Archive for January, 2012

Palestinian News Agencies Brought Down by Cyber Attack

98547562455672860322.jpgOfficials say cyber attacks have shut down the websites of the two main Palestinian news agencies, the official Wafa and the privately run Maan.

47061998748158290477.jpg

Wafa’s chief editor, Ali Hussein, and Maan’s technology supervisor, Haitham Moussa, said they don’t know who is behind Tuesday’s attacks. Hussein says the website of Palestinian President Mahmoud Abbas’ Fatah movement was also targeted.

The attacks came several days after hackers disrupted the websites of an Israeli hospital, a leading newspaper and Israel’s official cultural festival.

Those attacks were seen as part of a politically motivated cyber attacks against Israeli sites. The Israeli Haaretz daily said at the time that its site was hacked by a group calling itself Anonymous Palestine.


[Source]

Hacking, Children, and Ethics

30054513397460275578.jpg

A Conversation and A Problem

While at last weekends ShmooCon, I had a chance to be in a conversation wtih @diami03 that got me thinking about Anonymous and where we are today with the whole debacle as regards the youth of today. I am indeed getting older (Methuselah here.. Hi!) and as I look around I see younger and younger folks going to the con’s and performing the new and old hacks out there in the world. It occurred to me at that instant that unlike when I was a kid (when dinosaurs roamed Pangea) the kids today don’t seem to have much in the way of teaching on the subjects of Logic, Ethics, and generally, how to be good citizens.

… And that perhaps it was time that the INFOSEC community engage on this….

I thought I had a genius stroke! But, alas, I was not the first to think of this! There’s hackidcon now as well as presentations like the one that actually was given the next morning at Shmoocon called “Corrupting Youth” by Jordan Wiens. I was heartened to see others had gotten on this already and that perhaps we as a community could do some good and affect the future generations of hacker types by teaching them the ethics of old school hacking as well as hte use of logic and good decision making.

In looking around today.. I’d say we really really need this… And here’s why…

 

Monkeys With Loaded Guns

Ok, I’ll say it here and now. What has evolved into Anonymous for the most part, has been a disappointment to me. Sure there are many in it just for the Lulz’s (a core issue here) but there are many who want to make a difference in what they perceive as their governments misdeeds. Both of these players have also been infiltrated by the Lulzier group of Anarchists who want nothing more than to just sow chaos for their own nihilistic animus. From this soup we have seen what I call the “Monkeys with guns effect” Scattershot and useless hacks and pranks that further no other agenda than the Lulz or, for those anarchists and others who have infiltrated the ranks, to sow chaos anywhere they strike.

Reasons or no.

On go the monkeys with loaded shotguns filled with buckshot, shooting aimlessly (except for the initial hit on Aaron Barr and HBGary) proclaiming wins and showing how bad “The Man” is by dumping dox and email spools.

*yawn*

This scattershot approach just shows a lack of critical thinking on their part as well as perhaps a lack of control over the minions out there performing the ol’ “Ready FIRE Aim!” routine. Overall though, this is getting old for everyone and that has been the general consensus for a while.

It’s time to cut it out kids.

 

The Future of Technological Society

Ok, so back to the next generation. How about we follow the model that Hackidcon and Mr. Wiens have set by teaching the new kids on the block not only the technology, but the ethos of hacking. We can teach them so many things both technical as well as ethically and I believe that a program like this would better prepare them for the power they will wield with the internet and all things digital.

Without it, I fear that we will raise another generation of online sociopaths as we seem to have already in some quarters of Anonymous. This is not to say that online rights are not important and CERTAINLY not to say that the governments of the world have been ramping up to over reach even more than ever before in the age of Anonymous and Digital Piracy. I think that the governments of the world have begun to erode all of our rights due to greed as well as fear. Greed being fed by the likes of lobbyists and fear that they are ill equipped to properly deal with the digital age.. Never mind to regulate it.

By teaching the next gen kids how to be good citizens and good hackers, then we might have a chance that in the future the senators and governmental work force will really understand the net, how it works, and what it means. This then will flow down to the laws being considered and implemented. Today we have governance that is unable to understand the tech nor the mindset.

