Millions of android devices Hacked

2/15/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhG4MkdoqToY9eNa6DRRhprQVQ99M-6Wy4fw2dwg0LHea2eXFhBrReROjcO5NvtLpU_GNvh3roub7_UkL3OJRvlbMzTTRzmymK7QeYzjOHt5suZutnRlSb4ewRCQ9MFV9seuxz-_Xu_olEQ/s1600/Millions-Of-Android-Users-Hacked-By-This-Cryptomining-Attack.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Millions of android devices Hacked" border="0" data-original-height="420" data-original-width="800" height="336" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhG4MkdoqToY9eNa6DRRhprQVQ99M-6Wy4fw2dwg0LHea2eXFhBrReROjcO5NvtLpU_GNvh3roub7_UkL3OJRvlbMzTTRzmymK7QeYzjOHt5suZutnRlSb4ewRCQ9MFV9seuxz-_Xu_olEQ/s640/Millions-Of-Android-Users-Hacked-By-This-Cryptomining-Attack.png" title="Millions of android devices Hacked" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Millions of android devices Hacked</td></tr>
</tbody></table>
<br />
<div style="background-color: white; border: 0px; color: #222222; font-family: helvetica, arial, sans-serif; font-size: 17px; font-stretch: inherit; line-height: 27px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
The Android operating system and its apps are usually more exposed to security problems and the presence of malware of all kinds. With the arrival of the cryptocurrencies, this was the new focus to explore the users.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: helvetica, arial, sans-serif; font-size: 17px; font-stretch: inherit; line-height: 27px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
A new campaign was recently detected and was obliging the mining of these crypto-coins.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: helvetica, arial, sans-serif; font-size: 17px; font-stretch: inherit; line-height: 27px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
This new campaign is equal to many others that have been known in the past and have affected Android smartphones.<b> By routing users to dedicated sites, they are making a profit for attackers, </b>either through the display of advertising or, as in this case, by offering a processor to mine crypto-coins.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: helvetica, arial, sans-serif; font-size: 17px; font-stretch: inherit; line-height: 27px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
In this case, Android users were even alerted to a supposed high processing problem and should put a captcha code in order for the situation to be resolved.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: helvetica, arial, sans-serif; font-size: 17px; font-stretch: inherit; line-height: 27px; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
While this process was going on, in incognito, they were mining virtual currency for the attackers. It was only a few minutes, but it surrendered to those who set up this scheme.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGSIK020MwkDTND-oeuYSRtqt28Ku7arBV49tgDVkjWs0s4Jd66izHpqH3wUJDPbzpCjbTROSh33BCZtB2khd5qyziv0Sm8gLPjeIPvpq-jpsWUX0TDbXZhZ9PDq7O034XDP6DRX0XufBa/s1600/IMG-6.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Millions of android devices Hacked" border="0" data-original-height="664" data-original-width="800" height="530" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGSIK020MwkDTND-oeuYSRtqt28Ku7arBV49tgDVkjWs0s4Jd66izHpqH3wUJDPbzpCjbTROSh33BCZtB2khd5qyziv0Sm8gLPjeIPvpq-jpsWUX0TDbXZhZ9PDq7O034XDP6DRX0XufBa/s640/IMG-6.jpg" title="Millions of android devices Hacked" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Millions of android devices Hacked</td></tr>
</tbody></table>
<div style="border: 0px; font-stretch: inherit; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
<br />
This form of attack was included and disguised in several apps, which directed users to these sites dedicated to mining, discreetly and without them realizing that they were being used.</div>
<div style="border: 0px; font-stretch: inherit; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
The number of victims is not known but is high. We have identified at least 5 domains using the same captcha and the same keys as the Coinhive site. <b>At least 2 of these sites had more than 30 million hits per month and the 5 combined domains had about 800,000 visits per day,</b> with an average of 4 minutes per visit.</div>
<div style="border: 0px; font-stretch: inherit; margin-bottom: 20px; padding: 0px; vertical-align: baseline;">
As with the browser version of this type of attack, the sum of many users makes it profitable for attackers. It is only a few minutes that, accumulated, can revert significantly to who is managing the attack.</div>
</div>
</div>

Millions of android devices Hacked The Android operating system and its apps are usually more exposed to security problems and the pr...

