-
An attack on media platform causes exposed nearly 50 million user informations – Sep 2018
In 80’s our daily life without any electronic type social media involves. But we understood that we are avoid to talk to the stranger. As time goes by, internet social media fine tune our mind. As a result we make friend and relies on this communication platform. Since this is a popular open platform. It…
-
Hypothesis – About the cyber attack on Port of Barcelona (Sep 2018)
We heard that the Port of Barcelona suffers an attack of hackers last week (20th Sep 2018). The logistics and transportation industry lure hackers’ interest because they can extort ransom. There is no official or incident details announcement till today. The following details merely my personal imagination of this incident. Any resemblance to actual events…
-
Consider how does JQuery affect millions of people confidential data – Sep 2018
RiskIQ expose one of the possible way how hacker steal customer credit card data of British Airline. Expert speculate the suspects exploit Inject jQuery into a page technique collect the confidential data. BA claim that the data breach only occurs in credit card data. Risk IQ share the proof of concept shown that the technique…
-
British Airway announcement – 7th Sep 2018 (380,000 customers’ bank details stolen from website)
The Spokesman of British Airways said around 380,000 payment cards had been compromised and it had notified the police.He stated that they suspected that hacker stolen customers’ bank details through official website and or mobile apps. However the stolen data didn’t include travel or passport details. If there is european citizens become a victims of…
-
Aug 2018 – Malware (KEYMARBLE)
My friend informed that a new malware wreak havoc. Meanwhile US-Cert issued the technical articles described the details and let’s the world staying alert! US-CERT also provides the Indicator of compromise (IOC) file for reference. I am interested and therefore I put the this file into the sandbox see whether what exact issue will be…
-
New version of black energy cyber attack target Microsoft OLE product design weakness
Ukrainian intel agency has claimed it stopped a cyber attack against a chlorine plant that was launched using the notorious VPNFilter malware. Perhaps the world focusing VPN filter malware spreading and infection. We known earlier last month that such attack targets are the low end wireless router and network access storage (NAS). However, from my…
-
Hackers jailbreak MyEtherWallet Infrastructure (Apr 2018)
ISPs tend to restrict what an end customer can advertise. However, any ISP do not filter customer advertisements. A possible factor let’s hacker compromise the customer router thus advertise errant information into the global routing table. An attackers stolen at least $13,000 in Ethereum within two hours. Security expert speculate that it is a DNS…
-
Verge Is Forced to Fork After Suffering a 51% Attack
Blockchain technology contains advanced security features fundamentally. However the heist occurs in such secure platform are in frequent. The questions of a retrospective and why was hacked? It proof that the problem not given by blockchain technology design flaw. Most likely the root causes are given by end point (client side), operation management (show the…
-
Bank Negara Malaysia (Bank) detected and foiled a cybersecurity incident involving attempted unauthorized fund transfers using falsified SWIFT messages.
Easter holiday make me lazy. Seen cyber incident alert posted by my friend Enoch yesterday. However I just ignore until awaken this evening. The details of this incident was that the crooks use falsified SWIFT Messages try to achieve their goal. The news told that they haven’t successful. As far as I remember, on February…
-
How much is your personal data worth?
Microsoft windows defender make the world safe. The threat actor masquerading a legitimate file goal to doing bitcoin mining. Windows defender just kill it within seconds. It is very powerful. It hints to the world that there will be formed different countries will have their own operation system. Why? Nobody want that all the time under monitoring.…