TheHa ckerNews Sept ember2011,I ssue04
YOU' VE BEE N
HACKE D!!
NO ON EISSEC URE
edi tori alnote F r omt heE di t or
Sept ember2011,I ssue04
We l l f ol k s , ae rt hi si s s uea ndt heobv i ousi nt e ns i t yof t hei ns e c ur i t yof t hene t , I ha v eaf e wt houg ht sont heunf ee r e da c c e s st ok nowl e dg e .
I ti smor et ha na ppa r e ntwea l l l i v ei na mewhe r et hee x t e ns i v edi s s e mi na onofopi ni ons ,t houg ht sa ndi de a sa ndi nf or maona r edonet hr oug ha mode r nme t hodoft r a ns mi s s i on.T hes i mpl i c i t ya nde ffe cv e ne s sbywhi c h c omput e r sa ndne t wor k sa r eus e dt oa s s e mbl e ,s t or e ,s e a r c h,a s s oc i a t e ,r e c ov e r ,a nds ha r ei nf or maonma k ec omput e rt e c hnol og ye s pe c i a l l yr i s k yt o a ny onewhowi s he st ok e e ppe r s ona lorpr ot e c ti nf or maonf r om t hepubl i c s phe r eoroutoft hec l ut c he sofa ny onewhoi spe r c e i v e da sapr oba bl et hr e a t . Ast hi si s s ue se x pl or e s ,t hee v ol v i nga ndmor ea dv a nc e dc a pa bi l ie sofc omput e rv i r us e s ,phi s hi ng ,f r a uds c he me s ,s py wa r e ,a ndha c k i nga cv i t ys pr i ng i ngupf r om e v e r yc or ne roft heg l obea ndt hedi v e r s i t yofpr i v a c y r e l a t e d i s s ue se ng e nde r e dbyc omput e rt e c hnol og yha sl e dt oar e a s s e s s me ntoft he c onc e ptofpr i v a c ya ndofc omput e re t hi c s . Or i g i na l l y , aha c k e rwa si de n fie ds i mpl ya sa nyi ndi v i dua l whowa nt e dt ounde r s t a nde v e r yt hi nghuma ne l ypos s i bl ea boutc omput e r s .Buti twa s n’ tl ong be f or eha c k i ngc a met obel i nk e dwi t hphr e a k i ng , ( T hes k i l l ors c i e nc eof br e a k i ngt hephonene t wor k .E x a mpl e ;t oma k ei l l e g a l ,f r e el ong di s t a nc ec a l l s ) .I t wa s n’ tl ongbe f or eapl a nf or“ ha c k i nge t hi c s ”or i g i na t e df r omt hea cv ie sof t hes oc a l l e d“ or i g i na lha c k e r s ”i nt he1950sa nd1960sa tMI Ta ndS t a nf or d Uni v e r s i t y .T e c hnol og ywr i t e rS t e phe nL e v yha ss umma r i z e dt hos e“ ha c k e r e t hi c ”i nt hi swa y . 1.Ac c e s st oc omput e r ss houl dbeunl i mi t e da ndt ot a l . 2.Al l i nf or maons houl dbef r e e . 3.Aut hor i t ys houl dbemi s t r us t e da ndde c e nt r a l i z aonpr omot e d. 4.Ha c k e r ss houl dbej udg e ds ol e l ybyt he i rs k i l l sa tha c k i ng ,r a t he rt ha nby r a c e , c l a s s , a g e , g e nde r , orpos ion. 5.Comput e r sc a nbeus e dt oc r e a t ea r ta ndbe a ut y . 6.Comput e r sc a nc ha ng ey ourl i f ef ort hebe e r .
T heunder s t a ndi ngof“ Ha c k erE t hi c s ”ha st hr eema i nf uncons : 1.I tpr omot e st hebe l i e fofi ndi v i dua l a cv i t yov e ra nyf or m ofc or por a t ea ut hor i t yors y s t e mofi de a l s . 2.I ts uppor t sac ompl e t e l yf r e e ma r k e ta pp r oa c h t oe t he e x c ha n g e of n d S e p t e mb r 20 1 1 , I s su ea 0 4 a c c e s st oi nf or maon. 3.I tpr omot e st hebe l i e ft ha tc omput e r sc a nha v eabe ne fic i a la ndl i f e c ha ng i nge ffe c t . Wi t houtadoubt ,unr e s e r v e da c c e s st ot her e s our c e sa ndi nf or maonont he I nt e r ne ti sc l e a r l ya ne s s e na l me c ha ni s mf orbus i ne s sa ndbus i ne s soppor t unie s ,me di c a ls e r v i c e s ,e duc aona loppor t unie s ,a nd e mpl oy me nta nd ma nyot he rr e qui r e me nt sofmode r nl i f ea r oundt hewor l d. Butmor ei mpor t a ntt ha nma t e r i a lormone t a r yr e qui r e me nt si st heuni nt e r r upt e da c c e s st ounc e ns or e dl i f eg i v i ng ,f r e e dom s us t a i ni ngk nowl e dg eof e v e nt sa nddi s c our s e .I ti smor et ha nwr e sngaf e w dol l a r swor t hoff r e e phonec a l l sf r om t hephonec ompa ny .T hes t a k e sa r ef a rhi g he r .“ T he r e ' sa mewhe nt heope r aonoft hema c hi nebe c ome ss oodi ous ,ma k e sy ous o s i c ka the a r tt ha ty ouc a n' tt a k epa r t !Y ouc a n' te v e npa s s i v e l yt a k epa r t !And y ou' v eg ott oputy ourbodi e supont heg e a r sa ndupont hewhe e l s , upont he l e v e r s , upona l l t hea ppa r a t us-a ndy ou' v eg ott oma k ei ts t op!Andy ou' v eg ot t oi ndi c a t et ot hepe opl ewhor uni t ,t ot hepe opl ewhoowni t-t ha tunl e s s y ou' r ef r e et hema c hi newi l l bepr e v e nt e df r om wor k i nga ta l l ! ! ”T houg hpe r ha psc l oa k e d,ha c k i ngi sauni v e r s a lf or m ofc i v i ldi s obe di e nc e .I ti saf or m of l a y i ngba r et het r ut hsourbe e r sde i g nt ot r us twi t ht her a bbl eofc i v i l i z aon. Whye l s ea r et henaona l s e c ur i t ya ppa r a t us ’ ofnaonsa c r os st heg l obes e nt e nc e dt ofi ulr e s t l e s sni g ht s ?T r a ns pa r e nc y/ S unl i g hta r et hebe s tdi s i nf e c t a nt .Whe nt hel a s tf or e s ta ndi ndi g e nouspe opl e sof t hee a r t ha r eg r oundi nt o dus tbe ne a t ht hehe e l of mi l i t a r i s ma ndma t e r i a l i s mi twi l l bet ool a t e . Ha c k i ng , e x pos i ngt hemi ni onsofma mmoni sak e yc ompone ntofs us t a i ni ngt hepl a ne t a ndt hemi ndofma n. Unf e er eda c c es st ok nowl edg e, ohy ea h! Mohi tKuma r F ounde ra ndChi e fE di t or T heHa c k e rNe wsS e c ur i t yS e r v i c e s
T heHa c k erNe wsT ea m Ki s l a yBha r dwa j P a Ga l l e Pr i y a ns huS a ha y NinBha r dwa j
NoOnei sS e c ur e I nt hi se r aofi nt e r ne t , s e c ur i t yi sj us ta n i l l us i on.I ti sl i k eabl i ndma nc he c k i ng t ha tt hedoor sofhi shous ea r es e c ur e butf or g e ngt oc he c kwhe t he rt he r e a r ewa l l sa r oundi tornot . T oda yame r e s e a r c hofs ome ones howshundr e dsof r e c or dsont he m. T he r ea r es oc i a l s e c ur i t ynumbe r s ,F a c e bookpr ofil e s ,bl og s , we bs i t e s ,phonenumbe r s ,a ddr e s s e s , i nt e r e s t s , l i k e s , di s l i k e s , hobbi e s , f r i e nds i nf or ma ona nd mor et ha tr e s ul t si n t he i ronl i nebi og r a phy .T oda ye v e na c hi l di n3r dg r a dei sonF a c e book .I f y ou a r ea nol de rpe r s onwhoc a n’ twa l kora s t ude ntwhome twi t ha na c c i de ntt he r e a r es omewhowi l lpos tphot osoft he i r a c c i de ntordi s a bi l ie s .Ha c k e r sha c k e d S ony ,t heF BIha c k e dx s si nMi c r os o, a ndt hene wswer e a dof i ts howswhe r e wes t a ndi ns e ns eofs e c ur i t y .
F ori ns t a nc e , y oumi g htnotk nowt ha tr i g htnows py wa r ei ss i ngi ny ourpca nd t r a ns mi ngy ouri nf or ma on.T hi sg i v e st hea bi l i t yofs ome oneont heot he r s i deofwor l dt hea bi l i t yt ol ogi nt oy oura c c ount .
I tdoe s n’ ts t opt he r e .T he r ei smuc hmor ewhi c hI ha v e n’ tc ov e r e da ndwhi c hi s sl lt obeunc ov e r e d.E v e r yda yane w“ 0”da yc ome sa ndma nywe bs i t e sa r e c ompr omi s e dl e a k i ngy ourpe r s ona li nf or ma on,y oura c c ounta ndc ont a c t s . Goog l eus e sy ouri nf or ma on, s e a r c he sy ourma i l s , y ourf r i e nds , y ourl i k e sa nd di s l i k e sf orc us t omi z i ngy ours e a r c hr e s ul t s .F a c e booki sr e c or di ngy ourc ha t s , a ndi de nf y i ngy oubyy ourt a g g e dphot osa ndmi g htbet r a ns f e r r i ngi tt os ome f e de r a l a g e nc i e s .Y oudon’ tk nowwhe ns ome onei si nt e r c e p ngy ourc a l l sa nd me s s a g e sorwhoi sus i ngy ours t or e di nf or ma on. 1THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
T he nc ont a c tde t a i l sa r eba c k e dupont hes e r v e rofs omet e l e c om s e r v e r .I fi t wa s n' tba de noug h, y ourc ont a c tde t a i l sa r eba c k e dupons omet e l e c oms e r v e r . I fy ouha v ea nonl i nei de nt yt he ni t ’ ss ur et ha ts ome oneha sa ne y eony oua nd a bout10t o15pa g e sofi nf or ma ona bouty ous t or e ds ome whe r e . Y oua r enot s e c ur ee v e ni fy ouf e e l s o.I wa ntt os ha r ea ni nc i de nc ea boutwhe nI we ntt oa c onc e r ta nda e rf e wda y soneofmyf r i e ndsa s k e dmea bouti t .Iwa st ot a l l y a ma z e dt ha thek ne wI wa st he r ea sI ha dn’ tt ol da nyonea boutg oi ng .I unde r s t a ndt ha ts omec ha pwa sc l i c k i ngt he i rg i r l f r i e nd’ sphot oa ndIwa st he r ei n ba c k g r ounda ndmyf r i e nds a wt he s ephot oss ome whe r eont hei nt e r ne t .
