Cyber World News

A cybersecurity researcher has claimed that the credit and debit card details, email addresses, phone numbers of 70 lakh Indians have been leaked on the dark web . The credit and debit card details of 70 lakh Indians have been leaked on the dark web. As per a cybersecurity researcher, the sensitive data of Indian users that have been leaked include cardholders' names, phone numbers, income details, account details, and more. The data that has been exposed carries users’ information from 2010 to 2019. As per cybersecurity researcher Rajshekhar Rajahria, the 2GB database on a Google Drive link consists of the names of credit, debit cardholders, phone numbers of the users, email addresses, the name of the employers of the users, annual income. It also consists of information about users’ mobile alerts and their PAN Card details. "Data pertains to the period between 2010 and 2019, which could be very valuable to scammers and hackers. Since this is financial data, it is very valuab...

Facebook’s libra cryptocurrency is reportedly preparing to launch with a single cryptocurrency, a scaled-down version of its original plan. The launch date for Facebook’s libra could be as early as January. Launch Date for Facebook’s Libra The cryptocurrency libra, proposed by social media giant Facebook, is reportedly preparing to launch as early as January next year. However, only a limited version of the libra cryptocurrency will launch at that time. According to the revised libra whitepaper, the Libra Association intended to initially launch with some of the currencies in the proposed libra basket, such as “librausd or ≋USD, libraeur or ≋EUR, libragbp or ≋GBP, librasgd or ≋SGD),” the association explained. However, the Financial Times reported Friday: The association would now initially just launch a single coin backed one-for-one by the dollar … The other currencies and the composite would be rolled out at a later point. The exact launch date for the libra crypto would depend on w...

Romanian police forces have arrested two individuals this week, for allegedly running two malware crypting services like CyberSeal and DataProtector to escape antivirus software detection. These services were purchased by quite 1560 criminals and used for crypting several different types of malware, including Remote Access Trojans, Information stealers, and Ransomware. The pair used the Cyberscan service also which allowed their clients to test their malware against antivirus tools. How do Criminals Bypass Antivirus Software? Generally, hackers bypass antivirus detection through the utilization of crypters that encrypt or hide the primary code in a piece of software, usually malware to pretend to be something harmless until it gets installed on the victim’s device. In this case, the services provided by these two suspects fall into a similar category and are offered for sale in the underground criminal market since 2010. Their clients paid between US$40 to US$300 for these crypting ser...

GitHub launches a new code scanning tool that helps developers to detect vulnerability before the application reaches production. The tool was announced initially in May at the GitHub Satellite conference, since that time it is available for GitHub beta testers. GitHub Code Scanning Tool Now the GitHub code scanning tool is  available  for all users and they can enable it to form a public repository. The new tool is the result of the acquisition of Semmle last year. Semmle is a code analysis platform that helps developers to write queries that identify code patterns in large codebases and search for vulnerabilities and their variants. GitHub said they “worked to bring the revolutionary code analysis capabilities of its  CodeQL  technology to GitHub users as a native capability.” Code scanning tool powered by powerful code analysis engine CodeQL technology to GitHub users as a native capability. The tool gets integrated with GitHub Actions—or your existing CI/CD envir...

  The source code for Microsoft’s Windows XP operating system (and other versions) has been leaked online!  Published as a torrent file on bulletin board website 4chan, the 43GB data dump is said to have been compiled over the course of the last few months by the leaker. The collection also includes source code for Windows 2000 and multiple versions of Windows CE, MS DOS, Windows Embedded and Windows NT - but all of which have a smaller modern install base than XP. The individual responsible for the leak also appears to bear Bill Gates a distinct grudge, dedicating a whole section of the torrent file to videos slandering the Microsoft founder.  The legitimacy of the leaked code has not yet been confirmed, but Microsoft has been made aware of the issue. Although support for Windows XP lapsed in 2014 - meaning the OS has not received security updates for a number of years - a surprising number of users remain loyal to the outdated operating system. As of last month, 1.26% o...

