention about further attacks by the hacker collective, despite one being </span>announced and scheduled<span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;"> for the day before.</span><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">But the group didn't remain silent.</span><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">"We think it's funny and weird that there are no news coming out from Saudi Aramco regarding Saturday's night, they said in a new Pastebin </span><a href="http://pastebin.com/AtN7dLeW" style="background-color: white; color: #0080b1; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" target="_new">post</a><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">. "Well, we expect that but just to make it more clear and prove that we're done with we promised, just read the following facts -valuable ones- about the company's systems."</span><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">The post included the email and password of Khalid A. Al-Falih; information and access credentials of the company's core, backup and middle routers; and the security appliances used by the company and the fact that they all still have default passwords.</span><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><br style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;" /><span style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 13px;">If the leaked information is legitimate, the situation doesn't bode well for the company, as the hackers announced one last paste, and who knows what information will be revealed in it.</span> </div>

Hackers allegedly breached Saudi Aramco again

Hackers allegedly breached Saudi Aramco again Saudi Aramco, the national oil company of Saudi Arabia and the biggest oil company in the w...

Read more »

Second accused LulzSec hacker arrested in Sony Pictures breach

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><h1 style="background-color: white; font-family: arial, helvetica, sans; font-size: 32px; font-weight: normal; line-height: 1.1; margin: 0px 0px 10px;">Second accused LulzSec hacker arrested in Sony Pictures breach</h1><div><img src="http://a0.twimg.com/profile_images/1341989664/somehwat-mad-completely-mad-u-mad-MADAD.jpg" /> </div><div><br /></div><div><span class="focusParagraph" style="background-color: white; font-family: arial, helvetica, sans;"><div style="font-size: 20px; line-height: 1.5; margin-bottom: 10px; padding: 0px;">(Reuters) - A second suspected member of the clandestine hacking group LulzSec was arrested on Tuesday on charges he took part in an extensive computer breach of Sony Pictures Entertainment, the FBI said.</div></span><span id="midArticle_1" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">Raynaldo Rivera, 20, of Tempe, Arizona, surrendered to U.S. authorities in Phoenix six days after a federal grand jury in Los Angeles returned an indictment charging him with conspiracy and unauthorized impairment of a protected computer.</div><span id="midArticle_2" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">If convicted, Rivera faces up to 15 years in prison.</div><span id="midArticle_3" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">The indictment, unsealed on Tuesday, accuses Rivera and co-conspirators of stealing information from Sony Corp's Sony Pictures' computer systems in May and June 2011 using an "SQL injection" attack against the studio's website, a technique commonly employed by hackers.</div><span id="midArticle_4" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">The indictment said Rivera then helped to post the confidential information onto LulzSec's website and announced the intrusion via the hacking group's Twitter account.</div><span id="midArticle_5" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">While Rivera was the only person named in the indictment, the FBI said his co-conspirators included Cody Kretsinger, 24, a confessed LulzSec member who pleaded guilty in April to federal charges stemming from his role in the Sony attack.</div><span id="midArticle_6" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">Following the breach, LulzSec published the names, birth dates, addresses, emails, phone numbers and passwords of thousands of people who had entered contests promoted by Sony, and publicly boasted of its exploits.</div><span id="midArticle_7" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">"From a single injection we accessed EVERYTHING," the hackers said in a statement at the time. "Why do you put such faith in a company that allows itself to become open to these simple attacks?"</div><span id="midArticle_8" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">Authorities have said the Sony breach ultimately cost the company more than $600,000.</div><span id="midArticle_9" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">LulzSec, an underground group also known as Lulz Security, is an offshoot of the international hacking collective Anonymous and has taken credit for such cyber incursions on a number of government and private sector websites.</div><span id="midArticle_10" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">The latest indictment says Rivera, who went by the online nicknames of "neuron," "royal" and "wildicv," is suspected of using a proxy server in a bid to conceal his Internet Protocol, or IP, address, and avoid detection.</div><span id="midArticle_11" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">Court documents revealed in March that an Anonymous leader known as Sabu, whose real name is Hector Monsegur, had pleaded guilty to hacking-related charges and provided information on his cohorts to the FBI.</div><span id="midArticle_12" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">That same month, five other suspected leaders of Anonymous, all them alleged to be LulzSec members as well, were charged by federal authorities with computer hacking and other offenses.</div><span id="midArticle_13" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">An accused British hacker, Ryan Cleary, 20, was indicted by a federal grand jury in June on charges related to LulzSec attacks on several media companies, including Sony Pictures.</div><span id="midArticle_14" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">Kretsinger, who pleaded guilty to the same two charges now facing Rivera, is slated to be sentenced on October 25. A federal prosecutor said he would likely receive substantially less than the 15-year maximum prison term carried by those offenses.</div><span id="midArticle_15" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">Anonymous and its offshoots focused initially on fighting attempts at Internet regulation and the blocking of free illegal downloads but have since taken aim at the Church of Scientology, global banking and other targets.</div><span id="midArticle_0" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">Anonymous, and LulzSec in particular, became notorious in late 2010 when they launched what they called the "first cyber war" in retaliation for attempts to shut down Wikileaks.</div><span id="midArticle_1" style="background-color: white; font-family: arial, helvetica, sans;"></span><div style="background-color: white; font-family: arial, helvetica, sans; font-size: 14px; line-height: 1.6; margin-bottom: 10px; padding: 0px;">(Editing by Cynthia Johnston and Lisa Shumaker)</div></div></div>

