Threat Wire

Snowden’s New Security System; Browsing Tracked By Login Forms - ThreatWire

shannonmorse — Tue, 02 Jan 2018 16:57:00 -0800

Your browsing data could be tracked by login forms, Forever21 got hacked, and Snowden released his very own mobile security system. All that coming up now on ThreatWire.

-------------------------------
Shop: http://www.hakshop.com
Support: http://www.patreon.com/threatwire
Subscribe: http://www.youtube.com/hak5
Our Site: http://www.hak5.org
Contact Us: http://www.twitter.com/hak5
Threat Wire RSS: https://shannonmorse.podbean.com/feed/
Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999
Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ
------------------------------

Las Vegas CES Meetup details!
https://twitter.com/Snubs/status/948252554017652736

Links:
https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/
https://www.theverge.com/2017/12/30/16829804/browser-password-manager-adthink-princeton-research
https://webtransparency.cs.princeton.edu/no_boundaries/autofill_sites.html

https://www.cnet.com/news/forever-21-confirms-hack-payment-system/
https://newsroom.forever21.com/releases/notice-of-payment-card-security-incident
https://www.forever21.com/protecting_our_customers/default.aspx

https://guardianproject.github.io/haven/
https://twitter.com/Snubs/status/944229264856985601
https://www.wired.com/story/snowden-haven-app-turns-phone-into-home-security-system/
https://freedom.press/news/introducing-haven-open-source-security-system-your-pocket/

Youtube Thumbnail credit:
https://c2.staticflickr.com/4/3870/14977198417_7fcd885fdd_b.jpg

The Biggest Hacks of 2017 - ThreatWire

shannonmorse — Tue, 26 Dec 2017 09:00:00 -0800

The biggest, baddest, worst hacks and vulnerabilities of 2017! All that coming up now on ThreatWire.
-------------------------------
Shop: http://www.hakshop.com
Support: http://www.patreon.com/threatwire
Subscribe: http://www.youtube.com/hak5
Our Site: http://www.hak5.org
Contact Us: http://www.twitter.com/hak5
Threat Wire RSS: https://shannonmorse.podbean.com/feed/
Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999
Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ
------------------------------

Yahoo:
https://motherboard.vice.com/en_us/article/8x8b4x/whoops-yahoo-says-2013-hack-actually-hit-3-billion-users
https://www.oath.com/press/yahoo-provides-notice-to-additional-users-affected-by-previously/
https://krebsonsecurity.com/2017/10/fear-not-you-too-are-a-cybercrime-victim/

WannaCry:
https://www.troyhunt.com/everything-you-need-to-know-about-the-wannacrypt-ransomware/
http://blog.talosintelligence.com/2017/05/wannacry.html
https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html
https://www.documentcloud.org/documents/3912524-Kronos-Indictment-R.html
https://www.wsj.com/articles/its-official-north-korea-is-behind-wannacry-1513642537?shareToken=st2d38565d59c24132b421a4b03edb68b5&reflink=article_email_share
https://www.washingtonpost.com/world/national-security/us-set-to-declare-north-korea-carried-out-massive-wannacry-cyber-attack/2017/12/18/509deb1c-e446-11e7-a65d-1ac0fd7f097e_story.html?utm_term=.7c8cb1e154dd

KRACK:
https://www.krackattacks.com/
https://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=228519&SearchOrder=4
https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/

198 Million Voter Data:
http://www.securityweek.com/republican-contractor-exposes-details-198-million-american-voters
https://www.upguard.com/breaches/the-rnc-files
https://gizmodo.com/gop-data-firm-accidentally-leaks-personal-details-of-ne-1796211612

Equifax:
https://arstechnica.com/information-technology/2017/09/equifax-website-hack-exposes-data-for-143-million-us-consumers/
https://threatpost.com/equifax-confirms-march-struts-vulnerability-behind-breach/127975/
https://arstechnica.com/information-technology/2017/09/massive-equifax-breach-caused-by-failure-to-patch-two-month-old-bug/
https://www.bloomberg.com/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack
https://www.equifaxsecurity2017.com/
https://arstechnica.com/information-technology/2017/09/equifax-directs-breach-victims-to-fake-notification-site/

Youtube Thumbnail credit:
https://www.simplilearn.com/ice9/free_resources_article_thumb/roles-of-ethical-hacker-article.jpg

Triton Malware Threatens Lives & The Net Neutrality Repeal - A History - Threat Wire

shannonmorse — Tue, 19 Dec 2017 12:54:19 -0800

A history of ISP regulations, new malware is infecting industrial control systems, and three men plead guilty in the Mirai botnet case. All that coming up now on ThreatWire.

Links:
Net Neutrality Is Canned
http://www.zdnet.com/article/fcc-votes-to-repeal-obama-era-net-neutrality-rules/
https://thehackernews.com/2017/12/fcc-net-neutrality-rules.html
https://www.king.senate.gov/imo/media/doc/NN%2012-14.pdf
https://www.doj.state.or.us/wp-content/uploads/2017/12/ag_letter_12-13-2017.pdf
http://phrack.org/issues/7/3.html
https://www.internetvoices.org/blog/2017/04/25/net-neutrality-violations-brief-history
https://arstechnica.com/information-technology/2017/05/title-ii-hasnt-hurt-network-investment-according-to-the-isps-themselves/
https://arstechnica.com/tech-policy/2017/12/dead-people-among-millions-impersonated-in-fake-net-neutrality-comments/
https://arstechnica.com/tech-policy/2017/11/comcast-deleted-net-neutrality-pledge-the-same-day-fcc-announced-repeal/
http://www.nytimes.com/2005/06/28/technology/cable-wins-internetaccess-ruling.html?_r=1

