Archive for July 2015

Hacking Team RCSAndroid Spying Tool Listens to Calls; Roots Devices to Get In

Following news that iOS devices are at risk of spyware related to the Hacking Team, the saga continues into the Android sphere. We found th...

RCSAndroid — Advanced Android Hacking Tool Leaked Online

BDxoul 11:49 AM

BDxoul

As digging deeper and deeper into the huge Hacking Team data dump, security researchers are finding more and more source code, ...

Bug in OpenSSH Opens Linux Machines to Password Cracking Attack

BDxoul 11:46 AM

BDxoul

A simple but highly critical vulnerability recently disclosed in the most widely used OpenSSH software allows attackers to try ...

WordPress 4.2.3 Security Update Released, Patches Critical Vulnerability

BDxoul 11:36 AM

BDxoul

WordPress has just released the new version of its content management system (CMS), WordPress version 4.2.3 , to fix a critica...

Nepal Insurance company ltd website hacked

BDxoul 11:34 AM

BDxoul

Nepal Insurance company website has been hacked by us the unknown hacker they call themselves a Anonymous GurkhaS . It seems like the ar...

Subscribe to: Posts (Atom)

Hacking Team RCSAndroid Spying Tool Listens to Calls; Roots Devices to Get In

BDxoul 0 bankingmalware, deepweb, ransomware, security, smartphone hacking Friday, July 24, 2015