“The Internet is a series of tubes you know…”

So, I ask you all to consider your time and its value to teaching these things to the next gen. Not just your kids, but all the kids you can. Make the time and find out where you can help.

After all… Those kids you might or might not teach… May in fact be the next Anonymous member DoS-ing your company.

 

[Source krypt3ia]

2012 Threats: Are You Ready?

History is said to be a good indicator of what might come in the future. If you follow trends in how things are done and what tends to gain momentum then you can get a pretty good idea of what’s ahead.

87048334926000682194.jpg

McAfee Labs is made up of security professionals who spend all their waking hours observing and combating threats to our digital identifies.

If anyone is in a position to give us a window into the future on information technology threats, it’s these guys and gals. Here’s what they are predicting we should watch out for in 2012:

- Attacks on critical infrastructure and utilities — Attackers from all over the world have set their focus on critical life supporting utilities such as water and power to hold those utilities hostage for payment or to disable them to cause terror.

This is the kind of industrial threat that many consumers fear. Unfortunately, many industrial and national infrastructure networks were not designed for modern connectivity, making them vulnerable.

Political Hacktivism – Hactivism is the use of computers or computer networks to protest or promote political change. “Anonymous” is the group which was active last year doing high profile activities such as briefly taking down New York Stock Exchange’s website in support of the Occupy Wall Street protests.

Spam, Spam, and more Spam – Spam is getting easier and cheaper based on the U.S.’ CAN-SPAM Act. Shady, for profit, advertisers are making a mint selling lists to spammers, as advertisers are not required to receive consent before sending advertising.

Mobile Malware – PCs are still the low hanging fruit. But as more mobiles are used for mobile commerce (mCommerce), virus makers are creating malware designed take over your phone or to deliver a variety of ads or even send expensive text messages from your phone.

Hacked Cars, GPS and any Wireless Equipment – Cybercriminals are now targeting embedded operating systems or even hardware to gain control of everything from cars to global positioning system (GPS) trackers and medical equipment.

Cyberwar – Not trying to create fear here, just from observation, McAfee Labs has seen an increase in high-tech spying and other “cyber” techniques to gain intelligence.

As technology evolves and our use of the Internet and mobile devices becomes more complex, cybercriminals are also evolving and honing their skills with new types of attacks.

But although some of the threats may seem scary, the reality is many offer new takes on old forms of attack and with a little bit of foresight and preparedness we can guard against them.

 

[Source]

Israel Tops Cyber Defense Poll, China Lags Behind

Israel, Finland and Sweden are seen as leading the way in “cyber-readiness”, according to a major new security report. Study finds Israeli websites attacked 1,000 times a minute on the Internet.

53788536967657879647.jpg

A five-point scale was used to rank countries – none of which achieved a perfect rating.

The U.S. and U.K. are relatively well prepared for cyberattacks, compared to many other developed nations, but everyone has more work to do, according to a new cybersecurity study from McAfee and Security & Defence Agenda (SDA).

Despite the recent spate of cyber attacks on Israeli websites, Israel was named as one of the three most cyber secure countries in the world in a recent study, according to a report by the Financial Times on Monday.

The McAfee-backed cyberdefence survey deemed China, Brazil and Mexico as being among the least able to defend themselves against emerging attacks.

The rank is based on leading experts’ perception of a nation’s defences.

The report concluded that greater sharing of information globally is necessary to keep ahead of threats.

It also suggests giving more power to law enforcement to fight cross-border crime.

The UK, with a grading of four out of five, ranks favourably in the survey – along with the USA, Germany, Spain and France.

 

Subjective View

The rankings are based on the perceived quality of a country’s cyber-readiness – the ability to cope with a range of threats and attacks.

“The subjectiveness of the report is its biggest strength,” explained Raj Samani, McAfee’s chief technology officer.

“What it does is give the perception of cyber-readiness by those individuals who kind of understand and work in cyber security on a day-in, day-out basis.”