TRITON:
https://www.fireeye.com/blog/threat-research/2017/12/attackers-deploy-new-ics-attack-framework-triton.html
https://www.wired.com/story/triton-malware-targets-industrial-safety-systems-in-the-middle-east/
https://thehackernews.com/2017/12/triton-ics-scada-malware.html
https://arstechnica.com/information-technology/2017/12/game-changing-attack-on-critical-infrastructure-site-causes-outage/
https://dragos.com/blog/trisis/TRISIS-01.pdf

Mirai:
https://thehackernews.com/2017/12/hacker-ddos-mirai-botnet.html
https://www.cnet.com/news/mirai-botnet-hacker-behind-2016-web-outage-pleads-guilty/
https://www.justice.gov/opa/pr/justice-department-announces-charges-and-guilty-pleas-three-computer-crime-cases-involving
https://krebsonsecurity.com/2017/12/mirai-iot-botnet-co-authors-plead-guilty/

Youtube Thumbnail credit:
https://cdn.pixabay.com/photo/2017/06/17/11/39/power-plant-2411932_960_720.jpg

A Dormant HP Keylogger Found, Uber Pays Ransom - ThreatWire

shannonmorse — Wed, 13 Dec 2017 17:00:00 -0800

Keyloggers were found in Wordpress and HP, mobile apps have all sorts of vulnerabilities, and Uber is hiding behind bug bounties? All that coming up now on ThreatWire. All that coming up now on ThreatWire.

Links:

Keyloggers:

https://thehackernews.com/2017/12/hp-laptop-keylogger.html

https://twitter.com/zwclose/status/938354516285706240

http://www.zdnet.com/article/keylogger-uncovered-on-hundreds-of-hp-pcs/

https://zwclose.github.io/HP-keylogger/

https://support.hp.com/us-en/document/c05827409

https://www.virustotal.com/#/file/706d3dbe8c7f217e3bb10c359bfa8b69c8ab107e3be69e3c00acaaf0a4c32e5d/detection

http://www.securityweek.com/dormant-keylogging-functionality-found-hp-laptops

https://www.hackread.com/more-than-5000-wordpress-website-plagued-with-keylogger/

https://blog.sucuri.net/2017/12/cloudflare-solutions-keylogger-on-thousands-of-infected-wordpress-sites.html

Mobile Apps:

https://thehackernews.com/2017/12/android-malware-signature.html

http://www.securityweek.com/vulnerability-allows-modification-signed-android-apps

https://threatpost.com/android-flaw-poisons-signed-apps-with-malicious-code/129118/

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13156

https://www.guardsquare.com/en/blog/new-android-vulnerability-allows-attackers-modify-apps-without-affecting-their-signatures

https://thehackernews.com/2017/12/mitm-ssl-pinning-hostname.html

http://www.cs.bham.ac.uk/~garciaf/publications/spinner.pdf

https://threatpost.com/banking-apps-found-vulnerable-to-mitm-attacks/129105/

Uber:

https://thehackernews.com/2017/12/uber-hacker.html

https://www.cnet.com/news/florida-man-20-reportedly-behind-massive-hack-at-uber/

https://www.cnet.com/news/uber-hack-ftc-settlement-data-privacy-security/

https://arstechnica.com/information-technology/2017/12/uber-used-bug-bounty-program-to-launder-blackmail-payment-to-hacker/

https://www.reuters.com/article/us-uber-cyber-payment-exclusive/exclusive-uber-paid-20-year-old-florida-man-to-keep-data-breach-secret-sources-idUSKBN1E101C?feedType=RSS&feedName=technologyNews&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+reuters%2FtechnologyNews+%28Reuters+Technology+News%29

Youtube Thumbnail credit:

https://static.pexels.com/photos/230324/pexels-photo-230324.jpeg

Do We Need Net Neutrality? - ThreatWire

shannonmorse — Tue, 05 Dec 2017 17:15:00 -0800

Let’s talk about Net neutrality! Again… Cryptocurrency updates, and Cellphone Tracking Without a Warrant? All that coming up now on ThreatWire.

Cryptocurrency
https://thehackernews.com/2017/11/cryptocurrency-mining-javascript.html
https://blog.malwarebytes.com/cybercrime/2017/11/persistent-drive-by-cryptomining-coming-to-a-browser-near-you/
https://motherboard.vice.com/en_us/article/ywnmkk/coinbase-irs-14000-bitcoin-tax
https://www.scribd.com/document/365893210/US-v-Coinbase-order?irgwc=1&content=10079&campaign=Skimbit%2C%20Ltd.&ad_group=66960X1514734Xf98090d6fa5931ea07eb790a7c503175&keyword=ft750noi&source=impactradius&medium=affiliate#from_embed
https://medium.com/@barmstrong/coinbase-and-the-irs-c4e2e386e0cf

Net Neutrality
https://arstechnica.com/tech-policy/2017/11/rip-net-neutrality-fcc-chair-releases-plan-to-deregulate-isps/
https://arstechnica.com/information-technology/2017/05/title-ii-hasnt-hurt-network-investment-according-to-the-isps-themselves/
https://www.freepress.net/sites/default/files/resources/internet-access-and-online-video-markets-are-thriving-in-title-II-era.pdf
https://transition.fcc.gov/Daily_Releases/Daily_Business/2017/db1121/DOC-347868A1.pdf
http://www.emprata.com/reports/fcc-restoring-internet-freedom-docket/
https://transition.fcc.gov/Daily_Releases/Daily_Business/2017/db1122/DOC-347927A1.pdf
https://apps.fcc.gov/edocs_public/attachmatch/FCC-17-60A1.pdf
https://arstechnica.com/tech-policy/2017/11/comcast-deleted-net-neutrality-pledge-the-same-day-fcc-announced-repeal/
https://arstechnica.com/tech-policy/2017/11/comcast-throttling-bittorrent-was-no-big-deal-fcc-says/
https://arstechnica.com/tech-policy/2017/12/att-says-it-never-blocked-apps-fails-to-mention-how-it-blocked-facetime/

https://theintercept.com/2017/11/29/supreme-court-cellphone-location-tracking-privacy/
https://www.theverge.com/2017/11/29/16715562/supreme-court-privacy-laws-carpenter-v-united-states
https://en.wikipedia.org/wiki/Carpenter_v._United_States

