Friday, 24 January 2014

WHMCS HACKED BY b0x

WHMCS Hacked by b0x | WWW.MaDLeeTs.Com

Deface Url:

http://docs.whmcs.com/images/b0x.html



Zone-H:

http://zone-h.org/mirror/id/21518159

Thursday, 23 January 2014

Justin Bieber arrested in Miami Beach for drunk driving..


Justin Bieber has had several run-ins with 

police in recent years




Pop star Justin Bieber has been arrested in Florida accused of drunken driving and drag racing.
The Miami Beach Police Department said he was detained after racing on a street early on Thursday and had failed an alcohol test.
The 19-year-old has had several run-ins with police in recent years.
The arrest comes a week after his home in Los Angeles was searched by police following allegations he had thrown eggs at his neighbour's house.
He was accused of causing significant damage to the property. One member of his entourage was arrested for alleged drug possession following the search.
In the latest incident, the Associated Press quoted police as saying the singer had been driving a yellow Lamborghini when he was arrested in the early hours of Thursday.
The Miami Herald reported that members of the musician's entourage had apparently used their cars to block traffic on Pine Tree Drive at 26th Street, effectively creating a drag strip.
The driver of a second car, a red Ferrari, was also arrested and both cars impounded, said Miami Dade-Police spokesman Sgt Bobby Hernandez.
Police later named the other driver as an R&B singer known as Khalil.
The street where police say the singer was racing is a residential area in mid-Miami Beach.
Small apartment buildings are along one side of the street and on the other side are a high school, a youth centre, a golf course and a fire station.
In 2013, the Canadian singer was asked to remove graffiti he had left on the wall of a hotel in Australia. That came a month after he was charged in Brazil over a similar offence.
In 2012 he faced accusations of reckless driving, although prosecutors declined to press charges.
Justin Bieber lives in a gated community in Calabasas, about 30 miles north-west of central Los Angeles.

Researcher gets $33,500 for Remote Code Execution Vulnerability in Facebook..

Researcher gets $33,500 for Remote Code Execution Vulnerability in Facebook


Here comes a critical bug discovered in Facebook and biggest bounty ever paid by Facebook for reporting vulnerability in their website.

Reginaldo Silva, A Brazilian Hacker, has discovered a highly critical Remote Code Execution(RCE) vulnerability in the Facebook which could allowed attackers to read any files from the server.  It could also allowed attackers to run malicious code in the server.

In September 2012, he first discovered XML External Entity Expansion bug in the Drupal that handled OpenID.  OpenID is an open technology that allows users to authenticate to websites without having to create a new password.

He found similar bug affecting the Google's App Engine and Blogger.  However, it is not critical as he wasn't able to access the arbitrary file or open network connections, he received $500 reward from Google.

He found out plenty of other websites implementing OpenID are vulnerable to RCE. 

Recently, Silva learned that "facebook forgot password" page is also using OpenID provider to verify the identity of the user.  He managed to discover the XXE bug in Facebook that allowed him to read the "etc/passwd" file from the server.

"Since I didn't want to cause the wrong impressions, I decided I would report the bug right away, ask for permission to try to escalate it to a RCE and then work on it while it was being fixed." Silva wrote in his blog.

He thought it will take time to fix the bug.  However, the facebook security team responded quickly and fixed issue within 3.5 hours.

"I decided to tell the security team what I'd do to escalate my access and trust them to be honest when they tested to see if the attack I had in my mind worked or not. I'm glad I did that. After a few back and forth emails, the security team confirmed that my attack was sound and that I had indeed found a RCE affecting their servers." silva said.

He has been rewarded with a bounty of $33,500...
.

Wednesday, 22 January 2014

Notorious ​Hacker Guccifer Reportedly Arrested in Romania.. Cyber switch news

The man who brought us the George W. Bush paintings has reportedly been arrested: On Wednesday night, Romanian authorities arrested Marcel Lazăr Lehel, the 40-year-old man accused of being the hacker Guccifer, at his home in Arad. Guccifer has hacked into the email accounts of Colin Powell, family members and friends of at least three U.S. presidents, plus numerous other celebrities and officials.
According to Softpedia and various Romanian news sources, Romania's Directorate for Investigating Organized Crime and Terrorism (DIICOT) raided Lazăr Lehel's home last night. He was reportedly arrested shortly after.
This isn't the first time Lazăr Lehel has been arrested for hacking: In February 2012, he was convicted of dozens of hacking-related charges received a three year suspended sentence. Those charges stemmed from Lazăr Lehel's attacks on dozens of Romanian officials between October 2010 and July 2011.

Official PERL Blogs hacked, 2,924 Author Credentials Leaked by ICR - Cyber Switch News

Today the Islamic Cyber Resistance (ICR) has announced a breach on the official Perl blogs (http://blogs.perl.org)
The breach has seen 2,924 user account credentials published to quickleak.org as well as the blog having a deface page added but was not obtrusive to the actually website.
blog-perl-org-deface
In the release note posted by the hackers they state the attack has been done to show support for the Syria Electronic Army.
Islamic Cyber Resistance Hacked Blogs.perl.org to Show Support Syrian People And SEA
They Are Fighting Every Day and Every Night With Terrorist and Al-QAEDA
The leaked data is from the authors of the blog of which 2,554 have full credentials and 2363 are non duplicated out of that. Full credentials included user names, email addresses, encrypted passwords, websites and API passwords as well as other site/server related information.
blog-perl-org-example
With the passwords being encrypted it does still not really leave much security to those who have been breached which include administrators and owners from other big well known services or websites.
At time of publishing it appears the admin are aware of the breach and the deface file has been removed

Security tips to Aviod Virus /Trojan/ Keylogger Infection..

Security tips to Aviod Virus /Trojan/ Keylogger Infection..

1. Install a good antivirus. Free or Paid is good, but dont used cracked or pirated versions.

2. Install real-time anti-spyware protection

3. Update your Anti-virus programs daily.

4. Perform scans on your computer daily.

5. Disable autorun to prevent infection from pendrives..

6. Disable image previews if usiing Outlook

7. Use good anti-virus which has browser plugins and scans all URL's for malacious content.

8. Use Hardware based Firewall.

9. Dont click on any mail links or attachments from unknown sources or malacious users.

10. Never download softwares from third-party sites. Download from original website. Dont use cracks or keygens which may be a virus/trojan itself..

Blogger Tricks