'Biggest Leak in History' :Key iPhone Source Code Gets Posted Online

2/08/2018 student 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em; text-align: left;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdjzHSBbpaQDikzHg0fA_09Cx_rOdTrjc6LpZ3bx3k87UiqN6MYkQBe68GTm16_nhdBmDBa3mK7p1YPHhcH6FC5FoAJkQrRlWLfGW0PmMYmWtXe3ll1GGNGtdfAqcOrAiKNpQxoEhyphenhyphenmgk/s1600/iPhone-8-UK-Release-Date-860862.jpg" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><img border="0" data-original-height="350" data-original-width="590" height="377" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdjzHSBbpaQDikzHg0fA_09Cx_rOdTrjc6LpZ3bx3k87UiqN6MYkQBe68GTm16_nhdBmDBa3mK7p1YPHhcH6FC5FoAJkQrRlWLfGW0PmMYmWtXe3ll1GGNGtdfAqcOrAiKNpQxoEhyphenhyphenmgk/s640/iPhone-8-UK-Release-Date-860862.jpg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Key iPhone Source Code Gets Posted Online</td></tr>
</tbody></table>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
Someone just posted what experts say is the source code for a core component of the iPhone’s operating system on GitHub, which could pave the way for hackers and security researchers to find vulnerabilities in iOS and make iPhone jailbreaks easier to achieve.</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
The GitHub code is labeled “iBoot,” which is the part of iOS that is responsible for ensuring a trusted boot of the operating system. In other words, it’s the program that loads iOS, the very first process that runs when you turn on your iPhone. It loads and verifies the kernel is properly signed by Apple and then executes it—it’s like the iPhone’s BIOS.</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
<span style="line-height: 25.6000003814697px;">The code says it’s for iOS 9, an older version of the operating system, but portions of it are likely to still be used in iOS 11.</span></div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
Apple has traditionally been very reluctant to release code to the public, though it has made certain parts of iOS and MacOS open source in recent years. But it has taken particular care to keep iBoot secure and its code private; <b>bugs in the boot process are the most valuable ones </b>if reported to Apple, which values them at a max payment of $200,000.</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
“This is the biggest leak in history,” Jonathan Levin, the author of  on iOS and Mac OSX internals, told me in an online chat. “It’s a huge deal.”</div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyiTREL-IZDX12oF9p3QlcoGXsFv4ttS04sHrMi8_StiD98a1wdu8pFVAgQvuUeh307eoCI_QOgjO0wt8Lbdi-Tk5e4SbOh96LU-nEzD4-FNoEk5jyCt-XwVMIJ4UYEie_4bZLzyfaigk/s1600/tn2151_symbolication_levels.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="693" data-original-width="920" height="481" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyiTREL-IZDX12oF9p3QlcoGXsFv4ttS04sHrMi8_StiD98a1wdu8pFVAgQvuUeh307eoCI_QOgjO0wt8Lbdi-Tk5e4SbOh96LU-nEzD4-FNoEk5jyCt-XwVMIJ4UYEie_4bZLzyfaigk/s640/tn2151_symbolication_levels.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">'Biggest Leak in History' :Key iPhone Source Code Gets Posted Online</td></tr>
</tbody></table>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
<br /></div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
Levin said the code appears to be the real iBoot code because it aligns with code he reverse engineered himself. <b>A second security researcher familiar with iOS also said they believe the code is real. We don’t know who is behind the leak. Apple did not respond to a request for comment.</b></div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
Having access to the source code of iBoot gives iOS security researchers a better chance to find vulnerabilities that could lead to compromising or jailbreaking the device, Levin said. That means hackers could have an easier time finding flaws and bugs that could allow them to crack or decrypt an iPhone. And, perhaps, this leak could eventually allow advanced programmers to emulate iOS on non Apple platforms.</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
<i style="box-sizing: inherit; font-weight: 700; line-height: 25.6000003814697px;">Got a tip? You can contact this reporter securely on Signal at +1 917 257 1382, OTR chat at lorenzo@jabber.ccc.de, or email lorenzo@motherboard.tv</i></div>
<div class="odd-unit__container__container" style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 0px; margin-left: auto; margin-right: auto; max-width: inherit;">
<div class="article-iac__wrapper" style="box-sizing: inherit; margin-left: auto; margin-right: auto;">
</div>
</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
Vulnerabilities <b>in previous versions of iBoot allowed jailbreakers and hackers to brute-force their way through the iPhone’s lock screen and decrypt a user’s data. But newer iPhones </b>have a chip , which has hardened the security of the device.</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
For regular users, Levin added, this means that tethered jailbreaks, which require the phone to be connected to a computer when booting, could soon be back. These jailbreaks used to be relatively easy to pull off and were common, but are now extremely hard to come by on up-to-date iOS devices, which have advanced security mechanisms that make it hard for even highly skilled researchers from even looking for bugs, as they need to first jailbreak the device before beginning to probe the device.</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
It’s these security improvements . Nowadays, finding bugs and vulnerabilities in iOS is something that requires a significant amount of time and resources. That’s why the jailbreaking community gets excited for any leak of source code or any exploit.</div>
<div class=" autoAd adLocation-300scroll" style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto; text-align: center;">
</div>
<div class="odd-unit__container__container" style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 0px; margin-left: auto; margin-right: auto; max-width: inherit;">
<div class="article-iac__wrapper" style="box-sizing: inherit; margin-left: auto; margin-right: auto;">
</div>
</div>
<div style="box-sizing: inherit; font-family: Lora, Georgia, TazunganeGothic, serif; font-size: 16px; line-height: 25.6000003814697px; margin-bottom: 30px; margin-left: auto; margin-right: auto;">
“iBoot is the one component <b>Apple has been holding on to, still encrypting its 64 bit image,” Levin said. “And now it’s wide open in source code form.”</b></div>
</div>