<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Following news that iOS devices are at risk of spyware related to the Hacking Team, the saga continues into the Android sphere. We found that among the leaked files is the code for Hacking Team’s open-source malware suite RCSAndroid (Remote Control System Android), which was sold by the company as a tool for monitoring targets. (Researchers have been aware of this suite as early as 2014.)</div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
The RCSAndroid code can be considered one of the most professionally developed and sophisticated Android malware ever exposed. The leak of its code provides cybercriminals with a new weaponized resource for enhancing their surveillance operations.</div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Based on the leaked code, the RCSAndroid app can do the following intrusive routines to spy on targets:</div>
<ul style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">Capture screenshots using the “screencap” command and framebuffer direct reading</li>
<li style="list-style-type: inherit; padding-left: 13px;">Monitor clipboard content</li>
<li style="list-style-type: inherit; padding-left: 13px;">Collect passwords for Wi-Fi networks and online acco;.unts, including Skype, Facebook, Twitter, Google, WhatsApp, Mail, and LinkedIn</li>
<li style="list-style-type: inherit; padding-left: 13px;">Record using the microphone</li>
<li style="list-style-type: inherit; padding-left: 13px;">Collect SMS, MMS, and Gmail messages</li>
<li style="list-style-type: inherit; padding-left: 13px;">Record location</li>
<li style="list-style-type: inherit; padding-left: 13px;">Gather device information</li>
<li style="list-style-type: inherit; padding-left: 13px;">Capture photos using the front and back cameras</li>
<li style="list-style-type: inherit; padding-left: 13px;">Collect contacts and decode messages from IM accounts, including Facebook Messenger, WhatsApp, Skype, Viber, Line, WeChat, Hangouts, Telegram, and BlackBerry Messenger.</li>
<li style="list-style-type: inherit; padding-left: 13px;">Capture real-time voice calls in any network or app by hooking into the “mediaserver” system service</li>
</ul>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em><strong>RCSAndroid in the Wild</strong></em></div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Our analysis reveals that this RCSAndroid (AndroidOS_RCSAgent.HRX) has been in the wild since 2012. Traces of its previous uses in the wild were found inside the configuration file:</div>
<ul style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">It was configured to use a Command-and-control (C&C) server in the United States; however, the server was bought from a host service provider and is now unavailable.</li>
</ul>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<img alt="" src="http://blog.trendmicro.com/trendlabs-security-intelligence/files/2015/07/RCSAndroid_01.png" style="border: none; max-width: 650px; padding: 3px 5px;" /></div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em>Figure 1. C&C host in configuration file</em></div>
<ul style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">It was configured to activate via SMS sent from a Czech Republic number. Attackers can send SMS with certain messages to activate the agent and trigger corresponding action. This can also define what kind of evidences to collect.</li>
</ul>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<img alt="" class="aligncenter" src="http://blog.trendmicro.com/trendlabs-security-intelligence/files/2015/07/RCSAndroid_02.png" style="border: none; max-width: 650px; padding: 3px 5px;" /></div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em>Figure 2. Czech phone number in configuration file</em></div>
<ul style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px; text-align: left;">Based on emails leaked in the dump, a number of Czech firms appear to be in business with the Hacking team, including a major IT partner in the Olympic Games.</li>
</ul>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<img alt="" class="aligncenter" src="http://blog.trendmicro.com/trendlabs-security-intelligence/files/2015/07/RCSAndroid_03.png" style="border: none; max-width: 650px; padding: 3px 5px;" /></div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em>Figure 3. Upgrading support for a Czech customer</em></div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<strong>Dropping Cluster Bombs</strong></div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
RCSAndroid is a threat that works like a cluster bomb in that it deploys multiple dangerous exploits and uses various techniques to easily infect Android devices. While analyzing the code, we found that the whole system consists of four critical components, as follows:</div>
<ol style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin: 0px 0px 0px 10px; padding: 0px 0px 0px 35px;">
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">penetration solutions, ways to get inside the device, either via SMS/email or a legitimate app</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">low-level native code, advanced exploits and spy tools beyond Android’s security framework</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">high-level Java agent – the app’s malicious APK</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">command-and-control (C&C) servers, used to remotely send/receive malicious commands</li>
</ol>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Attackers use two methods to get targets to download RCSAndroid.</div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
The first method is to send a specially crafted URL to the target via SMS or email. The URL will trigger exploits for arbitrary memory read (<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2825" style="color: red; font-size: 13px; text-decoration: none;">CVE-2012-2825</a>) and heap buffer overflow (<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2871" style="color: red; font-size: 13px; text-decoration: none;">CVE-2012-2871</a>) vulnerabilities in the default browsers of Android versions 4.0 Ice Cream Sandwich to 4.3 Jelly Bean, allowing another local privilege escalation exploit to execute. When root privilege is gained, a shell backdoor and malicious RCSAndroid agent APK file will be installed</div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<img alt="" class="" src="http://blog.trendmicro.com/trendlabs-security-intelligence/files/2015/07/RCSAndroid_04.png" style="border: none; max-width: 650px; padding: 3px 5px;" /></div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em>Figure 4. Remote exploits demonstrated for customers in leaked mails</em></div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