E v e r yda yy oul e a kal otofi nf or ma ona bouty our s e l fors ome onee l s ewhe n y ouupl oa daphot o,c omme nt ,a ndl og i nt os omes i t e ,a s ks ome t hi ng ,pos ta n a ns we rorpos ty ourv i e ws .Be c a us eoft hi s , e v e r yda yy oua r er e duc i ngt hebl ur r i ne s sofy ouri de nt y , e v e r yda yy ouunc ov e ry our s e l fabi tmor ewi t hy oura c v i t yonl i ne . Y ouc ountont henume r ouss i t e swhi c hy oul og i ni nt ot oma i nt a i n y ours e c ur i t ybuty oudon’ tk now whe t he rt he ywi l l .Mos t l y ,e v e ni fy oua r e una bl et ot r us tt he mi ti sa l mos ti mpos s i bl et os t opus i ngt hos es e r v i c e sbe c a us e y oua r et r a ppe di nt ot hes e l fc r e a t e dwe bofi l l us i ona ndur g eoft ha ts e r v i c e . Ma nya mongy ouus ewe a kpa s s wor dsort hes a mepa s s wor donmulpl es i t e s . Ma nydon’ tc he c kwhe t he rt hes i t et he yj us tl og g e di nt oi sr e a l l yt hes i t ey ou we r et hi nk i ngoforj us tar e pl i c aofi tr e v e a l i ngy ourc r e de na l st os ome ones i t nga ny whe r ei nt hewor l dorne x tdoor .
Nowt hebi gque soni swha tc a ny oudot obes e c ur e , howc a ny oupr ot e c ty our i de nt y ?T hea ns we ri s“ y ouc a n’ t ” , buty ouc a nma k ei tha r de ra ndmor ec ompl i c a t e df ora nyonet ot r a c ky ou.Y ouc a ndot hi sbye i t he rmi s l e a di ngt he mwi t h s omebi ga ndwr ongi nf or ma onorbyc r e a ngmulpl ei de n e sonl i nea c c or di ngt oy ourne e ds .T hi ng sl i k eas e pa r a t ei de nt yf ory ourf r i e ndsa nda not he r i de nt yf ory ouroffic i a l l i f ea ndonef ort her e s tof t hewor l d.Gr a nt e dt hi si snot t hebe s twa yt obes e c ur ei nt hi swor l dbuty ouc oul dl oc ky our s e l fi nada r k r oom a nddi s c onne c ty our s e l ff r om t her e s toft hewor l da ndi nt e r ne t .I not he r wor ds ……………. . t her e a l i t yi s“ noonei ss e c ur e ” . S ubmiedBy : Ana ndK. Pa nde y Ana ndk pa nde y @i n. c om 2THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
#Fai l2011 Yearoft heHack
Ac c or di ngt oI Ts e c ur i t ye x pe r t sY e a r2011 ha v el a be l e da st he" Y e a roft heHa c k ”or “ # F a i l2011” .Ha c k i ngha sbe c omemuc h e a s i e rov e rt hey e a r sa l l owi ngha c k e r st o ha c ki nt os y s t e ms e a s i e rt he ne v e r be f or e ,whi c hi swhy2011ha dal otof ha c k i ng sha ppe ns of a r . Ha c k e r sa r e c omi ngupwi t ht ool sa swe l la sfindi ng ne wme t hodsofha c k i ngf a s t e rt ha nc ompa ni e sc a ni nc r e a s et he i rs e c ur i t y .
E v e r yy e a ri st hey e a roft heha c k i nga sl onga st he r ea r eha c k e r soutt he r er e a dy t oe x e c ut et he i rma l i c i ouspr og r a msa nda a i nt he i rg oa l sl i k eg a t he r i ngi mpor t a nti nf or maonf r om t hev i cm' sc omput e r ,s t e a l i ngi mpor t a nti de n e s , c r e di tc a r di nf or maon, e t c . 2011c oul dpr oduc ea not he rg e ne r aonofha c k i ng . E v e r yy e a rt he r ea r ea l wa y sf or wa r da dv a nc e me nt soft het ool sa ndpr og r a ms t ha tc oul dus ebyt heha c k e r s .
Hav eal ook t os ome Maj orHac k i ng Cas es of201 1
3THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
RS AHa c k( 3/ 17/ 2011) Mo v e-Unk nowna a c k e r ,a l t houg hChi nabe l i e v e dt obes us pe c t .Mo v ei s pr oba bl ye s pi ona g e Me t hod-Adv a nc e dP e r s i s t e ntT hr e a t( APT )t a r g e t e da ti ndi v i dua l swi t hi na n or g a ni z aonus i ngs oc i a l e ng i ne e r i ng . Ma l wa r ehi dde ni na nE x c e l s pr e a ds he e t e x pl oi t e daz e r oda y( unpa t c he d)F l a s hhol e . Ha r m -S e c ur I Dt ok e nde pl oy me nt sa tfina nc i a l ,g ov e r nme nta ndot he rs i t e s we r ea tr i s k . ComodoHa c ka nds e v er a l ofi t sdi g i t a l c erfic a t er es el l er s( 3/ 23/ 2011) Mo v e-21y e a r ol dI r a ni a npa t r i ott ookc r e di ts a y i nghewa spr ot e sngUS pol i c ya ndr e t a l i anga g a i ns tt heUSf ori t sa l l e g e di nv ol v e me ntwi t hl a s ty e a r ’ s S t ux ne t , whi c he x pe r t ss a ywa sde s i g ne dt ot a r g e tI r a n’ snuc l e a rpr og r a m. Me t hod-Compr omi s eofdi g i t a l c e rfic a t er e g i s t r ya ut hor ie sl e dt ot het he ofdi g i t a l c e rfic a t e st ha ta r eus e dbys i t e st opr ov et he ya r ewhot he ya r el e g ima t e . Ha r m -I ft he yha dnotbe e nr e v ok e dt hef a k e dc e rfic a t e sc oul dha v ebe e n us e dt os poofs i t e sl i k eGoog l e , Y a hoo, Mi c r os oa ndS k y pe . S ony( I ndones i a ,J a pa n,T ha i l a nd,Gr eec e,Ca na da ,Ne t her l a nds ,E ur ope, Rus s i a , Por t ug a l )&S onyPl a y S t a onNe t wor kHa c k ed( 4/ 6/ 20116/ 8/ 2011) Mo v e-L ul z s e c, Anony mous , L e ba ne s eha c k e rI da hca ndv a r i ousot he rha c k e r sor g a ni z e dt hea a c ki nr e t a l i aonf orS onya e mp ngt oi de nf yv i s i t or st o Pl a y S t aon3ha c k e rGe or g eHot z 'bl ogs i t e ,a swe l la ss e e k i ngda t af r om hi s T wie ra ndY ouT ubea c c ount sa spa r tofal a ws ui t .T hec a s ewa sl a t e rs el e d outofc our t . Me t hod-Di s t r i but e dDe ni a l of S e r v i c e( DDoS ) , S ql i nj e con Ha r m-De f a c e me ntofv a r i ousdoma i nsofS onya ndP e r s ona l i nf or maonof77 mi l l i onpe opl e , i nc l udi ngc us t ome rna me s , a ddr e s s e s , e ma i l a ddr e s s e s , bi r t hda y s , Pl a y S t aonNe t wor ka ndQr i oc i t ypa s s wor ds , us e rna me s , onl i neha ndl e s a ndpos s i bl yc r e di tc a r dswe r ee x pos e d.
Hac ke d 4THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
F oxNe t wor k ' sXF a c t or( 5/ 7/ 2011) Aa c k e r-L ul z s e c|Ha r m -Xf a c t orc ont e s t a nt spe r s ona l i nf or maone x pos e d a ndi nt e r na l F oxda t ae x pos e d. PBS . or g-Publ i cBr oa dc a sngS er v i c eHa c k ed( 5/ 30/ 2011) Aa c k e r-L ul z S e ci nr e t a l i aonov e rF r ont l i neWi k i l e a k spr og r a mt he yc ons i de r e dbi a s e d Me t hod-z e r oda ye x pl oi ti nMov a bl eT y pe4 Ha r m -P a s s wor dswe r el e a k e da ndaf a k ene wsa rc l ewa spubl i s he dont he pa g e . 100' sofGma i l us er s( 6/ 1/ 2011) Mo v e-Goog l es a y sa a c kor i g i na t e di nChi naa nda ppe a r e dde s i g ne dt o moni t orc ommuni c aonsofj our na l i s t s ,pol ic a l a cv i s t sa ndmi l i t a r ype r s onne l . Me t hod-A e rs t e a l i ngpa s s wor dswi t haphi s hi nga a c k , pe r pe t r a t or sa ppa r e nt l yus e dt hepa s s wor dst oc ha ng eGma i lus e r s 'f or wa r di nga ndde l e g aon s e ng s . Ha r m -A a c kwa s" di s r upt e d"buti t ' sunk nowni fa nys noopi ngwa sa c c ompl i s he d. Ac erE ur opeHa c k ed( 6/ 3/ 2011) Aa c k e r-P a k i s t a nCy be rAr my|Me t hod-S t upi di t yofS e r v e ra dmi n Ha r m-S our c ec odea ndus e rda t aof40, 000pe opl er e por t e dl yc ompr omi s e d. F BI pa r t nerI nf r a g a r dAt l a nt aHa c k ed( 6/ 3/ 2011) Mo v e-L ul z S e c , i na na e mptt oe mba r r a s st heF BI a nds e c ur i t yďŹ r mg ov e r nme ntc ont r a c t or s Ha r m-S i t ewa sha c k e d, de f a c e da nd180I nf r a g a r dus e r na me sa ndpa s s wor ds we r el e a k e d.