Youtube Thumbnail credit:
https://c1.staticflickr.com/9/8638/16101591183_649c703078_b.jpg

State Net Neutrality Laws? Not If ISPs Have a Say - ThreatWire

shannonmorse — Tue, 07 Nov 2017 09:36:00 -0800

ISPs are getting worked up about state net neutrality rules, Tor browser had a bug, but Onion services are getting updated! And the big tech companies testify in court. All that coming up now on ThreatWire.

https://www.hak5.org/contest
https://www.hak5.org/jobs

-------------------------------
Shop: http://www.hakshop.com
Support: http://www.patreon.com/threatwire
Subscribe: http://www.youtube.com/hak5
Our Site: http://www.hak5.org
Contact Us: http://www.twitter.com/hak5
Threat Wire RSS: https://shannonmorse.podbean.com/feed/
Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999
Help us with Translations! http://www.youtube.com/timedtext_cs_panel? tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ
------------------------------

http://www.zdnet.com/article/what-we-learned-facebook-twitter-google-testified-senate-in-russia-probe/
https://www.documentcloud.org/documents/4164794-Facebook-testimony-to-Senate-Judiciary-Committee.html
https://www.documentcloud.org/documents/4164788-Twitter-testimony-to-Senate-Judiciary-Committee.html
http://www.businessinsider.com/one-sentence-from-the-senates-social-media-hearing-should-terrify-google-facebook-and-twitter-2017-10
http://www.businessinsider.com/russia-tech-hearings-2017-11
https://www.cnet.com/news/facebook-twitter-google-aim-to-dodge-regulators-by-regulating-themselves-zuckerberg/
https://www.cnet.com/news/russian-backed-election-content-reached-126m-on-facebook/
https://www.cnet.com/videos/social-media-giants-testify-before-tech-hearings/

https://arstechnica.com/information-technology/2017/11/critical-tor-flaw-leaks-users-real-ip-address-update-now/
https://www.wearesegment.com/news/the-tormoil-bug-torbrowser-critical-security-vulnerability/
https://blog.torproject.org/tor-browser-709-released
https://blog.torproject.org/tor-browser-75a7-released
https://threatpost.com/tor-browser-users-urged-to-patch-critical-tormoil-vulnerability/128769/
https://thehackernews.com/2017/11/tor-onion-service.html
https://blog.torproject.org/tors-fall-harvest-next-generation-onion-services
https://blog.torproject.org/tor-0321-alpha-released-support-next-gen-onion-services-and-kist-scheduler

https://arstechnica.com/tech-policy/2017/11/comcast-asks-the-fcc-to-prohibit-states-from-enforcing-net-neutrality/
https://arstechnica.com/tech-policy/2014/01/net-neutrality-is-half-dead-court-strikes-down-fccs-anti-blocking-rules/
https://ecfsapi.fcc.gov/file/1102951806926/Comcast%20OI%20ex%20parte%2011-1-17.pdf
https://www.cadc.uscourts.gov/internet/opinions.nsf/3AF8B4D938CDEEA685257C6000532062/$file/11-1355-1474943.pdf
https://motherboard.vice.com/en_us/article/7x4wmy/verizon-fcc-state-privacy-laws-letter
https://ecfsapi.fcc.gov/file/1025134031053/2017%2010%2025%20Verizon%20FCC%20Preemption%20White%20Paper%2017-108.pdf
https://arstechnica.com/tech-policy/2017/11/comcast-has-a-lot-to-lose-if-municipal-broadband-takes-off/

Youtube Thumbnail credit:
https://i.vimeocdn.com/video/641313984_1280x720.jpg

Bad Rabbit Ransomware Spreads with NSA EternalRomance- ThreatWire

shannonmorse — Tue, 31 Oct 2017 09:00:00 -0800

Bad Rabbit Ransomware Spreads, Sensitive Airport Docs about the Queen were Found on USB Drive, and Google plans to remove HTTP public key pinning. All that coming up now on ThreatWire.

https://www.hak5.org/contest

https://msdn.microsoft.com/en-us/library/aa826517(v=vs.85).aspx
http://blog.talosintelligence.com/2017/10/bad-rabbit.html?m=1#more
http://www.zdnet.com/article/bad-rabbit-ransomware-spread-using-leaked-nsa-eternalromance-exploit-researchers-confirm/
https://arstechnica.com/information-technology/2017/10/bad-rabbit-used-nsa-eternalromance-exploit-to-spread-researchers-say/
https://thehackernews.com/2017/10/bad-rabbit-ransomware.html
https://threatpost.com/badrabbit-ransomware-attacks-hitting-russia-ukraine/128593/

http://www.mirror.co.uk/news/uk-news/terror-threat-heathrow-airport-security-11428132
https://arstechnica.com/information-technology/2017/10/man-finds-usb-stick-with-heathrow-security-plans-queens-travel-details/
https://www.cnet.com/news/usb-stick-detailing-heathrow-airport-security-found-in-london-street/

https://threatpost.com/google-to-ditch-public-key-pinning-in-chrome/128679/
http://www.zdnet.com/article/google-chrome-is-backing-away-from-public-key-pinning-and-heres-why/
https://tools.ietf.org/html/rfc7469
https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/he9tr7p3rZ8/eNMwKPmUBAAJ

