اخبار الهكرز العرب

This blog is adapted from the white paper Why InfoSec Needs to Care About Social Media . Read the full white paper for best practices and ZeroFOX recommendations. The information security team’s role has changed significantly over the last few decades. Ten years ago infosec was laser focused on securing the endpoint, getting a handle on the extended network perimeter, and minimizing the potential attack surface. Today, the information security team’s charter is much more complex. Yes, infosec is still tasked with protecting the organization from all potential information, technology and digital risks, but the new twist is that they must do this while enabling more connectivity, mobility, and engagement across the organization. Security must now facilitate the expansion of the attack surface, something that runs counter to every fiber of security best practices. Social media has also exploded as a business platform due to the fact that in our connected world,...

The infrastructure behind a web shell used in an attack earlier this year suggests methodical and purposeful threat actors, Palo Alto Networks says. A security vendor's investigation into the source of malware that was used in a recent security incident involving a Middle Eastern organization has revealed just how sophisticated and interlinked modern cyber attack infrastructures have become. For the past several months, researchers at Palo Alto Networks have been investigating a web shell dubbed TwoFace that was used in the Mideast incident to remotely access the victim's network and establish a persistent point for lateral movement. In following IP addresses associated with the TwoFace attack, the researchers stumbled upon a much larger-than-expected adversary network that included multiple compromised websites, credential harvesting systems, command-and-control servers and post-exploitation tools. Several of the credential harvesting websites were...

New security researchers have discovered a new type of ransom software that requires users to send their own images instead of money to decrypt their devices. With the harm that the ransom software, one of the biggest cyber threats of the 21st century, has caused to many users recently, a recent paradigm shift is believed to be taking place. The MalwareHunterTeam  researchers discovered this new type of malicious ransom software. In fact, this virus does not encrypt data, but simply blocks the user from accessing his / her device. The victims show a message on their screens telling them that the only way they can get into their computers is to send naked "naked" pictures. The criminals identify the photos with ten clear personal pictures of the victims. The message tells the user that they will be sure that the pictures of the victim already or not before sending the device access code. So far, no name for this malicious program has been detected except "...

اكتشف باحثون أمنيون حديثاً نوعاً جديداً من برمجيات الفدية الخبيثة، يطلب من المستخدمين إرسال صورعارية لهم بدلاً من الأموال لفك تشفير أجهزتهم. ومع الأذى الذي أصبحت برمجيات الفدية الخبيثة، التي تعد أحد أكبر التهديدات السيبرانية في القرن الحادي والعشرين، تتسبب به للعديد من المستخدمين في الآونة الأخيرة، يُعتقد أن هناك تحولًا مخيفاً حدث اخيرا. ويتمثل ذلك في اكتشاف باحثي فريق MalwareHunterTeam هذا النوع الجديد من برمجيات الفديةالخبيثة، وفي حقيقة الأمر لا يقوم هذا الفيروس بتشفير البيانات، وإنما يقوم فقط بمنع المستخدم من الدخول الى جهازه. وتظهر للضحايا رسالة على شاشاتهم تخبرهم أن الطريقة الوحيدة التي يمكنهم بها الدخول على أجهزتهم هيأن يقوموا بإرسال صور فاضحة “عارية”، ويحدد المجرمون عدد الصور بعشر صور واضحة شخصية للضحايا. وتخبر الرسالة المستخدم أنه سوف يتم التأكد من أن الصور للضحية بالفعل أم لا قبل إرسال رمز الدخول إلى الجهاز. وإلى الآن لم يتم اكتشاف أي اسم لهذه البرمجية الخبيثة سوى "nRansom.exe" مما يعني أنه لم يقوم بإصابة إلا أجهزة ويندوز. ويقول خبراء إن الضرر الذي سوف...

On September 15th, streaming service Vevo disclosed a massive data breach , to the tune of 3.12TB of sensitive internal data. The breach occurred after one of its employees was compromised via a LinkedIn phishing campaign, demonstrating again that social media is an incredibly effective vector for launching targeted attacks. Already this summer, attackers have successfully used similarly fake social accounts to persuade employees at oil and gas companies, a cybersecurity firm , and a government department to open malicious attachments designed to take control of victims’ devices. Why are phishing attacks so effective when waged over social media? Social allows users to create believable online identities and interactions, which can help users build credibility and trust with their real-world peers. For the most part, these fields are publicly-facing, and serve as one of the first things validated upon receipt of a friend request or incoming message. Are they in th...

في 15 سبتمبر، كشفت خدمة تدفق فيفو خرق البيانات الضخمة، إلى لحن 3.12TB من البيانات الداخلية الحساسة. حدث الخرق بعد أن تم اختراق أحد موظفيها عن طريق حملة لينكيدين للتصيد الاحتيالي، مما يدل مرة أخرى على أن وسائل الإعلام الاجتماعية هي ناقلات فعالة بشكل لا يصدق لشن هجمات مستهدفة. وفي هذا الصيف، استخدم المهاجمون بنجاح حسابات اجتماعية وهمية مماثلة لإقناع الموظفين في شركات النفط والغاز، وشركة للأمن السيبراني، ودائرة حكومية لفتح مرفقات ضارة مصممة للسيطرة على أجهزة الضحايا. لماذا تكون هجمات التصيد الاحتيالي فعالة جدا عند شنها على وسائل التواصل الاجتماعي؟ الاجتماعية يسمح للمستخدمين لخلق هويات على الانترنت يمكن تصديقها والتفاعلات، والتي يمكن أن تساعد المستخدمين على بناء المصداقية والثقة مع أقرانهم في العالم الحقيقي. في معظم الأحيان، هذه الحقول تواجه الجمهور، وتكون بمثابة واحدة من الأشياء الأولى التحقق من صحة عند استلام طلب صديق أو رسالة واردة. هل هم في نفس المهنة؟ هل أشارك تجربة أو اتصال مشترك؟ المهاجمون تعظيم فرص المشاركة عن طريق انتحال المستخدمين الشرعيين أو عن طريق صقل الحقول الشخصية وا...

In February 2017, Palo Alto Networks detected the development of malicious software called Infy, formerly known as Foudre, which appears to have benefited from and learned from the procedures previously applied by Palo Alto Networks In order to dismantle and redirect their command and control infrastructure. Fuder's latest software includes new technologies that can avoid and control acquisitions to avoid attempts to redirect its command and control chain, which Palo Alto Networks has achieved in 2016. In May 2016, the company documented and published its original research results on campaigns using malicious Envi software over a decade. One month after the results were released, Palo Alto Networks provided a detailed explanation of how it acquired the command and control server traffic For attackers and redirect them. Claudio Guarnieri and Colin Anderson of Black Hat USA provided evidence and evidence in July 2016 that Iran Telecom Company (AS12880) blocked the command and c...