Cig r oupHa c k ed( 6/ 8/ 2011): Mo v ea ndA a c k e r-unk nown Ha r m -Na me s ,a c c ountnumbe r s ,a ndc ont a c ti nf or maon,i nc l udi nge ma i l a ddr e s s e s ,we r ea c c e s s e ddur i ngt hebr e a c h,whi c ha e c t e da bout360, 000 c us t ome r s . 5THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
T ur k i s hg ov er nment( 6/ 9/ 2011) Mo v e-Anony mous , i noppos iont oI nt e r ne tfil t e r i ngpl a n Ha r m-s i t ei na c c e s s i bl et e mpor a r i l y U. S . S ena t eha c k ed( 6/ 13/ 2011) Mo v e-L ul z S e c , s a y i ngi tdoe s n' tl i k et heU. S . g ov e r nme nt Ha r mpubl i s he dont heWe bs e r v e r ' sdi r e c t or ya ndfil es t r uc t ur eof t heS e na t e s i t e S pa ni s hNa ona l Pol i c e( 6/ 13/ 2011) Mo v e-Anony mous , i nr e t a l i aonf ort hea r r e s toft hr e epe opl ei nS pa i n Ha r m-s i t ewa si na c c e s s i bl et e mpor a r i l y CI AHa c k ed( 6/ 15/ 2011) Aa c k e r-L ul z s e c Ha r m-s i t et e mpor a r i l ydown E l ec t r oni cAr t sha c k( 6/ 16/ 2011) Ha r m -S y s t e m hosngBi oWa r eNe v e r wi nt e rNi g ht sf or um i sbr e a c he da nd us e rna me s ,e nc r y pt e d pa s s wor ds ,e ma i la ddr e s s e s ,ma i l i ng a ddr e s s e s , na me s , phonenumbe r s , CDk e y sa ndbi r t hda t e sma yha v ebe e nc ompr omi s e d. S omeune nc r y pt e dpa s s wor dsbe l i e v e ds t ol e n. S eg aHa c k( 6/ 18/ 2011) Ha r m -s omeS e g aP a s sme mbe re ma i la ddr e s s e s ,da t e sofbi r t h,a nde nc r y pt e dpa s s wor dsc ompr omi s e d. NAT OHa c k( 6/ 23/ 2011) Mo v e-A e rNAT Or e l e a s e dar e por ts i ng l i ngoutAnony mous ' ha c kv i s ma s ac y be rt hr e a t , t heg r oupwa r ne dNAT Onott oc ha l l e ng ei t . Ha r m -s ubs c r i be r st oNAT O' se Book s hops e r v i c ewe r eur g e dt oc ha ng et he i r pa s s wor dsa e rapos s i bl ec ompr omi s eofus e r na me s ,pa s s wor ds ,a ddr e s s e s a nde ma i l a ddr e s s e s .
6THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Ar i z onaDepa r t mentofPubl i cS a f e t y( 6/ 23/ 2011) Mo v e-L ul z S e cs a i di ti sl e a k i ngt heda t at opr ot e s t" r a c i a lpr ofil i nga ni mmi g r a nt "pol i c i e sofAr i z onal a we nf or c e me nt ,s pe c i fic a l l yS B1070,whi c h ma k e si tac r i met obei nAr i z onawi t houtdoc ume nt aonpr ov i ngUni t e dS t a t e s r e s i de nc y . Re l e a s e sa not he rba t c hofda t aonJ une29. Ha r m -publ i c l yr e l e a s e dhundr e dsofpr i v a t ei nt e l l i g e nc ebul l e ns ,t r a i ni ng ma nua l s , pe r s ona l e ma i l c or r e s ponde nc e , na me s , phonenumbe r s , a ddr e s s e s a ndpa s s wor dsbe l ong i ngt oAr i z onal a we nf or c e me nt . F or merBr is hPr i meMi ni s t erT onyBl a i rHa c k( 6/ 24/ 2011) Mo v e-T e a Mp0i s oNs a y si tt a r g e t e dBl a i rov e rhi ss uppor tf ort heI r a qWa r Ha r m -c ont e nt sofhi se l e c t r oni ca ddr e s sbook ,i nc l udi ngc ont a c tda t af or me mbe r sofP a r l i a me nt Ar i z onaDepa r t mentofPubl i cS a f e t yHa c k( 6/ 29/ 2011) Aa c k e r-An s e c|Ha r m -ha c k e r sr e l e a s es e c onddumpofda t a ,i nc l udi ng mor epe r s ona l da t aons pe c i ficoffic e r s Al Qa edaHa c k( 6/ 29/ 2011) Ha r m -ha c k e r ss hutdowna l Qa e da ' sI nt e r ne tc ommuni c aons ,ha lngt he flowofv i de osa nds t a t e me nt sonl i ne Ar i z onaF r a t er na lOr derofPol i c e,F r a t er na lOr derofPol i c ei nMes a ,T uc s on Ha c k( 6/ 30/ 2011) Aa c k e r-An s e c|Ha r m-8We bs i t e sde f a c e d, doc ume nt sr e l e a s e di nc l udi ng pa s s wor dsa nde ma i l a ddr e s s e sof1, 200offic e r s ,s omefina nc i a l da t aofs pe c i ficoffic e r sa ndpe r s ona l e ma i l s Appl eHa c k( 7/ 4/ 2011) Aa c k e r-An s e c|Me t hod-e x pl oi t e ds e c ur i t yfla wi nt hes o wa r eAppl e us e d Ha r m-26a dmi nus e r na me sa ndpa s s wor dsf ora nAppl es e r v e re x pos e d F oxNe wsT wiera c c ountHa c k( 7/ 4/ 2011) Ha r m-T heF oxNe wsT wie rf e e dwa sus e dt opubl i s hf a l s er e por t st ha tPr e s i de ntOba maha dbe e nk i l l e d. 7THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Ger ma nF eder a l Pol i c eHa c k( Ger ma nF eder a l Pol i c e) Aa c k e r-n0N4m3Cr 3w Ha r m -T heha c k e r sc ompr omi s e das e r v e rus e dbyt hec ount r y ' sc us t omss e r v i c ea ndpos t e dl oc aonc oor di na t e s ,l i c e ns epl a t ea ndt e l e phonenumbe r s , pol i c eus e r na me sa ndpa s s wor ds , a ndaGPSa ppl i c aoni nr e s pons et og ov e r nme ntc ommuni c aonsi nt e r c e p on. Ne wsCor p. s i t es , T heS una ndNe wsI nt er na ona l Ha c k( 7/ 18/ 2011) Aa c k e r-L ul z s e c Ha r m -Ha c k e r sr e di r e c t e dT heS unhomepa g et of a k es t or ya boutde a t hof Ne wsCor p. owne rRupe r tMur doc h, a ndt he nl a t e rt oL ul z S e c ' sT wie rf e e d, a s we l l a sr e di r e c t e daNe wsI nt e r naona l ' spa g ewi t has t a t e me ntont heha c kt o t heL ul z S e cT wie rf e e d. T he ya l s or e l e a s e dphonenumbe r sof Ne wsCor p. e mpl oy e e sa nda ne ma i la ddr e s sa ndpa s s wor df orf or me rS une di t orRe be k a h Br ook s ,whoi se mbr oi l e di nt hemobi l ephonev oi c ema i lha c k i ngs c a nda la t Ne wsoft heWor l d. I t a l i a nPol i c e' sNa ona lCent erf orComput erCr i mea ndt hePr ot econof Cr ic a l I nf r a s t r uc t ur e( 7/ 22/ 2011) Aa c k e r-An s e c Ha r m -Ha c k e r sc l a i mt oha v es t ol e nmor et ha n8GBofi nt e r na l da t at ha twa s a l l e g e dl ys e i z e ddur i ngpol i c ei nv e sg aons , i nc l udi ngi nf or maonont heMi ni s t r yofT r a ns por ti nE g y pt , Mi ni s t r yofDe f e ns ei nAus t r a l i a , Rus s i a nc ompa ni e s a ndU. S . J usc eDe pa r t me nt . T he yt hr e a t e ne dt opubl i s hi tonl i ne .
72publ i ca ndpr i v a t eor g a ni z a onsi n14c ount r i esHa c k( 8/ 2/ 2011) Mo v e-Mc Af e er e por tdoe snots pe c ul a t e , butt he r e ' sapa e r ni nt het a r g e t s whi c hdo noti nc l udeChi nabutdo i nc l udepol ic a lnonpr ofit s ,apr ode moc r a c yor g a ni z aon, t heWor l dAn dopi ngAg e nc y , a ndt heI nt e r naona l Ol y mpi cCommie ea ndOl y mpi cc ommie e si nt hr e ec ount r i e s ,whi c hwe r e t a r g e t e dr i g htbe f or ea nda e rt he2008Ol y mpi cGa me si nBe i j i ng . Me t hod-t a r g e t e dphi s hi nga a c k swi t he ma i le x pl oi tt ha ti ns t a l l e daba c k door Ha r m -Naona ls e c r e t s ,c l a s s i fie dg ov e r nme ntda t a ,s our c ec ode ,bugda t a ba s e s , e ma i l a r c hi v e s , de t a i l sf orne woi l a ndg a sfie l da ucons , l e g a l c ont r a c t s , S CADAc onfig ur aonsa ndmor e . 8THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Cig r oupJ a pa nha c k( 8/ 5/ 2011) Me t hod-As our c es a i dt hes c he mewa spe r pe t r a t e dbyat hi r dpa r t yv e ndor t ha tha dbe e ng i v e na c c e s st oCi' si nt e r na l s y s t e ms . Ha r m -P e r s ona li nf or maonof92, 408Cig r oupc r e di tc a r dc us t ome r si n J a pa nwa ss t ol e na nds ol dt ot hi r dpa re s , t heba nks a i d. 70U. S .l a w enf or c ementa g enc i esa ndpol i c ea s s oc i a oni nI t a l yHa c k ed ( 8/ 6/ 2011) Aa c k e r-An s e c Ha r m10GBof pe r s ona l i nf or maon, pr i v a t ee ma i l s , pa s s wor ds , t r a i ni ngfil e s , da t af r omi nf or ma nt s , S oc i a l S e c ur i t ynumbe r sa nds t ol e nc r e di tc a r di nf or ma on Gov er nmentofS y r i a( 8/ 8/ 2011) Aa c k e r-Anony mous Ha r m-Homepa g eoft heS y r i a nMi ni s t r yofDe f e ns es i t ede f a c e dwi t hAnony mousl og oa ndac a l l f ort hedownf a l l ofPr e s i de ntBa s ha ra l As s a d. Bl a c k Ber r yma k erRes ea r c hI nMo on( RI M)De f a c ement( 8/ 9/ 2011) Aa c k e r-T e a mP oi s on Ha r m -RI M' sBl a c k Be r r ybl ogwa sha c k e di nr e t a l i aonf orRI M offe r i ngt o a s s i s tL ondonpol i c ei nc ombangr i ot e r s , ma nyof whoma r eus i ngBl a c k Be r r y s t oor g a ni z e . HongKongs t oc ke x c ha ng eHa c k( 8/ 10/ 2011) Ha r m-Ha c k e r sbr ok ei nt one wss i t eofHongKongs t oc ke x c ha ng e , whe r ec or por a t efil i ng sa r epubl i s he d,f or c i ngt hes us pe ns i onoft r a di ngf ors e v e nc ompa ni e s .