Youtube Thumbnail credit:
https://upload.wikimedia.org/wikipedia/commons/a/a5/European_Rabbit%2C_Lake_District%2C_UK_-_August_2011.jpg

Google Security Gets Serious, New IoT Botnet On The Loose - ThreatWire

shannonmorse — Tue, 24 Oct 2017 09:04:00 -0800

Google announces all sorts of security updates, a few updates on the KRACK attack, and a new IoT botnet has already infected millions. All that coming up now on ThreatWire. Today on ThreatWire.

https://www.youtube.com/tekthing

https://thehackernews.com/2017/10/google-advanced-protection.html
https://www.blog.google/topics/safety-security/googles-strongest-security-those-who-need-it-most/
https://landing.google.com/advancedprotection/
https://www.blog.google/products/chrome/cleaner-safer-web-chrome-cleanup/
https://motherboard.vice.com/en_us/article/kz74ym/google-gmail-advanced-protection-security-keys-yubikey
https://www.bleepingcomputer.com/news/google/google-testing-android-feature-to-hide-dns-requests/
Dessymatrix
https://tools.ietf.org/html/rfc7858
https://www.xda-developers.com/android-dns-over-tls-website-privacy/

https://www.krackattacks.com/
https://www.cnet.com/news/krack-wi-fi-attack-patch-how-microsoft-apple-google-responding/
https://www.cnet.com/how-to/krack-affects-everyone-heres-what-to-do-now/
https://krebsonsecurity.com/2017/10/what-you-should-know-about-the-krack-wifi-security-weakness/

https://www.wired.com/story/reaper-iot-botnet-infected-million-networks/
https://thehackernews.com/2017/10/iot-botnet-malware-attack.html
http://blog.netlab.360.com/iot_reaper-a-rappid-spreading-new-iot-botnet-en/
https://research.checkpoint.com/new-iot-botnet-storm-coming/

Youtube Thumbnail credit:
https://c1.staticflickr.com/9/8487/8250657417_d7f14a62c4_b.jpg

WPA2 Wi-Fi Vulnerable to KRACK Hack; RSA Keys Broken - ThreatWire

shannonmorse — Tue, 17 Oct 2017 10:00:00 -0800

Krack is bad for WiFi, Equifax loses their IRS contract, and an RSA crypto key is vulnerable to being reverse engineered. Today on ThreatWire.

https://www.krackattacks.com/
https://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=228519&SearchOrder=4
https://github.com/kristate/krackinfo
https://www.wired.com/story/krack-wi-fi-wpa2-vulnerability/
https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/
http://www.zdnet.com/article/here-is-every-patch-for-krack-wi-fi-attack-available-right-now/
https://www.theverge.com/2017/10/16/16481818/wi-fi-attack-response-security-patches

https://threatpost.com/equifax-takes-down-compromised-page-redirecting-to-adware-download/128406/
https://krebsonsecurity.com/2017/10/equifax-credit-assistance-site-served-spyware/
https://www.cnet.com/news/equifax-website-ads-served-adware-malware-expert-finds/
https://randy-abrams.blogspot.com/2017/10/new-equifax-website-compromise.html
https://www.cnet.com/news/irs-reportedly-suspends-7-2-million-equifax-contract/
https://arstechnica.com/tech-policy/2017/10/after-second-bungle-irs-suspends-equifaxs-taxpayer-identity-contract/

https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/
https://en.wikipedia.org/wiki/Coppersmith%27s_attack
https://www.yubico.com/keycheck/
https://keychest.net/roca

Youtube Thumbnail credit:
https://static.pexels.com/photos/7101/wood-coffee-iphone-notebook.jpg

3 Billion Yahoo Accounts Hacked; Disqus Hacked! - Threat Wire

shannonmorse — Tue, 10 Oct 2017 13:05:00 -0800

The Yahoo breach was a lot worse than we thought, the Equifax ex-CEO sheds light on some questions, disqus was hacked, and Kaspersky is stuck in the middle of debates. All that coming up now on ThreatWire.

Hak5 Product Launch Event! October 20th: https://www.hak5.org/rsvp

https://motherboard.vice.com/en_us/article/8x8b4x/whoops-yahoo-says-2013-hack-actually-hit-3-billion-users
https://www.oath.com/press/yahoo-provides-notice-to-additional-users-affected-by-previously/
https://threatpost.com/2013-yahoo-breach-affected-all-3-billion-accounts/128259/
https://krebsonsecurity.com/2017/10/fear-not-you-too-are-a-cybercrime-victim/
https://www.cnet.com/how-to/find-out-if-your-yahoo-account-was-hacked/
https://www.cnet.com/news/yahoo-announces-all-3-billion-accounts-hit-in-2013-breach/
https://www.cnet.com/how-to/how-to-delete-your-yahoo-account/
https://arstechnica.com/information-technology/2017/10/yahoo-says-all-3-billion-accounts-were-compromised-in-2013-hack/
https://www.wired.com/story/yahoo-breach-three-billion-accounts/
https://thehackernews.com/2017/10/yahoo-email-hacked.html

https://thehackernews.com/2017/10/kaspersky-nsa-spying.html
https://www.wired.com/story/nsa-contractors-hacking-tools/
https://arstechnica.com/information-technology/2017/10/the-cases-for-and-against-claims-kaspersky-helped-steal-secret-nsa-secrets/
https://www.cnet.com/news/russian-hackers-reportedly-stole-nsa-cyber-secrets-in-2015/
https://motherboard.vice.com/en_us/article/kz755a/ex-nsa-hackers-are-not-surprised-by-bombshell-kaspersky-report
https://eugene.kaspersky.com/2017/10/05/we-aggressively-protect-our-users-and-were-proud-of-it/

https://www.wired.com/story/equifax-ceo-congress-testimony/
https://arstechnica.com/tech-policy/2017/10/irs-awards-equifax-7-25m-taxpayer-identity-contract-weeks-after-hack/
https://www.cnet.com/news/irs-gives-equifax-7-25-million-contract-to-prevent-tax-fraud/
https://www.cnet.com/news/equifax-ex-ceo-blames-breach-on-one-person-and-a-bad-scanner/

https://blog.disqus.com/security-alert-user-info-breach
https://thehackernews.com/2017/10/disqus-comment-system-hacked.html

