Bot Roundup: Avalanche, Kronos, NanoCore

It's been a busy few weeks in cybercrime news, justifying updates to a couple of cases we've been following closely at KrebsOnSecurity. In Ukraine, the alleged ringleader of the Avalanche malware spam botnet was arrested after eluding authorities in the wake of a global cybercrime crackdown there...

Hacker Who Never Hacked Anyone Gets 33-Month Prison Sentence

A hacker who was arrested and pleaded guilty last year—not because he hacked someone, but for creating and selling a remote access trojan that helped cyber criminals—has finally been sentenced to serve almost three years in prison. Taylor Huddleston, 26, of Hot Springs, Arkansas, pleaded guilty i...

Brave Software: There is vulnebility Click Here TO fix

NOTE! Thanks for submitting a report! Please fill all sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty. Summary: add summary of the vulnerability Products affected: operating system, Brave versi...

sshLooter - Script To Steal Passwords From SSH

Script to steal passwords from SSH. Install git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configuration Edit the script on install.sh, and add your telegram bot api, and your userid. Call the @botfather on telegram to create a bot and call the @userinfobot to get your user...

VK.com: новенькое (старенькое upgreid) хакерство: делаем демократию во всем в контакте (XSS - на англиском)

XSS в Wiki. ето жесткое хакерство позволяло устроить массовую глючность в social set’ V Kontakte и зделать репост от имени любого челика открывшего сылку особено страшно в росии где сажают за репосты в контакти все оперативно исправили 3 месяца у них реяльно золотые руки к сожелению глючность...

Hacker extracts customer data from Canadian Telecom Firm after rebuttal

By Waqas A hacker who found critical vulnerability in Canadian Freedom Mobile has This is a post from HackRead.com Read the original post: Hacker extracts customer data from Canadian Telecom Firm after rebuttal...

British Hacker Lauri Love will not be extradited to the United States

By Waqas Lauri Love, known For hacking US government computers will not This is a post from HackRead.com Read the original post: British Hacker Lauri Love will not be extradited to the United States...

Hacker compromised user data & illegally used car sharing service 33 times

By Waqas A 37-year old IT security researcher and self-confessed computer hacker This is a post from HackRead.com Read the original post: Hacker compromised user data & illegally used car sharing service 33 times...

System Shield 5.0.0.136 - Privilege Escalation

/ Exploit Title - System Shield AntiVirus & AntiSpyware Arbitrary Write Privilege Escalation Date - 29th January 2018 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.iolo.com/ Tested Version - 5.0.0.136 Driver Version - 5.4.11.1 - amp.sys Tested on OS - 64bit Windows 7 and...

Cross site scripting

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser...

CVE-2017-2745

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser...

CVE-2017-2745

The CVE-2017-2745 entry concerns HP JetAdvantage Security Manager prior to version 3.0.1, which is susceptible to stored cross-site scripting (XSS). The vulnerability arises in the application’s handling of data in a way that could allow a malicious actor to inject and execute scripts in a user’s...

Keybase: Difference in query string parameter processing between Hacker News and Keybase Chrome extension spawns chat to incorrect user

Hello! When using the Keybase Chrome extension and viewing a Hacker News profile page with an additional id parameter in the query string, Hacker News uses the username from the first id parameter, whereas the Keybase extension uses the username from the second id parameter. Example URL:...

Wordpress newspro2891 theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress newspro2891 theme - Arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks dork : inurl:/wp-content/themes/newspro2891 Tested on : BackBox...

Crackas with Attitude’ hacker posed as CIA Chief to access secret data

By Carolina Remember the infamous Crackas with Attitude CWA hacking group? If This is a post from HackRead.com Read the original post: Crackas with Attitude hacker posed as CIA Chief to access secret data...

Our Analysis of 1,019 Phishing Kits

In recent years phishing activity has grown rapidly, with thousands of phishing sites popping for a virtual moment that last weeks, days or even hours, before becoming ineffective—either getting blacklisted by security providers, or brought down by internet providers and authorities, or in most...

CVE-2017-1000424

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...

CVE-2017-1000424

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...

December 28, 2017 – Morning Cyber Coffee Headlines – “Winter” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! December 28, 2017 - Headlines Carbon Black in the News: Security trends 2018:...

Uber Paid 20-Year-Old Florida Hacker $100,000 to Keep Data Breach Secret

Last year, Uber received an email from an anonymous person demanding money in exchange for the stolen user database. It turns out that a 20-year-old Florida man, with the help of another, breached Uber's system last year and was paid a huge amount by the company to destroy the data and keep the...