“ Noma e rhow s ophi sc a t e dt e c hnol og yi s ,i ta l wa y s ha sonebi ghur dl et ha tc a nnotout wi tus .Howweus e s ome t hi ng s‘ howwebe ha v e ’ wi l l a l wa y sc ondiont e c hnol og y ,e i t he rbyhow i ti sde s i g ne dorhow i ti sus e d. Not hi ngi spr i v a t eonl i ne .S ome t hi ng sa r emor edi ffic ul t t oa c c e s st ha not he r s . Nowj udg e: Ar ey ouS ec ur e 9THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Ghosti nt heW i res
MyAdv e nt ur e sAsT heWor l d' sMos tWa nt e dHa c k e r ( BOOKRE VI E W)
k c i n t i M n i v Ke
S omec a l l hi mas a i nt , s omeac r i mi na l , ot he r sa dor ehi m. I ndus t r yma yl oa t he hi m butwehe r ea tha c k e rne wss a y“ Ge tRe a di ng”l oy a ls ubs c r i be r sa nd l a ug h, g e tma d, f e e l r e v e ng e , a ndpur ee duc aona l e nj oy me ntr e a di ngKe v i n Mi t ni c k ’ sne wbook“ Ghos ti nt heWi r e s ”. Y e a h, wec ons i de rhi m pr e yc ool a ndt hef a t he rof S oc i a l E ng i ne e r i ngwhi c hi sj us tour sa ndy our sl e v e l of i nt e r e s t . I f ag uyt ha tc a ns t a yones t e pa he a dof bi gbus i ne s s , c a t c hi ngt he mwi t ht he i r pa nt sdowna ndt he i rha ndsi nt heCook i ej a r , t he nt hi si st hebookf ory ou. I f y oua dmi r eape r s onwhoc a ns que e z ebl oodf r omat ur ni p, y ouha v et her i g ht r e a dwa ingf ory ou.J us twhe ny out hi nki tc a n’ tbedone , Mi t ni c kwowsy ou wi t hhi st e c hni c a l s k i l l i ns que e z i ngpa s thi g ht e c hs e c ur i t ys y s t e msa ndi nt o t hea r msofc l a s s i fie di nf or maonofs omeoft hebi g g e s tbus i ne s s e si nt he wor l d. T r yMot or ol a , s unMi c r os y s t e msa ndpa c i ficbe l l f ors t a r t e r s . Mi t ni c ki snol e s st ha nag e ni usa shek ni t sas t or yofi nt r i g uea nds us pe ns ea s hena v i g a t e st hr oug ht hema z e sofhi g ht e c hc ompa ni e sk e e pi ngt he mj umpi nga ndr e a l i z i ngt he ya r enoti nv i nc i bl e ……note v e nc l os e . P e r ha pst heg r e a t e s tg if r om t hebooki showhuma nKe v i na ppe a r sa nda s r e a de r swer i det het r a i nofe mo onswi t hhi mbe i ngi ns ol i t a r yc onfine me nt t ot hehi g hofbr e e z i ngpa s tt hemos tc ompl e xofs e c ur i t ys y s t e ms .It hi nk Mi t ni c ke v e nwonde r showhedoe si t ! Gr e a tbook ,l ot sofi nt e r e sngf a c t s ,ag oods t or ya ndy ou’ l lwa l ka wa y a ma z e da ndpr oudt ha twea r e n’ ta l wa y sc ont r ol l e dbybi gg ov e r nme ntor c or por aons .
M ohi tKuma r Founder :THN
10THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Hac ksoft heMont h 1. )Wel t . dehac k edus i nganSQLI nj ec t i onandCr edi tCar di nf oof30264 us er sCompr omi s ed|Readmor eht t p: / / t i ny ur l . c om/ 4y d3f s d 2. )Mi bbi tAJ AXI RCc l i ents er v i c ebei nghac k ed. Dat ai nc l udi ngt heper s onal i nf or mat i onof9Mi bbi toper at or si nc l udi ngt hei rnames , ac c ount s andemai laddr es s esl eak ed|Readmor eht t p: / / t i ny ur l . c om/ 3t s x 6j o 3. )Sout hKor eanpol i c ec l ai m $6mi l l i onwass t ol enaf t er30hac k er s f r om t heNor t hi nf i l t r at edonl i negames er v er si nSeoul . Readmor eht t p: / / t i ny ur l . c om/ 3s 4q7mj 4. )Ant i Sect ar getdef ens ec ont r ac t or sVanguar d Def ens eI ndus t r i es ( VDI )agai n. 4, 713emai l sandt hous andsofdoc ument st ak endur i ngt he br eac h.Ant i Sect ar get edVDI ’ swebs i t eduet ot hei rr el at i ons hi pwi t h s ev er all aw enf or c ementagenc i esf r om Tex asandot herpar t soft he U. S. , aswel l ast hei rr el at i ons hi pwi t ht heF BI , t heDHS, andU. S. Mar s hal s Ser v i c e|Readmor eht t p: / / t i ny ur l . c om/ 3f j ouoa 5. )Adat abas ebel ongi ngt ot heBARTPol i c eOf f i c er sAs s oc i at i onappear st o hav ebeenhac k ed byAnony mousHac k er sand t henames , pos t al andemai l addr es s esofof f i c er spos t edonl i ne. Al s oSanF r anc i s c o BayAr eaRapi d Tr ans i t( BART)hac k edeand per s onaldet ai l sof102 pol i c eof f i c er sl eak ed|Readmor eht t p: / / t i ny ur l . c om/ 3qgt uv m 6. )Eps onKor eaCo.L t d.s ai dt hathac k er shadbr eac hedt heper s onal dat aofi t s350, 000r egi s t er edc us t omer sl as tweek . Readmor eht t p: / / t i ny ur l . c om/ 3mmp6c 3 7. )Anony mousHac k er supl oadaf i l eonTor r entc ont ai noft hes naps hott het heDani s hGov er nmentdat abas eofc ompani es . Ther ear eappr ox i mat el y1, 000, 000c ompani esi nt hedat abas e& CVR r epor t sof 550, 000c ompani es|Readmor eht t p: / / t i ny ur l . c om/ 3gml 7k 4
1 1THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Hac ksoft heMont h 8. )I s r ael iPr i meMi ni s t erNet any ahu’ sWebs i t eDef ac ed byEgy pt i an Hac k er . Thehac k erwhomanagedt openet r at et hewebpageofNet any ahuwr ot e“ Ant iZi oni s m” ;t hes i t ewast hengr adual l yt ak enof f l i ne. Readmor eht t p: / / t i ny ur l . c om/ 43q455e 9. )Nok i aDev el operF or um hac k edbypr 0t ec t 0rAKAmr NRGandRedi r ec tapageofi tt ohi sc us t om page Readmor eht t p: / / t i ny ur l . c om/ 3l j c s 64 10. )Rec ent l ydi s c ov er edat t empt sofanSSLmani nt hemi ddl eat t ac k agai ns tGoogl eus er s-s pot t edbyanumberofI r ani anI nt er netus er shav er ev eal edt hatDut c hCer t i f i c at eAut hor i t yDi gi Not arhasi s s uedan SSLc er t i f i c at ef oral l* . googl e. c om domai ns . Readmor eht t p: / / t i ny ur l . c om/ 3eg667f 11. )TheWi k i L eak swebs i t e,whi c hc ont ai nst hous andsofU. S.embas s y c abl es , hasc r as hedi nanappar entc y ber at t ac k . Readmor eht t p: / / t i ny ur l . c om/ 3mbt v c 7 12. )Anony mousHac k erHac kOr ange. F randupl oadt hedat abas eand Si t es our c ec odebac k uponf i l es har i ngs i t e. Readmor eht t p: / / t i ny ur l . c om/ 3pr qox q 13. )Gabi aaSout hKor eandomai nr egi s t r arwashac k edonSat ur day , af f ec t i ngt heonl i nec onnec t i onwi t h100, 000r egi s t er eddomai ns ,ac c or di ngt oar epor tMondaybyt heKor eaHer al d.Thi shac kex pos i ng ov er100, 000domai nsand350, 000us er sdat a. Readmor eht t p: / / t i ny ur l . c om/ 3ggj a9q
Mor eHac ksandUpdat esat‘ TheHac kerNews ’ ht t p: / / www. t hehac k er news . c om/ 12THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
ToolsUpdate 1)I NS E CTPr o2. 7-Pene t r a ont esngt ool downl oa d h p: / /ny ur l . c om/ 3z g or f s 2)Ki l l a pa c he:DDOSt ool h p: / /ny ur l . c om/ 3bf s p7a 3)T HCi pv 6T ool k i t–A a c k i ngt heI PV6Pr ot oc ol h p: / /ny ur l . c om/ 3l c l 8e e 4)Ba c k T r a c k5R1Rel ea s ed-Pene t r a onT esngDi s t r i bu on h p: / /ny ur l . c om/ 3j k h84m 5)S S Downl oa der:50F r eeE s s en a l S ec ur i t yT ool s h p: / /ny ur l . c om/ 3c mhf 26 6)Ma t r i uxKr y pt ons ec ur i t ydi s t r i bu onRel ea s ed h p: / /ny ur l . c om/ 3t qpql b 7)T heS oc i a l E ng i neerT ool k i tv 2. 0Rel ea s ed h p: / /ny ur l . c om/ 4x 7l dj l 8)Ol l y Dbg2. 01a l pha4r el ea s ed h p: / /ny ur l . c om/ 3nf g v g d 9)Wi ndowAut oPwn( WI NAUT OPWN)-Aut oHa c k i ng/ s hel l Ga i ni ngT ool h p: / /ny ur l . c om/ 3j woe 27 10)Me t a s pl oi tPr o4. 0r el ea s ed-E nt er pr i s eI nt eg r a on, Cl oudDepl oy ment h p: / /ny ur l . c om/ 4x f 5nwm 11)Wi r es ha r k1. 6. 1a nd1. 4. 8Rel ea s ed h p: / /ny ur l . c om/ 3g he j s o 12)PuTT Yv . 0. 61Ne wVer s i onr el ea s edA er4y ea r s h p: / /ny ur l . c om/ 3ok ut z n 13THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
HACKERS:ADMIRABLEORINFAMOUS?
I fy ouwor ki nt hec omput e rs e c ur i t ya r e nay oupr oba bl yha v eag oodunde r s t a ndi ngoft hedi ffe r e ntt y pe sofha c k i ngt ha toc c ur sa ndhowy ouf e e l a bout . I fnot ,y ourv i e wsonha c k i ngma ybes l i g ht l ywa r pe dbyt heme di awhoov e r j our na l i z e st het e r m“ Ha c k i ngorHa c k e r ”pur e l yt ode s c r i bet he' ba dg uy s ' who s t e a l da t aa ndbr i ngc omput e rs y s t e mst ot he i rk ne e s .A e ra l l , i fy our e a di ti n ane ws pa pe ri tmus tbet r ue .T het r ut hi st ha ts uc habl a nk e tl a be li swhol l y unf a i rt ot hehundr e dsofs e c ur i t ypr of e s s i ona l swho' ha c k ' f ora l t og e t he rdi f f e r e ntr e a s onst ha ns t e a l i ng ,br e a k i ngi nt ope r s ona li nf or maon,ort r y i ngt o g a i npol ic a l pe r s ua s i on.Nott ome n on, s e l l ne ws pa pe r s .
I nr e a l i t yy ouc a nnots i mpl yc l a s s i f yha c k e r sa sba dg uy sorg oodg uy s .T he r e i sawhol el otof g r e ys i ngbe t we e nt hos et woe x t r e me s .Di cona r i e sa l l ov e r t hewor l da r eg e ngbi g g e ra s“ Ha c k e r s ”a doptna me s ,s uc ha s ,bl a c kha t s , whi t eha t s , s c r i ptk i ddi e s , c r a c k e r s , pa c k e tmonk e y s , s ' k i ddi ot s , phr e a k s , ha c k v i s t sa nde t hi c a l ha c k e r s . F ormos t , br e a k i ngi nt oac ompa nywe bs i t ei nor de r t os e ehowi ns e c ur ei ti sma ybet heonl yc ommont hr e a dt he ys ha r e . Onc e t he y ' r ei n, t he i ra consc a no e nbequi t edi ffe r e nt . 14THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Bl a c kha tha c k e r s
Abl a c kha tha c k e rwi l l l i k e l ybel ook i ngt oc a us eda ma g et oac ompa ny ' sne t wor ka nd/ ors t e a l f r omt he m. T hi si st hemos tda ng e r oust y peofha c k e r .T he y di s pl a ya c c ompl i s he dt e c hni c a ls k i l la nd unde r s t a ndt hei mpor t a nc eofa nony mi t y .T he ymos t l ys l i pi na ndoutofc omput e rne t wor k sunno c e dun l s uc h met he i rwor ki sdone .
