Poison Ivy RAT Spotted in Three New China Attacks

The Poison Ivy remote access Trojan may be old, but it’s not losing favor with nation states that continue to make it the center piece of targeted attacks. Three groups of hackers, reportedly all with ties to China and possibly related in terms of their funding and training, are currently managin...

Google WebLogin Tokens Expose Google Apps, User Data

An exposure in the way Google handles authentication is an illustration of the unintended consequences of trading security for a little bit of convenience. Craig Young, a researcher from security company Tripwire, demonstrated at Def Con over the weekend how an Android single sign-on token known ...

Web security hacks dominate Black Hat USA 2013

The security of the Web is looking a little like Al Bundy right about now look it up kids. Granted Black Hat is fresh on our minds and you always come away from that event less willing to use the Internet, but this year seemed especially bad in terms of new attacks—or new twists on old attacks—th...

BREACH Compression Attack Steals HTTPS Response Secrets

A serious attack against ciphertext secrets buried inside HTTPS responses has prompted an advisory from Homeland Security. The BREACH attack is an offshoot of CRIME, which was thought dead and buried after it was disclosed in September. Released at last week’s Black Hat USA 2013, BREACH enables a...

Russian Hackers charged for stealing 160 million Credit Cards

A Group of Hackers, Four Russians and a Ukrainian allegedly broke computer networks of more than a dozen major American and international corporations and stole 160 million credit card numbers over the course of seven years, the largest data theft case ever prosecuted in the U.S. They are accused...

Hacking Ring Steals $300 Million, 160 Million Card Numbers

The U.S. Attorney’s Office in the District of New Jersey is expected to further discuss charges today against five hackers who allegedly stole at least 160 million credit and debit card numbers and netted more than $300 million over the course of seven years in what could be the largest cybercrim...

Russian Hackers charged for stealing 160 million Credit Cards

A Group of Hackers, Four Russians and a Ukrainian allegedly broke computer networks of more than a dozen major American and international corporations and stole 160 million credit card numbers over the course of seven years, the largest data theft case ever prosecuted in the U.S. They are accused...

Massive Database from Tango messenger server hacked by Syrian Electronic Army

Syrian Electronic Army SEA, hacking group known for cyber attacks against the anti-Syrian websites, has claimed that it has hacked the website of messaging application, Tango tango.me, that includes hundreds of millions of electronic and voice data over the Internet. Hacker group tweeted a messag...

WordPress Plugin miniBB - SQL Injection Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin miniBB - SQL Injection Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/61116/info miniBB is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal...

Android vulnerability allows hackers to modify apps without breaking signatures

Almost all Android handsets are vulnerable to a flaw that could allow hackers to seize control of a device to make calls, send texts, or build a mobile botnet, has been uncovered by Bluebox Security .i.e almost 900 million Android devices globally. Or simply, The Flaw allow hackers to modify any...

Android vulnerability allows hackers to modify apps without breaking signatures

Almost all Android handsets are vulnerable to a flaw that could allow hackers to seize control of a device to make calls, send texts, or build a mobile botnet, has been uncovered by Bluebox Security .i.e almost 900 million Android devices globally. Or simply, The Flaw allow hackers to modify any...

Want to be the Part of History? Just be a part of E-HACK

E-HACK is an Information Security Workshop, organized by infySEC. The workshop aims at creating awareness about INFORMATION SECURITY by showing in what all ways information or data can be stolen. Meddle in cyber-warfare, battle with our machine master mind who will throw challenges on web...

Opera Hack, Certificate Theft Redirects Thousands to Malware

Several thousand Opera users may have been presented with script redirecting them to a server hosting malware as a result of a hack of the Opera network and theft of a code-signing certificate. A new version of the browser is available and Opera representatives urge users to update as soon as...

CareerBuilder man in the browser attack

No one can say that hackers don’t have a sense of irony. In search of money mules, attackers behind a variant of the Zeus Trojan have configured the malware to activate when users visit careerbuilder.com with code that redirects victims to an advertisement for a mule-recruitment website...

China Accuses America of Hacking

The predominant narrative among U.S. officials and security experts is that Chinese hackers, allegedly at the behest of their government, are thoroughly compromising the computer networks of American government, defense, and public sector organizations in order to steal any valuable data. What yo...

KRBanker Malware Targeting Korean Financial Institutions

A recently discovered piece of malware called KRBanker Korea + Banker = KRBanker , targeting mostly online end-users at Korean financial institutions. According to nProtect, now an invasive banking Trojan, the new and improved KRBanker can block anti-virus software, security websites and even oth...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8578)

Mozilla Firefox has been updated to the 17.0.6ESR security release. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and...

First Large Cyber Espionage Activity against Pakistan Emanating From India

Cyber Security researchers have discovered a family of information stealing malware targeting Pakistan that originates out of India. Norman Shark, the global security leader in malware analysis solutions for enterprises, service providers and government, today released a report detailing a large...

Set sail communication corporate website CMS system v1. 9 vulnerability 0day-vulnerability warning-the black bar safety net

sql injectionvulnerability 0day News Page Specific EXP is: javascript:alertdocument. cookie=”id=”+escape“2 2 0 union select 1,username,password,4,5,6,7,8,9,1 0 from admin”;...

Spyware Campaign Originating in India Targeting Pakistanis

A new malware campaign has been hitting Pakistan hard over the last few months and after a little e-sleuthing, it appears the not-so-stealthy attacks have been originating from nearby India and exploiting a certificate to run its binaries. Security firm Eset has a full rundown of the campaign tod...