Hacking

Pierluigi Paganini September 16, 2016
Mamba: The new Full Disk Encryption Ransomware Family Member

A Brazilian Infosec research group, Morphus Labs, just discovered a new Full Disk Encryption (FDE) Ransomware this week, dubbed Mamba. Mamba, as they named it, uses a disk-level encryption strategy instead of the conventional file-based one. This may be just the beginning of a new era for the Ransomware. In this article, Renato Marinho (@renato_marinho), […]

Pierluigi Paganini September 15, 2016
A backdoor on Xiaomi device allows silent and remote deliver of any app

A Dutch Computer Science student discovered the presence of a backdoor that could allow an attacker to silently install any app on Xiaomi phones. A Dutch Computer Science student, Thijs Broenink, who analyzed his Xiaomi mobile device discovered the presence of a backdoor that could allow an attacker to silently install any app on the phone. The […]

Pierluigi Paganini September 15, 2016
ClixSense Data Breach, 6.6 Million users’ records stolen

Hackers have breached the database of the advertising company ClixSense and stolen the details of 6.6 million users. Here we are again to discuss a new data breach that exposed million user records of the advertising ClixSense service. ClixSense allows its clients to earn money online by paying surveys, free offers and paid per click advertising. The […]

Pierluigi Paganini September 15, 2016
A look into French underground from pen guns and euthanasia kits

“The French Underground: Under a Shroud of Extreme Caution”, another interesting report published by Trend Micro on illegal activities in the Dark Web. The dark web is a privileged place where hackers and criminals offer for sale or for rent any kind of illegal product and services. The moth popular Dark Net, the Tor network, host […]

Pierluigi Paganini September 14, 2016
How to hack Google FR by exploiting a cross-site scripting flaw

The security expert Issam Rabhi (@issam_rabhi) has discovered a cross-site scripting vulnerability in Google France. The giant already fixed it. A security expert from French security outfit Sysdream, Issam Rabhi (@issam_rabhi), discovered a cross-site scripting vulnerability in Google France. Yes, you‘ve got it right, the website of the IT giant was affected by one of the […]

Pierluigi Paganini September 14, 2016
Sports doping agency WADA confirms attack by Russian cyber spies

World Anti-Doping Agency (WADA) confirms that Russian hackers breached its Anti-Doping Administration and Management System (ADAMS) database. Hackers breached the World Anti-Doping Agency (WADA) and have stolen Olympic athletes’ medical records, the hack was confirmed by the agency. According to the WADA, the hackers accessed the Anti-Doping Administration and Management System (ADAMS) database, security experts […]

Pierluigi Paganini September 14, 2016
Periscope Skimming, a new ATM threat spotted in the US

Secret Service warns of Periscope Skimming probes, it the first time that law enforcement discovered attacks against ATMs conducted with these devices. The US Secret Service is warning banks and ATM vendors about a new ATM skimmer technology, the so-called ‘periscope skimming.’ The device is composed of a skimming probe that crooks connect to the ATM’s […]

Pierluigi Paganini September 13, 2016
2 Israeli teens arrested for allegedly running the vDoS booter

The Israeli law enforcement arrested two youngsters suspected of operating the infamous vDoS booter. Israeli authorities have arrested two alleged operators of a DDoS service, named vDOS, as the result of an investigation conducted by the FBI. The popular security investigator Brian Krebs reported that the duo behind the vDOS booter service had earned more than $600,000 […]

Pierluigi Paganini September 13, 2016
Hacker Interviews – Speaking with Francisco J. Rodriguez

Today I have the pleasure to share with you the interview with Francisco Francisco J. Rodriguez. He is a member of the Spanish Cyber Security Institute, Cybersecurity and Cybercrime Research and collaborating with State security forces. His twitter @0fjrm0 and his talk about Real Time Cyberattacks at https://goo.gl/ge6G9i  You are one of the world’s most talented […]

Pierluigi Paganini September 13, 2016
CVE-2016-6662 – Researcher disclosed a critical MySQL Zero-Day

A security researcher disclosed a critical MySQL zero-day affecting all the default configuration of all MySQL versions including 5.5, 5.6 and 5.7. The security researcher Dawid Golunski has disclosed a critical zero-day vulnerability affecting the popular database management system (RDBMS) MySQL. The researcher decided to disclose the critical flaw because Oracle failed to release a […]