Admi r a bl eorI nf a mous ?
F r om mype r s pe cv et he r ei ss omea dmi r aona nds omedi s t a i n.It hi nky ou woul dbeha r dpr e s s e dt oďŹ ndabl a c kha tha c k e rt ha ti sa ny whe r ec l os et o be i ngont her i g hts i deoft hel a w.Sl l , t hebe s tc e r t a i nl ydoha v ea na dv a nc e d s e tofs k i l l st ha tonec a nnothe l pbuta dmi r e . I nf a c t , t hebe s toft hebe s ta r es o s k i l l e da twha tt he ydoy ouwi l lpr oba bl yne v e rk now t he i rna me sorwhe r e t he yl i v e . Wha tt he ydoi s n' tr i g htbutt he ya r et hee l i t e , noque sona bouti t .
15THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
E t hi c a l ha c k e r s
Ont heot he re ndoft hes pe c t r umy ouha v et hee t hi c a l ha c k e r . Amor ea ptde s c r i p onwoul dpr oba bl ybea“ c omput e re x pe r t ”buti ti sana met ha tha s s t uc knone t he l e s s .Ane t hi c a l ha c k e rc oul dbec ons i de r e dag oodg uybe c a us e t he ya r enotl ook i ngt oma k emone yorot he r wi s epr ofitf r om t he i rwor k .At l e a s tnoti nt hes e ns ey ouma yi ma g i ne-t he ydog e tpa i d, i t ’ st he i rj ob! Ane t hi c a l ha c k e ri ss ome onewhoi se mpl oy e d, t y pi c a l l yonac ont r a c tba s i s , t o br e a ki nt oac ompa ny ' sc omput e rs y s t e msi nor de rt oc ompi l ear e por tof whe r ea nyv ul ne r a bi l ie sma ybe . S ug g e sonswi l l t he nbema dea st ohowt he c ompa nyc a nov e r c omet he s ev ul ne r a bi l ie s ,t he r e byma k i ngt he i rne t wor k s muc hmor es e c ur e .
Admi r a bl eorI nf a mous ?
De fini t e l ya dmi r a bl ei nmyopi ni onbutonl yi nt hea r e aofdoi ng g oodwor kt os e c ur eda t a .L e t ’ s f a c ei t ,whe ny ou a r ehi r e dt o s e c ur ea nune t hi c a lc or por aona ndt he r ea r ema ny , i ti sha r de rt o a dmi r et hewor k e r .Sl l ,a ne t hi c a lha c k e ro e n ha sa dv a nc e d s k i l l st ha tt he yha v epi c k e d up t hr oug hma nyy e a r sofha r dwor k i nt hee duc aona ls y s t e m.T he y putt he s es k i l l st og oodus ei n or de rt o pr ot e c t or g a ni z aons f r om t hos e ot he rha c k e r swho don' ts ha r et hes a mee t hi c s .We l l pa i d,nodoubt ,butt he ywor kon t her i g hts i deoft hel a wa ndma k e f a rl e s smone yt ha nma nyoft he g uy st he ya r ede f e ndi ngt hec omput e rs y s t e msa g a i ns t . 16THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Ha c kv i s t s
Anot he rt y peofha c k e rwhi c hha sc omet opr omi ne nc el a t e l yi st heha c kv i s t .I fy ou' v ek e ptupwi t h r e c e ntne wst he nI ' ms ur ey ouha v ehe a r dofL ul z S e c a ndAnony mous ,t wog r oupsofl i k e mi nde dha c k e r s whoc oul dbede s c r i be da s' ha c k e r swi t hac a us e ' . T y pi c a l l y ,aha c kv i s ti ss a i dt oha v eapol ic a lc a us e t houg hs ome me si tc a nbeha r dt ofindwha tt hepol ic a lpoi ntofs omeoft he s ea a c k sr e a l l yi s .F ore x a mpl e ,L ul z S e ca r ei ni tf or' t heL ul z ' ,i . e .t oha v ea l a ug h.Anony moust out st hemo oofha c k i ngf ore x pos i ngc r i mi na la ndpol ic a l l ybl a c kc ompa ni e sa nd g ov e r nme nt s .
Whe naha c kv i s tbr e a k si nt oac ompa ny ' sne t wor k t he ya r enotl ook i ngt oma k emone yf r omt hebr e a c h. Andc ha nc e sa r et he ya r enotl ook i ngt oc a us edi r e c t da ma g et oa nyoft heda t at he yfind.I ns t e a d,aha c k v i s ti sl i k e l yt oe ng a g ei na cv ie s . byc ha ng i ngas i t e ' shomepa g et os ome t hi ngoft he i rc hoos i ng ,a l ongwi t ha s ui t a bl eme s s a g e . Or , pe r ha ps , t he wi l l bet hemo v aon-l a t e l yma nyoft he we bs i t e sbr e a c he dbyAnony mousa ndL ul z S e cha v ea l l e g e dl yha de ma i l sa nd ot he ri mpor t a ntda t as t ol e ni nor de rf ort heha c kv i s t st oma k es e ns iv eorpot e na l l ye mba r r a s s i ngi nf or maonpubl i c . Anot he rf a v our i t eoft heha c kv i s t si st oma k eawe bs i t et he ydon' tl i k e' di s a ppe a r ' , a tl e a s tf orawhi l e . T hi si sa c c ompl i s he dt hr oug ht heus eofaDi s t r i but e d De ni a l OfS e r v i c e( DDOS )a a c kwhi c hfloodsas i t ewi t hs omuc h' t r a ffic ' t ha ti t f a l l sov e runde rt hes t r a i n.
Admi r a bl eorI nf a mous ?
Ha r dt os a y . I t ’ st r uet ha tc omput e rha c k i ngpr ot e s ti ss ome me sne c e s s a r ya s wea l lk nowt ha tourl e a de r sdon' tl i s t e nt owha twewa nta ndpr e s sonwi t h t he i rpl a nsf or( t he i rown)Ut opi ar e g a r dl e s s !Ibe l i e v et ha ti fha c kv i s t swe r e t oc ha nne l t he i re ne r g i e si nt oot he ra v e nue sa ndpul l t og e t he ri namor ec ohe s i v ema nne r ,t he nt he yma yy i e l df a rmor epos iv epubl i c i t ya ndg e ne r a t ef a r be e rr e s ul t s . Bya a c k i nghi g hpr ofil es i t e st he yg a i nnot or i e t ya nds omes y mpa t hyf ort he i rc a us e sf r om t hei mpr e s s i ona bl ebutIdoubtt he yma k ema ny f r i e ndsa mong s tt hos ewhor e a l l yc oul dbe ne fitt he i ra i ms 17THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Y ourv i e ws
E a c hoft he3t y pe sofha c k e r ’ sIme n one di si nv ol v e di ne x pos i ngt hewe a k ne s s e si ns e c ur i t yma na g e me nta c r os st hewe b,bei tas ma l lwe bs i t eort he we bpr e s e nc eofal a r g emulnaona lc ompa ny .T he ywor ki ndi ffe r e ntwa y s a ndha v edi ffe r e nta i msbuta l l e x pos efla wst ha tne e dfix i ng . I st ha ts ome t hi ngwes houl da ppr e c i a t ea ndfinda dmi r a bl e ?S houl dwehol d e a c hoft he i rdi ffe r e ntme t hodsa ndmi s s i onsont hes a mel e v e lofe s t e e m or s pl i tt he mi nt ot he“ g oodg uy sv sba dg uy s ”c a t e g or i e s ?T heHa c k e rNe ws wa nt st ok now.Be ndoure a ra nds e ndusy ourt houg ht s .
AboutT heAut hor:
L e eI v e si sa ni nt e r ne ts e c ur i t ybl og g e rf r om L ondon,E ng l a nd.Hes t a r t e dhi s we bs i t eac oupl eof y e a r sa g oa same a nsof c ommuni c a ngs e c ur i t yt opi c st o t hea v e r a g ei nt e r ne tus e ri nawa yt ha tt he ywoul dunde r s t a nd.Cont r a r yt o s omepe opl e ' se x pe c t a onshewor k si nr e t a i la ndnott hes e c ur i t yi ndus t r y whi c hg oe st os howhowj us ta bouta ny onec a na c c umul a t eag r e a tde a lof k nowl e dg ea bouthowt opr ot e c tt he ms e l v e sonl i nei ft he ya r epr e pa r e dt o l ookf ort hea ns we r s .
