Hacking on Medium
SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts

https://cdn-images-1.medium.com/max/1200/0*6uXbkOgsKPsdKkmD
Since late October 2021, new Android Trojan named SharkBot is affecting multiple android devices in 24 countries including US.

Continue reading on Medium »

Hacking on Medium
Millionaire Financial Life Hacks # 2

https://cdn-images-1.medium.com/max/2600/0*QACUGO-Q2nO8-pa3
4 Reasons Why I Buy Used Tires.

Continue reading on Medium »

hacking: security in practice
Backdooring Rust crates for fun and profit

https://external-preview.redd.it/dmNDaQbix-b1JK_8hJOkoag8_FsIBJxjmcy9sm60hq8.jpg?width=640&crop=smart&auto=webp&s=fcf9059c8b082e8ee9f073e309e2c7a165609586 submitted by /u/z0mbie42_
[link] [comments]

hacking: security in practice
I request assistance with a problem

I know this might not be the best use but I have a friend across the country and recently she was really hurt by someone she thought she was close to and I want to do something to him for being the selfish asshole he is but I'm only 17 and I can't do anything physical because I'm very far away and I want to just do any type of harm I can do to show him up it's killing me inside not being able to do anything

submitted by /u/Gucci_Napkin
[link] [comments]

hacking: security in practice
Are Telegram messages secure (not 'hackable' by the government) ?

So basically, the French NSA said on TV that they have the ability to hack Telegram messages and that all major NSA-like institution do. The spokesman was quite explicit about this, and for the whole story explained that's how they found out someone was planning a terrorist attack.

My question is simple, is this true ?

I guess it's maybe just to frighten people of using it but what sense would it make ? Or just straight bullshit

And if they do can read telegram messages, how do they decrypt them ?! Or maybe are they just talking about metadata ?

submitted by /u/Floshix
[link] [comments]

JVMXRay - Make Java Security Events Of Interest Visible For Analysis
http://www.kitploit.com/2021/11/jvmxray-make-java-security-events-of.html

Contact/Chat Group
New chat information forthcoming.
Benefits
Following is a quick list of some of the more important benefits.
Identify protected resourcesTrack different types of events of interest related to sockets, files, process execution, and more. When an event of interest occurs, process it as you wish. At the moment, adaptors for the system console (https://www.kitploit.com/search/label/Console) (e.g., System.out), logback, and Java Logging, are available with others in process.
No code changes requiredJVMXRay does not require any changes to your application source code to work. The code is pulled into the JVM by a command line (https://www.kitploit.com/search/label/Command%20Line) option. The solution is 100% Java code so it runs anywhere.
Supply chain insightsAn ancilary benefit of not requiring source code is that JVMXRay provides insight into your applications dependencies including 3rd party libraries (e.g. Jar files). Events provide the source of origin where your classes where loaded when the event is generated.
Extensible & OpenDon't see an adapter or filter that works for you and know how to code? Roll up your sleeves and write one. It's extensible. Fix a bug and submit a pull requrest. All the source code is available.INFORMATION:
Consider this early stage code.
Thar be dragons mate. You were warned!

Audience
The anticipated audience for JVMXRay is two-fold,
Systems AdministratorsIndividuals charged with system security and interested in new methods to gather security inteligence (https://www.kitploit.com/search/label/Inteligence) into Java applications.Security Developers & ArchitectsIndiviudals interested in improved security intelligence (https://www.kitploit.com/search/label/Intelligence) about their applications.
Deploying JVMXRay with Examples
The following provides some basic information to download and compile JVMXRay source on your computer. Remainder of the video shows how to get JVMXRay working with Tomcat and work with Tomcat's examples.

