Showing posts with label Hack. Show all posts
Showing posts with label Hack. Show all posts

Tuesday, March 31, 2009

Huge China based computer ring broke into computers worldwide

For the past several years, there has been an active discussion among researches about the impact that a sustained attack on the computer infrastructure of developed countries could achieve. With modern infrastructures such as electricity, water, transport, finance, etc all being controlled through computational technologies, there is a persisting fear that all of this infrastructure is under threat from any clever band of cyber attackers. Modern military games incorporate threats by hackers who are affiliated to sovereign countries, and in many cases, it is claimed that developing the ability to bring down the computer networks of other countries is part of the game plan for offensive action. In the past, it has been feared that countries such as China and Russia have developed capabilities for offensive cyber-warfare.
Consider this case where a computer network, based in China, and dubbed as the 'GhostNet' by a team of Canadian researches turned up a huge network based on computers located in China; these computers were the initiators of hacking attempts that broke into computers all over the world; this probe was based on a need by the Dalai Lama office in India to ensure that its own computers were not infected (link to article):


In "Tracking GhostNet: Investigating a Cyber Espionage Network," issued over the weekend, the Canadian researchers say that the GhostNet comprises 1,295 infected computers in 103 countries, almost one third of them being "high-value targets, including ministries of foreign affairs, embassies, international organizations, news media, and NGOs."
The breaches tended to stem from a so-called social-engineering exploit, in which targets in the Tibetan community were sent an e-mail that appeared to be from the address campaigns@freetibet.org and that carried an attached Word document titled "Translation of Freedom Movement ID Book for Tibetans in Exile"--and that Word document was infected with the malicious code. The University of Cambridge report, "The snooping dragon: social-malware surveillance of the Tibetan movement," doesn't refrain from charging that the Chinese government was directing malware attacks: "(I)t was a targeted surveillance attack designed to collect actionable intelligence for use by the police and security services of a repressive state, with potentially fatal consequences for those exposed."


These incidents are also warnings to Governments about how their infrastructural systems are only as strong as their weakest links. One node in the system getting hacked can lead into other nodes also falling, and lead to a risk that the entire system is being compromised. In the current system, it was also found that the exploit had the powers to turn on the voice recording and the camera systems of the infected computer, leading to a spying of the proceedings happening in front of the computer.

Wednesday, January 7, 2009

Twitter hacked

Twitter is a service that has become tremendously popular, that too, within a very short period of time. The ability to post micro-blogging type messages (restricted to 140 characters) and for others being able to read them through a variety of means (SMS, RSS, via the Twitter site, email, or through specialist applications) made the usage of Twitter even more popular. With such a popular site, one can only imagine the number of attempts that would be made to hack into such a service, and it happened - the Twitter sites of many celebrities where hacked through the compromising of some internal Twitter administration tools:


Members of the online forum Digital Gangster may have been behind yesterday's Twitter hack. On Monday, hackers gained access to, and posted messages from, 33 Twitter accounts including those of Bill O'Reilly, Britney Spear and CNN's Rick Sanchez. According to this thread, a hacker named GMZ gained access to Twitter login information and then posted a different thread--that has since been removed--calling on other DG members to email him for credentials to individual accounts. At least another four members then claim to have been part of yesterday's Twitter hack.
The hack included several prank posts from Twitter users such as Fox News, Facebook and president-elect Barack Obama. The strange thing about some of these messages is that they included affiliate links--a common marketing program that pays the creator of the link for driving traffic to another Web site such as Amazon--according to reports. That may make finding the culprits easier as the affiliate programs in question should have a virtual paper trail leading back to the payee


No matter who did this, the hacking of Twitter (and not much apparent concern from users about this) is a reminder that security on the internet can be compromised; revealing personal details on the internet comes with a certain amount of risk.

Friday, November 2, 2007

The Mac gets hit with a virus

For years, nay decades, Mac users have claimed that it is poor security prone OS's like Windows that suffer security issues, with regular patching and virus protection needed, and comparatively, Mac's are much more secure. Windows users and people from Microsoft have always countered that Windows is the pre-dominant OS sold, and with the low percentage of Mac users, hackers have not really concentrated on the Mac.
For what seems to be the first time, a Trojan has been found that is made for the Mac and infects it. The Trojan is a file made to look like a video codec, but is instead a piece of malware that will infect the Mac.


The first-ever "fake codec" Trojan malware for the Apple Macintosh was identified yesterday by Intego, a maker of Internet security software for the Mac.
A fake codec pretends to be a free video codec -- often it's posted on a pornography site -- to fool victims into downloading it. It's not a video codec at all, however. Rather, it's a piece of malware intended to compromise the victim's machine. Although there are many Microsoft Windows-based fake-codec Trojans posted on porn Web sites today, Intego's find is thought to be the first Macintosh-based fake codec.


As the Mac grows more popular after the shift of the platform to the Intel chip, it is likely that now hackers will start to pay more attention to the Mac, and to find out security holes.

Sunday, September 30, 2007

Apple starts disabling hacked iPhones

After the release of the iPhone, there was some consternation over the non-release of the iPhone outside the United States; it was speculated that hacked copies of the iPhone would be available outside the United States and that this was a natural occurrence. Apple would not be able to do anything about this. Well, looks like the design of Apple's engineers had actually planned for this. So, the latest firmware update to the iPhone has actually disabled the iPhone, apparently permanently for those people who have hacked iPhones. But is this the last statement on this matter ?


The iPhone 1.1.1 update, released Thursday, breaks phones that have been hacked so that they work with providers other than AT&T Inc., the only U.S. provider Apple has allowed to carry its mobile phones. Apple has said that it would fight any attempts to unlock the iPhone. Earlier this week the company released a warning that unlocked iPhones "will likely result in the modified iPhone becoming permanently inoperable when a future Apple-supplied iPhone software update is installed."
The new software is Apple's biggest iPhone update to date, and it fixes a number of security flaws in the mobile phone's browser, mail client and Bluetooth networking server. The majority of the flaws do not appear to be critical, but the update fixes a larger number of bugs than the first iPhone update, released July 31.
Mobile phone users typically cannot update their own software, but Apple introduced this capability in the iPhone, which uses the update mechanism in the phone's iTunes music player. iTunes checks for these updates once per week, so it may take up to seven days for all iPhone users to see these updates. Apple advises users to install the update immediately.


Now, while this patch fixes bugs in the iPhone and should be installed by users, it is unlikely that the hacker community will accept this matter as a fait accompli. It's a gauntlet that Apple has thrown to the hacker community, and with the hacks spawning a new business, there is a major commercial angle to it. Thus, it is likely that hackers will now start to put their creative thoughts on how to defeat this latest attempt by Apple.