S e c ur i t yF AQs h p: / / www. s e c ur i t y f a qs . c om
18THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Mobi l eSecur i t yandLackt her eof Mobi l et e c hnol ogy ,pa r t i c ul a r l ys ma r t phone s ,ha s c omeofa gea ndi si nc r e a s i ngl yr e pl a c i ngPCsf or i nt e r ne ts ur f i ng,e ma i l s ,ga mi nga nds oc i a lne t wor ki ng. Aspe rar e c e nts ur ve ybyNe i l s onMe di a Re s e a r c h,s ma r t phone snowc ompr i s eove r38% of t heU. S.Ce l l phoneMa r ke ta ndwi l lbe c omet he ma j or i t ybye ndoft heye a r .Tome e tt hi sgr owi ng de ma nd, c e l l phonec ompa ni e sa r ef a s tc hur ni ngout ne wmode l swi t hki l l e rf e a t ur e s ,l a t e s ta ndgr e a t e s t i nt e c hnol ogy . Wi t ht hi sgr owt hi tha sa l s oc omet oa t t e nt i ont ha ts e c ur i t yoft he s ede vi c e s c a nnotbel e f tbe hi nd.Eve r yda yane wda t abr e a c hi sma ki nghe a dl i ne ss ugge s t i ngha c ke r sha vegonei nt oove r dr i ve . Howe ve r , wha t i sofpa r t i c ul a ri nt e r e s ti st ha tabul koft he mi sbe i nga t t r i but e dt oc e l l phone s .Ha c ki nga l onea c c ount e df or$3. 2bi l l i oni nl os s e sf ort het e l e c omi ndus t r y ,s a ysCFCA. Thec ul pr i t sa r ema ny .Se ve r a lc ompa ni e sl i keAppl ea ndGoogl eownonl i ne a ppl i c a t i ons t or et ha ta l l ow3r dpa r t yde ve l ope r st oupl oa dpr ogr a mst ha tc a n bema dea va i l a bl ef ordownl oa dbyt heus e r s .Ma nyus e r sa r ede c e i ve di nt o downl oa di nga ppl i c a t i onst ha ta ppe a rt obel e gi t i ma t e .Thet e r msa r ec ondi t i onsa r el oos e l yde f i ne dwhi c hma ke st he me a s yt oa c c e pt .Onc eont he de vi c e ,t he“ a pp”c a ndoava r i e t yofda ma ge ,a nda tt i me swi t houta l a r mi ng t heus e r . TheAppGe nomePr oj e c tbyt hec ompa nyLookouts howe dt ha ti na s t udyof100, 000a ppsf ori Phone sa ndAndr oi dde vi c e s ,as ubs t a nt i a lpr opor t i onc ont a i ne dc odewhi c hc oul dpos eas e c ur i t yr i s k. I na not he rr e c e ntf i ndi ng,s e c ur i t yr e s e a r c he r sa tTr e ndMi c r odi s c ove r e da ma l wa r eonAndr oi dde vi c e st ha tdi s gui s e di t s e l fa saGoogl e +a pp.Thea pp wa sc a pa bl eofpe r f or mi ngma l i c i ousa c t i vi t i e sl i ker e c or di ngphonec a l l sa nd ga t he r i ngGPSl oc a t i on,a ndmor e .Thi sus e rda t awa st he nupl oa de dona r e mot es e r ve r .Thea ppl i c a t i onc a l l e di t s e l fGoogl e ++,whi c ha ppa r e nt l ywa s ove r l ooke dbys e ve r a lc us t ome r s .I t ’ swor t hme nt i oni nghe r et ha tabi gf a c t or i nt hewor ki ngofama l wa r ei st hec a s ua l be ha vi oroft heus e r , whof a i l st opa y e nougha t t e nt i onwhe ni ns t a l l i ngapr ogr a mont he i rde vi c e . 19THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
I na not he rr e por t ,SMSAndr oi dTr oj a nwa shi dde ni ns i deamovi epl a ye ra pp a nd,onc ei ns t a l l e d,woul ds e ndoutpr e mi um t e xtme s s a ge s .Ma nys uc hma l wa r e sa ndvi r us e sc ombi ne dha vea f f e c t e dupt o250, 000a ndr oi dde vi c e st o da t e . Ther a t i ona l ebe hi ndma ki ngs ma r t phonet het a r ge tbyha c ke r si sve r ys i mpl e . As ma r tphonet oda ynotonl ys t or e sc ont a c t sbuta l s oot he rs e ns i t i vei nf or ma t i onl i kee ma i l s , pi c t ur e s , a ndmor e . Andi nt hec a s eofs omede vi c e s , ahi s t or y ofus e rvi s i t e dl oc a t i onswi t ht i me l i ne s .Thef a s t e ra ndi mpr ove dc e l l ul a rne t wor ksa ndWi Fic a pa bi l i t yha vema deha ndhe l dc omput i ngve r yc onve ni e nt , ma ki ngi tawi de l ya c c e pt e dpr oduc t .He nc e ,i tha sa t t r a c t e dt hea t t e nt i onof ha c ke r swi t hma l i c i ousi nt e nt . Thi si nc r e a s e dvi s i bi l i t yha s ,howe ve r ,put pr e s s ur eons of t wa r ec ompa ni e sa swe l la sha r dwa r ema nuf a c t ur e r st opr ovi de s e c ur i t yf e a t ur e sa ndc onf i gur a t i onopt i ons .Fa c e booknow of f e r si t sus e r s s e c ur el oggi ngvi aSSLont he i rwi r e l e s sde vi c e sbya c t i va t i nga na c c ounts e t t i ng. Twi t t e rf ol l owe ds ui tbye na bl i ng“ a l wa ys onSSL�a ndt he r e byke e pi ng us e rda t as e c ur ee ve nwhe nc onne c t e dt hr oughapubl i cWi Fi . Theus e r st oone e dt obevi gi l a ntoft he i rde vi c e s .I nc a s eofal os tde vi c e , r e mot ee r a s ur eofda t aorl oc ki ngoft hede vi c ei sr e c omme nde d. Ana l t e r na t i ve i st ot r i gge rt her e mot eki l ls wi t c hwhi c hwi l lr e nde rt hephonede a d.I ft he de vi c ec ont a i nss e ns i t i vei nf or ma t i on, i t i sr e c omme nde dt os t or edi gi t a l a s s e t s i ne nc r ypt e df ol de r s . Ot he rs i mpl et r i c ksi nc l udeke e pi ngt heBl ue t oot hof fa nd i nnonpr omi s c uousmodea ta l lt i me s ,unl e s swhe ni nus e .Cont a c t s ,phot os a ndvi de oss houl dbepe r i odi c a l l yba c ke dupi nas a f el oc a t i on,pr e f e r a bl ye nc r ypt e d. Se ve r a la nt i vi r uss of t wa r ec ompa t i bl ewi t hva r i ousOSpl a t f or msa r e a va i l a bl ef ordownl oa df r omonl i nea ppl i c a t i onma r ke t st ohe l pma kes ur et ha t mobi l ede vi c e sa r ea ss e c ur ea spos s i bl e . AboutAut hor Ni dhiRa s t ogii saSe c ur i t yCons ul t a ntwi t hLogi cTe c hnol ogyI nc . ,aNe w Yor kba s e dc ompa nys i nc eApr i l ,2010pr ovi di ngc ons ul t i ngs e r vi c et oGE Gl oba l Re s e a r c hCe nt e ra ndEne r gy . Sheha se a r l i e rwor ke di nas i mi l a rr ol ea t Ve r i z onWi r e l e s sa ndha saMa s t e rDe gr e ei nComput e rSc i e nc ef r omUni ve r s i t yofCi nc i nna t iwi t hf oc usonWi r e l e s sSe c ur i t y .Shec a nbec ont a c t e d t hr oughe ma i la tni dhi . gupt a @gma i l . c om. 20THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Vulnerabi li ty -J u s tAh e a d-
1)10y e a rol dGi r lha c k e r" ps e udony m Cy F i "r e v e a l e dhe rz e r oda ye x pl oi ti n g a me soni OSa ndAndr oi dde v i c e st ha ti nde pe nde ntr e s e a r c he r sha v ec onfir me da sane wc l a s sofv ul ne r a bi l i t ya ta tDe f Con19. S hei sc of ounde rof DE F CONKi ds . Rea dMor eh p: / /ny ur l . c om/ 3c s ml x v 2)As e c ur i t ype ne t r aont e s t e ra tI t a l i a ns e c ur i t yfir m AI RS i c ur e z z aI nf or mac aha sc l a i me dt ha tfla wse x i s ti nGoog l e ' ss e r v e r st ha twi l l a l l owwoul dbe ha c k e r st oe x pl oi tt hes e a r c hg i a nt ' sba ndwi dt ha ndl a unc hadi s t r i but e d de ni a l of s e r v i c e( DDoS )a a c konas e r v e roft he i rc hoos i ng . Rea dmor eh p: / /ny ur l . c om/ 3nmof 57 3)$30Chi l dT oyi se noug ht oha c kF BIRa di os .T hepor t a bl er a di osus e dby ma nyf e de r a l l a we nf or c e me nta g e nt sha v ema j ors e c ur i t yfla wst ha ta l l owe d r e s e a r c he r st oi nt e r c e pthundr e dsofhour sofs e ns iv et r a ffics e ntwi t houte nc r y p onov e rt hepa s tt woy e a r s . Rea dmor eh p: / /ny ur l . c om/ 3ng g by 7 4)T he r ea r er e mot e l ya nde a s i l ye x pl oi t a bl ev ul ne r a bi l ie si nt heBl a c k Be r r y E nt e r pr i s eS e r v e rt ha tc oul da l l owa na a c k e rt og a i na c c e s st ot hes e r v e rby s i mpl ys e ndi ngama l i c i ousi ma g efil et oaus e r ' sBl a c k Be r r yde v i c e . Rea dMor eh p: / /ny ur l . c om/ 42x r og 4 5)Ane wAndr oi dT r oj a ni sc a pa bl eofr e c or di ngphonec onv e r s aons , a c c or di ngt oaCAs e c ur i t yr e s e a r c he r . T het r oj a ni st r i g g e r e dwhe nt heAndr oi dde v i c e pl a c e sorr e c e i v e saphonec a l l . I ts a v e st hea udi ofil ea ndr e l a t e di nf or maon t ot hephone ' smi c r oS Dc a r d, a ndi nc l ude sac onfig ur aonfil ewi t hi nf or maon onar e mot es e r v e ra nds e ng sus e dbyt het r oj a n. Rea dmor eh p: / /ny ur l . c om/ 3j 44hx 6 6)Ha c k e r sa r ee x pl oingaz e r oda yv ul ne r a bi l i t ya ffe cngT i mT humb,af r e e i ma g er e s i z i ngu l i t ywi de l yus e dont hebl og g i ngpl a or mWor dPr e s s . Rea dmor eh p: / /ny ur l . c om/ 3k mx ba j 21THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
DI GI TALAGEBRI NGSSECURI TYRI SKS Gonea r et heda y swhe ny ouha dy ourpe r s ona l fil e ss t or e di naphy s i c a l l i br a r y a ndy ouronl yr i s kwa st ha ts ome onemi g hts t e a l t he m.L i f enowada y si sa l l a boutdi g i t a l .Y our“ l i f e ”i sont hewe ba nda ta nymome nty ourdi g i t a ll i f e c oul dbes t ol e n.T he r ea r ema nyr i s k st ha twet heus e r sne e dt obea wa r eof a ndpr e pa r e df or .T oda y , di g i t a l i nf or maoni sv e r ymuc has e c ur i t yr i s kf ort he c ommonpe r s onnotj us tbi gc or por aons . Notonl ydoy ouha v ey ourfil e ss t or e di nt hec l oud,buta l s oy ourr e put aon. Wi t hs e r v i c e sl i k eT wie ra ndF a c e booky oua r ede pe nde ntont he s ewe bs i t e s t ok e e py ouri nf or maons a f ea ndf r e ef r omunde s i r e da c c e s s .Mos tdon’ tr e a l i z et ha ti ti s n’ tj us tt hewe bowne r ’ sj obt ok e e py ous e c ur ebuty oumus tt a k e pr e c a u onsa l s o. F i r s ti spe r s ona ls e c ur i t y .S o wa r eupda t e sa nda nv i r uspr og r a msa r et he mos tc ommont hi ngt ha tus e r sne v e ra ppl ya ndf ort ha tr e a s onwea r eo e n aa c k e da ndha veours e c ur i t ybr e a c he dbe c a us ewef a i l e dt oa ppl yapa t c h t ha tc oul dha v es ol v e dt hepr obl e m or pr e v e nt e dac omput e rv i r us .PCus e r s ne e dt obemor er e s pons i bl ea bout t hi sbe c a us eourha r dwa r ei sourr e s pons i bi l i t ya ndt heda ma g et ha tha s be e nma def r om t hi st y peofbr e a c h ha sbe e nabi gone . Wi t hbotne t wor k s t ha tc ountmi l l i onsofi nf e c t e dc omput e r s ,wea r er e s pons i bl ef oral otof s e c ur i t yi s s ue si nt hel a s tf e wy e a r s . T hes e c ondpoi ntofs e c ur i t yi st he a c c e s sf r omout s i de r sorha c k e r sa swe c a l lt he mt oda y .P e opl ewho ha c k ha v epr ov e nt ha tt he ya r eas e c ur i t y r i s ka ndt ha tt he i rwa v eofa a c k swi l l i nc r e a s eov e r me .
22THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
T hebi g g e rt hec ompa ny ,t hemor el i k e l yi twi l lbeat a r g e t .Anony mousa nd L ul z S e cha v ebe e nwr e a k i ngha v oca mongdi ffe r e nts i t e sa nda g e nc i e st ha t pr ov ewea r enoty e tr e a dyf oraf ul l aa c konourpe r s ona l a nds ma l l e rbus i ne s ss i t e s .T he s eg r oupsde f e ndt he i rha c k i nga sak i ndof“ e t hi c a l ”pr oc e dur e a ndc l a i mt ha tt he yonl ya a c ks i t e st ha tr e s t r i c tpr i v a c yorwhi c ha ffe c t st he f r e e domoft hei nt e r ne t , howe v e r , t he r ea r eot he rg r oupsl i k et heonet ha ta t t a c k e dt hePS Nne t wor kaf e w mont hsa g o,t ha tha v epr ov e nt ha tt he ywi l l aa c ka ndwi l l doi tj us tf ort hemone t a r yg a i na ndnot hi nge l s e .Wea l s oha v e s ome t hi ngt ha tma nyha v ec ons i de r e dbutnoneha spr oof , t ha tt he r ea r eg ov e r nme nts pons or e dha c k e rt e a ms . T ha tt he ywor kt oc r e a t ea na r c hyi ng ov e r nme nts i t e s , a ndt oi nfil t r a t ea nds t e a l v a l ua bl ei nf or maonf r omt he s eg ov e r nme nt s .I t hi nkt ha tt he r ei smor et ot hi st he or yt ha nme e t st hee y e , a ndwewi l l s e emor ea boutt hi st y peofa a c ki nt hef ut ur e .As ol u ont ot hi s ? Be e r pr e pa r aonf ort heI Tma na g e r ,f a i t hf ul l ya ppl i e ss o wa r eupda t e s ,a ndt r i e s t obeones t e pa he a doft heha c k e r . T het hi r dpoi ntofs e c ur i t yi sourpr i v a c ywi t h“ offic i a l ”s i t e s .F a c e booka nd Goog l eha v epr ov e nt ha tt he yha v ev e r yc l e a ri s s ue sr e g a r di ngs ha r i ngouri nf or maonwi t ht hepol i c eort heg ov e r nme nt . Dur i ngt her e c e ntr i ot s , UKRI M offe r e dt he i rhe l pt ol oc a l i z et hos er e s pons i bl ef ort heor g a ni z aon,a ndt hi s putusa l la tabi gdi s a dv a nt a g e .Weha v et r us t e dt he s es i t e s .Wev ol unt a r i l y g a v et he m ouri nf or maon, a ndt he ywi l l s ha r ei twi t ha ny onei f“ t he yt hi nki t i sr i g ht . ”Weha v ebe e nr e a l l yna ï v ea boutt hi sa ndwene e dt oa ddr e s st hi s wi t ht he s et y pe sofs i t e sbe c a us et he yha v eourl i v e sa ndpe r s ona l i nf or maon a nda ppa r e nt l ywi l lv i ol a t eourpr i v a c ywhe ne v e rt he ywa nt .Wemus tpr e s s ur et he mt or e s pe c tusa ndourpe r s ona li nf or maon.Wea sus e r sne e dt o k nowwhe r eourpe r s ona l da t ai sbe i ngs t or e da nds e c ur e d, a ndwha tc a nt he y dowi t hi t .Noma e rwha t ,wene e dt obei nf or me da ndma y bebemor er e s pons i bl ea boutwha twes ha r e . AsIfir s tme n one d,ourl i f eha sbe c omeadi g i t a l l i f e ,a ndt hes e c ur i t yofi ti s t hemos ti mpor t a ntt hi ngnowa da y s .PCus e r sne e dt obemor er e s pons i bl e , l i s t e nt owha tI Tma na g e r sha v ebe e ns a y i nga l lt he me ,“ don’ tope nunk nownma i l swi t ha a c hme nt s ” , “ upda t ey ours o wa r e ” , “ don’ tt r us ta ny one ” , “ bec a r e f ul wi t hwhoy ous ha r epr i v a t ei nf or maon. ”Unf or t una t e l y ,i ts e e ms weha v ef a i l e di ne v e r ya s pe c ta ndwene e dt oc ha ng et ha t . Re me mbe r , k nowl e dg ei spowe r , a ndwene e dt ok nowhowt opr ot e c tourda t a . 23THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
“ Nowi st heT i met oe v ol v eorDi e”
Anony mouswa sf or me da ndbi r t he dont hei nt e r ne tme s s a g eboa r d4c ha n i n2003.T hemoni k e rAnony mouswa sde r i v e da shoma g et o4c ha n.Att he me , i fs ome onepos t e dt o4c ha n’ sf or umsa ndnona mewa sg i v e nt he nt he pos twa sc r e di t e dt o" Anony mous " . S e i z i ngont ot hepr e mi s eort hei de at ha t a consc a nbet a k e na nony mous l ybyt hel e s s e rorpowe r l e s s“ Anony mous ” mov e dbe y ond4Cha na ndmor phe di nt os ome mel a r g e ra ndmor epot e nt . T heor i g i na lpr e mi s eof“ Anony mous ”a ppe a r e dt obeal i mi t e dbutnobl e i de a ;a e mp ngt ok e e pt hei nt e r ne tope na ndf r e ebe c a us eg ov e r nme nt s a ndc or por aonswe r ee a r ne s t l yt r y i nga ndde ma ndi ngl i mi t sa ndr e s t r i c onst ot hef r e e domofe x pr e s s i onont hei nt e r ne t . T oda t e“ Anony mous ”ha sr e ma i ne daba nne rt ha tma nyc ha nne r s , a swe l l a s ha c kv i s t sa ndI RCus e r s ,pos tunde ra nda r el oos e l yg r oupe dt og e t he r . Al l i e dunde rt heumbr e l l aof“ Anony mous ”wi t hnor e a l c omma nds t r uc t ur e i nt heg r oup,“ Anony mous ”r e ma i nsa ne v e rfluc t uangma s sofunk nown i de n e st ha tha v eo e nf a nc i e dt he ms e l v e sa sc y be r a v e ng e r sunf oc us e d a ndmor eo e nt ha nnotuna bl et or e ma i noft hes a mec ons c i ous ne s se v e n ona nhour l yba s i s . 24THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Hi s t or ymus tber e me mbe r e da ndne v e rf or g oe n,f ort hef a c t ua l wor dsof I t a l i a nf a s c i s tBe ni t oMus s ol i niwa ss t a t e dc or r e c t l y ;“ F a s c i s mi sCor por a t i s m” . Ast heg a pi nwa g e swor l dwi debe c omei nc r e a s i ng l ymor edi s pa r a g i ngas i g ni fic a nt l yi nc r e a s i ngnumbe r sofwor l dc iz e nsa r ebe i ngha r me da ndma l t r e a t e dbyt heunque nc ha bl eg r e e da ndc or r up onof t hee v ol v i ngc or por a t e s t a t e .Ast hewe a l t hoft hewor l dha sr a pi dl ybe e nc ons ol i da t e di nt ot he ha ndsofas ma l lmi nor i t y ,g ov e r nme nt sa r ebe i ngboug hta ndpa i df ora nd r a pi dl y ,onebyone ,t ur ne dov e rl oc ks t oc ka ndba r r e lt of a c e l e s sCor por a ons .T he s eg r e e ddr i v es oul l e s sc onc e r nsha v enothe s i t a t e dt ous et he i r powe ra sa ni ns t r ume ntofwa ra same a nsofi nc r e a s i ngt he i rpowe ra nd pr ofit s . S a dl y , a se x pe c t e da l ongwi t ht hi se v e rg r ownt r e ndi tha sbe c omea f a c tt ha thuma nr i g ht sv i ol aonsa r ebe c omi nge v e nmor ee x t r e mea nd c r ue l .
S i nc ei ti se v i de ntt ha tt hemons t r ousCor por aonsc ommi ngt he s euns pe a k a bl ec r i me sa r ea l mos tne v e rhe l da c c ount a bl e ,i ti s met ha tt he y ounga ndt hec omput e rl i t e r a t ea r oundt hewor l de duc a t et he ms e l v e sa nd be c omec ons c i ous l ya wa r ewhi c hg r e e dyCor por aonsa r ec ommi ngt he hor r e ndousc r i me st ha te ffe c t st hev e r ys ur v i v a loft hi spl a ne ta nde v e r y l i v i ngbe i ngoni t .Be c a us ei nf or maoni spowe r ,i nf or my our s e l v e s .Nowi s t he met oe duc a t ey our s e l v e sa ndma k ey ourl i s t soft he s eoffe nde r s ! 25THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
Bybe c omi ngmor ee duc a t e da ndi nf or me dont heg l oba lt hr e a tpos e dby c or por aons , i si tpos s i bl et ha tt hi si de a , t hi spr e mi s eof“ Anony mous ”c oul d bec ha nne l e di nt ot hek i ndoft oolne e de dt oa wa k e ng l oba lc ons c i ous ne s s t ot het r e a c he r yoft heg l oba lpowe rs t r uc t ur e .Coul dt het r uec e nt e rof “ Anony mous ”t ha ti de at ha t“ Anony mous ”wi s he st or e pr e s e ntt het r ut ht o t hewor l dmor phonc emor ebe y ondi t spr e s e ntf or ma ndl i mi t aonsorwi l l t hene bul ousv i s i onbe hi ndt hepr e mi s eof“ Anony mous ”r e ma i nc ont e ntt o us et he i rc ol l e cv ea bi l ie sf ore i t he rg oodorba ds i mpl yc ont e ntona my opi ca ndundi s c i pl i ne dpa t h, de pe ndi ngont hei nc l i naonoft hemob? I ti s met og e tofft ha tfluffyc l oudof i l l us i on, g e te duc a t e da ndg e ti nf or me d be y onds uc has ma l lf oc us .I nv e sg a t et hebi g g e rpi c t ur e ,k now y ourown powe r ; i nf or mot he r soft hei mme di a t et hr e a tofc or por aonsa ndt heg r owi ngt a k eov e rofwor l dg ov e r nme nt s ,t hebi g g e s ta ndba dde s tbe i ngt a k e n ov e rbyf a s c i s mt oda yi st heUni t e dS t a t e sofAme r i c a .I nt e r ne tf r e e dom i s t hel e a s tofy ourwor r i e snow.Ca l l i twha ty ouwi l l , t hi si swha tBe ni t oMus s ol i nic or r e c t l yl a be l e dF a s c i s m mybr ot he r s .I fy oudon' tl i k ei t ,y ouc a n oppos ei t .Buti fy oui g nor ei ta ndde nyi t ;t he ny ouwi l lr e ma i nas i ng t a r g e t . “ Nowi st he met oe v ol v eordi e ”
Knowy ourenemy .Got oc or por a t e wa t c h. or g S ubmiedBy L e k haP a t e l
26THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
S E CURI T YI SMORET HANAT HRE A T
T hee v e nt soft her e c e ntmont hsha v ehope f ul l ys howna l l ofusonet hi ng ,a nd t ha ti sa ny onec a ng e tpoppe da ta ny me . Anony mous , L ul z S e ca ndot he r sha v e br oug hta e n ont owha tmos ts e c ur i t yg uy sha v ebe e ns a y i ngf orav e r yl ong me . S e c ur i t yi samy t h, pl a i na nds i mpl e .
