Your Credit Card Number Leak in Online Chatting?

Another interesting real life story that happens in a Internet Relay Chat (IRC) now a days.  A very random string that displaying on the online chat box is actually the Credit Card start code and saying that you have just swipe your card!  Click on the image to enlarge and read the conversations between them.

Image Source: http://bash.org/?949560

Yes, and one of my friend just get scam from a porn site by approve the porn site with his credit card credentials.  End up, within 1 month his credit card has been swipe for more than RM2,000.00 without any notifications from the bank and the porn site owner.

Do you have the same experience before? Share with us and let's try to minimize the online scam together! Happy Tuesday ( ;

Steam Web sites hacked / defaced: 'Gamer data exposed'

"Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums," Gabe Newell, co-founder of Steam developer Valve Corp., said in a statement posted to the Steam site.

"We learned that intruders obtained access to a Steam database in addition to the forums," he added. "This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information."

The statement said there was no evidence that encrypted credit card numbers or personally identifying information was stolen or that protection on the credit card numbers was cracked. "We don't have evidence of credit card misuse at this time," Newell said. "Nonetheless you should watch your credit card activity and statements closely."

And while some forum user accounts were compromised, it did not appear that any Steam accounts were compromised, the company said. However, people who may have used the same password on their forum and Steam accounts should change the passwords, Newell advised.

"We will reopen the forums as soon as we can," he wrote. "I am truly sorry this happened, and I apologize for the inconvenience."

Meanwhile, the company said its investigation is ongoing.

According to a screenshot of the forum defacement, it appeared as if hacking site Fkn0wned was taking credit for the breach. Some forum users later reported getting e-mail spam that appeared to come from the hacking site, according to gaming blog site Kotaku.com.

But a post on the Fkn0wned site denied responsibility. "I can say I didn't authorize anyone to do what happened so Fkn0wned shouldn't be held responsible," a statement from the founder said. "If a member performs illegal actions in our name, there's not much we can do about that other than to ask that member to stop. If a rival site is deliberately trying to bring us down by placing the attention of Valve's legal department on us, there's not much we can do about that either. It's how this scene works and I'll have to accept that."

source: CNet

*Note: The contents above doesn't belongs to the author

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns

Anonymous Hackers have successfully hacked the neo-Nazi website and published the database of its 16000 membership application database containing personal data of some applicants from all around the country. The hack was motivated by an apparent desire to shame the Finnish government into improving data security.

In a Statement Anonymous says "We have no tolerance for any group based on racial, sexual and religion discrimination as well as for all the people belonging to them and sharing their ideologies, which is the reason why we decided to carry out last Monday's attack.". Authorities are investigating the security breaches, according to an online message attributed to Anonymous Finland.

According to the Helsingin Sanomat, the published information seems stolen from several sources: the Work Efficiency Institute, Student Alliance Osku, WinNova Länsirannikon koulutus Ltd, and Aducate - Centre for Training and Development at the University of Eastern Finland.

Mikko Hypponen, chief research officer of the Finnish internet security firm F-Secure, dubbed the attack 'irresponsible'.Israel recently rubbished claims that Anonymous had caused the failure of several governmental websites, putting the outage down to a server failure.

source: The Hacker News

*Note: The contents above doesn't belongs to the author

Aussie and UK government e-mail hacked

TeaMp0isoN group of hackers claim to hack more than 150 Email Id's of International Foreign Governments. They Release the Email List with Password on Pastebin note. Hex000101 Hacker, A member of TeaMp0isoN team got these Login credentials from various Government sites after hacking their databases such as armynet.mod.uk and website of Parliament of Australia (aph.gov.au) .

source: The Hacker News

*Note: The contents above doesn't belongs to the author.

Facebook: 600,000 accounts hacked a day

Every 24 hours 600,000 Facebook accounts are subject to attempted hacking or violation, Facebook has revealed.

The Social Network™ disclosed details of hacking activity as it unveiled new measures to protect user’s privacy. “We are adapting and responding to new threats everyday and will continue to roll out new ways to protect your account,” Facebook said.

In a blog post, Facebook revealed new tools to help users access their accounts if they are locked out and help prove your identity through your friends. “It's sort of similar to giving a house key to your friends when you go on vacation - pick the friends you most trust in case you need their help,” it explains.

And now, Facebook attempt to prevent all these happen with the two new security features.  For people who don't know, you can read here: http://bit.ly/uZ5NSe.

read more at http://bit.ly/rAgquj

source: The Register

Anonymous hackers threatening a Mexican drug cartel

Anonymous Mexico is going head-to-head with one of the most dangerous criminal organizations in the world, the Mexican cartel Los Zetas. With this Anonymous Proofs that they are not just a common Internet users as cowards behind a keyboard. Not only has the Anonymous threatened to reveal names, but it has also started making good to its threats.