Youtube Thumbnail credit:
https://upload.wikimedia.org/wikipedia/commons/thumb/6/66/Yahoo%21_Taiwan_weiya_stage_20160119.jpg/1280px-Yahoo%21_Taiwan_weiya_stage_20160119.jpg

Equifax and CCleaner Updates, Hacking Air Gapped Networks Via IR LEDs - Threat Wire

shannonmorse — Tue, 26 Sep 2017 13:00:00 -0800

Ccleaner malware targeted big companies, Equifax falls for phishing techniques, a car tracking service leaks data, and IR light on security cameras could spill confidential information. All that coming up now on ThreatWire.

http://www.securityweek.com/ccleaner-infection-database-erased
https://motherboard.vice.com/en_us/article/7xkxba/researchers-link-ccleaner-hack-to-cyberespionage-group
https://www.cnet.com/news/ccleaner-microsoft-google-samsung-intel-sony/
https://arstechnica.com/information-technology/2017/09/ccleaner-malware-outbreak-is-much-worse-than-it-first-appeared/
https://www.wired.com/story/ccleaner-malware-targeted-tech-firms/
https://thehackernews.com/2017/09/ccleaner-malware-hacking.html
https://blog.avast.com/progress-on-ccleaner-investigation
http://blog.talosintelligence.com/2017/09/ccleaner-c2-concern.html
https://blog.avast.com/avast-threat-labs-analysis-of-ccleaner-incident
https://arstechnica.com/information-technology/2017/09/ccleaner-backdoor-infecting-millions-delivered-mystery-payload-to-40-pcs/
https://blog.avast.com/additional-information-regarding-the-recent-ccleaner-apt-security-incident

https://arstechnica.com/information-technology/2017/09/massive-equifax-hack-reportedly-started-4-months-before-it-was-detected/
https://arstechnica.com/information-technology/2017/09/equifax-directs-breach-victims-to-fake-notification-site/
https://www.cnet.com/news/equifax-twitter-fake-support-site-breach-victims/
https://krebsonsecurity.com/2017/09/equifax-breach-setting-the-record-straight/
https://motherboard.vice.com/en_us/article/ne7eqz/canadas-privacy-watchdog-wants-the-power-to-go-after-companies-like-equifax

https://thehackernews.com/2017/09/hacker-track-car.html
https://mackeepersecurity.com/post/auto-tracking-company-leaks-hundreds-of-thousands-of-records-online

https://thehackernews.com/2017/09/airgap-network-malware-hacking.html
https://threatpost.com/malware-steals-data-from-air-gapped-network-via-security-cameras/128038/
https://arxiv.org/ftp/arxiv/papers/1709/1709.05742.pdf

Youtube Thumbnail credit:
http://www.publicdomainpictures.net/pictures/30000/velka/security-camera.jpg

CCleaner Infected With Malware - Update Now! Equifax Updates, BlueBorne Hits Bluetooth - Threat Wire

shannonmorse — Tue, 19 Sep 2017 08:30:00 -0800

CCleaner was infected with malware, Equifax is not having a good month, and BlueBorne Attacks Bluetooth devices - billions of them. All that coming up now on ThreatWire.

https://thehackernews.com/2017/09/ccleaner-hacked-malware.html
https://www.piriform.com/news/blog/2017/9/18/security-notification-for-ccleaner-v5336162-and-ccleaner-cloud-v1073191-for-32-bit-windows-users
http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html
https://arstechnica.com/information-technology/2017/09/backdoor-malware-planted-in-legitimate-software-updates-to-ccleaner/
https://www.forbes.com/sites/thomasbrewster/2017/09/18/ccleaner-cybersecurity-app-infected-with-backdoor/#5eae9585316a
http://www.businessinsider.com/avast-piriform-ccleaner-hijacked-trojan-malware-2017-9
https://motherboard.vice.com/en_us/article/a3kgpa/ccleaner-backdoor-malware-hack
https://www.bleachbit.org/

https://thehackernews.com/2017/09/apache-struts-flaws-cisco.html
https://threatpost.com/equifax-confirms-march-struts-vulnerability-behind-breach/127975/
https://thehackernews.com/2017/09/equifax-apache-struts.html
https://www.equifaxsecurity2017.com/
https://arstechnica.com/information-technology/2017/09/massive-equifax-breach-caused-by-failure-to-patch-two-month-old-bug/
https://arstechnica.com/information-technology/2017/09/equifax-hackers-stole-data-for-200k-credit-cards-from-transaction-history/
https://krebsonsecurity.com/2017/09/equifax-hackers-stole-200k-credit-card-accounts-in-one-fell-swoop/
https://arstechnica.com/tech-policy/2017/09/ftc-opens-equifax-investigation-says-beware-of-equifax-calling-scams/
https://motherboard.vice.com/en_us/article/8x8nn5/canadians-are-still-waiting-for-equifax-to-tell-them-how-screwed-they-are-hack
http://www.businessinsider.com/equifax-hack-justice-department-investigation-of-alleged-insider-trading-2017-9
https://www.cnet.com/news/equifax-executives-out-after-massive-hack/
https://www.cnet.com/news/equifax-elizabeth-warren-bills-hack-freedom-from-equifax-exploitation-act/

https://www.armis.com/blueborne/
https://thehackernews.com/2017/09/blueborne-bluetooth-hacking.html
https://threatpost.com/wireless-blueborne-attacks-target-billions-of-bluetooth-devices/127921/
https://www.wired.com/story/turn-off-bluetooth-security/
https://www.forbes.com/sites/lconstantin/2017/09/12/critical-bluetooth-flaws-put-over-5-billion-devices-at-risk-of-hacking/#3c617e9168b1
https://www.documentcloud.org/documents/3990994-Armis-WP-BlueBorne-091117-1.html

