Facebook Security Suckssss!

I had gone through something freaky.. So, thought to share with you.




See this link :

https://www.facebook.com/connect/connect_to_node_error.php?body=it's%20all%20your's

https://www.facebook.com/connect/connect_to_node_error.php?body=$AM%20is%20here

%20

https://www.facebook.com/connect/connect_to_node_error.php?body=$AM%20is%20here
!



This is a common trick that anyone can do with php pages. But I think FB

should be care about this.

Change the attribute value of body and the page is your's !!!

 
 
Happy Hacking
Rishi Aggarwal

New Rules under the Information Technology Act

The Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 has now come into force.



Along with that 3 new rules have been passed by the government.



1. lnformation Technology (Electronic Service Delivery) Rules, 2011

http://www.mit.gov.in/sites/upload_files/dit/files/RNUS_CyberLaw_15411.pdf



2. Information Technology (Intermediaries guidelines) Rules, 2011

http://www.mit.gov.in/sites/upload_files/dit/files/due_dilligance4intermediary07_02_11.pdf



3. Information Technology (Guidelines for Cyber Cafe) Rules, 2011

http://www.mit.gov.in/sites/upload_files/dit/files/guidelines4cybercafe0702_11.pdf

 
 
Happy Hacking.
HANS TEAM

LATEST ! Man-in-the-Browser attacks.

HACKERS are increasingly targeting the information assets of some of the world's most well-known organizations.

With firewalls, antivirus and other security mechanisms protecting corporate networks, how do attackers manage to penetrate enterprise computer systems? Simply by exploiting the weakest link in the security chain. One of the newest methods is tunnelling in via employees' browsers using an attack known as "Man-in-the-Browser" (MitB).

An MitB attack starts with malicious software (usually a Trojan like Zeus or SpyEye) lurking on a seemingly innocuous website. When visitors arrive the malware takes control of their Web browser and modifies pages, content or transaction data presented to the user.

All of this is done without the user's knowledge in a completely covert fashion. Depending on what the browser is being used for, MitB enables attackers to silently steal anything from login credentials to account numbers or financial information. With browser sessions often containing the logon details for email systems, VPNs and cloud services -- such as cloud CRM -- it's critical to lock down these sessions without impacting performance. Making the situation worse is the explosion of mobile devices and the multitude of people who can access enterprise resources remotely.

It's not difficult for employees to stumble upon infected sites and fall victim to drive-by infections, because fraudulent spoof sites are being created every day. Criminals even use search engine optimization techniques to raise these sites to the top of search engine listings. But many legitimate websites are also being infected. Engineered attacks, like the recent LinkedIn email phishing campaign, are increasingly being used to ambush individuals and install sophisticated malware such as Bugat and Clampi.

This modern malware is designed to slip under the radar of traditional antivirus solutions and bypass strong authentication technologies like tokens or network access control (NAC) systems. It then captures all data processed by that browser and transmits it back to the criminals. All this can be achieved without setting off alarms.

We recently decrypted an attack on the popular Citrix Access Gateway by the Zeus Trojan that illustrates how criminals are trying to stay one step ahead of security controls.

In an attempt to protect its SSL VPN product against key logging malware, Citrix allows companies to customize the logon page to include a virtual on-screen keyboard which replaces the physical keyboard. So instead of typing a password on the physical keyboard, mouse clicks are used to press the keys drawn on screen, theoretically bypassing keyloggers.

NOW ONWARDS EYE WILL BE USED AS MOUSE FOR LAPTOP

If you are tired using keyboard & mouse now their will be coming a laptop. which will be used through the eye actions. This laptop has a technology of eye tracking. The commands are sent through the medium of eye by which the laptop works accordingly.

As per the reports given by daily mail even the swedish company Tobii technology also says that eye will be used in place of mouse cursor. Which the help of two invisible Infrared rays eye tracker will be working.

This laptop will commencing very soon

NOW COMPUTER WILL BE MORE FASTER AND excellence VERY SOON

After this their will be two camera’s fitted in the eyeball. Both retina will pass the rays to the screen of the laptop & then screen will pass the rays to retina. It can also scroll the text of the screen

After this technique computer will become very faster & excellence......

Taufique Azad

Latest Facebook Bug

The most popular social networking website, Facebook, is not 100% secure.

Even if you are aware of the latest defence methods in order to keep you safe online, save you from Phishing or Java- Driveby’s, Your facebook account may not be totally secure.