Mexican Anonymous hackers is warning a Mexican drug cartel to release one of its members, kidnapped from a street protest, or it will publish the identities and addresses of the syndicate's associates, from corrupt police to taxi drivers, as well as reveal the syndicates' businesses.

The website of a Mexican politician suspected of connections to the cartel and The page is still defaced as we write; here is what it looks like (“es Zeta” meaning “is Zeta”):

"You made a huge mistake by taking one of us. Release him," says a masked man in a video posted online on behalf of the group, Anonymous. Here is the Spanish speaking video put out by Anonymous.

original article here

TeaMp0isoN releases list of vulnerable police web sites

TeaMp0isoN has found 6 vulnerable police web sites that can be hacked by using simple SQL injection attacks.  One of the member created a pastebin note with following message for the people of the world.

I do not like the Police. You beat on innocent and peaceful protesters for no reason other than that you want to protect your friends at the banks and yourselves to make money. It's all about money and the Police aiming to keep their job.  Why did I decide on not releasing the databases? I want you to see for yourself how vulnerable these people really are and for you all to get an understanding on why I didn't release. 

In this release I present you vulnerable websites that are open to MSAccess SQL injection. Below are official city websites that also the Police of that said area uses for their updates. Of course with all the money they make they couldn't spend a dime to invest into their security to make sure no breaches are bound to happen, they let petty vulnerabilities that still exist on their websites stay there with no fix. 

Whatever you are storing fellow below cities, which I've seen from table names it isn't good, you better hope the rest of the Community who is smart doesn't find out what's to see ;-) You should of expected me a long time ago, now the realness is setting free the cage.

1. http://www.ci.vallejo.ca.us/GovSite/default.asp?serviceID1=79' (City of Vallejo, California Website)
2. http://holmesbeachfl.org/Cities/COHB/default.asp?section=3'(City of Holmes Beach, Florida Website)
3. http://www.cityofkaukauna.com/announcements/announcementdetail.asp?DeptID=1' (City of Kaukauna, Wisconsin Website)
4. http://www.ci.kaukauna.wi.us/departments/depthome.asp?DeptID=12'(City of Kaukauna, Wisconsin Website)
5. http://www.romenewyork.com/organization.asp?orgid=63' (City of Rome, New York Website)
6. http://www.eastgreenwichri.com/matriarch/MultiPiecePage.asp?PageID=84' (Town of East Greenwich, Rhode Island Website)

Original Article: http://bit.ly/rTSmMU

Football Association Malaysia Hacked!

When I was ready to get to my bed, and I saw one of my friend posted something on our Prime Minister Facebook wall and say, "Hadiah untuk mu" with the link: http://www.fam.org.my.  When I enter to the page, and I know the site already hacked and the hacker put those unsatisfied words there with a news from my Metro and a video.

Besides that, credits has been given to UM'07, pjpb cr3ws, gaysec, anti-p4sti.  They hack for reason I guess.  Yet, we named it as hacktivist.

India's leading telco Company BSNL hacked by Pakistani Hacker

The Hacker domain: http://bit.ly/uFihEd


Original Article: http://bit.ly/tkx4Es

Anonymous plans to take down Fox News Web site

Anonymous plans to take down the Fox News Web site on November 5, according to a new video apparently released by the hacker group.

Original Video: http://bit.ly/w0dY95

Japan under Heavy Cyber Attack

In last two days several Cyber attacks breach corporate and National Security of Japan. First, Japanese parliament hit by cyber attack from China according to Report. A server located in China was used for the attack on the Japanese Lower House. This led to an extraordinary meeting of a key subcommittee after it emerged that hackers had access to emails and documents belonging to the chamber's 480 legislators for at least one month.


The personal computers and servers of Japanese lower house lawmakers have been hit by a cyber attack, and passwords and user IDs may have been stolen.


Original Article: http://bit.ly/tKuqeb

Operation Hackerazzi: FBI Arrests Alleged Hacker for Stealing Naked Photos of Hollywood Stars

FEDERAL officials on Wednesday arrested a 35-year-old Florida man,Christopher Chaney and charged him with 26 counts of cyber-related crimes against Hollywood stars following an 11-month federal probe dubbed "Operation Hackerazzi".

Twitter was ablaze earlier today with messages claiming to link to naked pictures of film actress Scarlett Johansson, which were allegedly stolen from her iPhone by a hacker earlier this year.The photographs may or may not be of Scarlett Johansson, but I would suggest that every hot-blooded male exercises some restraint as it's extremely possible that cybercriminals might exploit the interest to post dangerous links on the web designed to infect computers or steal information.To gain access to these email accounts, Chaney would search through details of celebrity lives within magazines as well as social media accounts like Twitter and figure out possible passwords. 

