Security Agencies Alert Android Users Of Fraud Android App

Computer and Internet Security agencies identified for Android is a fake application which could endanger the safety of the smart phone. Experts say that the security and privacy of smart phone applications is in under threat. This application illegally enters smartphone and compromises their security by sending SMS to unknown contacts.

India's Premium Super Computer Security Agency,Computer Emergency Response Team of India (CERT-In) has notified this notorious application and put the name as "Super clean or Droid Cleaner". 

Expert Agency says that, one application that is present for Android market is a fake application that can infect computers connected to smart phones". They warned the user of the Android phones for this fake application that is selling on the Android market as name of "Super clean or Droid cleaner" because this fake software is able to infect personal computers connected to the USB.

As per the CERT-In, after being get installed on the android, it delete all the data of the device and reach to the personal information of the users. This app change the Wi-fi state, SMS manipulations, reading the contact details, uploading the SD card contents and contacting remote servers as seen from the Android Manifest file.

So hence user must scan their device by the malware solution, and do check all the details and keep knowledge about the stuff which they are going to download from Internet.

Real Hide Ip 4.2.3 Crack + Patch (Surf Anonymous)

Real Hide IP 4.2.3 Crack + Patch

# What is Real Hide IP ?

                 Real hide IP is a software (program), that can change your IP (Internet Protocol) to surf Internet with different fake IP. It means you can surf Internet with Anonymous or fake IP of any country.


# What is IP (Internet Protocol) ? 
                         

                                                   Short for Internet Protocol, IP is an address of a computer or othr network device on a network using IP or TCP/IP. For example, the number "166.70.10.23" is an example of such an address. These  addresses are similar to an addresses used on a house and is what allows data to reach the appropriate destination on a network and the Internet.

  

# Real Hide IP Features.

• Real hide IP can protect you from Cyber Space and you can hide your real Identity.
• Real hide IP can give you 80+ countries IP with Proxy.
• Automatic IP hide option on windows Startup
• Support Firefox, Opera, Internet Explorer.

# How to Install and Crack Real Hide IP ?

• Download Real Hide IP 4.2.3.  (skip ads after 5 sec)
• Install Real Hide IP.
• Download Crack + Patch tool. (skip ads after 5 sec)
• Stop and close all process of Real Hide IP.
• Extract Crack + Patch tool on this Location.
  
      C:\Program Files\RealHideIP
  
  
• Right click on Patch tool and click on "Run as administrator"
• You can see it in below screenshot, and Click on Patch.

• And if it will ask for yes or no, Click on YES !!
• After all you are done :D.
• Start Real Hide IP and it will be activated :).

How To Change Ip Address In Every 10 Seconds

This trick will illuminate you on a method using which you can change your ip address in every 10 seconds.

This change in IP address would help you to surf anonymously over the internet without any kind of restriction based on country ,number of view or any other factor.

Change of IP address can be easily done with the help of a free software named as Elite Proxy server

just go to the following website and download one for yourself

HERE...

Now that you have this software . let me tell me some of its features

Elite Proxy Switcher (Latest version: 1.19)

• Overview: Elite Proxy Switcher can help you to visit the blocked websites and protect your Internet privacy.
• How it works: Elite Proxy Switcher changes your IP using a proxy so that the website regards the proxy's IP as your IP. Thus your real IP is hidden.
• Introduction: Elite Proxy Switcher (EPS) is a proxy software to test and use the proxy list. It can test the details (speed, anonymity, country and whether gateway, ssl/https, dangerous or codeen) of the http proxy and change the proxy settings of your browsers (IE, Firefox and Chrome).

Elite Proxy Switcher Main Features

• Proxy Checker: professionally test the details of the proxies.
• Proxy Switcher: quickly change the proxy settings of the browsers.
• Proxy Downloader: get daily fresh proxy lists by just one click.
• Proxy Manager: easily maintain your personal proxy list.

Elite Proxy Switcher Screenshot

Just use this software now and surf anonymously 


NOTE: Don't use this to do illegal activities.This post is for educational purpose only 


Have fun and enjoy !! :D

How Hackers Hack Prices Of Products Of Online Stores

What is Burp Suit?

Burp Suit a suit of a number integrated tools which are used for security testing and vulnerability assessment. Burp suit is also used for various hacking purposes and is used by Hackers all around the world.

How to Change Prices of Online Products? (Introduction to Burp Proxy)

Burp Proxy is a tool which is a part of the set of tools integrated in Burp Suit and is used to intercept the traffic between the browser and the sasaran application. This is used to perform a kind of man in the middle attack.

Limitation

This is effective when the data is not encrypted or a weak encryption is used by the website developer.

 This is strictly for educational purposes.

