KALI Linux Website Hacked Using Heartbleed Bug

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdX87cEU0l6EQ3dLfCAdqWuD7MBO0WJca-h6Od6zwQs3bNJ2nHyeQM14htgSKPF6_IJzFsTFii34GvNeIQXD0xHKQkYmawy2kG3WfBecOhELyxf-wijdsheU5V_dgLXKl86F_IZZmLnOg/s1600/kali-linux-website-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdX87cEU0l6EQ3dLfCAdqWuD7MBO0WJca-h6Od6zwQs3bNJ2nHyeQM14htgSKPF6_IJzFsTFii34GvNeIQXD0xHKQkYmawy2kG3WfBecOhELyxf-wijdsheU5V_dgLXKl86F_IZZmLnOg/s1600/kali-linux-website-hacked.png" width="320" /></a></div> <span id="goog_1006895919"></span><span id="goog_1006895920"></span><br /> <div style="text-align: justify;"> When it comes to hacking there is nothing like 100% security. Same has happened with the popular penetration testing and Security-related Linux provider Kali aka BackTrack.<br /><br />Few hours ago the Libyan hackers from ‘’The GreaT Team (TGT)’’ hacked and defaced the official mailing list sub-domain of Kali Linux website (lists.kali.org).<br /><br />The hackers left their deface page along with a note expressed in following words:<br /><br />    <span style="color: red;"><i>"Hacked By The GreaT TeAm –TGT"</i></span><br /><br />The hacker news reported that lists.kali.org has been hosted on http://mailmanlist.net/ which offers an easy solution for domain owners to manage their discussion list. The hackers claimed that Mail Man List website is vulnerable to Heartbleed bug. <br /><br />He explained how he breached the site:<br /><br />  <span style="color: red;">  "<i>I got access to one of the mailmanlist.net user account with stolen cookies, collected by exploiting Heartbleed vulnerability and then I searched for other web apps vulnerabilities. That’s how he was able to access login details of Kali Linux mailing list.</i>"</span><br /><br />The bug, called Heartbleed, is a serious vulnerability in the openSSL cryptographic software library, which allows stealing of the protected information.<br /><br />Mirror of hacked site is available here.<br /><br />At the time of publishing this article, the mailing domain was down. However, Kali Linux tweeted from their official Twitter handle about the hack.<br /><br />The GreaT TeAm – TGT is the same group which hacked and defaced the official website of Egyptian Ministry of Information just 3 days ago.</div>

KALI Linux Website Hacked Using Heartbleed Bug

When it comes to hacking there is nothing like 100% security. Same has happened with the popular penetration testing and Security-relate...

Read more »