The second method is to use a stealthy backdoor app such as <a href="http://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/ANDROIDOS_HTBENEWS.A" style="color: red; font-size: 13px; text-decoration: none;">ANDROIDOS_HTBENEWS.A</a>, which was designed to bypass Google Play.</div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
The role of ANDROIDOS_HTBENEWS.A and the malicious APK mentioned in the first method is to exploit a local privilege escalation vulnerability in Android devices. Hacking Team has been known to use both CVE-2014-3153 and CVE-2013-6282 in their attacks. The said exploits will root the device and install a shell backdoor.</div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<img alt="" class="" src="http://blog.trendmicro.com/trendlabs-security-intelligence/files/2015/07/RCSAndroid_05.png" style="border: none; max-width: 650px; padding: 3px 5px;" /></div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em>Figure 5. Commands list of shell backdoor</em></div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
The shell backdoor then installs the RCSAndroid agent. This agent has two core modules, the Evidence Collector and the Event Action Trigger.</div>
<ul style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">The Evidence Collector module is responsible for the spying routines outlined above. One of its most notable routines is capturing voice calls in real time by hooking into the “mediaserver” system service. The basic idea is to hook the voice call process in mediaserver.<ul style="list-style-type: disc; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">Take voice call playback process for example. The mediaserver will first builds a new unique track, start to play the track, loop play all audio buffer, then finally stop the playback. The raw wave audio buffer frame can be dumped in the getNextBuffer() function. With the help of the open-source <a href="https://github.com/crmulliner/adbi" style="color: red; font-size: 13px; text-decoration: none;">Android Dynamic Binary Instrumentation Toolkit</a> and root privilege, it is possible to intercept any function execution.</li>
</ul>
</li>
</ul>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<img alt="" class="" src="http://blog.trendmicro.com/trendlabs-security-intelligence/files/2015/07/RCSAndroid_06.png" style="border: none; max-width: 650px; padding: 3px 5px;" /></div>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em>Figure 6. Timing in voice call playback to hook</em></div>
<ul style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">The Event Action Trigger module triggers malicious actions based on certain events. These events can be based on time, charging or battery status, location, connectivity, running apps, focused app, SIM card status, SMS received with keywords, and screen turning on.<ul style="list-style-type: disc; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">According to the configuration pattern, these actions are registered to certain events:<ol style="margin: 0px 0px 0px 10px; padding: 0px 0px 0px 35px;">
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Sync configuration data, upgrade modules, and download new payload (This uses transport protocol ZProtocol encrypted by AES/CBC/PKCS5Padding algorithm to communicate with the C&C server.)</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Upload and purge collected evidence</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Destroy device by resetting locking password</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Execute shell commands</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Send SMS with defined content or location</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Disable network</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Disable root</li>
<li style="list-style-type: inherit; margin: 0px; padding: 0px 0px 0px 13px;">Uninstall bot</li>
</ol>
</li>
</ul>
</li>
</ul>
<div align="center" style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
To avoid detection and removal of the agent app in the device memory, the RCSAndroid suite also detects emulators or sandboxes, obfuscates code using DexGuard, uses ELF string obfuscator, and adjusts the OOM (out-of-memory) value. Interestingly, one unused feature of the app is its ability to manipulate data in the Android package manager to add and remove permissions and components as well as hide the app icon.</div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<em><strong>Recommendations</strong></em></div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Popular mobile platforms like Android are common targets for organized or commercialized monitoring operations. Attackers know that rooting devices via malware exploits is an effective means to control devices and gather information from them. In a root broken device, security is a fairy tale.</div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Take note of the following best practices to prevent this threat from getting in your device:</div>
<ul style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px; margin-left: 10px;">
<li style="list-style-type: inherit; padding-left: 13px;">Disable app installations from unknown, third-party sources.</li>
<li style="list-style-type: inherit; padding-left: 13px;">Constantly update your Android devices to the latest version to help prevent exploits, especially in the case of RCSAndroid which can affect only up to version 4.4.4 KitKat. Note, however, that based on the leak mail from a customer inquiry, Hacking Team was in the process of developing exploits for Android 5.0 Lollipop.</li>
<li style="list-style-type: inherit; padding-left: 13px;">Install a mobile security solution to secure your device from threats.</li>
</ul>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
The leaked RCSAndroid code is a commercial weapon now in the wild. Mobile users are called on to be on top of this news and be on guard for signs of monitoring. Some indicators may come in the form of peculiar behavior such as unexpected rebooting, finding unfamiliar apps installed, or instant messaging apps suddenly freezing.</div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Should a device become infected, this backdoor cannot be removed without root privilege. Users may be required the help of their device manufacturer to get support for firmware flashing.</div>
<div style="background-color: #f9f7f8; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
Trend Micro offers security for Android mobile devices through <a href="http://www.trendmicro.com/us/home/products/mobile-solutions/android-security/" style="color: red; font-size: 13px; text-decoration: none;">Mobile Security for Android™</a> to protect against these types of attacks. Find out more about the <a href="http://www.trendmicro.com/vinfo/us/security/news/mobile-safety/7-android-security-hacks-you-need-to-do-right-now" style="color: red; font-size: 13px; text-decoration: none;">7 Android Security Hacks You Need to Do Right Now</a> to keep your mobile data safe.</div>