Steps:

1. Download the Burpsuite from here.

2. Open the tool and go to the proxy tab and in "options" column make sure "running" and "loopback only" are checked.

3. Now go to the sasaran site and decide the item with whose price you want to play and add that item to your cart.

4. Now go to proxy setting of mozilla (mozilla should be you default browser if you are a techie) and make sure you have following setting.

 
5. Now as you can see below, this how is how your cart and price should look like.

 
6. Now in the proxy tab, make "interceptor on".

 
7. Now go to the website and refresh the page, Firefox will ask for confirmation click on "resend" then.

8. Go to burpsuite and your interceptor tab will look something like this if the data is not using encryption.

9. Simply change the price by editing it, I changed it to 0.03$ as you can see below and your task is done!!

List Of 2013 Best Free Proxy Sites

If you want to browse a web page from a position, where they do not allow you open it, the best way to get accessibility that website is by the help of proxies server. There are many websites which offer this assistance as 100 % free, proxy websites can allow you to start limited website without any hassel.

These proxy sites services can be very useful in your workplace or maybe in school, university / college, if you have any other website which does this better than we have listed below, please provide the link of the proxy site below in feedback. We will add it to our selection. Happy safe surfing. Here is the list of best free proxy sites in 2013.

List of Best Free Proxy Sites:

Newipnow.com

Blewpass.com

proxify

Anonymouse.org

Ninjacloak

kproxy.com

Hidemyass.com

Edilly.com

Zend2.com

Turbohide.com

www.100proxy.com/‎

Hacker Steals $7 Million Worth Of Ethereum In 3 Minutes!

 Israeli Blockchain technology startup announced that an unknown hacker had hacked its website and trick investors into paying $7 million worth of Ethereum into the hackers account.

 The Israeli Blockchain technology startup, CoinDash launched an Initial Coin Offering (ICO) for the trading of Ether in which investors could pay and send Ether to token sale's smart contact addresses. Not long after the launch, a hacker hijacked the website and then changed the Ethereum address while the investors sent about 43438.455 into the wrong address belonging to the hacker. In less than 3 minutes of the hack, the hacker had stolen $7 million from the investors.

Also Read: Man to server 3-years jail term for uploading Deadpool on to his Facebook page

 Although CoinDash warned within a few minutes of the launch that its website had been hacked, telling investors not to send Ethereum to the address on the site, it was already late because the hacker had trick most of the investors.

 "It is unfortunate for us to announce that we have suffered a hacking attack during out token sale event," a statement from CoinDash read.

 "During the attack, $7 Million was stolen by a currently unknown perpetrator. The CoinDash Token Sale secured $6.4 Million from our early contributors and whitelist participants, and we are grateful for your support and contributions."

 The company said that they will refund all those that send Ethereum to the fraudulent Ethereum  address when the compromised site (CoinDash.io) was running but wont compensate those who sent funds to the fraudulent address when the site was shutdown.

Beware! This Whatsapp Scam Will Easily Steal Your Payment And Personal Data

  
 Fake WhatsApp emails and texts messages pretending to come from WhtsApp warning users that their subscription would end soon while urging them to renew their subscription.

 Researcher Graham Cluley warns that those crooks aim to trick users into clicking links that are in those messages which might result to the user handing over payment credentials to the attacker(s).

"Have you received an email claiming to come from WhatsApp that warns that you have been using the service for more than a one and that it's time to take out a subscription?"

"Beware! This emails are, of course, a scam designed to trick you into clicking links that might result in you handing your payment information over to fraudsters," an excerpt from Graham Cluley read.

Also Read: Hackers holds Disney to ransom over stolen copy of Pirates of the Caribbean 5

Below is the message the crooks are circulating to WhatsApp users.

Your subscription is ending soon

Please update your payment information now

UPDATE YOUR PAYMENT INFORMATION

Our records indicate that your WhatsApp trial service is exceeding the one year period. At the completion of your trial period your WhatsApp will no longer be able to send or receive message. To continue using WhatsApp without interruption, we nee you to subscribe for any of our subscription periods

 Graham Cluley went on to advise WhatsApp users not be "duped into clicking on suspicious links claiming to come from WhatsApp suggesting you need to pay subscription to continue use the app."

 He advised users to "always be wary of unsolicited SMS text messages claiming to come from WhatsApp demanding that you verify your account and buy a WhatsApp subscription."

Hackers Exploits Coding Error, Steals $31 Million Worth Of Ethereum

 Another ethereum hack? ethereum hack is quite becoming disturbing. Two days ago Techfoe made a post in which over 7 milliom worth of ethereum were lost when a hacker hacked CoinDash website during an Initial Coin Offering (ICO).

 Latest news coming in says a whooping $31 million worth of ethereum has been stolen! According to coding service parity, a vulnerability exists in the latest 1.5 version and later version of its software which acts as a backbone of cryptocurrency wallets.