Heartbleed Security Scanner

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_rElX5zFlWdrffRizEhNRXOOMqDrpzkNIm4LZrJTpgXspfZBcG0B5Me6DjQqo3rbTJpvF8F8Q9hukOuxKv6QsasJ-HwhuTnhu66g6xdMbUAcj8mB-MPxlXifRbpnalrIzGtlSrFvB1Ig/s1600/detector.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_rElX5zFlWdrffRizEhNRXOOMqDrpzkNIm4LZrJTpgXspfZBcG0B5Me6DjQqo3rbTJpvF8F8Q9hukOuxKv6QsasJ-HwhuTnhu66g6xdMbUAcj8mB-MPxlXifRbpnalrIzGtlSrFvB1Ig/s1600/detector.png" width="200" /></a></div> <div style="text-align: justify;"> Heartbleed Security Scanner for Android helps detect whether your Android device is affected by the Heartbleed bug in OpenSSL and whether the vulnerable behavior is enabled.</div> <div style="text-align: justify;"> </div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> <b><span style="background-color: #f3f3f3;"><span style="color: red;">(Download => <a href="http://adf.ly/6764776/heartbleed-security-scanner" target="_blank">Heartbleed Security Scanner</a>)</span></span></b></div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> Heartbleed Security Scanner is developed by Lookout, the leading mobile security company that builds security & antivirus technology that protects people, business, governments, and critical infrastructure from the growing threats in the post-PC era.<br /> <br /> If you haven’t, please download Lookout Antivirus & Security for complete Android protection including free antivirus, backup, find lost phone and more: <a href="http://ap.lookout.com/SH4U">http://ap.lookout.com/SH4U</a><br /> <br /> ❐ More About Heartbleed Security Scanner<br /> <br /> Heartbleed Security Scanner works by determining what version of OpenSSL your device is using. If your device is using one of the affected versions of OpenSSL, we then check to see if the specific vulnerable feature called heartbeats is enabled.<br /> <br /> Q&A<br /> <br /> ■ What is Heartbleed?<br /> <br /> Heartbleed is a software flaw in the OpenSSL “Heartbeat” function that helps keep secure connections alive. This function was found to be vulnerable to manipulation in a way that allows an attacker to steal up to 64K of data at a time from the active memory of affected systems. The bug, found by researchers from Codenomicon and Google, and filed with the following reference number – CVE-2014-0160, impacts any infrastructure that includes the affected versions of OpenSSL.<br /> <br /> ■ Will Heartbleed Security Scanner fix the Heartbleed vulnerability?<br /> <br /> Heartbleed Security Scanner is not meant to fix this vulnerability, as the vulnerability will need to be patched by Google or your device manufacturer. Heartbleed Security Scanner is only meant to keep you informed about the status of your device. The good news is that Lookout has not yet seen the Heartbleed vulnerability exploited on a mobile device.<br /> <br /> Stay updated with the latest information on our blog: https://blog.lookout.com/blog/2014/04/09/heartbleed<br /> <br /> ■ Will Heartbleed Security Scanner tell me if my apps are affected?<br /> <br /> Heartbleed Security Scanner will not detect whether any of the services or accounts (the apps and websites you visit) on your device are vulnerable. Heartbleed Security Scanner is only meant to detect vulnerabilities in Android.<br /> <br /> In other words, your operating system might be fine, but the websites you’re accessing might not. Look out for emails from companies with whom you have online accounts. If they needed to issue a patch, hopefully they will be alerting their consumers.<br /> <br /> Note on Permissions<br /> Heartbleed Security Scanner only uses the Internet permission when you explicitly share the results of your scan with us. If you choose not to, we won't collect any information.</div> <div style="text-align: justify;"> <span style="background-color: lime;"><br /></span> <br /><b><span style="background-color: #f3f3f3;"><span style="color: red;">(Download => <a href="http://adf.ly/6764776/heartbleed-security-scanner" target="_blank">Heartbleed Security Scanner</a>)</span></span></b></div>

Heartbleed Security Scanner

Heartbleed Security Scanner for Android helps detect whether your Android device is affected by the Heartbleed bug in OpenSSL and whether...

Read more »