Second accused LulzSec hacker arrested in Sony Pictures breach

Second accused LulzSec hacker arrested in Sony Pictures breach (Reuters) - A second suspected member of the clandestine hacking group LulzS...

Read more »

Hack on Saudi Aramco hit 30,000 workstations, oil firm admits

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div style="background-color: white;"><span class="trailer" style="font-size: 14px; line-height: 21px; padding-right: 0.25em;"><span style="font-family: Arial, FreeSans, Helvetica, sans-serif;"><b>Hack on Saudi Aramco hit 30,000 workstations, oil firm admits </b></span></span></div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;"><strong class="trailer" style="padding-right: 0.25em;"><img height="178" src="http://memrieconomicblog.org/images/uploaded/ARAMCO.jpg" width="400" /> </strong></div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;"><strong class="trailer" style="padding-right: 0.25em;"><br /></strong></div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;"><strong class="trailer" style="padding-right: 0.25em;">Analysis</strong> Saudi Aramco said that it had put its network back online on Saturday, 10 days after a malware attack floored 30,000 workstations at the oil giant.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">In a <a href="http://www.saudiaramco.com/content/www/en/home/news.html#news%257C%252Fen%252Fhome%252Fnews%252Flatest-news%252F2012%252Fsaudi-aramco-restores-network.baseajax.html" style="color: #dd0000; text-decoration: none;" target="_blank">statement</a>, Saudi Arabia's national oil firm said that it had "restored all its main internal network services" hit by a malware outbreak that struck on 15 August. The firm said its core business of oil production and exploration was <em>not</em> affected by the attack, which resulted in a decision to suspend Saudi Aramco's website for a period of a few days, presumably as a precaution. Corporate remote access services were also suspended as a result of the attack.</div><div id="article-mpu-container" style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px; margin-top: 1em;"><div class="ad-now" id="ad-mpu1-spot" style="float: right; height: auto; line-height: 1.2; margin-left: auto; margin-right: auto; margin-top: 0px; padding: 0px 0px 2px 8px; text-align: center; width: auto;"><div id="ad-mpu1" style="margin-left: auto; margin-right: auto;"></div></div>Oil and production systems were run off "isolated network systems unaffected by the attack, which the firm has pledged to investigate. In the meantime, Saudi Aramco <a href="https://www.facebook.com/Saramcopage" style="color: #dd0000; text-decoration: none;" target="_blank">promised</a> to improve the security of its network to guard against fresh assaults.</div><blockquote style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; font-weight: bold; line-height: 21px; margin: 0.5em 1em; padding: 0px;">Saudi Aramco has restored all its main internal network services that were impacted on August 15, 2012, by a malicious virus that originated from external sources and affected about 30,000 workstations. The workstations have since been cleaned and restored to service. As a precaution, remote Internet access to online resources was restricted. Saudi Aramco employees returned to work August 25, 2012, following the Eid holidays, resuming normal business.The company confirmed that its primary enterprise systems of hydrocarbon exploration and production were unaffected as they operate on isolated network systems. Production plants were also fully operational as these control systems are also isolated.</blockquote><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">A previously unknown group called Cutting Sword of Justice <a href="http://pastebin.com/HqAgaQRj" style="color: #dd0000; text-decoration: none;" target="_blank">claimed responsibility</a> for the attack, which affected three in four of the estimated 40,000 workstations used by the oil giant. The group said that it had hacked Saudi Aramco in retaliation against the Al-Saud regime for the "crimes and atrocities taking place in various countries around the world, especially in the neighboring countries such as Syria, Bahrain, Yemen, Lebanon [and] Egypt".