Once Chaney cracked the password, he would setup email forwarding to send a duplicate version of all emails to his personal account. This allowed Chaney to continue receiving emails after the password was reset. Gaining access to one account also allowed Chaney to access the address book and discover more celebrity email addresses. Chaney faces 26 counts of identity theft, unauthorized access to a protected computer and wiretapping. If convicted on all counts, Chaney could receive 121 years in prison for his crimes.

Original Article: http://bit.ly/nY4OsF

Hacking Alert: Facebook & Hotmail Accounts Targeted

Indore: The users of the social networking website, Facebook, and other e-mail service users are being victimised at the hands of the professional hackers in the city. There have been reports of illegal hacking of the user accounts in the past couple of days. The cyber-crime cell has undertaken an investigation upon the complaints of the victims.

One of the victim, Pankaj Vaidya, stated that his Facebook account has been hacked which is being used for chatting by an unknown individual for the last two months now. The textile businessman, Pankaj, stated that his business operations and network links were managed through his Facebook account that has been hacked now. In a similar incident of hacking, Amarkant Soni, resident of Bhopal, found that his account has been hacked as someone was posting lewd comments from his account. The victims have approached the cyber-crime cell to seek legal help in the case.

Original Article: http://bit.ly/ooEJuL

Fraud Mail from Bank

Banks are well aware that criminals will use any trick they can to get control of your money. To stay ahead in the cat-and-mouse game, financial institutions use one-time passwords and verification codes that render most conventional phishing attacks useless. Thus online criminals have had to innovate quickly.

Man-in-the-middle attack allow the attacker to intercept messages between you and your bank. The criminal then sends its own messages to both parties. Just this week, F-Secure Labs has observed multiple man-in-the-middle attacks against at least two Finnish Banks. Other new man-in-the-middle attacks utilize the computing power of our smartphones to trick us out of account information.

Here’s what you should know to keep the thieves out of your digital piggy bank.

1. Never click on links from bank e-mails.
When you’re busy, it’s easy to make a mistake and click on a bad link, especially on our phones. Sean Sullivan from F-Secure Labs says the best strategy is to, “Go to the bank via a browser bookmark.”

2. Know that criminals are targeting your smartphone.
F-Secure Labs has followed Spitmo, a man-in-the-middle attack that targets phones, since spring. And now an Android version has been spotted. This attack pretends to install application that protects the phone’s SMS messages. If you receive an SMS that asks you to install such software on your phone, take the time to contact your bank directly.

3. Keep your system and security software updated.
The registered owner of the site being used for this week’s Finnish bank attack owns more than 90 sites. So as one attack goes down, another one might go up. It’s important to have browsing protection that could prevent you from visiting a site hosting a known attack. And it’s even more important to make your PC is patched and protected. Our free Health Check makes that easy.

Bank robber Willie Sutton never actually said that he robs banks because “That’s where the money is.” But if he lived today, he might have tweeted it.

Criminals will never stop scheming of ways to get into your bank account. By staying aware of their latest tricks, you’ll do your best to keep your money where it belongs.

Original Article: http://bit.ly/mRBhes

Anonymous the Hacker: Take Down 40 Child Porn Websites

Anonymous has taken down more than 40 darknet-based child porn websites over the last week. Details of some of the hacks have been released via pastebin #OpDarknet, including personal details 1500 users of a site named 'Lolita City,' and DDoS tools that target Hidden Wiki and Freedom Hosting — alleged to be two of the biggest darknet sites hosting child porn.

Original Article: http://bit.ly/oz6lWT

Microsoft YouTube's Channel Get Hacked

It appears that someone has hacked into Microsoft’s account on Youtube and removed all videos. As can be seen in the picture, there are currently no videos at all anymore (see the red arrow in the screenshot) and the comment about the website is not “Wish to Become Sponsored ? Message me”. Also the hometown has been changed to “Hey”.

In their place are short clips soliciting advertisers, not surprisingly, as the channel has some 24,000+ subscribers.As of 1:30 p.m. ET, four videos have been uploaded to the account, all time-stamped within the past two hours. A fifth video, most recently uploaded, seems to have been removed. The video, “Garry’s Mod – Escape the Box,” featured what appeared to be an animated gunman shooting at the inside of a construction box.The channel’s description reads, “I DID NOTHING WRONG I SIMPLY SIGNED INTO MY ACCOUNT THAT I MADE IN 2006 :/.”

Original Article: http://bit.ly/pTxRpO