Cyber Attacks Malwares News 'Biggest Leak in History' :Key iPhone Source Code Gets Posted Online

Key iPhone Source Code Gets Posted Online Someone just posted what experts say is the source code for ...

Fake tech support scam : Google Chrome users be Alert

2/07/2018 student 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em; text-align: left;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf9-csFuNPicANU0Kau73x9ZV6RZgdWNJZbMEuit7uTGYErN76RdRRFd58-fXLziPJ1-RKKmjl6TKE2_krbJ8gGmfeO3knsVDCuvMahYXRY09PuJ_NXgOcitUsaHITTRo9ME-L6K7Qp3w/s1600/Mac1.png" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><img border="0" data-original-height="636" data-original-width="834" height="488" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf9-csFuNPicANU0Kau73x9ZV6RZgdWNJZbMEuit7uTGYErN76RdRRFd58-fXLziPJ1-RKKmjl6TKE2_krbJ8gGmfeO3knsVDCuvMahYXRY09PuJ_NXgOcitUsaHITTRo9ME-L6K7Qp3w/s640/Mac1.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Fake tech support scam</td></tr>
</tbody></table>
<div class="separator" style="clear: both; text-align: center;">
<i></i><i></i></div>
<ul>
<li><i>Tech support
 scams may use an API to freeze a user's browser, prompting them to call
 a fake support line and share their credit card information.<br />  </i></li>
<li><i> </i><i><i>Fake Google Chrome browser alerts asking users to contact 
false tech support lines have increased over the last quarter for 
Windows users, according to Malwarebytes.</i></i><b><br /></b></li>
</ul>
<br />
<br />
Tech
 support scams are increasingly hitting Windows users on the Google 
Chrome browser—even when it's been updated to the latest version.<br />
<br />
Fake browser alerts pushing these tech support scams have increased in 
the last quarter, according to Malwarebytes. Most of these attack 
campaigns come from malicious advertising and compromised websites, with
 criminals looking to scare users into calling the number—sometimes by 
completely locking their browser.    <br />
<br />
These scams take the form of browser alerts asking users to contact fake
 tech support lines in attempts to gain their credit card information. 
And the attacks on Google Chrome are far from the first to hit the web: 
In January 2017, when you Googled "<b>Facebook customer support</b>," .In February 2017, a top Google search result that appeared to be an ad for <a href="http://amazon.com/">Amazon.com</a> was actually a malicious link .<br />
<br />
The US Federal Trade Commission recently launched an effort to put a stop to these scams, but they will likely remain pervasive, This means businesses must be especially vigilant in training employees
 to recognize scams, phishing attacks, and other <a href="http://h4rdeepsingh.blogspot.in/search/label/Cyber%20Attack" target="_blank">cybersecurity </a>issues.<br />
<br />
Since these attacks do not seem to be slowing down, it's important 
for businesses to train their end users to recognize them. The best way 
to handle such an attack is to avoid panicking and close the browser 
using the Task Manager. The pop-ups themselves are usually harmless, so 
long as the user doesn't call the number provided.<br />
<br />
<div class="sharethrough-article" data-component="medusaContentRecommendation" data-medusa-content-recommendation-options="{"promo":"promo_TR_recommendation_sharethrough_top_in_article_desktop","spot":"dfp-in-article"}">
</div>
Professionals, whether working at home or in the office, should
 always go through their IT or security department to handle security 
issues. All users should be aware that it is highly unlikely that tech 
vendors will proactively reach out to users offering support.<br />
  </div>

Malwares News Fake tech support scam : Google Chrome users be Alert

Fake tech support scam Tech support scams may use an API to freeze a user's browser, prompting them to call a fake support lin...

Millions of android devices Hacked

'Biggest Leak in History' :Key iPhone Source Code Gets Posted Online

Fake tech support scam : Google Chrome users be Alert

Popular

Comments

Archive