</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">The group said it hacked Aramco after compromising systems in "several countries" before implanting malware to "destroy 30,000 computers" within Aramco's network. The infected machines claim was made days before Saudi Aramco confirmed the same number of machines had been hit, lending credibility to the hacker group's claims.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">Neither victim nor perpetrator named the malware that featured in the attack but security researchers implicated the Shamoon malware in the security breach (analysis by Seculert <a href="http://blog.seculert.com/2012/08/shamoon-two-stage-targeted-attack.html" style="color: #dd0000; text-decoration: none;" target="_blank">here</a>). <a href="http://www.symantec.com/connect/blogs/shamoon-attacks" style="color: #dd0000; text-decoration: none;" target="_blank">Shamoon</a>, which emerged days before the assault, has both the capability to over-write data on infected machines and to destroy Master Boot Record files, thus making infected Windows machines impossible to boot.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">Over-written files were <a href="http://bits.blogs.nytimes.com/2012/08/24/among-digital-crumbs-from-saudi-aramco-cyberattack-image-of-burning-u-s-flag" style="color: #dd0000; text-decoration: none;" target="_blank">reportedly</a> replaced by an image of a burning US flag.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">According to researchers, the malware also has the capacity to extract information from compromised before uploading it to the internet.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">Core router names and admin passwords along with email address and supposed password of Saudi Aramco chief exec, Khalid A Al-Falih, were uploaded to Pastebin on Monday. The latest leak may be a result of the threatened follow-up attack, due to take place last weekend, rather than the fruits of the original malware-fuelled assault.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">Rob Rachwald, director of security strategy at Imperva, described that Saudi Aramco attack as the first hacktivist-style assault to use malware.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">"In the past, hacktivists have typically used application or distributed denial of service (DDoS) attacks - in which they clog a website with traffic until it goes offline. However, the attack on Saudi Aramco is the first significant use of malware in a hacktivist attack. Hacktivists rarely use malware, if other hacktivists jump on this trend it could become very dangerous," he said.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">A blog post by Imperva on the attack can be found <a href="http://blog.imperva.com/2012/08/the-significance-of-the-aramco-hack.html" style="color: #dd0000; text-decoration: none;" target="_blank">here</a>.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">Similar data-wiping malware disrupted systems at Iranian oil exploration facilities in May in an attack that led researchers at Kaspersky Lab to the discovery of the Flame cyber-espionage tool. US gas prospecting firms have been hit by previous attacks, most of which are suspected to have been state-sponsored.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">It seems wise to view claims that the Saudi Aramco assault was a case of politically motivated hacktivism with some skepticism, at least until a clearer picture of the previously unknown Cutting Sword of Justice group emerges. It could be the group is solely motivated at hitting back at Saudi's ruling royal family for the country's support in putting down Arab Spring-style revolts in other nations, such as Bahrain, but other motives are also possible.</div><div style="background-color: white; font-family: Arial, FreeSans, Helvetica, sans-serif; font-size: 14px; line-height: 21px;">More commentary on the information security aspects of the attack can be found in a post on Sophos' Naked Security blog <a href="http://nakedsecurity.sophos.com/2012/08/27/saudi-aramco-malware" style="color: #dd0000; text-decoration: none;" target="_blank">here</a>. ®</div></div>

Hack on Saudi Aramco hit 30,000 workstations, oil firm admits

Hack on Saudi Aramco hit 30,000 workstations, oil firm admits  Analysis  Saudi Aramco said that it had put its network back online on Satur...

