MouseJack: Injecting Keystrokes into Wireless Mice

Interesting hack to take over wireless mice (non-Bluetooth).

Wireless mice and keyboards commonly communicate using proprietary protocols operating in the 2.4GHz ISM band. In contrast to Bluetooth, there is no industry standard to follow, leaving each vendor to implement their own security scheme. 

Raspberry Pi Offered Money to pre-install malware

I wouldn't have been surprised if one of the governments had tried to do that, but seems like it's someone else!

Firewalls backdoor-ed!

Juniper released a statement saying:

... attackers could exploit the “unauthorized code” in order “to gain administrative access to NetScreen devices and to decrypt VPN connections, and then wipe the logs to remove any trace of a compromise

Let's take a minute and understand the gravity of the matter.

• Clearly a state sponsored group of hackers, managed to sneak their code to Juniper 
• This bypassed all internal checks from Juniper, and got released on all their Netscreen devices.
• This went unnoticed for 3-ish years
• Meaning, anyone using their hardware could have been eavesdropped upon, in the last 3 years. And best part - they could have done this without getting detected, and without leaving any logs behind!

Update 22-Dec-2015:
More details released, the hard-coded password is:     <<< %s(un='%s') = %u

Update 22-Jan-2016:
Backdoors found on Fortinet firewalls as well!

Access WiFi From 2.5 miles away!

A $200 device, which will help with anonymity (and much more I am sure)!

Proxyham is comprised of a WiFi-enabled Raspberry Pi computer, along with a three antennas setup. One antenna is used to connect to a source Wi-Fi network at a public place, and the other two antennas are used to transmit the Wi-Fi signal at a 900 MHz frequency.

By relying on a 900 MegaHertz radio connection, ProxyHam effectively connects to a far-away Wi-Fi, with a range of between 1 and 2.5 Miles, depending upon certain interference factors.

Disable webcam light on Windows

There were some news in the recent past of govt and hackers (both!) hacking and using a person's own webcam to spy on him. The question was how they keep the webcam light switched off while this is done. Here's how on windows.

Malicious charger can compromise iPhone and iPad

A hardware that can inject persistent malware!!

MITM using Pineapple

A new hardware for easy MITM

Samsung printers contain hardcoded backdoors

Not sure how true this is, but sounds worrisome.

Laptop fingerprint readers vulnerabale

Looks like the biometric readers are insecure, opposite to the popular belief.

Undetectable hardware backdoor - Rakshasa

What's really scary is that Rakshasa doesn't reside in the disk and therefore leaves zero evidence in the filesystem. It leaves zero network evidence on the LAN. It can "remotely boot from an alternate payload or even OS" like fake Truecrypt/Bitlocker. Rakshasa can even show a fake BIOS menu if necessary

This is scary. More details here.