S e c ur i t yv e ndor ss uc ha sMc Af e ea r eus i ngf e a r ,unc e r t a i nt ya ndDoubt( F UD) i . e . . " T heS ha dyRa t "t oma r k e tt he i rwa r e s . I ndus t r i e sa r ec omi ngt og r a s pswi t h t hef a c tt ha ta l l t hemone yt he yha ds pe ntons e c ur i t yba r e l yr e duc e dt he i rr i s k pos t ur e .T hei nc ompe t e nc eofs oc a l l e ds e c ur i t ypr of e s s i ona l si sa l s oc omi ngt o l i g hti nwha tIda r et oc a l l bus i ne s sa sus ua l i nt hes e c ur i t yc ommuni t ya ndt he r e s toft hewor l d.
Ir e me mbe rt he90swhe nwe bs i t e sg e ngpoppe donada i l yba s i swa st he nor m.T hemor ni ngr ou nef orpe opl ei nt hes e c ur i t ybus i ne s sc ons i s t e dof ; Coe e ,S mok ea ndaqui c kpe r us a lofa r ion. or gt os e ewhog ote g gont he i r f a c e .T hei ndus t r ywa ssl lf a i r l ys ma l la tt he me ,a ndmor et ha nl i k e l yy ou k ne wwhot oc a l l a ndmoc k . Y ouwoul dt hi nkt ha twi t hs e v e r a l y e a r sofs e c ur i t y unde rourbe l t st ha tt her ou newoul dha v ec ha ng e d. We l l , y ou' dbewr ong . T hi ng sha v ec ha ng e ds ome wha t . . T he s eda y st hec ont e nt ďŹ l t e r swewe r et a s k e dwi t hi mpl e me n ngba c kt he na r e bl oc k i ngoura c c e s st oA r ion. T hei ndus t r yha sa l s o c ha ng e da ndI ' ms or r yt os a yf ort hewor s e .
27THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
T hes e c ur i t yc ommuni t yha sbe c omec onv ol ut e dwi t hi ndus t r ye x pe r t st ha tha v e noi ndus t r ye x pe rs e .T obr e a ki nt ot hec or por a t es e c ur i t ywor l d,y oumus t obt a i nc e rfic aonst ha ts a yy ou’ r ea ne x pe r t .T hepr obl e mi st ha tac e rfic a t e doe sg i v ey out hee x pe r i e nc eort hek nowhowt omi ni mi z et hel ul z .I ' dl i k et o poi ntoutt ha tI don' tt hi nka nyof t her e c e nta a c k sa r ec ompl e xi nt hel e a s t ; but i fc ompa ni e ss uc ha sS ony , Booz eAl l e na ndot he r sa r ebe i ngpoppe d, weha v ea s e r i ouspr obl e m.
Commonpr a cc ei nmos tor g a ni z aonsi ss pe ndi ngat onofmone yona ppl i a nc e sa ndmi r a c l es ol u onswi t houtl ook i nga ta nyoft heunde r l y i ngi s s ue s .T he pr obl e mi st ha tama g i cde v i c edoe snote x i s t , r e g a r dl e s sofhowma nyi ne pts e c ur i t ypr of e s s i ona l swoul dl i k ei tt o. S oy ouha v eafir e wa l l a ndy out hi nky oua r e pr ot e c t e d, we l l l e t ' st a k eal ooka twhyt ha ti s n' tt hec a s e .
T heDi a g r a mbe l owi sat y pi c a l s c e na r i o. We bs e r v e r sa r ebe hi nda ne x t e r na l fir e wa l l , S QLS e r v e ri sonas e r v e rs e g me ntoffadi ffe r e nts e toffir e wa l l sa nde v e r y t hi ngs houl dbes e c ur er i g ht ?WRONG….
28THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
T oa l l owa c c e s st oy ourwe bs e r v e r sy oua l l owT CP / 80&T CP / 443t hr oug ht he fir e wa l l . Y e s , mos tfir e wa l l sa r es ma r tt he s eda y sa ndc a ndoa dv a nc e dl a y e r7fil t e r i ng , buthowma nyof y oua c t ua l l yi mpl e me ntt het e c hnol og y ?I ' mg oi ngt og o outonal i mba nds a ynoone , orv e r yf e w. S ot hefir e wa l l t ha ty ouj us tdumpe d at onofc a s honi snot hi ngmor et ha nal a y e r4r out e r .Doy ous e ewhe r eIa m g oi ngwi t ht hi s ?S QLwor k sbe c a us eoft hewa yt hea ppl i c aonsa r ec onfig ur e d. F i r e wa l l sa r es e tupt oa l l owt hewe bs e r v e ra c c e s st ot he m. T hi si st hec onfig ur a on,a nd a S QL c a l li sa v a l i dr e que s t .Obv i ous l y Iomie dI nt r us i on De t e con/ pr e v e n on,Re v e r s ePr ox y ,Wa Ft e c hnol og ya ndt hel i s tg oe sona nd on… T hebo oml i nei snoneoft he s et e c hnol og i e swi l l s t opade di c a t e da a c k e r .T he yma ys l owt he m downbutt he ywon' ts t opt he mc ompl e t e l y . I ' v ehe a r d t hea r g ume ntf r omc l i e nt si nt hepa s tt ha tt he ydon' tha v ea ni nt e r ne tpr e s e nc e a nda ss uc h,a r es e c ur e .T heonl yt hi ngt ha tc ha ng e si st hea a c ks ur f a c eha s be c omes i g ni fic a nt l yr e duc e d, butnote l i mi na t e d. E v e r ybus i ne s se s s e na l l yha s t hes a mea a c kv e c t or swhi c hi nc l udee mpl oy e e s , c l i e nt sa nd3r dpa re s . Ade di c a t e da a c k e rc a nus ea nyoft he s et hr e a tv e c t or st oa c hi e v et he i rg oa l s ,upt o a ndi nc l udi ngwa l k i ngr i g htt hr oug ht hef r ontdoor . Phy s i c a l s e c ur i t yi na nor g a ni z aont ha tdoe s n' tha v ea ni nt e r ne tpr e s e nc ei sus ua l l yt hee a s i e s tt obr e a c h. T hefina l dbi tI ' dl i k et ot hr owi nt ot hemi xi st her e c e nte x pl os i onofbot f or hi r epr ov i de r s .Whi l ee v e r y onei ss us c e p bl et ode ni a l ofs e r v i c e , t he s epr ov i de r sa r ebr i ng i ngt ol i g hta ni nt e r e sngs c e na r i o.T hei ndus t r yha sr e s ponde dt o de ni a l ofs e r v i c e , wi t hl oa dba l a nc e r s , pr ox i e s , r ou ngpr ot oc ol sa ndmor e . T he a ns we ri sy ouc a n' t , y ouha v ea bs ol ut e l yz e r or e c our s e . De ni a l ofs e r v i c ei sa ni nt e r e snga ni ma lbe c a us et hemo v e sbe hi ndi ta r ef a ra ndwi de ,r a ng i ngf r om c ompe v es a bot a g et oa cv i s m.Wha tc a ny oupos s i bl ydoi fy ouha v e40K+ bot sa a c k i ngy ourDNSS e r v e r s ?Y ourc ompa nyha snowdi s a ppe a r e dofft hei nt e r ne t . T oc l os e , nobodyi se v e rt r ul ys e c ur e . Ourj oba ss e c ur i t ypr of e s s i ona l si s t wof ol d.T hefir s tpa r ti smi ni mi z i ngt hei mpa c tbyi mpl e me n ngc ont r ol st ha t ma k et hea a c k smor edi ffic ul tt oa c hi e v e ,a ndi mpl e me ntt hec a pa bi l ie st o i de nf ya ndr e s pondt oa nyong oi nga a c k .Ia m notaf a noft hewa yt het e r m APTi sbe i ngt os s e da r oundbyt heme di aa ndt hei ndus t r ya sawhol e . E v e r yor g a ni z aonha st hr e a t st ha tmus tbec ons i de r e da spa r toft he i rt hr e a tmode l . L ul z s e c ,Anony mousa ndt hel i k e ss houl dbec ons i de r e da spa r tofy ourT hr e a t Mode l r e g a r dl e s sofwha ti ndus t r yy oua r ei n. S ubmie dBy: Bor i sS v e r dl i k S e ni orP a r t ne r ,J a de dS e c ur i t yCons ulng h p: / / www. j a de ds e c ur i t y . c om|E ma i l : bor i s . s v e r dl i k @j a de ds e c ur i t y . c om 29THN-Magaz i ne|Sept ember201 1
www. t hehac k er news . c om |I s s ue04
feedback I twa si nt e r e sngt oha v eawhol ema g a z i nea boutwha twer e por ton.Of Sept ember2011,I ssue04 c our s e , I me a n“ ha c k i ng”a ndt hec ons e que nc e sofi t . Wehe r ea tT heHa c k erNe wsS ec ur i t yS er v i c eshopey oue nj oy e dt hi se dion ofourma g a z i nea ndhopet oha v ey oua sar e g ul a rr e a de rofourda i l ywe b ne ws . Ha c k i ngi she r et os t a ya nds oa r ewe .Wewa ntt hemos ti nf or me dr e a de r s pos s i bl et ha ti swhywec a r ewha ty out hi nk . We ’ dl i k et ohe a rf r omy oua ndl e tusk nowwha ty ou’ dl i k et oa ddt ot hema g a z i neorwha tt opi c sa r eofmos ti nt e r e s tt oy ou. I nt heme a n me , T ha nky ouf orbe i ngal oy a l r e a de ra ndt ha nky ouf ort heoppor t uni t yt or e por tont heha c k e rne wsofda y . Wewi l l s e ey ouda i l ya ndt he ni nourne x tma g a z i nec omi ngi nOc t obe r2011. Mos ts i nc e r e l y , Mohi tk uma r F ounde r / c hi e fe di t or T heHa c k e rNe wsS e c ur i t yS e r v i c e s
contact and joi n us E ma i l :t he ha c k e r ne ws @g ma i l . c om T wier : h ps : / / t wie r . c om/ T he Ha c k e r s Ne ws F a c ebook : h p: / / www. f a c e book . c om/ t he ha c k e r ne ws Webs i t e : h p: / / www. t he ha c k e r ne ws . c om/