Sample Output...
The output from this technology can be presented in different ways. What does the sample log output look like? Output formats are flexible the following is a sample of the type of information JVMXRay captures for you.-1,-1,1623791226603,main-1,EXIT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,100,,
-1,-1,1623791226603,main-1,LINK,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,mylib.dll,,
-1,-1,1623791226619,main-1,FILE_READ_WITH_FILEDESCRIPTOR,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,java.io.FileDescriptor@6be46e8f,,
-1,-1,1623791226620,main-1,FILE_READ_WITH_CONTEXT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,redsecuritymanagertest3-11060405012461211247.tmp,java.security.AccessControlContext@363a949e,
-1,-1,1623791226621,main-1,PERMISSION,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,org.jvmxray.TestPermission,testpermissionname1,testaction1
-1,-1,1623791226628,main-1,PERMISSION_WITH_CONTEXT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,testpermissionname1,testaction1,org.jvmxray.RedSecurityManagerTest@47f6473
-1,-1,1623791226629,main-1,SOCKET_ACCEPT,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,localhost,1234,
-1,-1,1623791226631,main-1,FILE_DELETE,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,redsecuritymanagertest6-5182052521633743041.tmp,,
-1,-1,1623791226631,main-1,SOCKET_LISTEN,1bd99e2f195004a5-5cb63e19-179fd6e8882-8000,,123,,

How it Works
The Java Virtual Machine (https://www.kitploit.com/search/label/Virtual%20Machine) provides a robust security framework for controlling access to protected resources. JVMXRay provides an implementation of the java.lang.SecurityManager component, called NullSecurityManager. Ironically, the NullSecurityManager provides no policy enforcement but instead monitors activities to protected resources. It's expected other cloud log processing tools, big data tools, or cloud secuirty tools will process these events into meaningful contextual information.
Project Leader(s)
Milton Smith

Download Jvmxray (https://github.com/spoofzu/jvmxray)

Dark Reading: Attacks/Breaches
Cybercriminals Contemplate 'Exploit-as-a-Service' Model

Researchers share their findings on the current zero-day market and how criminals' strategies may shift in the future.

All Your Beacon Are Belong to Us: New BlackBerry Book Cracks Code of Cobalt Strike Threat Actors
https://www.reddit.com/r/redteamsec/comments/qwb9jr/all_your_beacon_are_belong_to_us_new_blackberry/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blogs.blackberry.com/en/2021/11/all-your-beacon-are-belong-to-us-new-blackberry-book-cracks-code-of-cobalt-strike-threat-actors) [comments] (https://www.reddit.com/r/redteamsec/comments/qwb9jr/all_your_beacon_are_belong_to_us_new_blackberry/)

Hacking on Medium
Emotet regresó y se distribuye a través de correos con adjuntos maliciosos

https://cdn-images-1.medium.com/max/1462/0*2UJGnzi0qy4_Y70l
PUBLICADO EN 17 NOVIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

hacking: security in practice
iPhone Hacked- Backdoor…

So my friend told me a story of when he got arrested in Indiana for conspiracy to sell marijuana (he got arrested for 3 oz indv bagged and a roll of 1000.00) that some officers came in, sat him down, pulled his phone from a bag and plugged it into a computer and he said he just saw black numbers flashing and his phone was unlocked…this is a major blow in privacy. How is this possible. He’s very into updating his phone and software was up to date. This happened a week ago, and to make matter worse his pin was 8 digits long not the standard 6……wtf!!!!

submitted by /u/fyrelabs
[link] [comments]

hacking: security in practice
iPhone Hacked- Backdoor…

So my friend told me a story of when he got arrested in Indiana for conspiracy to sell marijuana (he got arrested for 3 oz indv bagged and a roll of 1000.00) that some officers came in, sat him down, pulled his phone from a bag and plugged it into a computer and he said he just saw black numbers flashing and his phone was unlocked…this is a major blow in privacy. How is this possible. He’s very into updating his phone and software was up to date. This happened a week ago, and to make matter worse his pin was 8 digits long not the standard 6……wtf!!!!

submitted by /u/fyrelabs
[link] [comments]

hacking: security in practice
iPhone Hacked- Backdoor…

So my friend told me a story of when he got arrested in Indiana for conspiracy to sell marijuana (he got arrested for 3 oz indv bagged and a roll of 1000.00) that some officers came in, sat him down, pulled his phone from a bag and plugged it into a computer and he said he just saw black numbers flashing and his phone was unlocked…this is a major blow in privacy. How is this possible. He’s very into updating his phone and software was up to date. This happened a week ago, and to make matter worse his pin was 8 digits long not the standard 6……wtf!!!!

submitted by /u/fyrelabs
[link] [comments]