Hacking Articles Tips Tricks Videos Tutorials

5 views10:20

Black Hat Ethical Hacking
Cyber-attack on Nvidia linked to Lapsus$ ransomware gang

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Cyber-attack on Nvidia linked to Lapsus$ ransomware gang<svg<path31 total views, 31 views today
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 1 Minute
The Lapsus$ ransomware gang has allegedly claimed responsibility for a cyber-attack against graphics chipmaking giant Nvidia.
Breaking the story on Friday (February 25), The Telegraph reported that attackers had compromised Nvidia’s internal systems over the previous two days, causing outages of its developer tools and email systems.

The newspaper added that an insider had said parts of its email systems had started working normally by Friday.

Nvidia, which launched the world’s first graphics processing unit (GPU) in 1999, has intimated that the business has not been operationally disrupted.

“We are investigating an incident,” a spokesperson told The Daily Swig. “Our business and commercial activities continue uninterrupted. We are still working to evaluate the nature and scope of the event and don’t have any additional information to share at this time.”

There’s no evidence that the incident is connected to Russia’s ongoing invasion of Ukraine.
See Also: Complete Offensive Security and Ethical Hacking Course Lapsus$ claimsBloomberg reported on Friday that the incident appeared to involve a “relatively minor” ransomware attack, according to sources.

Then on Saturday morning (February 26), dark web intel outfit DarkTracer tweeted screenshots that purportedly showed messages from Lapsus$ actors claiming they had leaked password hashes for NVIDIA employees.

In the messages the attackers also revealed plans to release 1TB of stolen data soon, potentially in five batches, if Nvidia it didn’t pay up.

The next day, on Sunday (February 28), ‘infosec enthusiast’ Soufiane Tahiri posted additional screenshots supposedly showing Lapsus$ announcing the first data dump, comprising “source code and highly confidential/secret data”.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH According to Emsisoft threat analyst Brett Callow, Lapsus$ claimed that Nvidia had “successfully hacked back”. Callow posted screenshots apparently showing the group explaining that the company had connected to the attackers’ virtual machine and encrypted its data.

However, security expert Marcus Hutchins responded: “To me this sounds a lot like LAPSUS$ installed Nvidia’s corporate agent on their own machine then triggered a data loss prevention policy, which they mistook for ransomware because they’re morons.”

Lapsus$ only announced itself at the turn of the year with attacks on Portuguese media conglomerate Impresa and various other targets. See Also: Recon Tool: Metagoofil Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: How ILOVEYOU worm became the first global computer virus pandemic Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/GettyImages-802535150-1-90x90.jpg Conti ransomware’s internal chats leaked after siding with Russia1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/202[...]

6 views10:20

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Cyber-attack on Nvidia linked to Lapsus$ ransomware gang https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Cyber-attack on Nvidia linked to Lapsus$ ransomware gang<svg<path31 total views, 31 views…

2/02/6469-article-220223-ukraine-body-text-90x90.jpg Data wiper deployed in cyber-attacks targeting Ukrainian systems4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/T8F9rL5Ub6TRWHtQwsVCK6-1200-80-90x90.jpg Samsung Shattered Encryption on 100M Phones5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/4346-article-220222-airtags-body-text-90x90.jpg AirTag clone bypassed Apple’s tracking-protection features, claims researcher6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Banner-Img-AWS-90x90.jpg Introducing Ghostbuster – AWS security tool protects against dangling elastic IP takeovers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/zabbix_blog_java-apps-90x90.png Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-4-1-90x90.jpg GitHub code scanning now finds more security vulnerabilities2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/012qzWe52HXVPxkc8nUrPyv-1.fit_lim.size_1200x630.v1617817629-90x90.jpg Massive LinkedIn Phishing, Bot Attacks Feed on the Job-Hungry2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Unredacter-Pixelize-90x90.gif New tool can uncover redacted, pixelated text to reveal sensitive data2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-3-1-90x90.jpg Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack2 weeks ago <svg<path30 total views, 30 views today
The post Cyber-attack on Nvidia linked to Lapsus$ ransomware gang first appeared on Black Hat Ethical Hacking.

6 views10:20

Hacking Articles Tips Tricks Videos Tutorials

Demonstration of how use Counter-Strike 1.6 as Malware C2
https://www.reddit.com/r/redteamsec/comments/t43v0m/demonstration_of_how_use_counterstrike_16_as/

If you're a malware operator who likes to Rush B and want to manage your victims while playing games, this is for you. https://www.youtube.com/watch?v=b2L1lWtwBiI&t=1s https://twitter.com/kaganisildak/status/1498585440680656896  submitted by /u/kaganisildak (https://www.reddit.com/user/kaganisildak)
[link] (https://www.reddit.com/r/redteamsec/comments/t43v0m/demonstration_of_how_use_counterstrike_16_as/) [comments] (https://www.reddit.com/r/redteamsec/comments/t43v0m/demonstration_of_how_use_counterstrike_16_as/)

7 views10:37

Hacking Articles Tips Tricks Videos Tutorials

No Rate Limiting on Forget Password Page (Email Triggering)

Vulnerability Category: A6- Security MisconfigurationContinue reading on Medium »
Read more...

9 views10:38

Hacking Articles Tips Tricks Videos Tutorials

10 views11:20

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Microsoft steps up to block Russian malware from infiltrating Ukraine

https://external-preview.redd.it/kw77UB2w1vPWAhEBUGUKsJkV-MNVhyewUaOtIfhq7MA.jpg?width=640&crop=smart&auto=webp&s=f46a54302c872a58e69e9946874a66dbf244c70d submitted by /u/jhovudu1
[link] [comments]

11 views11:20

Hacking Articles Tips Tricks Videos Tutorials

What After 12th? as an Ethical Hacker.

