GForce Pakistan Against Its own Cyber Allies?

The well known Pakistani Hacking group, GForce Pakistan which is currently running by new alias calling themselves "GForce Family" being run by The previous Leader of CWI Syndicate have been Attacking their own Allies on the side of Pakistan. Hundreds of Pakistani Hacking Crew members have been doxed by known Associate of GForce and current controller of Black MESA Carding business on internet "Alan Alsop". The group have proved its nefarious power by striking down Pakistani groups. The known rumors have been emerged that the crew is controlling all of Credit card operations on internet. Meanwhile Xtam4 never refers to his illegal business or deeds on Internet in any of his pastes and running by a popular revolutionary figure to public.

Ministry of Culture Exploited Fingers pointed at GForce

It is believed that the attack held on October 25th on India Culture website was held by GForce Pakistan, The data was released to pastebin. It was not released from none of the official accounts of G force on Pastebin. It was uploaded by Guest. Several codes and Documents of the site were leaked.
From 2001-2002 G Force was considered the Main team that was contributing in India-Pakistan Cyber war. The team continues to dominate the internet.

Paste

Hold Security shares data to NCSC which holds 1,3 million vulnerable Dutch e-mail addresses

The National Cyber Security Centre team (NCSC) and Hold Security have setup a cooperation which allowed the NCSC to get hold of 1,3 million vulnerable Dutch e-mail addresses and 5600 vulnerable Dutch websites.
Hold Security had announced that they had gained a massive dataset of 1.2 billion credentials via vulnerable websites worldwide.
The NCSC explains that the information which they have collected holds;

• Usernames
• Passwords
• E-mail addresses which are used to login at the vulnerable websites

The National Cyber Security Centre has informed their partners, which will inform the identities which are identified in the dataset.

You can read the official Dutch press release here

https://www.ncsc.nl/actueel/nieuwsberichten/ncsc-verkrijgt-nederlandse-gegevens-van-hold-security.html

Related Posts to "Hold Security shares data to NCSC which holds 1,3 million vulnerable Dutch e-mail addresses"

Shellshock: A ‘Bash’ Bug which leaves almost every user on Internet vulnerable

This is a bug which is said to be very much bigger than the previous flaw called Heartbleed, which left all the secure SSL systems vulnerable, but this time a bug is found which able to compromise your system and then able to run commands or execute any malicious program onto your computer or device.

This harmful bug dubbed as ‘Shellshock’. As I said above this is a superbug, so here is, why it is called the SuperBug:

• Shellshock is a Bash bug and able to exploit any operating system.
• This Bug able to send a command to the exploited system through a code.
• The particular area, which is able to exploit the system is generally blocked, but the Bash opens all doors to the system
• Apple Mac OS X users able to run it from their terminal, others people linux operating systems also can.
  
• Windows is not affected in the same way, but if a hacker exploits malicious code through the flaw, they could gain access to any device, in theory, including PCs.
• Working Example: As an Apache Web Sever runs bash command to process task along with the data entered in the online forms.

This flaw has been revealed by the hackers previously, and they are using this to exploit million of users online, UK Privacy regulator has already warned.

In simple words, The flaw is ‘Bash’ which contained in a piece of software and that software used by the operating systems and other website servers.

At this time, there is not any critical update or any idea found by the security researchers to save millions of users online, and the the UK and US governments also have issued national alerts in response to the bug, warning that it may compromise organisations responsible for “critical national infrastructure” such as power stations if it is not rapidly dealt with.
Statement issued by The Information Commissioner’s Office (ICO):
The Shellshock flaw “could be allowing criminals to access personal data held on computers or other devices”, which “should be ringing real alarm bells” for British businesses which are legally obliged to keep their customers’ details secure.
“The worst thing would be to think this issue sounds too complicated – businesses need to be aware of this flaw and need to be monitoring what they can do to address it. Ignoring the problem could leave them open to a serious data breach and ultimately, enforcement action.”

Who found this Flaw?

