Hacking.BaBa

Chinese hackers sink the Indian Navy systems

<div dir="ltr" style="text-align: left;" trbidi="on"><br />Chinese hackers have managed to take out the computer system on the Indian Navy's Eastern Command.<br />The hackers planted malware on the system, which is based around the city of Visakhaptnam, which sent sensitive data to IP addresses in China.<br />The Indian Express reported how India's first nuclear missile submarine, INS Arihant, was running trials at the facility and might have got the bug.<br />The virus had reportedly created a hidden folder, collected specific files and documents based on certain "key words" it had been programmed to identify.<br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimrrnV2CBcRFvPd_XbxKuAkx3nfk4UueIPXsB9SBEqB4vl_7GbzXdeeaLShVkkyb2qfYZSSpq-9D4O95G5AHJRkKFq8JXj-GoIUhUovCY-ua_ZuMWsPIH9E3wsJ9ktNvg4UV6ToxtweJMl/s1600/China-is-building-up-a-cy-006.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimrrnV2CBcRFvPd_XbxKuAkx3nfk4UueIPXsB9SBEqB4vl_7GbzXdeeaLShVkkyb2qfYZSSpq-9D4O95G5AHJRkKFq8JXj-GoIUhUovCY-ua_ZuMWsPIH9E3wsJ9ktNvg4UV6ToxtweJMl/s320/China-is-building-up-a-cy-006.jpg" width="320" /></a></div><br />It remained hidden on the pen drives until they were put in computers connected to the internet, after which the bug quietly sent files to the specific IP addresses.<br />It is not clear how much was taken in the hacking raid, or if the malware operated like Stuxnet and needed to be installed within the system by a spook first.<br />So far, India has arrested six officers for procedural lapses which led to the breach. It is not clear if any of them will later face spying charges.<br />India's navy stores sensitive data in standalone computers which are not connected to the web. However, they are also not supposed to have ports or access points for flash drives or external storage devices.<br /><br /><span style="background-color: white;">Reference</span>: <a href="http://news.techeye.net/security/chinese-hackers-sink-the-indian-navy-systems" target="_blank">Link1</a><br /></div>

Chinese hackers sink the Indian Navy systems

Chinese hackers have managed to take out the computer system on the Indian Navy's Eastern Command. The hackers planted malware on the sy...

Bespoke 'web-inject' Software for Sale threatens bank

<div dir="ltr" style="text-align: left;" trbidi="on"><h4 style="text-align: left;">Malware 'suites' sold cheap online</h4>Cyber criminals are offering low priced and customisable ‘web-injects’ for malware, which a security expert warns could wreak havoc with banks.<br /><span style="background-color: white;">An evolving underworld market for malware has shifted to start offering more targeted and often bespoke updates to commonly found malware like Zeus and SpyEye.</span><br />Known as web-injects, they are generally used to create fake web pages which pop up when a victim infected with malware uses online banking or makes a transaction.<br />Just like any market, that of malware and web-injects is subject to changes, and Trusteer has found that, while bulk pricing has been popular in the past, web-inject software writers are producing code with specific features.<br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCqPFs8QBZCFfZsy2cgZoH85hHzoQ1AyNYmC3S8hzi7pV3dzvbQDxyqXsyLHbpepFg4GLaj6VMRrY7LEpOJJ5tqjbXXMnYx5tJeOozK1yrR9hoLXoByBasSsmhcOlmVRH1ESZmL78B22Xo/s1600/shutterstock_14291266.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCqPFs8QBZCFfZsy2cgZoH85hHzoQ1AyNYmC3S8hzi7pV3dzvbQDxyqXsyLHbpepFg4GLaj6VMRrY7LEpOJJ5tqjbXXMnYx5tJeOozK1yrR9hoLXoByBasSsmhcOlmVRH1ESZmL78B22Xo/s320/shutterstock_14291266.jpg" width="320" /></a></div><br /><br />The Additional Passwords mechanism asks for more passwords from a victim, costing up to $200, while the TAN Grabber can capture one-time passwords that are sometimes used by some banks to authorise online transactions.<br /><div>According to Trusteer, cyber criminals are essentially aping traditional software vendors, offering an a la carte suite of pricing options.</div><div><div>While the move away from bulk buying to tailor made web-injects means more cost, the customised software is also becoming more readily available - and cheaper.</div><div>This greater availability and improved ability to narrow attack areas is threatening to cause upheaval with financial defences.</div><div>According to George Tubin, Senior Security Analyst with Trusteer, many banks could find themselves at considerably greater risk than before.</div><div>“It is very concerning for a lot of banks which maybe haven’t been targeted before,” he said, speaking with TechEye. “Typically the malware will target larger institutions."</div><div>“Now you can target almost any bank you want, you could target banks that previously haven’t been target," he said. “These are often the ones that don’t have as good defences in places.”</div></div><div><br /></div><div><span style="background-color: white;">Reference</span>: <a href="http://news.techeye.net/security/bespoke-web-inject-software-for-sale-threatens-bank-chaos" target="_blank">Link1</a></div><div><br /></div><br /></div>

Bespoke 'web-inject' Software for Sale threatens bank

Malware 'suites' sold cheap online Cyber criminals are offering low priced and customisable ‘web-injects’ for malware, which a secur...