A good score depends on having basic measures like adequate firewalls and antivirus protection, and more complex matters including well-informed governance and education.

Sweden, Finland and Israel all impressed the report’s experts – despite the fact that the latter receives reportedly over 1,000 cyber attacks every minute.

Isaac Ben-Israel, senior security advisor to Israel’s prime minister Benjamin Netanyahu, is quoted in the report as saying: “The hacktivist group Anonymous carries out lots of attacks but they don’t cause much damage. The real threat is from states and major crime organisations.”

He added that the country has set up a cyber-taskforce responsible for assessing threats to key infrastructure such power production and water supplies.

 

Enhancing co-operation

At the other end of the security scale, Mexico ranked as least prepared to cope with the cyber threat – a situation which is blamed on the country’s authorities needing to overwhelmingly focus on the country’s gang and drugs problems.

China is regarded by some Western observers as an aggressor in cyberspace.

But one expert Peiran Wang said the country was itself vulnerable because it lacked a joined up strategy.

“The Ministry of Public Security, the Ministry of Industry, the Ministry of State Security and even the military are involved and they don’t communicate well,” said Peiran Wang, a visiting scholar at Brussels’ Free University.

In the UK, the report praised a £650m investment programme in cyber security.

However, the Home Office’s plans were criticised by information security expert Peter Sommer.

“A great deal depends on co-operation from the private sector, which controls about 80% of the critical national infrastructure.

“Over half of the new funding will go to the ‘secret vote’, the intelligence agencies, where value for money will be difficult to investigate. I would have preferred more emphasis on public education – helping potential victims help themselves.”

 

Cybercrime fighters

Among the report’s conclusions is the recommendation that greater efforts be made to improve cross-border law enforcement.

“Cybercriminals route their connection through multiple different countries,” said Mr Samani.

“If criminals are particularly clever, they go through countries where they know there isn’t any co-operation.”

“The bad guys share information – we need to do the same as well.”

Dr Joss Wright from the Oxford Internet Institute welcomed the report’s findings. However, he had serious doubts over the feasibility of its suggestions.

“They’re recommendations that people have been saying for maybe 10 years,” he told the BBC.

“I would love to see good information sharing – but when you’re talking about national security, there’s a culture of not sharing.

“They’re not suddenly going to change 70, 100, 1000 years of military thinking.”

 

[Source]  [Source]

Saudi Banks Probe Hacked Credit Cards

Customers at some local banks have withdrawn their money and closed their accounts in the wake of reports that hackers have accessed some credit card accounts.

81562866909008512357.jpg

Banks have now employed teams of information technology experts to close the loopholes in their systems.

Dr. Ihsan Bou Haliga, well-known Saudi economic expert, was quoted by Al-Hayat Arabic daily as urging the authorities not to underestimate the threats made recently by Israeli hackers to disrupt various financial services companies in the Kingdom.

IT experts have confirmed that hackers are using fake copies of bank webpages to get access to customers’ passwords. They said only gullible people will fall prey to this ploy, but warned that hackers are highly intelligent.

The experts said that “certain browsers store your data, such as passwords and usernames. If you get infected with malware, the data on your PC will be recorded and sent to the hacker without you even knowing it. And sometimes you don’t even need to get to a virus; you just need to download some JavaScript from some page”.

“Apart from the code that the site requires, it will have some code that will allow the hacker to get access to your cookies, thus using them to transfer money, change a password and things like that.”

A source at a large Saudi bank, who spoke on condition of anonymity, told Al-Hayat that many customers have withdrawn their money and closed their accounts.

After a hacker, known as “Omar X”, accessed some accounts, the banks formed teams consisting of at least 15 employees each, to revise the credit statements of some customers.

Bou Haliga said there is no system that cannot be hacked. “I wonder how some people in the Kingdom can dare to say that our systems are inaccessible.”

He said even the American defense ministry was hacked recently. He welcomed the efforts banks were taking to tackle this threat.

 

[Source]

Follow

Get every new post delivered to your Inbox.

Join 28 other followers