This is not an accurate path for an ethical hacker.Continue reading on Medium »
Read more...

10 views11:20

Hacking Articles Tips Tricks Videos Tutorials

7 views11:41

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
RCLocals : Linux Startup Analyzer

RCLocals is inspired by ‘Autoruns’ from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more

Things covered:

·List GPG keys trusted by the system

·Installed Packages

·File integrity

·Process integrity (process and libraries loaded in a process that not belongs to any installed package)

·Processes with name spoofed (processes that use prctl() to change their name in /bin/ps)

·CRON entries

·RC files

·X system startup files

·Active Systemd Units

·Systemd Timer Units

·tmpfiles.d

·linger users

USAGE

For only suspicious information:

#python3 rclocals.py –triage

For detailed information:

#python3 rclocals.py –all

Screenshots
https://blogger.googleusercontent.com/img/a/AVvXsEjPZUCVm8pY4O0aS5J-HPMyjbQ-_A5fBQzhhEXIDvO39AMVFAljMfFJ6pX4Vui7-PaNm0fNYUqyZ5jBeOYc3npEuNHOO8Lte2kEWaDoLYz-fTJITSVbtCkFMcTcdVEjo8K8ZFgQmi4ytBFGRd5hYw28K1maZl3EZpIr0pFpvs6FojpkxYq9TjgPrv5_=s1486 https://blogger.googleusercontent.com/img/a/AVvXsEhU4ItO1BiOd0K5nU9cmjosgHZp0HaajXSSYzlTKYtQ1mBuEsILTLG28MJZhmCzYAAak04rBJgfzImfXGjol4kgeeRCySQrZItFAYD7HOtE83pbU19vHPFk0VN7s_Ttr8dYv3ovsziiE_ou94izvsuaJD9rLg8EdcZFO3icto_ZMDMjgQ8U7Su5azRo=s567 https://blogger.googleusercontent.com/img/a/AVvXsEhV6Md_3cbf2I_V37WedYjtUyg8WVNZHxvJbBe6lY2kegmbGBrjwJtim_diTfNAvcBFHfiSfzDH7ht-AIHrSCDQlNkyvTE5t9MXwwCFd6DS0XCSWfXT-6dbbqN60u2CIK7n-tG1dYtBBAQy1Y5S-bVO15agc3umXD5V1vKR8cTYEYCtUlTVkPhUNzK8=s648 https://blogger.googleusercontent.com/img/a/AVvXsEjM7BtXy1SWST1VPmttpTY79fTy1tAS-UEEHFN2jr9RAglKWjXgMixwthMzZJkPe0K-9iDzxx6_sre4gF0bbzbi3G_hl3CmTxpMy3LXC-JztIHb7onlm1lXL_XaI_fHy7dDVWMMH0zdmYqA-k0qFsXvbLHYIspqk8izcvLfQRp5yRM6knX1wAq-rtFB=s840

Download

7 views11:41

Hacking Articles Tips Tricks Videos Tutorials

5 views11:41

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Mortar : Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)

Mortar is a red teaming evasion technique to defeat and divert detection and prevention of security products. Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to bypass modern anti-virus products and advanced XDR solutions and it has been tested and confirmed bypass for the following:

* Kaspersky
* ESET
* Malwarebytes
* Mcafee
* Cortex XDR
* Windows defender
* Cylance
* TrendMicro
* Bitdefender
* Norton Symantec

Usage

Encryptor

root@kali>./encryptor -f mimikatz.exe -o bin.enc

Loader (DLL)

for bypassing Cortex XDR,add agressor.dll with bin.enc in the same folder and script the following bat file

@echo off
cmd.exe /c rundll32.exe agressor.dll,stealth

for normal usage you can directly execute the agressor.dll

rundll32.exe agressor.dll,dec

Loader (EXE)

the executable version has more options you can use, as you able to pass commands for the loaded binary

Mimikatz dump LSA
deliver.exe -d -c sekurlsa::logonpasswords -f mimikatz.enc
Cobalt strike beacon
deliver.exe -d -f cobalt.enc

Compiling the Loader (windows only)

the project has been coded using FPC(Free Pascal), the compiling procedures are straightforward by downloading and installing Lazarus IDE (https://www.lazarus-ide.org/index.php?page=downloads) and navigate into file > open -> Run -> build

Compiling Encryptor(Linux/BSD/Arm/MacOS//windows)

either by downloading and installing Lazarus-IDE from the official site(https://www.lazarus-ide.org/index.php?page=downloads)

Debian & Ubuntu
apt install fpc
apt install lazarus-ide
Download

10 views11:41

Hacking Articles Tips Tricks Videos Tutorials

No Rate Limiting on Forget Password Page (Email Triggering)
https://medium.com/@awezkagdi.ak/no-rate-limiting-on-forget-password-page-email-triggering-7cd95a55a1d4?source=rss------bug_bounty-5

Vulnerability Category: A6- Security MisconfigurationContinue reading on Medium » (https://medium.com/@awezkagdi.ak/no-rate-limiting-on-forget-password-page-email-triggering-7cd95a55a1d4?source=rss------bug_bounty-5)

7 views11:59

Hacking Articles Tips Tricks Videos Tutorials

What After 12th? as an Ethical Hacker.
https://themodernhacker.medium.com/what-after-12th-as-an-ethical-hacker-169ff7b084bc?source=rss------bug_bounty-5

7 views12:00

Hacking Articles Tips Tricks Videos Tutorials

7 views12:00

Hacking Articles Tips Tricks Videos Tutorials

This is not an accurate path for an ethical hacker.Continue reading on Medium » (https://themodernhacker.medium.com/what-after-12th-as-an-ethical-hacker-169ff7b084bc?source=rss------bug_bounty-5)

7 views12:00