Tagg: hacking 255

https://www.bbc.com/news/uk-53263310

A top-secret communications system used by criminals to trade drugs and guns has been “successfully penetrated”, says the National Crime Agency.

Major crime figures were among over 800 Europe-wide arrests after messages on EncroChat were intercepted and decoded.
More than two tonnes of drugs, several dozen guns and £54m in suspect cash have been seized, says the NCA.

An estimated 60,000 people, among them up to 10,000 in Britain, subscribed to France-based EncroChat, which has now been taken down.

The system operated on customised Android phones and, according to its website, provided “worry-free secure communications”.

https://www.nrk.no/norge/trumf-endrer-ikke-bonusprogram_-_-et-sikkerhetshull_-mener-it-ekspert-1.15047444

Rema har endret en kunde-app som kan misbrukes til overvåking, men Trumf beholder en lignende løsning.

Sårbarheten ligger i at en person som ønsker å overvåke en annen kan legge inn den andres kontonummer, og på den måten få informasjon om når, hvor og hva den andre handler.

https://www.businessinsider.com/online-voting-system-can-be-hacked-to-alter-votes-report-2020-6

At worst, attackers could change election outcomes without detection, and even if there was no attack, officials would have no way to prove that the results were accurate

https://www.nrk.no/norge/korona_-kriseledelse-brukte-hjemme-pc-er-apne-for-hackerangrep-1.15038678

36 sikkerhetshull i Windows, hvorav 7 ble betegnet som «kritiske», var ikke tettet i 120 PC-er som norske helsebyråkrater i Helsedirektoratet, HELFO og Pasient- og brukerombudet hadde fått med seg når de skulle styre Norge fra hjemmekontor.

Vi reiste rundt fysisk og oppdaterte maskinene.

https://www.zdnet.com/article/after-a-breach-users-rarely-change-their-passwords-study-finds/

Only a third of users changed their password following a data breach.

Most users who changed passwords chose a weak one

https://www.vice.com/en_us/article/dyz8nw/iphone-ios-ios13-jailbreak-uncover-unc0ver

it works by taking advantage of a vulnerability in iOS that Apple is not aware of, or a so-called zero day.

https://www.amnesty.org/en/latest/news/2020/05/qatar-covid19-contact-tracing-app-security-flaw/

If technology is to play an effective role in tackling the virus, people need to have confidence that contact tracing apps will protect their privacy and other human rights

https://www.cyberscoop.com/norfund-hacked-wealth-fund-10-million/

Thieves spent months inside the networks of the world’s largest sovereign wealth fund before stealing $10 million in what the enterprise is describing as “a serious case of fraud.”

The Norwegian Investment Fund, more commonly known as Norfund, announced Wednesday that scammers stole £8.2 million ($10 million) by spoofing an email address, then fabricating payment information and directing cash into their own account

https://www.bbc.com/news/technology-52722626

It said email addresses and travel details had been stolen and that 2,208 customers had also had their credit card details “accessed”.

https://www.zdnet.com/article/supercomputers-hacked-across-europe-to-mine-cryptocurrency/

Confirmed infections have been reported in the UK, Germany, and Switzerland. Another suspected infection was reported in Spain.

many of the organizations that had supercomputers go down this week had announced in previous weeks that they were prioritizing research on the COVID-19 outbreak, which has now most likely been hampered as a result of the intrusion and subsequent downtime.

https://androidrookies.com/huawei-dev-team-sends-a-buggy-hksp-patch-with-backdoor-to-linux-foundation/

https://www.cyberscoop.com/coronavirus-vaccine-china-hacking-dhs-fbi/

https://www.wired.com/story/how-north-korea-robs-banks-around-world/

They scored $80 million by tricking a network into routing funds to Sri Lanka and the Philippines and then using a “money mule” to pick up the cash.

https://www.wired.com/story/hackers-can-clone-millions-of-toyota-hyundai-kia-keys/

Encryption flaws in a common anti-theft feature expose vehicles from major manufacturers.

chip-enabled mechanical keys

their technique likely isn’t as easy to pull off as the “relay” attacks that thieves have repeatedly used to steal luxury cars and SUVs. Those generally require only a pair of radio devices to extend the range of a key fob to open and start a victim’s car. You can pull them off from a fair distance, even through the walls of a building.

By contrast, the cloning attack the Birmingham and KU Leuven researchers developed requires that a thief scan a target key fob with an RFID reader from just an inch or two away

https://www.wired.com/story/botnet-social-network-where-everyones-influencer/

a faux-social network called Botnet, which is free for anyone to download as an app. Botnet looks like a stripped-down Facebook Newsfeed, where the only posts you can see are your own. It’s just you and the bots, who like and comment on your posts with reckless abandon.

Botnet is designed to simulate the experience of mega-fame on the internet

https://www.bbc.com/news/technology-51658111

The attack allowed hackers to gain access to its client list but it said its servers had not been breached.

Twitter, YouTube and Facebook have all demanded it stop using photos on their platforms.

But Clearview AI chief executive Hoan Ton-That told the CBS This Morning programme it was his First Amendment right to collect public photos.

https://www.businessinsider.com/hackers-trick-tesla-accelerating-85mph-using-tape-2020-2

The researchers elongated the middle line in the “3” by 2 inches.

https://www.zdnet.com/article/israeli-military-tricked-into-installing-malware-by-hamas-agents-posing-as-women/

Members of the Hamas Palestinian militant group have posed as young teenage girls to lure Israeli soldiers into installing malware-infected apps on their phones, a spokesperson for the Israeli Defence Force (IDF) said today.

Some soldiers fell for the scam, but IDF said they detected the infections, tracked down the malware, and then took down Hamas’ hacking infrastructure.

https://www.zdnet.com/article/researcher-backdoor-mechanism-discovered-in-devices-using-hisilicon-chips/

https://www.theverge.com/2020/2/5/21123491/philips-hue-bulb-hack-hub-firmware-patch-update

Might want to check if you’ve got firmware 1935144040