This critical flaw was found on 12 September by Stephane Chazelas, a 38-year-old French software developer living in Edinburgh. This Flaw uncovered “by chance”, he said to The Independent Today.
After finding this flaw, Chazelas reported this to Chet Ramey, a 49-year-old American programmer working at Case Western Reserve University in Ohio, and he maintains the Bash source code.
One more important thing about the Bug is, it is in the market from last 25 years and there is a question on this, Is it being used by the hackers from years ago?
Reports online inform that, this bug has been fixed by the Apple, but not informed anyone about this.
If you are a website owner and using Linux servers, so always go for a routine check for any updates for your operating system.
If there is any crack or update related to this comes out, we will update this post soon, but for now, you should secure yourself, by keep watching your security updates

Crowd-Funding website Kickstarter Hacked, Customer Information Accessed by Hackers

According to Kickstarter’s blog post, on Wednesday night, law enforcement officials contacted Kickstarter and alerted them that hackers gained unauthorized access to some of it’s customers data. Kickstarter says that they took all the necessary security measures and they immediately closed the security breach.

No credit card data of any kind was accessed by hackers. There is no evidence of unauthorized activity of any kind on all but two Kickstarter user accounts.

While no credit card data was accessed, some information about their customers which included usernames, email addresses, mailing addresses, phone numbers, and encrypted passwords was stolen. In order to prevent upcoming hacks, the Kickstarter recommends it’s users to change their passwords as soon as possible with some strong passwords, so the hackers won’t be able to guess the real password, because them are encrypted. Right now, if the hackers who accessed the users data have enough computer power, they can crack the encrypted password.

As a precaution, we strongly recommend that you create a new password for your Kickstarter account, and other accounts where you use this password.

Some security measures taken by the Kickstarter Security staff:

• Older passwords were uniquely salted and digested with SHA-1 multiple times. More recent passwords are hashed with bcrypt.
• As a precaution they have reset all Facebook login credentials. Facebook users can simply reconnect when they come to Kickstarter.
• Kickstarter does not store full credit card numbers. For pledges to projects outside of the US, we store the last four digits and expiration dates for credit cards. None of this data was in any way accessed.

How Hackers Changed The World – Anonymous – We Are Legion

How Hackers Changed the World – We Are Legion is a documentary about Anonymous, a hacking documentary released by BBC. It goes in depth to describe some cyber attacks such as Church of Scientology, Paypal, Amazon, Visa, Mastercard and world governments in order to shame them for their shady actions. Anonymous attacked online payment providers when they boycotted Wikileaks, they helped to provide black market Internet connections to disseminate information coming out of the Egyptian protest movement.

According to Wikipedia, Anonymous is associated a loosely international network of activist and hacktivist entities. The group became known for a series of well-publicized publicity stunts and distributed denial-of-service (DDoS) attacks on government, religious, and corporate websites. You can find more details about the hackers group called Anonymous here.

CloudFlare Hit with 400Gbs NTP DDOS Attack

CloudFlare DDOS Attack, the largest Distributed Denial of Service Attack in the world! NTP based 400 Gbs DDOS Attack
Security company CloudFlare said Monday that a customer running on its platform was hit with a massive DDOS attack and that affected service in all the Europe, even in some of its US infrastructure.
“It was a very large DDoS targeting a CloudFlare customer,” Matthew Prince, CEO of Cloudflare told SecurityWeek. “We’re still gathering the log data to get exact numbers but know it was well over 300Gbps and likely over 400Gbps”, said Matthew Prince.
“The method was NTP reflection, which is quickly replacing DNS reflection as the source of the largest attacks”, said Matthew Prince.
CloudFlare did not mentioned the name of the customer that was targeted in this particular attack.The security firm is usually quite transparent about its operations.

What is DDOS Attack?
Distributed Denial of Service attacks were common in the last months. These affected sites like WordPress or Spamhaus and even led to the destabilization of the virtual currency Bitcoin. The Spamhaus DDoS attack was so great that it affected the speed of the Internet globally.
DDoS attacks are used to overwhelm servers with requests. All requests are directed to the same place on the server and thus there are no answers for new server requests. The Distributed Denial of Service ( DDOS ) is one of the best weapons of the hackers, because, until now, nearly every big site had been a victim of this attack.

What is ( Network Time Protocol ) NTP DDOS attack? How to understand it better.

The NTP method first began to appear late last year. To bring down a server such as one running “League of Legends,” the attackers trick NTP servers into thinking they’ve been queried by the “League of Legends” server.
The NTP servers, thinking they’re responding to a legitimate query, message the “League of Legends” server, overloading it with as many as 100 gigabits per second (Gbps). That’s large even for a DDoS attack.
In this way, one small request to an NTP server can generate an enormous response capable of taking down even high-capacity websites.