Hacking Team RCSAndroid Spying Tool Listens to Calls; Roots Devices to Get In

Following news that iOS devices are at risk of spyware related to the Hacking Team, the saga continues into the Android sphere. We found th...

RCSAndroid — Advanced Android Hacking Tool Leaked Online

BDxoul 0 learn, smartphone hacking

<div class="shareinpost" style="background-color: white; font-family: arial, sans-serif; font-size: 16px; margin: 10px 0px 0px; outline: 0px; padding: 8px 15px;">
<div align="left" class="socialleft" style="margin: 0px; outline: 0px; padding: 0px;">
<br /></div>
</div>
<div class="post-body entry-content" style="background-color: white; font-family: arial, sans-serif; font-size: 16px; line-height: 30px !important; margin: 0px; outline: 0px; padding: 5px; text-align: justify;">
<div style="outline: 0px; padding: 0px;">
</div>
<div class="articlebodyonly" id="articlebodyonly" itemprop="articleBody" style="line-height: 35px; margin: 0px 0px 15px; outline: 0px; padding: 0px;">
<div id="aim18890388524900603729" style="margin: 0px; outline: 0px; padding: 0px;">
<div dir="ltr" style="margin: 0px; outline: 0px; padding: 0px; text-align: left;" trbidi="on">
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<div class="separator" style="clear: both; margin: 0px; outline: 0px; padding: 0px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTudBMOofTHswGh03jjXCFgyLCq-d2EZ1ZaRKF8IK7BzfTe-urYTeBTcNcEwUjz4OhB278wS-vOLav2rHxfQK1moQLGAe1vUhacBwS0LX9COx8IR4TWyq7F9pxnVGElG50Kzx7jG1PAh8L/s1600/android-hacking-tool.jpg" imageanchor="1" style="clear: left; color: #3d5a99; cursor: default; float: left; font-weight: bold; margin: 0px 1em 1em 0px; outline: none; padding: 0px; pointer-events: none;"><img alt="android-hacking-tool" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTudBMOofTHswGh03jjXCFgyLCq-d2EZ1ZaRKF8IK7BzfTe-urYTeBTcNcEwUjz4OhB278wS-vOLav2rHxfQK1moQLGAe1vUhacBwS0LX9COx8IR4TWyq7F9pxnVGElG50Kzx7jG1PAh8L/s1600/android-hacking-tool.jpg" style="border: 0px; clear: both; margin: 0px; max-width: 728px; outline: none; padding: 0px;" title="android-hacking-tool" /></a></div>
As digging deeper and deeper into the huge Hacking Team data dump, security researchers are finding more and more source code, including an advanced Android Hacking Tool.</div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
Yes, this time researchers have found a source code to a new piece of weaponized android malware that had the capability to infect millions of Android devices even when users are running latest versions of the android mobile operating system.</div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
Trend Micro researchers <a href="http://blog.trendmicro.com/trendlabs-security-intelligence/hacking-team-rcsandroid-spying-tool-listens-to-calls-roots-devices-to-get-in/" rel="nofollow" style="color: #3d5a99; font-weight: bold; margin: 0px; outline: none; padding: 0px;" target="_blank">found</a> that the Italian spyware company was selling <b style="margin: 0px; outline: 0px; padding: 0px;">RCSAndroid (Remote Control System Android)</b>, which they says, is one of the<i style="margin: 0px; outline: 0px; padding: 0px;"> "most professionally developed and sophisticated"</i> pieces of Android malware a.k.a Android hacking tool they have ever seen.</div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
</div>
</div>
</div>
<div id="insidearticlead" style="clear: both; margin: 15px 10px -10px 0px; outline: 0px; padding: 0px;">
<ins class="adsbygoogle" data-ad-client="ca-pub-7983783048239650" data-ad-slot="3325994802" data-adsbygoogle-status="done" style="display: inline-block; height: 90px; margin: 0px; outline: 0px; padding: 0px; width: 728px;"><ins id="aswift_0_expand" style="background-color: transparent; border: none; display: inline-table; height: 90px; margin: 0px; outline: 0px; padding: 0px; position: relative; visibility: visible; width: 728px;"><ins id="aswift_0_anchor" style="background-color: transparent; border: none; display: block; height: 90px; margin: 0px; outline: 0px; padding: 0px; position: relative; visibility: visible; width: 728px;"><iframe allowfullscreen="true" allowtransparency="true" frameborder="0" height="90" hspace="0" id="aswift_0" marginheight="0" marginwidth="0" name="aswift_0" scrolling="no" style="left: 0px; margin: 0px; outline: 0px; padding: 0px; position: absolute; top: 0px;" vspace="0" width="728"></iframe></ins></ins></ins></div>
<div id="aim28890388524900603729" style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="margin: 0px; outline: 0px; padding: 0px;">
RCSAndroid is a sophisticated, real-world surveillance and hacking tool that provides even unskilled hackers to deploy one of the world's more advanced surveillance suites for Google's mobile operating system Android.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="margin: 0px; outline: 0px; padding: 0px;">
List of Creepy Features of Android Hacking Tool</h3>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
Once installed on targets' devices, RCSAndroid would have helped government and law enforcement agencies around the world to completely compromise and monitor Android devices remotely.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
Here are some of the features of RCSAndroid include the ability to:</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