Youtube Thumbnail credit:
https://i.ytimg.com/vi/DMbjXPpaNuQ/maxresdefault.jpg

Equifax Hacked! Your Social Security Number is Probably Public - Threat Wire

shannonmorse — Tue, 12 Sep 2017 08:00:00 -0800

Everything you need to know so far on Equifax getting hacked, an Android Toast Notification Vulnerability affects almost all android phones, and that linux shell built into windows 10 could hide malware. All that coming up now on ThreatWire.

https://arstechnica.com/information-technology/2017/09/equifax-website-hack-exposes-data-for-143-million-us-consumers/
https://www.equifaxsecurity2017.com/
https://www.equifaxsecurity2017.com/potential-impact/
https://www.bloomberg.com/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack
https://yro.slashdot.org/story/17/09/10/0128214/techcrunch-equifax-hack-checking-web-site-is-returning-random-results
http://www.zdnet.com/article/we-tested-equifax-data-breach-checker-it-is-basically-useless/
https://arstechnica.com/information-technology/2017/09/equifax-moves-to-fix-weak-pins-for-security-freeze-on-consumer-credit-reports/
https://www.tekthing.com/blog/2015/6/19/5-hot-games-from-e3-970-sli-vs-980ti-get-yourself-a-credit-lock-peppermint-os-lastpass-hacked?rq=freeze%20credit 10:52 in
https://www.consumer.ftc.gov/articles/0275-place-fraud-alert
https://www.identitytheft.gov/Assistant#
https://krebsonsecurity.com/2017/09/equifax-breach-response-turns-dumpster-fire/
https://motherboard.vice.com/en_us/article/ywwakw/the-self-proclaimed-equifax-hackers-are-likely-nothing-more-than-amateur-scammers
https://www.bloomberg.com/news/articles/2017-09-08/equifax-sued-over-massive-hack-in-multibillion-dollar-lawsuit

https://threatpost.com/android-users-vulnerable-to-high-severity-overlay-attacks/127901/
https://researchcenter.paloaltonetworks.com/2017/09/unit42-threat-brief-patch-today-dont-get-burned-android-toast-overlay-attack/
https://www.wired.com/story/hack-brief-patch-your-android-phone-to-block-an-evil-toast-attack/

https://motherboard.vice.com/en_us/article/xwwexa/windows-10s-built-in-linux-shell-could-be-abused-to-hide-malware-researchers-say

Youtube Thumbnail credit:
https://keep-safe.org/wp-content/uploads/Social-security-cards.jpg

Half A Million Pacemakers Could Be Hacked - Threat Wire

shannonmorse — Tue, 05 Sep 2017 17:03:00 -0800

The FCC site could host malware, 6 million instagram accounts had their data leaked, over 700 million email addresses were exposed by a spambot, and almost half a million pacemakers could be hacked. All that coming up now on ThreatWire.

Links:
https://motherboard.vice.com/en_us/article/8xx7q3/people-are-making-the-fcc-host-rick-and-morty-gifs
https://medium.com/contratastic/the-fcc-gov-website-lets-you-upload-documents-and-host-them-there-bdcd5c1a5b8b
https://twitter.com/h3apspray/status/903044975813771264
https://arstechnica.com/information-technology/2017/08/fccs-public-comment-api-lets-you-post-just-about-anything-to-gov-website/

https://thehackernews.com/2017/09/instagram-hack-doxagram.html
https://thehackernews.com/2017/08/instagram-breach.html
https://arstechnica.com/information-technology/2017/09/site-sells-instagram-users-phone-and-e-mail-details-10-a-search/
https://www.cnet.com/news/instagram-flaw-celebrities-contact-information-for-sale-darknet/

https://thehackernews.com/2017/08/pacemakers-hacking.html
https://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm573669.htm
https://thehackernews.com/2017/06/pacemaker-vulnerability.html
https://www.reuters.com/article/medtronic-security/medtronic-insulin-pumps-vulnerable-to-hackers-idUSN1E77O1VJ20110826
https://arstechnica.com/information-technology/2017/08/465k-patients-need-a-firmware-update-to-prevent-serious-pacemaker-hacks/
https://arstechnica.com/information-technology/2016/08/trading-in-stock-of-medical-device-paused-after-hackers-team-with-short-seller/
http://www.healthcareitnews.com/news/fda-patients-st-jude-pacemakers-update-needed-keep-hackers-out-devices
https://motherboard.vice.com/en_us/article/nee5bw/465000-patients-need-software-updates-for-their-hackable-pacemakers-fda-says
https://www.cnet.com/news/fda-nearly-a-half-million-pacemakers-could-get-hacked/

https://www.troyhunt.com/inside-the-massive-711-million-record-onliner-spambot-dump/
https://thehackernews.com/2017/08/spambot-email-addresses.html
http://www.zdnet.com/article/onliner-spambot-largest-ever-malware-campaign-millions/
https://benkowlab.blogspot.in/2017/08/from-onliner-spambot-to-millions-of.html

Youtube Thumbnail credit:
https://upload.wikimedia.org/wikipedia/commons/thumb/8/82/St_Jude_Medical_pacemaker_in_hand.jpg/1280px-St_Jude_Medical_pacemaker_in_hand.jpg

Sarahah Uploads Your Data, Internet of Things Creds Exposed - Threat Wire

shannonmorse — Tue, 29 Aug 2017 09:00:00 -0800

Sarahah was Caught Uploading Contacts, ROPEMAKER Changes Emails Post-Delivery, default credentials are still impacting IoT devices, and a New Crowdfunding Campaign for MalwareTech is now up and running. All that coming up now on ThreatWire.

