Hackers Behind Jaff Ransomware Selling Victims’ Data on Dark Web

By Jahanzaib Hassan The dark web marketplaces and undergrown marketplaces are full of vendors selling databases, weapons, illegal drugs and malicious software. Now security researchers have discovered yet another ransomware malware not only selling victims data but also selling them online...

“Good hackers” took over billboard to send security warning

By Waqas When it comes to taking advantage of vulnerabilities the WannaCry ransomware attack is the latest example of it where hackers used Server Message Block protocol SMB vulnerability in Windows OS and infected computers in more than 100 countries. But then some good guys do good things just...

Hack Department of Homeland Security Act Would Bring Bug Bounty Program to DHS

Hackers will soon be able to poke holes in networks and systems belonging to the Department of Homeland Security if four senators get their way and a bill is passed that would institute a DHS bug bounty similar to programs recently implemented for the Army, Air Force and Pentagon. The bill, known...

Who Are the Shadow Brokers?

In 2013, a mysterious group of hackers that calls itself the Shadow Brokers stole a few disks full of NSA secrets. Since last summer, they've been dumping these secrets on the Internet. They have publicly embarrassed the NSA and damaged its intelligence-gathering capabilities, while at the same...

Linguistic Analysis Suggests WannaCry Hackers Could be From Southern China

It’s been almost four weeks since the outcry of WannaCry ransomware, but the hackers behind the self-spread ransomware threat have not been identified yet. However, two weeks ago researchers at Google, Kaspersky Lab, Intezer and Symantec linked WannaCry to ‘Lazarus Group,’ a state-sponsored hacki...

Russian Hackers Made 'Tainted Leaks' a Thing — Phishing to Propaganda

We came across so many revelations of sensitive government and corporate data on the Internet these days, but what's the accuracy of that information leaked by unknown actors? Security researchers have discovered new evidence of one such sophisticated global espionage and disinformation campaign...

Russian Hackers Are Using ‘Tainted’ Leaks to Sow Disinformation

A group of security researchers present the most systematic analysis yet showing Russian hackers mix fakes in with their hacked revelations. The post Russian Hackers Are Using 'Tainted' Leaks to Sow Disinformation appeared first on WIRED...

Alex Guestbook 5.0.4 Cross Site Scripting

Exploit Title: Alex Guestbook Version 5.0.4 - Cross Site Scripting Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : http://www.alexguestbook.net/ Home : http://persian-team.ir/ Google Dork : inurl:alexguestbook3 Telegram Channel: @PersianHackTeam Teste...

Joomla VideoFlow 1.2.0 SQL Injection

Exploit Title: Joomla VideoFlow 1.2.0 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/videoflow/ My Home : http://persian-team.ir/ Google Dork :...

Open Source Hackers Tool Belt: Pybelt

Open Source Hackers Tool Belt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type verification tool Proxy finding tool XSS scanner It is capable of cracking hashes without prior knowledge of the algorithm, scanning por...

Cyber Crime Gang Arrested for Infecting Over 1 Million Phones with Banking Trojan

The Russian Interior Ministry announced on Monday the arrest of 20 individuals from a major cybercriminal gang that had stolen nearly $900,000 from bank accounts after infecting over one million Android smartphones with a mobile Trojan called "CronBot." Russian Interior Ministry representative Ri...

Challenges with Critical Infrastructure: IoT, Smart Cities Under Attack

Internet of Things technology is now more widespread than many people realize. Systems that fall under the IoT umbrella are popping up in an array of settings, even outside consumer circles. Today, every group from enterprise businesses to city governments is utilizing intelligent, internet- and...

Hackers Are Trying to Reignite WannaCry With Nonstop Botnet Attacks

The "sinkhole" domain that's held the ransomware in check is coming under repeated denial-of-service attacks. The post Hackers Are Trying to Reignite WannaCry With Nonstop Botnet Attacks appeared first on WIRED...

The next“eternal blue”6 months? Shadow Brokers organization announced that it will open more 0day vulnerabilities it! - Vulnerability warning-the black bar safety net

! 5 month 12 days late, a WannaCry worms ransomware attacks in the global network, which is considered by far the most huge extortion payment activities, the impact to nearly a hundred countries and thousands of businesses and public organizations. This virus is the use of“N. S. A. arms Gallery”i...

Beware! Hackers Can Steal Your Windows Password Remotely Using Chrome

A security researcher has discovered a serious vulnerability in the default configuration of the latest version of Google's Chrome running on any version of Microsoft's Windows operating system, including Windows 10, that could allow remote hackers to steal user's login credentials. Researcher...

The WannaCry Ransomware Has a Link to Suspected North Korean Hackers

A Google researcher has identified a telltale chunk of code shared between the ransomware and malware used by suspected DPRK hackers. The post The WannaCry Ransomware Has a Link to Suspected North Korean Hackers appeared first on WIRED...

The WannaCry Ransomware Hackers Made Some Real Amateur Mistakes

Researchers say the worst ransomware epidemic ever is also poorly run, shoddily coded, and barely profitable. The post The WannaCry Ransomware Hackers Made Some Real Amateur Mistakes appeared first on WIRED...

0-Day Flaws in Vanilla Forums Let Remote Attackers Hack Websites

A security researcher has publicly disclosed two critical zero-day vulnerabilities in Vanilla Forums, an open source software that powers discussion on over 500,000 websites, which could allow unauthenticated, remote attackers to fully compromise targeted websites easily. Discovered by Polish...

Three Chinese Hackers Fined $9 Million for Stealing Trade Secrets

Hackers won't be spared. Three Chinese hackers have been ordered to pay $8.8 million £6.8 million after hacking email servers of two major New York-based law firms to steal corporate merger plans in December 2016 and used them to trade stocks. The U.S. District Judge Valerie Caproni in Manhattan...

PT-2017-10460

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold, 1511, 1607, and 1703 Windows Server 2016 Description An...