</div>
<ul style="margin: 20px; outline: 0px; padding: 0px 0px 0px 5px;">
<li style="margin: 0px; outline: 0px; padding: 0px;">Capture screenshots using the 'screencap' command and framebuffer direct reading</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Collect passwords for Wi-Fi networks and online accounts, including WhatsApp, Facebook, Twitter, Google, Skype, and LinkedIn</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Collect SMS, MMS, and Gmail messages</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Capture real-time voice calls in any network or application by hooking into the 'mediaserver' system service</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Capture photos using the front and back cameras</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Monitor clipboard content</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Record using the microphone</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Record location</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Gather device information</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Collect contacts and decode messages from IM accounts, including WhatsApp, Telegram, Facebook Messenger, Skype, WeChat, Viber, Line, Hangouts, and BlackBerry Messenger.</li>
</ul>
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="margin: 0px; outline: 0px; padding: 0px;">
RCSAndroid Android hacking tool had been in the wild since 2012 and has been known to Citizen Lab researchers since last year when the security firm detailed a Hacking Team backdoor used against Android users in Saudi Arabia.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="margin: 0px; outline: 0px; padding: 0px;">
How RCSAndroid hacking tool infects a Target?</h3>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
RCSAndroid uses two different methods to infect targeted Android devices.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<b style="margin: 0px; outline: 0px; padding: 0px;">1. </b>Hacking Team used text and email messages containing specially crafted URLs that triggered exploits for several vulnerabilities (CVE-2012-2825 and CVE-2012-2871) present in the default browsers of Android 4.0 Ice Cream to 4.3 Jelly Bean, allowing the attacker to gain root privileges, and install the RCSAndroid APK.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<b style="margin: 0px; outline: 0px; padding: 0px;">2. </b>The company used backdoor apps such as "BeNews" available on the official Google Play Store to take advantage of a local privilege escalation bug to root the device and install the RCSAndroid agent.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="margin: 0px; outline: 0px; padding: 0px;">
<b style="margin: 0px; outline: 0px; padding: 0px;">RCSAndroid has</b><b style="margin: 0px; outline: 0px; padding: 0px;"> 4 'critical components'</b>:</h3>
<div style="margin: 0px; outline: 0px; padding: 0px;">
</div>
<ul style="margin: 20px; outline: 0px; padding: 0px 0px 0px 5px;">
<li style="margin: 0px; outline: 0px; padding: 0px;"><b style="margin: 0px; outline: 0px; padding: 0px;">Penetration solutions</b> – Methods to get into the device, either via SMS or email or a legitimate app</li>
<li style="margin: 0px; outline: 0px; padding: 0px;"><b style="margin: 0px; outline: 0px; padding: 0px;">Low-level native code</b> – Advanced exploits and spy tools beyond Android's security framework</li>
<li style="margin: 0px; outline: 0px; padding: 0px;"><b style="margin: 0px; outline: 0px; padding: 0px;">High-level Java agent</b> – The application's malicious APK</li>
<li style="margin: 0px; outline: 0px; padding: 0px;"><b style="margin: 0px; outline: 0px; padding: 0px;">Command-and-control (C&C) servers </b>– Servers used to remotely send or receive malicious commands</li>
</ul>
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="margin: 0px; outline: 0px; padding: 0px;">
Given that the source code of RCSAndroid is now available to everybody, it will likely put Android users in danger. So, if you own a smartphone running any <b style="margin: 0px; outline: 0px; padding: 0px;"><i style="margin: 0px; outline: 0px; padding: 0px;">Android version from 4.0 Ice Cream to 4.3 Jelly Bean</i></b>, you need to<b style="margin: 0px; outline: 0px; padding: 0px;"> 'Get Rid of it Today</b>.'</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-left-width: 8px; margin: 10px; outline: 0px; padding: 10px;">
<i style="margin: 0px; outline: 0px; padding: 0px;">"The leaked RCSAndroid code is a commercial weapon now in the wild," </i>security researchers wrote in a blog post. <i style="margin: 0px; outline: 0px; padding: 0px;">"Mobile users are called on to be on top of this news and be on guard for signs of monitoring. Some indicators may come in the form of peculiar behavior such as unexpected rebooting, finding unfamiliar apps installed, or instant messaging apps suddenly freezing."</i></blockquote>
<div style="margin: 0px; outline: 0px; padding: 0px;">
Users of <b style="margin: 0px; outline: 0px; padding: 0px;">Android 5.0 Lollipop</b> may also be in danger of being targeted, as some emails sent among Hacking Team executives indicates that "Hacking Team was in the process of developing exploits for Android 5.0 Lollipop," but so far there is no such indication.</div>
</div>
</div>
</div>