A new feature introduced in facebook called groups, allows members to interact with each other and post on the groups wall. A member of the group can invite his/her other friends to the group and they automatically get added without a confirmation.

If you don't know which all groups are you a member of, you can check it in the left hand side of your facebook page.

For ex, following are the groups I’m a member of :

A latest bug in facebook, allows the attacker to post status updates from your account, or post anything he wants in any of the groups you have joined.

Let’s suppose that the attacker is one of your friends on facebook, and he has your primary email id through which you login.

Now, all he would have to do, is to send a fake mail tosomething@groups.facebook.com

Where "something" is the name of the group in which he wants to post anything on your behalf.

The result would be something like this:

One more variant of this type of attack is, if the attacker get holds of your personalized email id,

He could send mail to that email id ( abc@m.facebook.com ) from the email account you use of facebook using a simple trick known as email spoofing. This can be used to post status updates, comments on any update, and even to change your account settings.

The best way to be safe is to hide your contact information from even your friends and never to use your primary email to login to facebook account.

Also, make sure you change your personalized email ( @m.facebook.com ) every few days in order to be safe.

Be Secure.

Happy Hacking.

Special thanks to Shavik and Sai Satish of AH. :)

Aditya Gupta

Email me : aditya1391@facebook.com

Java Drive : The Next Generation of Threats

Nothing is 100% safe, Not even a simple pop-up window on which you click Yes without giving it a second thought. Ask yourself, Did you ever care to think , every time you clicked on a pop-up(like the one shown below) that you were playing in to the hands of a malicious attacker.

From now onwards, look at it once more to check whether it is malicious or not.

"Drive-by download" is basically the “download of any malicious/unwanted content on a computer without the knowledge of the user”

It's a fake webclient or you may call it a fake certificate, whose sole purpose is to take control of your system. It may be through the installation of Keyloggers,viruses or trojans.

In terms of programming, it’s a simple Java applet.

If you’re a good programmer, you could make one of those yourself.

Now, in the case of common users, they won't think of the pop-up as anything but a tool required to see a flash video or view a webcam, or even a simple HTML page. Thats why this attack is so much widespread and successful.

This type of attack is by far the simplest to pull and does not rely on any particular kind of vulnerability. The Java Runtime is the only browser-embeddable object which gives such a degree of access from simple Web pages. Flash, Adobe Reader, and even Signed JavaScript (disabled by default) wont allow you to do all of these, mainly because it is highly insecure!

If you have never seen anything like this, it is a warning shown when the security certificate is crypted.

This does'nt mean that the Java platform, in particular, is vulnerable and that we should avoid all objects online using java. Infact it is an awesome platform for web apps. The main thing here is the human factor which is highly exploitable.

The aim here is to just expose the widely used hacking methods online.

Use a good antivirus. Keep updating your browsers. Don’t run Active-X content unless you’re sure what it is.

It is just like a hidden pop-up box saying,

“Do you wanna give the whole access to the attacker”

And you click YES!!

So, before you click, think twice!!

Happy Hacking!

Aditya

Email : adityagupta1991@gmail.com

FB : aditya1391

Ever cared to look back again, when you everytime clicked on the “OK” button of this popup :




From now on, look at it once more. To check out that it isn’t malicious. And something isn’t hidden behind it.

Drive-by download is basically the “download of any malicious/unwanted object on a computer without the knowledge of user”

It is a fake webclient or you may say a fake certificate, whose sole purpose is to take control of your computer/user accounts. It may be through install of Keylogger or RAT, whatever the attacker wishes.
It’s a simple Java applet. If you’re a good programmer, you would be able to make one of those yourself.
Now a normal user will approve anything like that certificate in order to play a game, see a flash video or view a webcam.
This type of attack is by far the simplest to pull and does not rely on any particular kind of vulnerability. The Java Runtime is the only browser embeddable object which gives such a degree of access from simple Web pages. Flash, Adobe Reader, and even Signed JavaScript (disabled by default) wont allow you to do all of these, mainly because it is highly insecure!
The chances of getting success using this vulnerability is more than 90%.
If you have never seen anything like that it is a certificate shown when the security certificate is crypted.
Java in particular isn’t vulnerable and it isn’t that we should avoid all objects online using java. It is an awesome platform for web apps, the main thing here is the human factor.
The aim here is to just expose the widely used hacking methods online.
Use a good antivirus. Keep updating your browsers. Don’t run Active-X content unless you’re sure what is it.
It is just like a hidden pop-up box saying,
“Do you wanna give the whole access to the attacker”
And you click YES!!
So, before you click, think twice!!