Read more »

Cambridge University Investigates Hacking Claim

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><h1 class="story-header" style="background-color: white; clear: both; color: #505050; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 2.461em; letter-spacing: -1px; line-height: 34px; margin: 3px -160px 13px 0px; padding: 0px; position: relative; text-rendering: optimizelegibility; width: 623px;">Cambridge University investigates hacking claim</h1><div class="caption body-narrow-width" style="background-color: white; clear: both; color: #505050; display: inline; float: right; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 13px; line-height: 16px; margin: 0px -160px 16px 16px; position: relative;"><img alt="Cambridge" height="171" src="http://news.bbcimg.co.uk/media/images/62546000/jpg/_62546761__53929227_cambridge_afp-1.jpg" style="-webkit-user-select: none; border: 0px; font-style: italic; letter-spacing: 0px; position: relative;" width="304" /><span style="display: block; width: 304px;">The university says it is taking preventative measures against the claims</span></div><div class="story-feature related narrow" style="background-color: white; clear: right; color: #505050; display: inline; float: right; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 13px; line-height: 16px; margin: 0px -160px 16px 16px; overflow: hidden; position: relative; width: 144px;"><a class="hidden" href="http://www.bbc.co.uk/news/education-19409510#story_continues_1" style="color: #4a7194; font-weight: bold; left: -5000px; position: absolute; text-decoration: none; top: -5000px;">Continue reading the main story</a><h2 style="border-bottom-color: rgb(216, 216, 216); border-bottom-style: solid; border-bottom-width: 1px; border-top-color: rgb(216, 216, 216); border-top-style: solid; border-top-width: 1px; font-size: 1.231em; margin: 0px 0px 8px; padding: 11px 0px 12px; text-rendering: optimizelegibility;">Related Stories</h2><ul class="related-links-list" style="border-top-style: none; clear: both; list-style: none; margin: 0px 0px 16px; padding: 8px 0px 0px;"><li style="background-image: none; font-size: 1em; margin: 0px 0px 8px; padding: 0px; position: relative; text-rendering: auto;"><a class="story" href="http://www.bbc.co.uk/news/uk-19409774" rel="published-1346232048758" style="color: #4a7194; font-weight: bold; text-decoration: none;">Journalist held in hacking probe</a></li><li style="background-image: none; font-size: 1em; margin: 0px 0px 8px; padding: 0px; position: relative; text-rendering: auto;"><a class="story" href="http://www.bbc.co.uk/news/uk-19385458" rel="published-1345989523506" style="color: #4a7194; font-weight: bold; text-decoration: none;">Ecuador: UK Assange 'threat' over</a></li></ul></div><div class="introduction" id="story_continues_1" style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; font-weight: bold; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">The University of Cambridge has launched an investigation after a group claimed to have hacked into its software systems.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">The group named NullCrew said it had targeted several university departments and broken into databases.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">The network is linked to the computer hacking network Anonymous and supports the WikiLeaks founder Julian Assange.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">Mr Assange, who faces extradition to Sweden, is currently taking shelter at the Ecuadorean embassy in London.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">The NullCrew group published details of what appear to be university user names and passwords <nobr style="color: #505050; line-height: 16px;">online</nobr> with the message: "There is much more where this came from, and don't think this is the end.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">"NullCrew, along with the whole Anonymous movement, isn't near finished with you. And we never will be, until the right thing is done with Julian Assange.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">"Next time it will be worse, we guarantee it."</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">A spokesman for Cambridge University said: "A group calling itself NullCrew claims to have obtained login details for some web-based resources hosted on university systems.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">"As a preventative measure these have been taken offline while IT staff investigate the claims.</div><div style="background-color: white; clear: left; color: #333333; font-family: Arial, Helmet, Freesans, sans-serif; font-size: 1.077em; line-height: 18px; margin-bottom: 18px; padding: 0px; text-rendering: auto;">"The hacking group itself has not claimed to have compromised the email login details of members of the university, and there is no evidence to substantiate such a suggestion."</div></div>

Cambridge University Investigates Hacking Claim

Cambridge University investigates hacking claim The university says it is taking preventative measures against the claims Continue reading t...

