Account Hijacking Forum OGusers Hacked

Found on Krebs on Security on Monday, 20 May 2019
Browse Various

The database, a copy of which was obtained by KrebsOnSecurity, appears to hold the usernames, email addresses, hashed passwords, private messages and IP address at the time of registration for approximately 113,000 users (although many of these nicknames are likely the same people using different aliases).

Several threads on OGusers quickly were filled with responses from anxious users concerned about being exposed by the breach. Some complained they were already receiving phishing emails targeting their OGusers accounts and email addresses.

Federal and state law enforcement investigators going after SIM swappers are likely to have a field day with this database, and my guess is this leak will fuel even more arrests and charges for those involved.

Sweet karma. Now those who make money from victims are on the receiving end.

Facebook has struggled to hire talent since the Cambridge Analytica scandal

Found on CNBC on Saturday, 18 May 2019
Browse Various

More than half a dozen recruiters who left Facebook in recent months told CNBC that the tech company experienced a significant decrease in job offer acceptance rates after the March 2018 Cambridge Analytica scandal, in which a data firm improperly accessed the data of 87 million Facebook users and used it to target ads for Donald Trump in the 2016 presidential election.

Most notably, Facebook saw a sharp increase in students at top universities who are declining the company’s job offers.

“The privacy scandals, the Cambridge Analytica stuff — students aren’t as interested in going to Facebook anymore,” a former Facebook university recruiter said.

Now those news are really good.

Uber’s stock plunges for a second straight day

Found on Ars Technica on Tuesday, 14 May 2019
Browse Various

Uber's stock fell 7.6 percent on Friday, its first day as a publicly traded firm. The bloodbath continued on Monday, with Uber's stock price falling by an additional 10.7 percent.

As recently as last October, some Wall Street banks were estimating that the company could be valued as high as $120 billion. At Monday's closing price of $37.10, Uber is worth barely half that, at $62 billion.

Uber has never made an annual profit, and in recent quarters, the company has been losing more than $1 billion per quarter.

Just lean back and enjoy the show. Stock market "experts" are wrong; by a factor of two even. Hopefully it will keep on falling and teach those experts a lesson. On the other hand, those locusts will just move on to their next target and swindle more money out of investors.

Goodbye, Shadowman: Red Hat changes its logo

Found on ZD Net on Sunday, 12 May 2019
Browse Various

Decades ago, Red Hat came up with its iconic logo: Shadowman. Times change, however, and so do Linux companies.

Tim Yeaton, Red Hat executive vice president and chief marketing officer, explained: "An early 2017 survey had revealed that people saw Shadowman as 'Sinister. Secretive. Evil. Sneaky.' These respondents might not have known anything about Red Hat, but they did believe that man lurking in the shadows didn't immediately inspire their trust. In their survey responses, they wondered who he was and what he was doing in the logo."

It's a logo, nothing more. Not everything has to succumb to marketing research. Those who are remotely familiar with Linux know the logo; there is no reason that every cake-baking grandmother across the street has a happy day when looking at it.

Hacker Finds He Can Remotely Kill Car Engines After Breaking Into GPS Tracking Apps

Found on Motherboard on Tuesday, 30 April 2019
Browse Various

The hacker, who goes by the name L&M, told Motherboard he hacked into more than 7,000 iTrack accounts and more than 20,000 ProTrack accounts, two apps that companies use to monitor and manage fleets of vehicles through GPS tracking devices.

On some cars, the software has the capability of remotely turning off the engines of vehicles that are stopped or are traveling 12 miles per hour or slower, according to the manufacturer of certain GPS tracking devices.

“My target was the company, not the customers. Customers are at risk because of the company,” L&M told Motherboard in an online chat. “They need to make money, and don't want to secure their customers.”

What a fun time when all cars world-wide are driving autonomously, connected via 5G.

Ok Google, please ignore this free tax filing code so we can keep on screwing America

Found on The Register on Saturday, 27 April 2019
Browse Various

The United States' tax-filing software industry actively prevents search engines from discovering their free-filing versions, it has been discovered, adding further criticism to an industry that drives Americans toward unnecessary paid-for products.

It is, of course the robots.txt file that is used by webmasters to indicate where it doesn't want search engine robots to look. Typically this is used to stop search engines from accidentally gathering confidential information.

If you use the robots.txt to protect confidential information, you should be fired on the spot.

Facebook copied email contacts of 1.5 million users

Found on BBC News on Friday, 19 April 2019
Browse Various

Facebook "unintentionally" uploaded the email contacts of more than 1.5 million users without asking permission to do so, the social network has admitted.

Facebook asked new users to supply the password for their email account, and took a copy of their contacts.

That's not "unintentionally", that is their business model. It also does not sound very legal to grab the data of people who were not asked, just by getting it from someone else.

Mysterious Hackers Hid Their Swiss Army Spyware for 5 Years

Found on Wired on Wednesday, 10 April 2019
Browse Various

In a talk at the Kaspersky Security Analyst Summit in Singapore Wednesday, Kaspersky security researcher Alexey Shulmin revealed the security firm's discovery of a new spyware framework—an adaptable, modular piece of software with a range of plugins for distinct espionage tasks—that it's calling TajMahal.

"TajMahal is an extremely rare, technically advanced and sophisticated framework, which includes a number of interesting features we have not previously seen in any other APT activity. Coupled with the fact that this APT has a completely new code base—there are no code similarities with other known APTs and malware—we consider TajMahal to be special and intriguing."

There are more than enough governments with lots of money and smart programmers who know what to do. Just because bureaucracy is slow and ineffecient, other state-run programs can be very efficient.

Teaser for Addams Family animated film can’t quite beat reboot fatigue

Found on Ars Technica on Tuesday, 09 April 2019
Browse Various

MGM just dropped the first teaser for its animated reboot of The Addams Family, and it's exactly what you'd expect from the franchise—no more, no less.

The characters proved so popular that ABC created a 1964 live-action sitcom, The Addams Family, based on them.

All these remakes are tasting bland. Reboot once popular shows, bring comics to the theatres and add more and more seasons until viewers are fed up. Even worse, in this case the animated characters just look aweful. You can't just remake a classic like "The Addams Family"; at least "The Munsters Today" was a worthy continuation of "The Munsters".

Want to hang out with criminals but can't be bothered to download Tor? Try Faceboook

Found on The Register on Sunday, 07 April 2019
Browse Various

It may surprise you to learn that carding, identity theft and spamming services also flourish on Facebook, recently in the news for live streaming hate killings in New Zealand.

According Talos, some of the activities promoted by these Facebook groups are obviously illegal, like selling credit card data dumps, and associated information like photos and identification documents to facilitate identity theft.

Finding these groups can be a challenge. It requires logging into Facebook and typing a search query like "carding" or "cvv," exhausing though that might be. But Facebook will thoughtfully offer search suggestions like "cvv dumps" or "cvv credit card" if your initial query didn't quite lead you to the appropriate den of iniquity.

It's a neverending story. Every day, more and more problems get uncovered.