Links:
https://threatpost.com/anonymous-messaging-app-sarahah-to-halt-collection-of-user-data-with-next-update/127668/
https://thehackernews.com/2017/08/sarahah-privacy.html
https://theintercept.com/2017/08/27/hit-app-sarahah-quietly-uploads-your-address-book/
https://vimeo.com/223686149
https://twitter.com/ZainAlabdin878/status/901812205741629444
https://www.theregister.co.uk/2017/08/28/crowdfunding_for_hutchins_legal_fees/?mt=1503964117577

https://www.theregister.co.uk/2017/08/23/ropemaker_exploit/
https://threatpost.com/ropemaker-exploit-allows-for-changing-of-email-post-delivery/127600/
https://www.mimecast.com/globalassets/documents/whitepapers/wp_the_ropemaker_email_exploit.pdf

https://arstechnica.com/information-technology/2017/08/leak-of-1700-valid-passwords-could-make-the-iot-mess-much-worse/
https://twitter.com/ankit_anubhav/status/900803406914347008
https://twitter.com/0xDUDE/status/901062772238274561
http://www.securityweek.com/thousands-iot-devices-impacted-published-credentials-list
https://threatpost.com/race-is-on-to-notify-owners-after-public-list-of-iot-device-credentials-published/127661/

https://arstechnica.com/tech-policy/2017/08/malwaretechs-legal-defense-fund-bombarded-with-fraudulent-donations/?comments=1
https://twitter.com/Snubs/status/897592606753869825
https://twitter.com/tarah
https://www.crowdjustice.com/case/malwaretech/

Youtube Thumbnail credit:
https://cdn.pixabay.com/photo/2016/06/06/10/48/communication-1439187_960_720.jpg

Stealing Cryptocurrency, Spyware in Android Apps, and Dreamhost vs. DOJ - Threat Wire

shannonmorse — Thu, 24 Aug 2017 17:30:00 -0800

Cryptocurrency is being stolen with phone numbers, dreamhost was compelled to turn over data, and android had a slew of spyware apps. All that coming up now on ThreatWire.

Links:
https://www.nytimes.com/2017/08/21/business/dealbook/phone-hack-bitcoin-virtual-currency.html
http://nationalpost.com/news/world/how-hackers-are-hijacking-mobile-phone-numbers-to-grab-wallets

http://thehill.com/policy/cybersecurity/346544-dreamhost-claims-doj-requesting-info-on-visitors-to-anti-trump-website
https://www.dreamhost.com/blog/we-fight-for-the-users/
https://www.dreamhost.com/blog/narrowing-the-scope/
https://www.dreamhost.com/blog/a-win-for-the-web/
https://www.dreamhost.com/blog/wp-content/uploads/2017/08/DH-Search-Warrant.pdf
https://www.dreamhost.com/blog/wp-content/uploads/2017/08/DH-DOJMotiontoShowCause.pdf
https://assets.documentcloud.org/documents/3939670/8-22-17-US-Reply-Brief-DreamHost.pdf
https://www.cnet.com/news/feds-pare-back-demands-for-data-from-anti-trump-protest-site/
https://arstechnica.com/tech-policy/2017/08/feds-drop-demand-for-1-3-million-ip-addresses-that-visited-anti-trump-site/

https://thehackernews.com/2017/08/android-spyware-malware.html
https://www.android.com/play-protect/
https://arstechnica.com/information-technology/2017/08/500-google-play-apps-with-100-million-downloads-had-spyware-backdoor/
https://blog.lookout.com/igexin-malicious-sdk

Youtube Thumbnail credit:
http://maxpixel.freegreatpicture.com/static/photo/1x/Bitcoin-Crypto-Currency-Electronic-Cyber-Finance-2057405.jpg

Stingrays Outsmart Detection Apps, and an Update on MalwareTechBlog! - Threat Wire

shannonmorse — Tue, 15 Aug 2017 08:00:00 -0800

MalwareTech pleads not guilty, fake cell phone towers can outsmart detection apps, and hackers encode malware into DNA. All that coming up now on ThreatWire.
-------------------------------
Shop: http://www.hakshop.com
Support: http://www.patreon.com/threatwire
Subscribe: http://www.youtube.com/hak5
Our Site: http://www.hak5.org
Contact Us: http://www.twitter.com/hak5
Threat Wire RSS: https://shannonmorse.podbean.com/feed/
Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999
Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ
------------------------------

Links:
https://twitter.com/lorenzoFB/status/897120325850329093
https://motherboard.vice.com/en_us/article/evvn8k/malwaretech-marcus-hutchins-not-guilty-plea
http://www.securityweek.com/lawyer-british-hacking-suspect-will-be-vindicated
https://arstechnica.com/tech-policy/2017/08/researcher-who-neutralized-wcry-pleads-not-guilty-to-writing-banking-malware/
https://twitter.com/MalwareTechBlog/status/897180606005694464

https://www.wired.com/story/stingray-detector-apps/
http://www.cs.ox.ac.uk/files/9192/paper-final-woot-imsi.pdf

https://arstechnica.com/science/2017/08/researchers-encode-malware-in-dna-compromise-dna-sequencing-software/
https://www.wired.com/story/malware-dna-hack
https://thehackernews.com/2017/08/hacking-computer-with-dna.html
https://www.wired.com/story/scientists-upload-a-galloping-horse-gif-into-bacteria-with-crispr/

Youtube Thumbnail credit:
https://cdn.pixabay.com/photo/2016/09/17/20/41/cellular-tower-1676940_960_720.jpg

WannaCry White Hat Hacker Arrested After DEF CON, The Facts So Far - Threat Wire

shannonmorse — Tue, 08 Aug 2017 13:00:00 -0800

The guy who stopped WannaCry was arrested right after DEF CON, a vulnerability on older amazon echo’s won’t be patched, and hackers are using online repos to get developer creds. All that coming up now on Threat Wire.