RCSAndroid — Advanced Android Hacking Tool Leaked Online

As digging deeper and deeper into the huge Hacking Team data dump, security researchers are finding more and more source code, ...

Bug in OpenSSH Opens Linux Machines to Password Cracking Attack

BDxoul 0 BOTNET, browsersecurity, databreach, ddosattack, passwordhacking, smartphone hacking

<div class="shareinpost" style="background-color: white; font-family: arial, sans-serif; font-size: 16px; margin: 10px 0px 0px; outline: 0px; padding: 8px 15px;">
<div align="left" class="socialleft" style="margin: 0px; outline: 0px; padding: 0px;">
<br /></div>
</div>
<div class="post-body entry-content" style="background-color: white; font-family: arial, sans-serif; font-size: 16px; line-height: 30px !important; margin: 0px; outline: 0px; padding: 5px; text-align: justify;">
<div style="outline: 0px; padding: 0px;">
</div>
<div class="articlebodyonly" id="articlebodyonly" itemprop="articleBody" style="line-height: 35px; margin: 0px 0px 15px; outline: 0px; padding: 0px;">
<div id="aim12669413786372755985" style="margin: 0px; outline: 0px; padding: 0px;">
<div dir="ltr" style="margin: 0px; outline: 0px; padding: 0px; text-align: left;" trbidi="on">
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<div class="separator" style="clear: both; margin: 0px; outline: 0px; padding: 0px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8yGMGhFb7eqRUhWRNZAu5mifMhRPdN15_Y_VEqAuXDtIm0vsm_Ti2EksdAW0uWBAf2asDvzXyxsxPGc1GRq9RY1KdaOdJgTQvhAWxOiP2fMjPY7RH-BMcmFeIwHh-AIDzZandedyUI8P1/s1600/openssh-password-cracking-tool.png" imageanchor="1" style="clear: left; color: #3d5a99; cursor: default; float: left; font-weight: bold; margin: 0px 1em 1em 0px; outline: none; padding: 0px; pointer-events: none;"><img alt="openssh-password-cracking-tool" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8yGMGhFb7eqRUhWRNZAu5mifMhRPdN15_Y_VEqAuXDtIm0vsm_Ti2EksdAW0uWBAf2asDvzXyxsxPGc1GRq9RY1KdaOdJgTQvhAWxOiP2fMjPY7RH-BMcmFeIwHh-AIDzZandedyUI8P1/s1600/openssh-password-cracking-tool.png" style="border: 0px; clear: both; margin: 0px; max-width: 728px; outline: none; padding: 0px;" title="openssh-password-cracking-tool" /></a></div>
A simple but highly critical vulnerability recently disclosed in the most widely used OpenSSH software allows attackers to try thousands of password login attempts per connection in a short period.</div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
OpenSSH is the most popular software widely used for secure remote access to Linux-based systems. Generally, the software allows 3 to 6 Password login attempts before closing a connection, but a new vulnerability lets attackers <b style="margin: 0px; outline: 0px; padding: 0px;">perform thousands of authentication requests remotely</b>.</div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
OpenSSH servers with <b style="margin: 0px; outline: 0px; padding: 0px;"><i style="margin: 0px; outline: 0px; padding: 0px;">keyboard-interactive authentication enabled</i></b>, including FreeBSD Linux, can be exploited to carry out the brute force attack on OpenSSH protocol, a security researcher with online alias <b style="margin: 0px; outline: 0px; padding: 0px;">KingCope</b> explained in a <a href="https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/" rel="nofollow" style="color: #3d5a99; font-weight: bold; margin: 0px; outline: none; padding: 0px;" target="_blank">blog post</a>.</div>
<div style="margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
</div>
</div>
</div>
<div id="insidearticlead" style="clear: both; margin: 15px 10px -10px 0px; outline: 0px; padding: 0px;">