Warning: Heartbleed bug is back and it's in reverse

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyoLzMkNH-Q400g5viiV0MFk7dezifVuC2APw1IsYjLtPaj6DCZH3Tya2N_wpp4ku9ipSUrQ3Hsn0mUdIgx1DYmVFZrvc8oI7eD7XNMjepo6DjbLWe5nKpBJMfe3LuM36s5M5Kimdm86A/s1600/heartbleed-server.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyoLzMkNH-Q400g5viiV0MFk7dezifVuC2APw1IsYjLtPaj6DCZH3Tya2N_wpp4ku9ipSUrQ3Hsn0mUdIgx1DYmVFZrvc8oI7eD7XNMjepo6DjbLWe5nKpBJMfe3LuM36s5M5Kimdm86A/s1600/heartbleed-server.jpg" width="320" /></a></div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> Users of Android phones running a particular version of the Jelly Bean operating system should take extra care with free Wi-Fi hotspots and unfamiliar websites as they are vulnerable to a new variant of the "Heartbleed" bug, IT experts warn.<br /> <br /> The Android 4.1.1 system is susceptible to the "Reverse Heartbleed" virus - a variation of the bug that has alarmed authorities worldwide and last week helped hackers to steal social insurance numbers from the Canada Revenue Agency.<br /> <br /> With the original Heartbleed, hackers use a flaw in the encryption tool Open SSL to attack computer servers and gain access to users' communication records, login usernames and passwords.<br /> <br /> "As for Reverse Heartbleed, it is not a hacker who attacks a server, but a server that attacks users," said Hong Kong Computer Emergency Response Team's senior consultant Leung Siu-cheong.<br /> <br /> Users of Android 4.1.1 who connected to a bad server, website or android application were putting themselves at risk of being hacked, he said.<br /> <br /> "A bad server could be disguised as a free Wi-fi hotspot," he added.<br /> <br /> Gabriel Leung Shing-koon, general manager of EMC Hong Kong and Macau, said users could get around the Reverse Heartbleed bug by upgrading their operating system.<br /> <br /> However, some machines cannot be upgraded beyond Android 4.1.1.<br /> <br /> And even if users did upgrade, they would still be vulnerable to the original Heartbleed virus.<br /> <br /> He said internet users needed to check their service providers had addressed, or "patched" the Heartbleed bug, or had plans in place to do so.<br /> <br /> Heartbleed, he said, was more of a challenge for service providers because users could do very little to protect themselves if they were using a server that had not been patched.<br /> <br /> And if the server had not been patched, any information transferred during an encrypted session would be vulnerable to observation and sensitive information could be stolen.<br /> <br /> He said after patches were in place, users should change their passwords and other sensitive data. They should also monitor their accounts for unauthorised activity or transactions.<br /> <br /> Canadian police last week arrested and charged a 19-year-old man with the theft of 900 taxpayers' data that had been made vulnerable by the Heartbleed bug.<br /> <br /> To check if your phone uses Android 4.1.1, go to "Settings" and "About phone". Some websites provide tools to check for vulnerability to Heartbleed. Enter the website address or host name of the e-mail server and the tool will indicate if it is vulnerable.</div>

Warning: Heartbleed bug is back and it's in reverse

Users of Android phones running a particular version of the Jelly Bean operating system should take extra care with free Wi-Fi hotspots...

Read more »

Millions of Android Devices Vulnerable to Heartbleed Bug

<div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;">  <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWblFrQFD0nn6vYXvVN3JngIE9POXxej_zC1JQ-WuZQczzegPbKcNYlwhuaimQVcr0hpWd7p50oxJmozmPahx_H54OrXtrcmygroOWARqPnqfGDajrDFKXTwuXKY-HYX_7h9NL-S6t6io/s1600/Heart-bleed-logo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWblFrQFD0nn6vYXvVN3JngIE9POXxej_zC1JQ-WuZQczzegPbKcNYlwhuaimQVcr0hpWd7p50oxJmozmPahx_H54OrXtrcmygroOWARqPnqfGDajrDFKXTwuXKY-HYX_7h9NL-S6t6io/s1600/Heart-bleed-logo.jpg" width="320" /></a></div> Millions of smartphones and tablets running Google Inc. (GOOG)’s Android operating system have the Heartbleed software bug, in a sign of how broadly the flaw extends beyond the Internet and into consumer devices.<br /> <br /> While Google said in a blog post on April 9 that all versions of Android are immune to the flaw, it added that the “limited exception” was one version dubbed 4.1.1, which was released in 2012.<br /> <br /> Security researchers said that version of Android is still used in millions of smartphones and tablets, including popular models made by Samsung Electronics Co., HTC Corp. and other manufacturers. Google statistics show that 34 percent of Android devices use variations of the 4.1 software. The company said less than 10 percent of active devices are vulnerable. More than 900 million Android devices have been activated worldwide. </div>

Millions of Android Devices Vulnerable to Heartbleed Bug

  Millions of smartphones and tablets running Google Inc. (GOOG)’s Android operating system have the Heartbleed software bug, in a sign o...

Read more »