 The critical flaw, discovered in a specific multi-sig contract called wallet.sol has resulted in at least three wallets being compromised and the loss of approximately $31 million dollars worth of ethereum.

Also Read: Marijuana delivery startup Eaze suffers data breach, hacker demands $70M ransom

 White hat hackers from Parity have tried to mitigate the issue by emptying every vulnerable wallet they find into temporary which are vulnerable to the hack. The white hackers have so far recovered about 377,000 ethereum which amounts to $77 million.

Some victims of the hack includes Swarm City, a cryptocurrency commerce platform lost about 44,055 ethereum which is worth $9 million.  Another company named Edgeless Casino lost roughly $5.6 million while another called Aeternity lost close $17 million.

In a statement, the White hat researchers have assured those that their ethereum were drained to be patient as they will returned back when the vulnerability has been fixed.

"If you hold a multisig contract that was drained, please be patient," the white hat researchers said in the statement." They will be creating another multisig for you that has the same settings as your old multisig but with the vulnerability removed and will return your funds to you there."

Sweden Accidentally Leaks Personal Data Of Nearly All Citizens Online

  A massive trove of Swedish citizens belonging to Swedish Transport Agency (STA)(Transportstyrelsen) was mistakenly uploaded onto an unprotected cloud server where it might have been leaked to anyone in the world.

 According to a Swedish Newspaper, the breach took place in September 2015 when STA handed its IT services which included database management to IBM sub-contractors in Eastern Europe (Romania, Serbia and Czech Rep.) who had access to the data without any security clearance. 

Also read: Hackers exploits coding error, steals $31 Million worth of Ethereum

  In March 2016, the Swedish Secret Service found out that the cloud server where those data were uploaded lay unprotected. 

 An investigation into the case was later carried out and it was found that the data available on the server contained personal information such as address, names, vehicle details and pictures of almost every citizen in the country. Details of government military vehicles, driver's license records of military and police officials and also personal details of military members in the secret units and whole lot of other data were part of the breach. 

 After revelation of the leak, the STA's boss Maria Agren resigned from office and was later charged to court. Surprisingly, the court asked her to pay just half of her monthly salary 70,000 Swedish Krona (about $8,500) as punishment for the breach.

Also read: Hackers Breach Radio Station, plays F**K Donald Trump mp3 clip

"All of this was just outside the proper agencies, but outside the European Union, in the hands of people who had absolutely no security clearance. All of this data can be expected to have been permanently exposed," said Rick Falkvinge who is the founder of The Pirate Party. 

"Unlike breaches where malicious users sasaran vulnerable systems, this leak of personally identifiable information was the result of carelessness."

Italy's Largest Bank, Unicredit Suffers Data Breach, 400,000 User Accounts Affected

  
 Italy's largest bank, UniCredit has suffered a massive data breach involving 400,000 user accounts.

 The data breach which is seen as one of the biggest breaches in European banking, affected hundreds of thousands of UniCredit customers. The perpetrators of the hack gained access to biographical and loan data of UniCredit's clients. 

 A statement released by UniCredit read:

"A first breach seems to have occurred in September and October 2016 and a second breach which has just been identified in June and July 2017. Data approximately 400,000 customers in Italy is assumed to have been impacted during these two periods."

No data, such as passwords allowing access to customer accounts or allowing for unauthorized transactions has been affected, whilst some other personal data and IBAN [account] numbers might have been accessed"

Also Read: Hackers exploits coding error, steals $31 Million worth of Ethereum

The bank discovered the breach when they found that users from third party were looking through clients data which suggests that the hack was conducted by a third-party supplier affiliated with the bank. 

 UniCredit has stated that they will be investing €2.3 billion into upgrading and strengthening its IT systems. With the GDPR being enforced next year by the European Union, banks will have to strengthen their IT systems to avoid huge fines if a breach were to occur.

 UniCredit bank will be reaching out to its affected customers.

Bitcoin Exchange Boss To Serve Jail Term For Facilitating Ransomware Transactions

  
 A Florida ex-school board member, Michael Murgio has pled guilty to making a false statement in relation to running an illegal Bitcoin exchange service.

 According to the FBI, Michael Murgio along side his son Anthony Murgio with another person named Yuri Lebedev ran Coin.mx as an unlicensed currency exchange. The trio used the service to hide transactions that includes facilitating ransomware payouts as "collectible memorabilia".

Also Read: Hackers exploits coding error, steals $31 Million worth of Ethereum

 Coin.mx was run by an Israeli named Gary Shalon, a man that was linked to a massive hacking operation that compromised personal data of over a 100 million people including the likes of JP Morgan. 

Sun-sentinel says that Michael Murgio admitted to making false statement to the national Credit Union Administration following a plea.

