8) Your next wallet is a phone. Discuss.

Mobile payments have been going strong in countries like Japan and Finland for years now. In the U.S., however, its taken longer for mobile payments to get a hold on consumers. That’s all about to change. Late model mobile devices like Apple’s iPhone and Google Android-based phones now offer...

FBI Warns of Rising Smishing and Vishing Scams This Holiday Season

Social networking sites and search engines are expected to face increased cybercriminal activity this holiday season. However, the FBI is also warning consumers about two other significant threats: “smishing” and “vishing” scams. Both smishing and vishing are forms of phishing. Smishing involves...

Image of the Day: Fake Angry Birds Android App

Security researcher Jon Oberheide wrote a fake extension to the popular Angry Birds mobile game and put it in the Android Market as a demonstration of how an attacker could exploit a vulnerability he’d found in Android. The phony app didn’t do anything malicious, but it had permissions on Android...

New Android Bug Allows for Silent Malicious App Installation

There’s a weakness in the Android operating system that could enable an attacker to install a malicious third-party application on Android devices without the user’s knowledge. A researcher has developed a proof-of-concept app that’s in the Android Market now. Jon Oberheide, a security researcher...

Social-Engineer Toolkit v1.0 - Latest Version Download

The Social Engineer Toolkit SET has been updated to version 1.0! We wrote about the Social Engineer's Toolkit in our old post here. This release is called the Devolution Release. "The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the hum...

Zeus Variant Targets Mobile Online Banking Apps

Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...

Updated Android Trojan Pushed in SEO Attacks

Mobile attacks may have reached a tipping point, as researchers observe search engine optimization used to spread a malicious program for mobile devices running the Android operating system. One month after researchers first identified a Trojan horse program that targets mobile devices running...

iPhones, BlackBerrys, Droids Becoming a Moveable Feast for Attackers

Since at least the time of the iPhone’s introduction in 2007, mobile phones have been moving toward their inevitable evolutionary destiny of becoming full-on handheld computers, complete with complex operating systems, the ability to run multiple applications and store large amounts of data. And...

Like Windows Before It, Is Android Headed For a Fall?

By most measures, Google’s Android operating system for mobile devices has been a raging success. Since it was introduced in late 2007, Android has climbed quickly, replacing Research in Motion’s Blackberry as the top-ranked mobile phone operating system in the U.S. when measured by market share...

Joomla MySMS Shell Upload

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla commysms Upload Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.willcodejoomlaforfood.de/ Author : Sid3^effects aKa HaRi...

Joomla! Component MySMS - Arbitrary File Upload

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla commysms Upload Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.willcodejoomlaforfood.de/ Author : Sid3^effects aKa HaRi...

GSM SIM Utility 5.15 - .sms File Local Buffer Overflow (SEH)

GSM SIM Utility 5.15 - .sms File Local Buffer Overflow SEH Exploit Title : GSM SIM Utility sms file Local SEH BoF Date : June 28, 2010 Author : chap0 www.seek-truth.net Download Link : http://download.cnet.com/GSM-SIM-Utility/3000-185084-10396246.html?tag=mncol Version : 5.15 OS : Windows XP SP3...

ATM Skimming Technology Advances with SMS

Operating and planting an ATM skimmer can be a risky venture, because the crooks have to return to the scene of the crime to retrieve their skimmers along with the purloined data. Some criminals are now using ATM skimmers that eliminate much of that risk by relaying the information via text...

Directory traversal

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System SMS 2.6.10, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter to index.php. NOTE: some of these details are obtained from third party...

CVE-2010-2313

CVE-2010-2313 affects Anodyne SIMM Management System (SMS)

CVE-2010-2313: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System SMS 2.6.10, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter to index.php. NOTE: some of these details are obtained from third party...

SMS Crime Ring Busted in Malaysia

Malaysian cops have busted an alleged text message spam scam ring thought to have fleeced locals for hundreds of thousands of dollars. The group are suspected of raking in RM6.4m $1.9m between 2006 and April 2010 using fictitious lottery winnings as a bait for an advanced fee fraud. Read the full...

reVou Twiter Clone Beta 2.0 Cross Site Scripting / SQL Injection

Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888...

reVou twitter clne Beta 2.0 XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= reVou twitter clne Beta 2.0 XSS / SQL Injection Vulnerability ============================================================= Title:reVou twitter clne Beta 2.0 sqli and Xss...

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home ooooo .oooooo. oooooo oooooo oooo 888' d8...