Read more »

Customers still 'in the dark' on cyber crime, warns EU agency

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px;">Cyber crime worth billions of euros is going unreported because companies are failing to admit to security breaches, according to a paper released Tuesday (28 August) by the EU's internet security agency.</div><div class="image clear" style="background-color: white; border: none; float: right; padding: 10px 0px 0px 20px; width: 220px;"><ul class="browse" style="margin: 0px; padding: 0px;"><li style="color: #505050; display: block; font-family: arial; font-size: 14px; height: 239px; line-height: 18px; list-style-type: none; padding: 0px;"><a href="http://euobserver.com/media/src/2e3ce069aca36f80c68c7cef25de84b4.jpg" style="color: #666666;" title="View full size."><img alt="" height="165" src="http://euobserver.com/media/4/2e3ce069aca36f80c68c7cef25de84b4.png" style="border: none; display: block;" width="220" /></a><div class="caption" style="font-size: 12px; line-height: 16px; margin-top: 10px;">Cyber-crime worth billions is going unreported, says the EU's internet agency </div></li></ul><ol class="browse-controls horizontal" style="float: right; margin: 0px 0px 10px; padding: 10px 0px 0px;"><li class="selected" style="color: #505050; float: left; font-family: arial; font-size: 14px; line-height: 18px; list-style-type: none; margin: 0px 0px 0px 5px; padding: 0px;"><a href="http://euobserver.com/justice/117359#" rel="1" style="background-color: #aeaeae; color: #ff7f00; display: block; height: 7px; width: 14px;"></a></li></ol></div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">In "Cyber incident reporting in the EU" the European Network and Information Security Agency (ENISA) highlighted a series of regulatory gaps in EU cyber laws. In its conclusions, ENISA admitted that although "large outages and large data breaches receive extensive media coverage.... many breaches, however, remain undetected and if detected, are not reported to authorities and not known to the public."</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">The report highlighted five major cyber incidents which all went unreported, including an 'IP hijacking' case in April 2010 where China Telecom fed incorrect routing information instructing US and other international Internet traffic to feed through Chinese servers, swallowing 15% of global Internet use in less than 20 minutes.</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">In a press statement accompanying the report, co-authors Dr Marnix Dekker and Chris Karsberg admitted that “cyber incidents are most commonly kept secret when discovered, leaving customers and policymakers in the dark about frequency, impact and root causes.”</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">Commenting that the "lack of transparency and lack of information about incidents makes it difficult for policy makers to understand the overall impact", the report added that this, in turn, "complicates the effort in the industry to understand and address cyber security incidents."</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">Under the EU Telecoms directive adopted in 2009, service providers are required to report "all significant security breaches" to ENISA and national data supervisors. Meanwhile, provisions of the recently adopted e-privacy directive requires service providers to report all security lapses compromising personal data.</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">ENISA revealed that it had received 51 incident reports for 2011-2012, the first year of mandatory reporting requirements, saying that it would publish an overview of cyber-security breaches in September and annual reports from spring 2013 onwards.</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">However, the data was incomplete, with a number of member states yet to implement the directive in to national law, it said. ENISA executive director, Professor Udo Helmbrecht insisted that EU cyber policy should extend the reporting provisions for companies describing it as "essential to obtain a true cyber security picture."</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">A Eurobarometer in July revealed that one in ten Europeans had been victims of data theft, while online security firm McAfee estimated that cyber-crime cost businesses $750bn (€600bn) in lost income across the world in 2011.</div><div style="background-color: white; color: #505050; font-family: arial; font-size: 14px; line-height: 20px; margin-top: 20px;">EU Digital Agenda Commissioner Neelie Kroes has repeatedly promised plans for a detailed cyber security strategy, including a European Cyber-Crime Centre based in Europol's Dutch headquarters which will start work in 2013. Speaking in January at the World Economic Forum, Kroes called for concerted action on cyber-crime claiming that there was a 10% chance of a major break-down of the worldwide computer network.</div></div>

Customers still 'in the dark' on cyber crime, warns EU agency

Cyber crime worth billions of euros is going unreported because companies are failing to admit to security breaches, according to a paper re...

Read more »