 The Dept. of justice says the two (father and son) paid $150,000 to gain board of directors seats on the Hope Credit Union. Hope was used to facilitate coin.mx transactions in Oct. 2015 prior to its liquidation.

 Michael Murgio is likely to face 16 months in a US federal prison.

Hbo Hacked: Games Of Thrones, Other Tv Series And Over 1.5Tb Of Data Leaked Online

 Hackers have broken into the HBO networks and leaked several unreleased episodes of TV shows including next week's Game of Thrones.

According to Jio India suffers data breach, 120 million customer data dumped online

"What's its name? Oh i forget to tell. Its HBO and Game of Thrones......!!!!!!You are lucky to be the first pioneers to witness and download the leak. Enjoy it & spread the words. Whoever spreads well, we will have an interview with him. HBO is falling," the mail read.

 HBO who suffered similar hack in 2015 when the first 4 episodes of Game of Thrones Season 5 were leaked online, released a statement to confirm the breach.

"HBO recently experienced a cyber incident which resulted in the compromise of proprietary information," HBO said in the statement further adding that investigation into the case have began with the help of law enforcement and cyber security firms.

 HBO is yet to comment on the specifics of the leak

Privacy Concerns: Amazon Suspends Sales Of Blu Smartphones

 Online retailing giant, Amazon has suspended the sales of BLU phones due to privacy security concerns, CNET reports.

  Amazon embarked on the move after security researchers from Kryptowire, last week demonstrated how software in Blu phones collected its users data and sent it over to servers in China. 

 "Because security and privacy of our customers is of utmost importance, all BLU phone models have been made unavailable for purchase on Amazon.com until the issue is resolved,"Amazon said in a statement.

Also read: Malware Attack shuts down Virginia State Police email

 BLU in its defense said the software which was created by a company in Shanghai called Shangha Adups technology denied any breach of customer data. They explained that the company had "several policies in place which takes customer privacy and security seriously." 

The company (Blu) cited Kryptowire executive Tom Karygiannis as saying they didn't do anything wrong although Karygiannis later told CNET that he didn't authorize BLU to make any public statement on his behalf.

 BLU got into the american market with its cheap smartphones and immediately became an alternative to the likes of Samsung and Apple. 

Close To 175,000 Iot Chinese Security Cameras Vulnerable To Easy Hack

Roughly about 175,000 Internet of Things (IoT) connected security cameras manufactured by Shenzhen Neo Electronics are vulnerable to cyber attacks.

 According to Bitdefender researchers, several buffer overflow vulnerabilities were discovered in two camera models (iDoorbell and the NIP-22) manufactured by the surveillance and security solutions company.

"Several buffer overflow vulnerabilities (some before authentication) are present in the two cameras studied, the iDoorbell mode and NIP-22 mode, but we suspect that all cameras sold by the company use the same software and are thus vulnerable," the post read. "These vulnerabilities could allow, under certain conditions, remote code execution on the device. This type of vulnerabilities is also present on the gateway which controls the sensors and alarms."

 Researchers at Bitdefender believes that other models made by the company running the same firmware are vulnerable to the hack too. Bitdefender explains that the security cameras uses Universal Plug and Play (UPnP) which opens port automatically in the routers's firewall to allow the access from the internet. The researchers found between 100,000 and 140,000 vulnerable when querying for the HTTP web server and RTSP server. 

Also Read: UK hacker exploits online bank loophole to steal £100,000

"We found between 100,00 and 140,000 devices when searching for the HTTP web server, and a similar number when searching for the RSTP server (both vunlerable). These are not necessary the same devices, as some have only one service forwarded. We estimate that the real number of unique devices is around 175,000," the report read.

 The researchers said anyone could easily exploit the flaws and access the livestream by logging in the default credentials such as "user or "guest" for both password and username.

Hacker Who Stopped The Spread Of Wannacry Ransomware Arrested By The Fbi

 Killer of the WannaCry ransomware has been arrested by the FBI in the U.S. for allegedly creating a banking malware that steals password and user credentials.

 The hacker, Marcus Hutchins who owns the twitter handle, MalwareTech was arrested this week in Nevada where he was about to board a plane back to the UK after attending the Black Hat and Def Con conference. The FBI who have been on Hutchins trail for the past two years, arrested him for his alleged role in the spread of the Kronos banking malware which wrecked havoc between July 2014 and July 2015.

Also Read: The Mirai threat: How Hackers could shut off 23 Countries access to the internet

 According to an indicting PDF, Hutchins and an unknown conspirator created and distributed the trojan on the now shuttered AlphaBay marketplace. The Kronos was mostly distributed using phishing emails and would lead unsuspecting computers users to fraudulent websites that was designed to look legit like real banking institutions. This trojan would then steal the victims bank credentials.