US Election hacking fallout: US expelled 35 diplomatic personnel from Russia embassy last week, it is alleged these Russians interfered in US presidential election by hacking the DNC. Russia did not do the usual tit for tat but it trolled President Obama by calling him a Lame duck.
Super Mario Run APK is a malware: Nintendo’s ‘Super Mario Run’ was released recently for iOS devices only. Some of the Mario lovers went looking for the Android version of the game outside the Goggle play store and ended up with malware. This malware can take full control of the Android device. It is advised to wait for the official version on Play Store.
Lithuania computers infected with Russian Spyware: Reuters reports that Lithuania has accused Russia of cyber-attacks on it Government networks. Lithuania fears Russia is trying to infiltrate its political sphere. Russia has rejected this as Laughable and unsubstantiated. Meanwhile in Germany, its intelligence believes Russia may interfere in its National elections in 2017.
Application for Marijuana seller’s details leaked: Recreational marijuana is legal in Nevada. Details from the 11700 reseller applications that Nevada state government had received was easily accessible via Google on the State Government’s Website. Experts are not willing to call this a cyber-hack. The site is currently down.
Another DDoS attack: For most part of 2016 – DDoS attacks was launched using Mirai botnet in hacked IoT devices. Last week – A 650Gbps attack was launched using a new botnet called Leet Botnet. Issue 84 – A 1.5Tbps attack was launched on France-based hosting provider OVH and Issue 87 – DNS provider DYN suffered massive DDoS attack.
Android Trojan infects Wi-Fi router: A new Android Trojan called Switcher comes in disguised apps and does not affect the device but targets the Wi-Fi router it is connected to. It changes the DNS settings of the router to redirect traffic to malicious websites. Issue 95 – we saw something similar called ‘DNS Changer’ – where the router was attacked via a PC. Issue 94 – we saw Stegano Malvertising redirecting traffic.
Amazon Echo’s help required to solve murder case: Amazon Echo is a smart device that responds to voice commands. This device was being used in a home where a murder took place. The police have issued a Warrant to Amazon to handover the voice recordings during the suspected time of murder. Amazon has declined. Sounds very similar to Apple v/s FBI case wherein Apple declined to unlock the San Bernardino terrorist’s iPhone.
InterContinental Hotels may have been hacked: After a debit and credit card fraud pattern was found at some of the InterContinental properties – the hotel has launched an investigation. Kimpton Hotels & HEI Hotels & Resorts (which operates Marriott, Hyatt and Sheraton and Westin hotels) recently suffered PoS breach.
Critical flaws in PHP 7 detected: Experts have found 3 critical ‘Zero Day’ vulnerabilities in PHP 7. Two of the flaws allow hackers to take full control of the web server and steal data. The third flaw helps in DoS attack shutting down the server. PHP was notified about these flaws in Sep and as of now they all have been patched.
Security and demonetization: Recall the story we discussed in Issue 49 – wherein a Bangalore businessman’s account was hacked and $70K was stolen. The hackers were able to very easily obtain a duplicate SIM card of the businessman’s phone number and then hack the bank account as the OTP was now being delivered to the criminals. With Demonetization and Digital India – thousands are embracing e-wallets and online transactions every day. Criminals now have a much wider attack surface, one should stay alert to prevent such hacks.