The organizer of DDoS-attacks on Spamhaus arrested

In Europe, arrested the organizer of DDoS-attacks on Spamhaus

Spanish police today arrested a Dutchman suspected of organizing large-scale Web-based attacks. 35-year-old man was arrested in Barcelona, ​​at the request of the local prosecutor's office. It is reported that he was one of those who once stood for the largest DDoS-attacks on the anti-spam service Spamhaus. Then the organizers of the attack for a while managed to bring down Spamhaus, which affected the operation of the Internet has led to the slowing down of multiple services.

In addition, immediately after the organization of DDoS-attacks was announced a police investigation aimed at identifying participants in the operation. Now it is reported that the arrested man - Sven Kamfui, owner and manager of the hosting company Cyberbunker, which, as demonstrated by consequence, involved in the attack.

Twitter will increase safety of two-factor authentication

The Social Network took note of hacking accounts of large companies.

As a result of compromised account news agency Associated Press (AP) in the Twitter social network developers have decided to raise the level of security and to implement two-factor authentication technology.

Recall that in consequence of an attack by hackers who posted on the page AP reported explosions in the White House and the wounding of President Barack Obama, the Dow Jones U.S. stock market fell more than 100 points.

Twitter developers, decided that such serious consequences can be avoided by implementing a more robust system to protect accounts. So, along with the usual login and password, users will be obliged to confirm the entry by using the test code on their cell phones.

Browsers - the main entry point of malware in corporate computers

The company Palo Alto Networks, specializing in network security, has published an analytical review «Modern Malware Review» new and hidden malware in real-world enterprise networks.

The review suggests that traditional anti-virus solutions are not able to identify the vast majority of malware infecting the network through real-time applications, including Web browsing.

According to the survey, 94% are not fully detected malware samples delivered through a web browser or via a web proxy. 70% of malicious IDs left in the execution or transmission of data that can be used for detection. 40% at first sight unique harmful programs actually are the version of the same code. The most effective method for the introduction of malware into the network analysts acknowledged FTP. 95% of malware penetrating the network via FTP and remain undetected by antivirus programs for more than 30 days. It has been revealed 30 different methods of avoiding security systems and more than half of all the methods were intended to remain undetected malicious programs.

Hackers broke into the Twitter-tape of the Associated Press

Hackers today hacked Twitter-tape of the American news agency The Associated Press, and posted ostensibly on behalf of the agency reports of explosions in the White House and the wounding of Barack Obama.

Shortly after posting messages the agency has returned control of the news items reported that the previously published reports are false. AP also reported that the hacking AP Twitter and AP Mobile Twitter resulted from previously conducted fraudulent attacks on corporate network news agency.

Hacked the largest fan site The Sims

Hacker, hiding under the name Game Over, penetrated into the security system website Newsea Sims (newseasims.com), which offers special content for the video game The Sims from Electronic Arts. As a result of this burglary were stolen names and passwords of more than 100,000 users. Subsequently, these data were published on the network.

Employees of Cyber ​​War News analyzed the information published on the web and found in the data details about 108377 unique accounts. At the moment the site Newsea Sims does not work. Most likely the administration decided to remove the resource portal, after all of their customer base was in the net.

Leaders Newsea Sims did not provide a decent data protection. For example, administrators did not use encryption when dealing with passwords. If you had an account on Newsea Sims, then most likely, the burglars will want to use your data. Therefore, experts advise as soon as possible to change all passwords (especially if you like to use the same passwords for different accounts).

In Twitter fixed malicious campaign

Cybercriminals are using compromised Twitter-accounts for posting links to malicious software, said in an IT company Trusteer. The company said the discovery of a new version of the malware TorRAT, which has traditionally been used to launch attacks against financial institutions.

"Trusteer recently identified a new active configuration TorRAT, aimed at users of the micro-blogging Twitter. Malware applies the attack Man-in-the-Browser to attack your computer's web browser and access to the account in Twitter to create malicious links," - said in a Post an IT company.

In Trusteer said that the infected tweets are sent through legitimate accounts on the network, which greatly increases the level of confidence in the reports and provokes the reader to move on viral link. "Protected from such attacks is particularly difficult, as the organizers of the attacks use sophisticated model of phishing. Users simply follow the Twitter account, completely nepodozrevaya that he may already be compromised," - said in a Trusteer.

Bypassing passwords in MS Office documents

Found a way to bypass passwords in MS Office documents 2007/2010

A special program allows you to open any password-protected document.

After the cloud service "Password-Find" was able to bypass the password Word, Excel, and PowerPoint Microsoft Office 97-2003, Microsoft tried to eliminate vulnerabilities in the next version of the product 2007/2010, but the creators of "Password-Find" introduced a new mechanism for bypassing the password. The new algorithm allows documents to compromise even with a new level of protection.

According to the developers of the method works with more than half of password-protected MS Office 2007/2010 documents.

Bitcoin Exchange Mt. Gox again underwent DDoS attack

As a result of attack servers of the electronic exchange Mt.Gox were quickly transferred to an autonomous mode.

According to representatives of the BitCoin payment service in the social network Facebook, April 22 at about 2:00 pm (Japan time) servers of the Exchange Mt.Gox were again underwent DDoS-attack unknown attackers.

According to the data of the users BitCoin, commenters on the official forum of the company, at the moment there is considerable delay in carrying out transactions. In addition, the queue for operations in Mt.Gox reached 20,000 transactions.

Former Hostgator employee has installed Backdoor to 2,700 Servers

Ex-HostGator Employee arrested, charged with Installing Backdoor to 2,700 Servers

A former employee of a hosting provider Hostgator convicted of espionage. He put backdoors on 2,700 servers in a data center Hostgator - and get unlimited access to information customers.

Now the case is 29-year-old resident of San Antonio named Eric Gunnar Gisse is seen in the District Court of Harris County (Texas). In court papers, said that he worked for the company for positions Hostgator administrator "medium level" from September 2011 to February 15, 2012.

The analysis showed that using the backdoor and SSH-keys Hostgator attacker could remotely access the web server Apache. Logs showed cases of authorization even with the computer Hetzner Data Center, which is located in the city of Nuremberg (Germany).

Facebook has removed several XSS-vulnerabilities

Gaps were found in several online services company experts Break Security.

Facebook developers have fixed a number of XSS-vulnerabilities discovered by experts Break Security. As the head of information security company Goldshleyger Nir (Nir Goldshlager) social network was vulnerable to attacks on its application «Chat», as well as the components of «Check in» and «Messenger».

So, in a chat window hackers could post links that go about checking on the part of Facebook, which allowed the team to disguise the references JavaScript, executed when you click on these links to a victim's system.