Posts

WannaCry ransomware attack: Your ATM is safe for now,

Image
WannaCry ransomware attack: Your ATM is safe for now, say experts Bank ATMs across India might escape the WannaCry worm global attack that locks computers and demands a ransom, cyber security experts said on Monday. At least 80% of Indian ATMs operate on Windows XP and uses a firmware that limits the machine’s activities to bare basics such as dispensing cash on request and checking the account balance. Other activities are blacklisted, preventing a ransomware from attacking an ATM. Speculation swirled in India over the safety of ATMs after WannaCry crippled more than 200,000 computer systems across 150 countries since Friday. India’s cyber security agency alerted Internet users against the worm that locks down files of an infected computer and asks the user to pay a ransom of $300 in Bitcoin virtual currency to unlock the system. The worm takes advantage of a Windows vulnerability that Microsoft released a security patch for in March and computers that hadn’t upda...

It’s Not Over! WannaCry 2.0 Ransomware Arrives

Image
WannaCry Kill-Switch(ed)? It’s Not Over! WannaCry 2.0 Ransomware Arrives   Multiple security researchers have claimed that there are more samples of WannaCry out there, with different 'kill-switch' domains and without any kill-switch function, continuing to infect unpatched computers worldwide..  So far, over 237,000 computers across 99 countries around the world have been infected, and the infection is still rising even hours after the kill switch was triggered by the 22-years-old British security researcher behind the twitter handle ' MalwareTech .' For those unaware, WannaCry is an insanely fast-spreading ransomware malware that leverages a  Windows SMB exploit  to remotely target a computer running on unpatched or unsupported versions of Windows. Once infected, WannaCry also scans for other vulnerable computers connected to the same network, as well scans random hosts on the wider Internet, to spread quickly. The SMB exploit, currently being used by...

Bypass User Account Control

Image
New Tactic Used by Dridex Trojan to Bypass User Account Control Recently a campaign, Dridex distribution is leveraging a fresh UAC (User Account Control) bypass method, warns Flashpoint security researchers. First, this was discovered back in 2014,  Dridex  is considered as the successor of the GameOver ZeuS malware, as it often uses an improved version of GameOver ZeuS ’s peer-to-peer architecture in order to protect its (C&C) command and control server. Dridex emerged as one of most dangerous banking Trojan families present, still its recent activity has subsided compared to the levels seen in 2014 and 2015. Recently observed a small distribution campaign that is targeting the UK financial institutions which was characterized by the use of “previously-unobserved” Dridex UAC bypass which leverages recdisc.exe , which is a Windows default recovery disc executable. This malware was also observed while loading malicious code using impersonated...

Your Chrome, Safari, And Opera Browsers Might Be Leaking Your Private Information

Image
Your Chrome, Safari, And Opera Browsers Might Be Leaking Your Private Information The “helpful” autofill feature of your web browser also poses a big risk to your online security. A security researcher has uncovered a simple exploit that uses form fields hidden from the user to steal the personal information. While Chrome, Opera, and Safari are affected by this issue, Firefox remains immune. The users are advised to disable the autofill settings in their web browsers. We often praise the autofill features of our web browsers for saving us from all the troubles of typing the details like email address, passwords, address, phone numbers, etc. But, these features come along with some serious security risks too. A web developer and hacker named Viljami Kuosmanen  has found a flaw   that’s affecting different browsers and plugins. According to his revelation, web browsers like Google Chrome, Apple Safari, and Opera, and plugins like LastPass can be ex...

How Do Cyber Criminals Steal Your Money?

Image
Today is the world where people worry less about getting mugged on street and more on the internet. With the cyber security scams popping out daily, it clearly indicates the route modern thieves have taken. Not at a gun point or knife, your money is now being stolen with utter subtlety, where you don’t even recognize the theft until it is done. The security of even big commercial banks like J.P. Morgan and numerous financial institutions has been breached and millions of business and individual accounts have been compromised. It seems no armor can provide protection from these Cyber Attacks. What are Cyber Attacks? Am I vulnerable to Cyber Attacks? Cyber Attacks are the offensive gimmicks whose goal is to extract the personal or classified information from the targeted computer systems or networks. This information is later used to either steal or alter the specified data. On a larger scale, the attacks have the potential to become a threat to national security. These ...

C and c++ complete cheat tricks

Image
libraries #include input and output functions #include string related functions #include memory allocation, rand, and other functions #include math functions #include time related functions functions returnType functionName( input1Type input1Name, input2Type input2Name, …. ) { // do something return value; // value must be of type returnType } comments // one line comments this is a C++ style one line comment /* multiple line this is a traditional C style comment block comment */ variable types char holds a character, or a number from -128 to 127 (1 byte) bool holds a boolean value, either true or false (1 byte) int hold an integer (a positive or negative number with NO decimal, 4 bytes) float holds a real number (a positive or negative number with a decimal, 4 bytes) void no type, raw binary data conditionals A == B if A is equal to B, this is true; otherwise, it’s false A != B if A is NOT equal to B, this is true; otherwise, it’s false A < B if A...

Common Terms Of Hacking World:

Image
Common Terms Of Hacking World: 1#DDoS: DDoS  means Distributed Denial of Service. This is a type of DOS attack in which multiple compromised systems are used and these systems are often infected with a Trojan. All these infected systems select a target and cause a Denial of Service (DoS) attack. 2# VPS: It stands for Virtual private server (VPS) . It is a virtual machine that is sold as a service by an Internet hosting service. A VPS generally runs its own copy of an operating system, and the customers have superuser-level access to that operating system instance, so they can install almost any software that runs on that OS. 3# SE: Social engineering is an attack vector that relies heavily on human interaction and often involves tricking people into breaking normal security procedures. 4# HTTP: The Hypertext Transfer Protocol (HTTP) is an application protocol for  collaborative, distributed, hypermedia information systems. HTTP is the basis of data communication for th...