<ins class="adsbygoogle" data-ad-client="ca-pub-7983783048239650" data-ad-slot="3325994802" data-adsbygoogle-status="done" style="display: inline-block; height: 90px; margin: 0px; outline: 0px; padding: 0px; width: 728px;"><ins id="aswift_0_expand" style="background-color: transparent; border: none; display: inline-table; height: 90px; margin: 0px; outline: 0px; padding: 0px; position: relative; visibility: visible; width: 728px;"><ins id="aswift_0_anchor" style="background-color: transparent; border: none; display: block; height: 90px; margin: 0px; outline: 0px; padding: 0px; position: relative; visibility: visible; width: 728px;"><iframe allowfullscreen="true" allowtransparency="true" frameborder="0" height="90" hspace="0" id="aswift_0" marginheight="0" marginwidth="0" name="aswift_0" scrolling="no" style="left: 0px; margin: 0px; outline: 0px; padding: 0px; position: absolute; top: 0px;" vspace="0" width="728"></iframe></ins></ins></ins></div>
<div id="aim22669413786372755985" style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><h3 style="margin: 0px; outline: 0px; padding: 0px;">
Exploit for the Vulnerability RELEASED </h3>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
Hackers could widely exploit the vulnerability because the keyboard-interactive authentication is by default enabled on most of the systems.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
Researcher has also released a proof-of-concept exploit code, which is just a command, as follows:</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-left-width: 8px; margin: 10px; outline: 0px; padding: 10px;">
<b style="margin: 0px; outline: 0px; padding: 0px;"><i style="margin: 0px; outline: 0px; padding: 0px;">ssh -lusername -oKbdInteractiveDevices=`perl -e 'print "pam," x 10000'` targethost</i></b></blockquote>
<div style="margin: 0px; outline: 0px; padding: 0px;">
This simple command effectively allows up to 10,000 password attempts within two minutes of login grace time.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<i style="margin: 0px; outline: 0px; padding: 0px;">"The crucial part is that if the attacker requests 10,000 keyboard-interactive devices OpenSSH will gracefully execute the request and will be inside a loop to accept passwords until the specified devices are exceeded,"</i> KingCope said.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
However, depending on the connection and the victim's Linux machine, two minutes of 'grace period' and thousands of login attempts are enough to achieve successful login by using <b style="margin: 0px; outline: 0px; padding: 0px;"><i style="margin: 0px; outline: 0px; padding: 0px;">dictionary attack</i></b>with a word-list of most commonly used passwords.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
The vulnerability is present in the <b style="margin: 0px; outline: 0px; padding: 0px;">latest version of OpenSSH</b>, which is Version 6.9.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="margin: 0px; outline: 0px; padding: 0px;">
How to Mitigate the Attack?</h3>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
Administrators are advised to take following precautions until OpenSSH releases an official patch to address the issue:</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
</div>
<ul style="margin: 20px; outline: 0px; padding: 0px 0px 0px 5px;">
<li style="margin: 0px; outline: 0px; padding: 0px;">Use a cryptographic  key pair that is at least <b style="margin: 0px; outline: 0px; padding: 0px;">2,048 Bits</b> in length</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Always Use a <b style="margin: 0px; outline: 0px; padding: 0px;">Strong Password</b> to protect your Private Key</li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Reducing the <b style="margin: 0px; outline: 0px; padding: 0px;">grace period to 20 or 30 seconds</b></li>
<li style="margin: 0px; outline: 0px; padding: 0px;">Use <b style="margin: 0px; outline: 0px; padding: 0px;">Fail2Ban</b> or <b style="margin: 0px; outline: 0px; padding: 0px;">Pam-Shield </b>to limit failed login attempts</li>
</ul>
</div>
</div>
</div>

