The APT32 group has been active since at least 2013, according to the experts it is astate-sponsored hacking group. The hackers hit organizations across multiple industries and have also targeted foreign governments, dissidents, and journalists.
Source: securityaffairs.co
John McAfee, founder of the security software company, revealed on Friday that he charges $105,000 USD to post a tweet promoting a client’s cryptocurrency to his 813,000 Twitter followers.
Source: vice.com
The U.S. Secret Service is warning financial institutions about a new scam involving the temporary theft of chip-based debit cards issued to large corporations. In this scheme, the fraudsters intercept new debit cards in the mail and replace the chips on the cards with chips from old cards. When the unsuspecting business receives and activates the modified card, thieves can start draining funds from the account.
Rarog has been seen primarily used to mine the Monero cryptocurrency, however, it has the capability to mine others. It comes equipped with a number of features, including providing mining statistics to users, configuring various processor loads for the running miner, the ability to infect USB devices, and the ability to load additional DLLs on the victim.
Source: paloaltonetworks.com
Tracking the myriad cryptocurrencies as they ping around the world en masse every day is no simple task. Ask 27-year-old British entrepreneur Jonathan Levin, co-founder and chief operating officer of Chainalysis, one of the hottest companies in the burgeoning business of digital currency tracking. In its early days, in 2014, Chainalysis would do its best to retroactively monitor transactions and follow the money of nefarious types on the blockchain, largely for the benefit of U.S. government investigators hunting fraudsters and launderers.
The Department of Justice’s Office of the Inspector General (OIG) last week released a new report that supports what EFF has long suspected: that the FBI’s legal fight with Apple in 2016 to create backdoor access to a San Bernardino shooter’s iPhone was more focused on creating legal precedent than it was on accessing the one specific device.
India virtually banned cryptocurrencies like bitcoin with the Reserve Bank of India barring regulated entities from providing services to any individual or business dealing in digital currencies. The central bank has given three months to regulated entities like banks to unwind their positions with the entities related to cryptocurrencies, RBI Deputy Governor BP Kanungo said in a media conference. The regulator, however, decided that it will promote the use of blockchain – a public ledger that serves as the backbone of bitcoin – in financial services for strengthening transparency and improving inclusion.
For the $12 cost of a domain, I was able to rank in Google search results with Amazon, Walmart etc. for high value money terms in the US. The Adwords bid price for some these terms is currently around $1 per click, and companies are spendings 10s of thousands of dollars a month to appear as ads on these search results, and I was appearing for free.
The promise of cryptocurrencies, and blockchain technology in general, is decentralization. Proponents say that if power is spread out to many different people and groups, then no single entity can impose its agenda on the whole network. In practice, however, cryptocurrency communities rely on many centralized tools.
For example, much of the discussion within cryptocurrency communities takes place on Twitter and Reddit. Using popular services like these is good for accessibility, but occasionally relying on an mainstream entity backfires on the cryptocurrency proponents.
The Intel Remote Keyboard product is an Android and iOS app that works in conjunction with Intel’s mini-PC platform called Next Unit of Computing (NUC) and with the chipmaker’s Compute Stick. NUCs are similar in size and function to Raspberry Pi systems. Compute Sticks are about the size of a large flash drive and are single-board computers used both in classrooms, kiosks and in some network computer environments.
This week, Saks Fifth Avenue, Saks Off 5th, and Lord & Taylor department stores—all owned by The Hudson’s Bay Company—acknowledged a data breach impacting more than five million credit and debit card numbers. The culprits? The same group that’s spent the last few years pulling off data heists from Omni Hotels & Resorts, Trump Hotels, Jason’s Deli, Whole Foods, Chipotle: A mysterious group known as Fin7.
Those figures suggest that the total number of visits to these typosquatting sites in the first quarter of 2018 was approximately 12 million, or almost50 million hits per year. Certainly, not everyone visiting these sites will have the experience that Chambers’ users reported (being bombarded with misleading malware alerts and redirected to scammy and spammy Web sites), but it seems clear this network could make its operators a pretty penny regardless of the content that ends up getting served through it.
Some Intel processors will not receive security patches for the Spectre (variant 2) side-channel analysis attack.
Source: thehackernews.com
In recent months, the topic of cryptocurrency has been a permanent news fixture — the value of digital money has been see-sawing spectacularly. Such pyrotechnics could hardly have escaped the attention of scammers, which is why cryptocurrency fluctuations have gone hand in hand with all kinds of stories. These include hacked exchanges, Bitcoin and Monero ransoms, and, of course, hidden mining.
Source: securelist.com
In Europe, an Internet user can force Google to hide search results that are inaccurate or just too personal. But Americans don’t have the same legal protections — even in the most extreme cases.
Source: npr.org
At the 2018 Deconomy conference in Seoul, South Korea, Buterin and Wright were both booked as speakers, and the sparks flew. During question period for a panel that included Wright, Buterin (according to audience video from multiple angles posted to social media) stood up in the audience and asked, “Given he makes so many non-sequiturs and mistakes, why is this fraud allowed to speak at this conference?” The audience, video shows, went wild.
On Monday, the US Securities and Exchange Commission (SEC) filed a complaint against the masterminds of an initial coin offering (ICO) promoted by the boxer Floyd Mayweather and producer DJ Khaled, charging them with fraud. The founders were separately arrested and charged by law enforcement.
Source: vice.com
The two founders of a cryptocurrency firm called Centra have been charged with with carrying out a fraudulent initial coin offering (ICO) by the Securities and Exchange Commission (SEC). Centra raised $32 million via an ICO which was promoted by boxer Floyd Mayweather.
Sohrab ‘Sam’ Sharma and Robert Farkas, co-founders of Centra were arrested.
Source: cnbc.com
After attending 34C3 in Leipzig at the end of December, in which we (Zlatan and me) met with some of you, and had a lot of fun, I took some time off to travel Europe and fall victim to the horrible Influenza virus that so many people caught this year. After a couple more weeks of bed rest, I continued my saga in trying to find the real entry point of the Intel FSP-S module.
Today let’s scope in on backdooring some plugins for popular software. I will be covering a bunch of other programs, mainly stuff already on my computer.
Source: gironsec.com