Links:
https://www.wired.co.uk/article/what-is-kronos-trojan-malware-marcus-hutchins-hacker
https://twitter.com/MalwareTechBlog/status/488373794168254464
https://motherboard.vice.com/en_us/article/ywp8k5/researcher-who-stopped-wannacry-ransomware-detained-in-us-after-def-con
https://motherboard.vice.com/en_us/article/pagn7v/malwaretech-wannacry-indictment-kronos-malware
https://www.documentcloud.org/documents/3912524-Kronos-Indictment-R.html
http://uk.businessinsider.com/malwaretech-researcher-marcus-hutchins-has-been-granted-a-30000-bail-2017-8
https://twitter.com/tarah
https://secure.lawpay.com/pages/torekeland/hutchinsldf
http://www.bbc.co.uk/news/technology-40833951
https://www.wired.com/story/wannacry-malwaretech-arrest/
https://arstechnica.com/tech-policy/2017/08/researcher-who-stopped-wcry-worm-detained-under-mysterious-circumstances/
https://www.youtube.com/watch?v=X7DIjaQvZn0
https://www.engadget.com/2017/08/04/marcus-hutchins-kronos-malwaretech/
https://twitter.com/LOBOLAWPLLC
https://twitter.com/MabbsSec/status/893624617142759425
https://twitter.com/MabbsSec
https://www.wired.com/story/marcus-hutchins-arrest

https://labs.mwrinfosecurity.com/blog/alexa-are-you-listening
https://motherboard.vice.com/en_us/article/evng4p/hack-that-turns-amazon-echo-into-a-spying-device-cant-be-fixed-by-software-patch
https://arstechnica.com/information-technology/2017/08/how-hackers-could-turn-an-amazon-echo-into-a-secret-bugging-device/

https://threatpost.com/attackers-use-typo-squatting-to-steal-npm-credentials/127235/
http://blog.npmjs.org/post/163723642530/crossenv-malware-on-the-npm-registry

Youtube Thumbnail credit:
Marcus Hutchins Frank Augstein / AP

Hacking Voting Machines, BroadPwn in Vegas, and #LeakTheAnalyst - Threat Wire

shannonmorse — Tue, 01 Aug 2017 20:00:00 -0800

What in the world is LeakTheAnalyst? Voting machines get hacked at DEF CON in a matter of minutes, and BroadPwn patches are now available for mobile devices. All that coming up now on Threat Wire.

Links:
https://thehackernews.com/2017/07/data-breach-mandiant-fireeye.html
http://www.securityweek.com/hackers-compromise-accounts-fireeye-threat-intelligence-analyst

https://thehackernews.com/2017/07/hacking-voting-machine.html
http://www.businessinsider.com/def-con-hacker-voting-machine-election-hacking-2017-7
https://www.cnet.com/news/defcon-hackers-find-its-very-easy-to-break-voting-machines/
https://motherboard.vice.com/en_us/article/mba858/at-def-con-i-watched-hackers-take-voting-machines-apart
https://threatpost.com/voting-machines-hacked-with-ease-at-def-con/127101/
https://twitter.com/votingvillagedc

https://www.cnet.com/news/chip-vulnerability-crashes-your-outdated-phone-via-wifi/
https://arstechnica.com/information-technology/2017/07/broadcom-chip-bug-opened-1-billion-phones-to-a-wi-fi-hopping-worm-attack/
https://threatpost.com/apple-patches-broadpwn-bug-in-ios-10-3-3/126955/
https://threatpost.com/google-patches-critical-broadpwn-bug-in-july-security-update/126688/

Youtube Thumbnail credit:
https://i2.wp.com/itmeets.guru/wp-content/uploads/2017/05/Untitled-design-2.jpg?fit=19201080&ssl=1

FBI NSL Gag Orders Ruled Constitutional - Threat Wire

shannonmorse — Mon, 17 Jul 2017 18:03:52 -0800

FBI Gag orders are ruled constitutional, android ransomware threatens to leak your personal data, and verizon customers had a data breach. All that coming up now on Threat Wire.

Links:
https://www.cnet.com/news/court-rules-fbi-can-continue-to-request-data-in-secret/
https://www.reuters.com/article/us-usa-surveillance-idUSKBN1A21XJ? feedType=RSS&feedName=technologyNews&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+reuters%2FtechnologyNews+%28Reuters+Technology+News%29
http://cdn.ca9.uscourts.gov/datastore/opinions/2017/07/17/16-16067.pdf
https://en.wikipedia.org/wiki/USA_Freedom_Act

https://www.cnet.com/news/this-ransomware-will-share-your-browser-history-with-friends/
http://www.zdnet.com/article/this-android-ransomware-threatens-to-expose-your-browsing-history-to-all-your-contacts/
https://thehackernews.com/2017/07/leakerlocker-android-ransomware.html

http://www.zdnet.com/article/millions-verizon-customer-records-israeli-data/
https://www.cnet.com/news/israeli-tech-firm-exposes-verizon-customer-records/
https://thehackernews.com/2017/07/over-14-million-verizon-customers-data.html
https://threatpost.com/third-party-exposes-14-million-verizon-customer-records/126798/

Youtube Thumbnail credit:
https://cdn.pixabay.com/photo/2016/08/11/23/54/judge-1587300_960_720.jpg