Bug in OpenSSH Opens Linux Machines to Password Cracking Attack

A simple but highly critical vulnerability recently disclosed in the most widely used OpenSSH software allows attackers to try ...

WordPress 4.2.3 Security Update Released, Patches Critical Vulnerability

BDxoul 0 security, SQLINJECTION

WordPress 4.2.3 Security Update Released, Patches Critical Vulnerability

WordPress has just released the new version of its content management system (CMS), WordPress version 4.2.3 , to fix a critica...

Nepal Insurance company ltd website hacked

BDxoul 0 news

<span style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;">Nepal Insurance company website has been hacked by us the unknown hacker they call themselves a </span><br />
<h2 aria-hidden="true" class="uiHeaderTitle" style="background-color: white; color: #1e2d4c; font-family: helvetica, arial, sans-serif; font-size: 16px; margin: 0px; outline: none; padding: 0px;">
Anonymous GurkhaS <span style="font-weight: normal;"> . It seems like the are Nepali hacker. They also said they are a White hat hacker and by hacking they just want to aware the nepali developers about security.</span></h2>
<div>
<span style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;">We Will Hack More famous sites</span><br style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;" /><span style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;">No Harmed has been done </span><i class="_4-k1 img sp_fM-mz8spZ1b sx_5371b4" style="background-color: white; background-image: url(https://fbstatic-a.akamaihd.net/rsrc.php/v2/yx/r/pimRBh7B6ER.png); background-position: 0px -340px; background-repeat: no-repeat; background-size: auto; color: #141823; display: inline-block; font-family: helvetica, arial, sans-serif; font-size: 14px; height: 16px; line-height: 19.3199996948242px; vertical-align: -3px; width: 16px;"><u style="left: -999999px; position: absolute;">smile emoticon</u></i><span style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;"> </span><br style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;" /><span style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;">All your Datas are with us</span><br style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;" /><span style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;">Expect Us......</span><br style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;" /><a class="_58cn" data-ft="{"tn":"*N","type":104}" href="https://www.facebook.com/hashtag/anonymous_gurkha_?source=feed_text&story_id=417210648480003" style="background-color: white; color: #3b5998; cursor: pointer; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px; text-decoration: none;"><span aria-label="hashtag" class="_58cl" style="color: #627aad;">‪#‎</span><span class="_58cm">ANONYMOUS_GURKHA_‬</span></a><span style="background-color: white; color: #141823; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px;"> </span><a class="_58cn" data-ft="{"tn":"*N","type":104}" href="https://www.facebook.com/hashtag/opnep?source=feed_text&story_id=417210648480003" style="background-color: white; color: #3b5998; cursor: pointer; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px; text-decoration: none;"><span aria-label="hashtag" class="_58cl" style="background-color: white; color: #627aad; cursor: pointer; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px; text-decoration: none;">‪#‎</span><span class="_58cm" style="background-color: white; color: #3b5998; cursor: pointer; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px; text-decoration: none;">OPNEP‬</span></a></div>
<div>
website<br style="background-color: white;" /><a href="http://www.nepalinsurance.com.np/index.php?linkId=4&lang=en" rel="nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: helvetica, arial, sans-serif; font-size: 14px; line-height: 19.3199996948242px; text-decoration: none;" target="_blank">http://www.nepalinsurance.com.np/index.php?linkId=4&lang=en</a></div>
<div>
<br /></div>
<div>
You can find their page on facebook  <a href="https://www.facebook.com/pages/Anonymous-Gurkhas-opnep" target="_blank">Anonymous Gurkhas</a></div>
<div>
<br /></div>
<div>
Some screen shot of Hackced.</div>
<div>
<br /></div>
<div>
<img src="https://scontent-sin1-1.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/s720x720/11737976_417209848480083_5928187449014328425_n.jpg?oh=0709171f6acf0d428208312cbf1049cc&oe=56126EBC" /></div>
<div>
<br /></div>
<div>
<img src="https://scontent-sin1-1.xx.fbcdn.net/hphotos-xat1/t31.0-8/s720x720/11411919_417210445146690_1666331075777745700_o.png" /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>

Nepal Insurance company ltd website hacked

Nepal Insurance company website has been hacked by us the unknown hacker they call themselves a Anonymous GurkhaS . It seems like the ar...

Socialize

Breaking News

Hacking Team RCSAndroid Spying Tool Listens to Calls; Roots Devices to Get In

RCSAndroid — Advanced Android Hacking Tool Leaked Online

Bug in OpenSSH Opens Linux Machines to Password Cracking Attack

WordPress 4.2.3 Security Update Released, Patches Critical Vulnerability

Nepal Insurance company ltd website hacked

Hacking Team RCSAndroid Spying Tool Listens to Calls; Roots Devices to Get In

RCSAndroid — Advanced Android Hacking Tool Leaked Online

Bug in OpenSSH Opens Linux Machines to Password Cracking Attack

WordPress 4.2.3 Security Update Released, Patches Critical Vulnerability

Nepal Insurance company ltd website hacked