WhatsApp disclosed 6 security bugs through their dedicated security advisory site that allows attackers to execute remote code. WhatsApp is a messaging app used by more than two billion users around the world. All the vulnerabilities are disclosed in dedicated security advisory site aimed to provide more transparent details about vulnerabilities for users and security professionals. “We take the security of our users very seriously and we provide industry-leading protection for our users around the world. Our security team at WhatsApp works with experts around the world to stay ahead of potential threats,” reads the blog post. 6 Security WhatsApp Bugs CVE-2020-1894 – A stack write overflow Bug in WhatsApp Business for Android CVE-2020-1891 -A user controlled parameter used in video call in WhatsApp for Android CVE-2020-1890 – A URL validation issue in WhatsApp for Android CVE-2020-1889 – security feature bypass issue in WhatsApp Desktop versions CVE-2020-1886 – A buffer overflow in Wha...

Cisco warned users that the hackers actively exploited a bug in carrier-grade-routers, and it was a zero-day vulnerability affecting the Internetwork Operating System (IOS) that boats with its networking devices.  The security experts termed the vulnerability as CVE-2020-3566, and it affects the Distance Vector Multicast Routing Protocol (DVMRP) feature of its operating system. Cisco’s IOS XR Network OS is disposed of various router programs, which include NCS 540 & 560, NCS 5500, 8000, and ASR 9000 series routers. And till now, Cisco hasn’t issued any software update for this vulnerability. Flaw Details Advisory ID: cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz First issued: 2020 August 29 Last updated: 2020 August 31 Version 2.0: Interim Workarounds: No workarounds  CVE IDs: CVE-2020-3566, CVE-2020-3569 Cisco Bug IDs: CSCvr86414, CSCvv54838 CWE ID: CWE-400 CVSS Score: Base 8.6 Affected Products These vulnerabilities attack any Cisco device that is operating any release of Cisco I...

US hard liquor giant Brown-Forman is the latest high-profile victim of ransomware criminals. Even if the company’s name doesn’t ring a bell, some of its products are well-known to spirits drinkers worldwide: Brown-Forman is a multi-billion dollar business that owns Jack Daniel’s whiskey, Finlandia vodka, and other global brands. It’s a multi-billion dollar business, headquartered in Louisville, Kentucky – a US state that’s famous for American whiskey, better known as bourbon – and you can see why today’s big-money ransomware crooks might go after a company of that size and sort. According to the business media site Bloomberg, which claims to have received an anonymous tip-off from the crooks behind the attacks, the ransomware crooks involved are the infamous REvil or Sodinokibi gang. The REVil crew make up one of what you might call a “new wave” of ransomware operators who practice three-stage attacks that end in double-barrelled blackmail: First, they break into a victim’s network and...

Recently, the US and UK cybersecurity agencies have issued a joint security alert about an ongoing malware attack. The QSnatch malware is actively targeting QNAP devices and has infected thousands of them already.   Users must ensure updating their devices with security fixes to avoid exploitation. US UK Cybersec Warn Of QSnatch Malware In a joint alert from the United States Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC) have warned of active QSnatch malware attacks. Briefly, they presented their findings regarding a new strain of QSnatch malware. While the malware vector remains unknown, the firms believe that it attacks a vulnerable device as the malicious code runs with it. The malware affects the device firmware whilst allowing the attacker to connect with the C&C by using a domain generation algorithm (DGA).  It keeps generating different domain names to communicate with the C&C. QSnatch exhi...

New Android malware has been discovered that steals data such as credit card details, password from 337 applications. This included some of the popular apps such as Amazon, Gmail, Uber, Netflix, and more. Highlights The malware was discovered by a mobile security firm Threatfabric. The malware is being distributed as fake Google update packages offered on third party websites. The malware is capable of performing intrusive operations such as Perform SMS floods, start specific apps, show custom push notifications, perform SMS floods, sabotage mobile antivirus apps. About the malware The malware is based on the leaked source code of another malware Xerxes. Again, xerxes is based on the strains of other malwares. Blackrock is completely enhanced with stealing passwords and credit card details. It collects data through overlays. Working of the malware The Malware asks for credit card setails and login credentials before the user enters the app. It asks for phone’s accessibility feature. It...

