China’s leading search engine claims a shocking lack of security nous at its chosen domain name registrar was responsible for a prolonged outage last month.
China’s Baidu says in legal papers that that an obvious scammer was able to con Register.com support staff into handing over the keys to its kingdom, resulting in millions of dollars of lost revenue.
Baidu, which commands 70 percent of the Chinese search market, was offline for at least four hours on the 12th of January. During the incident, its baidu.com home page instead showed the messaged “This site has been hacked by the Iranian Cyber Army”.
In its lawsuit, the company claims a Register.com support rep allowed the hacker to reset the administrative email address for the domain to ‘antiwahabi2008@gmail.com’, despite the imposter providing obviously incorrect security codes during an online chat.
The hacker then allegedly used Register’s automated password reminder function to change Baidu’s account password, giving him access to the domain’s name servers. The whole rudimentary scam took less than 45 minutes, Baidu claims.
[click to continue…]
FindDomains is a multithreaded search engine discovery tool that will be very useful for penetration testers dealing with discovering domain names/web sites/virtual hosts which are located on too many IP addresses. Provides a console interface so you can easily integrate this tool to your pentest automation system.
It retrieves domain names/web sites which are located on specified ip address/hostname.
This tool is prepared by starting with Bing API 2.0 code sample.
In order to use FindDomains :
- Create an appid from “Bing Developers”, this link.
- It’ll be like that : 32AFB589D1C8B4FEC73D4BCB6EA0AD810E0FA2C7
- When you have registered an appid, enter it to the “appid.txt” which is on program directory.
Some outlines :
- Uses Bing search engine. Works with first 1000 records.
- Multithreaded on crawling and DNS resolution.
- Performs DNS resolution for extracted domains to eleminate cached/old records.
- Has a console interface so it can be very useful with some command-line foo.
- Works with Mono. But running under Windows is more efficient.
Sample usage :
1) FindDomains.exe 1.2.3.4
2) FindDomains.exe www.hotmail.com
[click to continue…]
Rock You has suffered a serious hacker attack that has exposed 32 million of its customer usernames and passwords to possible identity theft. And it has apparently taken RockYou more than 10 days to inform its users of the breach.
The security firm Imperva informed RockYou that its site had a serious SQL injection flaw, according to reports. Imperva said that some users’ passwords had already been compromised as a result of the vulnerability by the time it notified RockYou of its findings. RockYou acted quickly to fix the flaw, but perhaps not fast enough. One hacker claimed to have gotten access to the accounts and posted some data as proof. Apparently, the database included the full list of unencrypted passwords in plain text.
The flaw is a big one because RockYou usernames and passwords are, by default, the same as users’ email names and passwords. Security experts are advising RockYou users to change their emails and passwords. RockYou has some of the most popular apps on Facebook, and it ranks third among Facebook developers with 55 million monthly active users, according to AppData.
SQL injection exploits a vulnerability in an app’s database layer and is a very common attack. It potentially lets hackers steal private information, and Yahoo’s jobs site recently suffered a similar attack. Imperva chief technology officer Amichai Shulman told eWeek Europe that users are particularly vulnerable if they use the same usernames and passwords for all of the sites that they visit.
[click to continue…]
About two weeks ago we found out that a virus has been released out in the wild and that it’s attacking jailbroken iPhone 3G/3GS users who haven’t changed their root password. At the time the ingenious coder was only trying to alert people that their smartphones are not as secure as they thought and that simple safety measure would keep them away from trouble, however, some less well intended hacker has refined the iPhone worm to actually steal sensitive details.
Fast forward to our days because today we caught wind that the Australian who started everything, has been offered a job as an iPhone application developer by a company called mogeneration. Although 21-year-old, Ashley Towns has publicly acknowledged that he’s in charge with the Ikee worm that made unauthorised modifications to people’s handsets, he was never under investigation, hence why he took the opportunity.
Ashley Towns wrote Ikee, a self-propagating program that changed the phone’s wallpaper to a picture of 80s pop singer Rick Astley.
Mr Towns has now been employed as a iPhone application developer for Australian firm mogeneration.
Ikee was not malicious but paved the way for a more serious variant which targeted users of the online bank ING.
[click to continue…]
