2016-07-22

UK: CyberCrime overtakes Physical Crime

The ONS estimated that there were 2.46 million cyber incidents and 2.11 million victims of cyber crime in the U.K. in 2015,” the report’s authors wrote. 

Personally I do not think cyber-crime is materially worse in UK. I think they are tracking and recording it better, and most important the awareness has improved in the country. However, still an eye opener !

Link 1 & Link 2

2016-07-08

Forgetting to renew domain names

TP-Link, who manufactures routers, has forgotten to renew it's 2 domains names, which is widely used. This has now been jacked by someone, who is selling it for $ 2.5 M.
These domain names appear to be quite busy; estimates based on Alexa's ranking suggest that tplinklogin-dot-net sees about 4.4 million visits per month, with another 800,000 for tplinkextender-dot-net.
Seems like TP-Link is not at all interested in buying back those domains ... updating its manuals to remove the domain name references altogether.
This is an ideal way for someone to create spoof website, with a target audience of millions !

2016-07-02

Ethereum DAO Hack

The hack makes me think about the reliability of crypto-currency. If we go with the assumption that there is no bug-free software, it is always only a matter of time (hence patching is of utmost importance), then how do we have our faith in bitcoins or any other altcoins?

How can they recover the stolen money? They can't -- at least not without destroying the entire principle of cryptocurrencies

Am very curious to see what this community decides to do now. Hack details.

A synopsis of the hack and the Robin Hood hack.

2016-06-29

Terrorism blacklist of 2.2 M people leaked

.. came across a “terrorism blacklist” which contains the names of 2.2 million “heightened-risk individuals and organizations. The terrorism category is only a small part of the database. Other categories consist of individuals suspected of being related to money laundering, organized crime, bribery, corruption, and other unsavory activities.

2016-06-16

Cyberspace is a New Domain for War

We have known this for a while, just good to see this is now formalized.
The North Atlantic Trade Organization (NATO) has officially declared that cyberspace is a domain for war, placing it alongside the traditional battlegrounds of land, sea and air.

2016-06-07

A 0-day that impacts ALL Windows Versions

A Russian website is selling a 0-day, for a meager $ 90K. This impacts a potential 1.5 B Windows users !

There are 2 videos to provide a POC.

Details Here

Myspace & VK lose customer records

VK lost 100 M user records; and MySpace lost 427 M.
VK's dump is being sold for a measly 1 BTC (USD 570).