Something normal happened on Twitter earlier this afternoon. Someone claiming to be Elon Musk started tweeting an obvious scam to entice his loyal bootlickers to send bitcoin to a random cryptocurrency wallet. This happens all the time, but the strange thing about today was that the tweets were coming from Musk’s  verified account . And nearly identical tweets were coming from accounts of people like Bill Gates, Jeff Bezos, Kanye West, Joe Biden, Barack Obama,  Warren Buffett,  every major crypto-exchange , and I’m quickly losing track of all of ‘em. This is obviously the result of a Twitter hack the likes of which we’ve never seen before. A spokesperson for the social network told Gizmodo that they are aware of the situation and will issue a statement shortly, which they did right before publication. The hackers appear to be using a number of different wallets but the address being used on tweets from Musk and Gates has received around $59,000 worth of bitcoin so far. Th...

WATCH DOGS 2 IS NOW FREE!!! Ubisoft announced that anybody who watched this morning’s Ubisoft Forward event would be able to claim Watch Dogs 2 for free. There were issues with redeeming during the Livestream, due to so many people trying to log in at once, so they’ve now made this available for all users. You just need to head to THIS website,  log in with your uPlay account and then Watch Dogs 2 should appear in your account soon after.

According to a new report, 127 home routers developed by seven different large vendors affected with multiple critical security flaws. The examination was done by researchers on several aspects such as firmware updates, operating systems, known critical vulnerabilities, and Cryptographic functions. The study says there is no single router without known critical vulnerabilities, the research conducted by Germany’s Fraunhofer Institute for Communication, Information Processing and Ergonomics (FKIE) and looked at 127 router models from ASUS, AVM, D-Link, Linksys, Netgear, TP-Link, and Zyxel. Home Routers Affected More than 90% of the router running Linux OS, one-third of the routers running with an older version of Linux kernel version(2.6.36) updated in 2011. The routers found to be affected with 53 critical-rated vulnerabilities, the worst-case regarding high severity CVEs is the Linksys WRT54GL powered by the oldest kernel. “AVM does a better job than the other vendors regarding most a...

Once again, Cerberus malware has emerged as a threat to users after appearing on the Google Play Store. The malware posed as a cryptocurrency converter app to trick users, thus reaching thousands of downloads. Cerberus Posing As Cryptocurrency App Researchers from Avast found Cerberus malware appearing on Google Play Store. The malware hid behind a cryptocurrency converter app. As explained in their post, the app seemingly aims at Spanish users. It bears the name “Calculadora de Moneda” which translates as “Currency Calculator” in English. Considering the niche chosen, it seems that malware basically attempted to steal users’ banking data, which the users would need to enter while converting their cryptocurrency to fiat money. Briefly, the researchers observed that the app remained harmless for a few initial weeks, seemingly to gather users (or victims). This also allowed the app to escape security check by Google Play Protect. However, the app did bear malicious malware dropper code w...

Google Has Removed These Apps With Malware, Uninstall Them Now! Data uploaded to hackers The  Google  PlayStore was hit with malware-ridden apps as the company recently removed 11 applications from its platform that were infected with the Joker malware. It was last year that the Joker malware has been reported and it was observed that it was spreading rapidly. As per the latest report by  Check Point’s research , a new variant of the malware has been discovered on the PlayStore. The update to the Joker malware can download additional threats to the device which subscribes the users to premium services of apps without their consent. You can also read more about the threat in a detailed report  here. Snapshot:- List of apps removed: com.imagecompress. android com.relax.relaxation.androidsms com.cheery.message.sendsms (two different instances) com.peason.lovinglovemessage com.contact.withme.texts com.hmvoice.friendsms com.file.recovefiles com.LPlocker.lockapps com.remin...