hacking: security in practice
A new Onyx ransomware operation is destroying files larger than 2MB instead of encrypting them, preventing those files from being decrypted even if a ransom is paid. Like most of today's ransomware operations, Onyx threat actors steal data from a network before encrypting devices.

https://external-preview.redd.it/qoBEE2tg-7UDvQ5cUDaD8AZ_BlnRdGjSeM9tMPEtNko.jpg?width=640&crop=smart&auto=webp&s=a358e8970b9b2c5cb81eee275561e18c9f529adb submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
I used to use a sort of dark net news thing to surf tor. Can’t remember what it was called

It was a dark net news thing. I used it because part of the site was just a bunch of links but now I can’t remember what it was. Does anybody here know what I’m talking about?

submitted by /u/lost_mah_account
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bored Ape Yacht Club’s Instagram Hacked, NFTs Stolen In Phishing Attack

https://cdn-images-1.medium.com/max/1000/1*6OKg6besgh2GFogpMdyFDw.jpeg
An estimated US$3M worth of NFTs were stolen.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best Websites and Resources to Learn Ethical Hacking

https://cdn-images-1.medium.com/max/820/1*3v2KRXriMAtjui-n9UZ4Vg.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Cybersecurity conferences
https://www.reddit.com/r/redteamsec/comments/ueete6/cybersecurity_conferences/

Hi guys!
Does anybody know what are the most interesting hacking and cybersecurity conferences in Europe? submitted by /u/Derrick_Wallarm (https://www.reddit.com/user/Derrick_Wallarm)
[link] (https://www.reddit.com/r/redteamsec/comments/ueete6/cybersecurity_conferences/) [comments] (https://www.reddit.com/r/redteamsec/comments/ueete6/cybersecurity_conferences/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is there any tool in linux to mask a fake url with a real looking url?

it's basically what i said in the title?does anyone know about a tool that will do tht?

submitted by /u/200ok-N1M0-found
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/bg2cJl71fUKfCxZRmbmrcA4RXi_HMpov1Kg09PA6aE0.jpg submitted by /u/amAProgrammer
[link] [comments]

hacking: security in practice
Analysis | Among top hacking nations, North Korea’s the weirdest

https://external-preview.redd.it/TS56A23VjE-B7JUK-wxe4iR8dMUk6fMP_VGbJAbkpD8.jpg?width=640&crop=smart&auto=webp&s=6bbe6f20410017f682bb93915d894b8d474130b9 submitted by /u/antdude
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Might be stupid

I really want someone to help me out with my court and DMV records, Don’t know really how to go about it. I need assistance to how to get to where I need to be(guidance) thanks man bunch 🫥💀👺🫶🏼

submitted by /u/PayMe2TheMoon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Passwords That Are Safe Even From Key Loggers

https://cdn-images-1.medium.com/max/2440/0*2QG-E2XFClgCaNfV
I’m paranoid. I don’t want to share my passwords with password managers. I don’t want to write them down or type them anywhere. I don’t…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Introduction to Smart Contract why it is so demanding in the IT world…
https://amit-lt.medium.com/introduction-to-smart-contract-why-it-is-so-demanding-in-the-it-world-3f150a9f635c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Started my journey a month ago into Smart Contracts as a Security Analyst of Avalance Global Solutions and that’s why I want to share my…Continue reading on Medium » (https://amit-lt.medium.com/introduction-to-smart-contract-why-it-is-so-demanding-in-the-it-world-3f150a9f635c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Darkside hacker group, the group that provides ransomware as a service

Darkside hacker group, the group that provides ransomware as a servicePost Views: 29
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 6 Minutes
DarkSide hacker group provides ransomware as a service, and it is believed to be responsible for the Colonial Pipeline cyberattack, the biggest US gas pipeline, which was temporarily shut down its operations for several days due to the attack.
DarkSide is one of many increasingly professionalized groups of digital extortionists.
DarkSide group

DarkSide is a ransomware-as-a-service (RaaS) and offers its affiliates a percentage of the profits.

It presents an example of modern ransomware, operating with a more advanced business model. These modern ransomware attacks usually are done by several groups who collaborate and split the profits.

It is believed that the DarkSide group is based in Eastern Europe, likely Russia. Unlike other hacking groups responsible for high-profile cybercrimes, it is not believed to be state-sponsored.

Experts in the field who tracked DarkSide activities said it appears to be composed of veteran cyber criminals with a focus on making money from their targets.

“They’re very new but they’re very organized,” Lior Div, the chief executive of Boston-based security firm Cybereason said.

Their site on the dark web hints at their past crimes, claiming that they previously made millions from extortion. It also features a Hall of Shame-style gallery of leaked data from victims who haven’t paid up their ransom, disclosing stolen documents from more than 100 companies across the US and Europe.
See Also: Complete Offensive Security and Ethical Hacking Course
Targets
Based on the group’s Tor leak sites, the DarkSide group determines whether to pursue a target by looking at their financial records. The financial information gathered is also used to determine the amount of the ransom to demand, a typical ransom could be anywhere between 200K and 2 million US dollars.

According to Trend Micro reports, the most targeted country, with more than 500 detections was the US, followed by Belgium, France, and Canada. Also, according to McAfee, the most attacked countries In terms of the number of devices impacted per million devices are Israel with 1573.28, Malaysia with 130.99, Belgium with 106.93, etc., the list consists of 25 affected countries which also includes countries like Italy, Ukraine, and Peru.

Notably, the group avoids victimizing companies in a Commonwealth of Independent States (CIS) countries by using a part of their ransomware execution code that checks the geolocation of potential victims. This could be a clue to where DarkSide criminals are residing.  Additionally, they do not target schools, non-profit organizations, and healthcare centers Organizations.

As of June 2021, based on the leaked sites, there were at least 90 victims affected by the DarkSide attacks. In total, more than 2TB of stolen data are currently being hosted on DarkSide sites and 100% of victims’ stolen files are leaked. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png See Also: Offensive Security Tool: KeeThief
History of Attacks
The Timeline of DarkSide activity is compiled from publicly available reports:

* August 2020: DarkSide introduces its ransomware.
* October 2020: DarkSide donates US$20,000 stolen from victims to charity.
* November 2020: DarkSide establishes its RaaS model. The group invites other criminals to use its service. A DarkSide data leak site is later discovered.
* November 2020: Da[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Socket: New tool uses a new, proactive defense against OSS supply chain attacks

Socket: New tool uses a new, proactive defense against OSS supply chain attacksPost Views: 22
Premium Content

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
A group of software package maintainers have created a tool for defending applications that depend on open source JavaScript libraries.
Called Socket, the tool uses a new, proactive defense against open source software OSS supply chain attacks. Supply chain attacks happen when a miscreant compromises a package and uses it to distribute malicious code to applications that depend on it. The tactic has become a growing threat, especially as more and more applications come to increasingly rely on open source software components. Traditional methods fall short“Everyone on the Socket team is an open source maintainer. Together, we have over 1 billion monthly downloads to our names,” Feross Aboukhadijeh, founder and CEO of Socket, told The Daily Swig. “We witnessed firsthand how supply chain attacks have swept across open source communities and damaged trust in open source.”

Maintaining the security of open source software is becoming increasingly challenging, especially since every dependency can lead to dozens or hundreds of transitive dependencies.

The security industry is mostly focused on vulnerabilities that have already been discovered. There are many CVE scanners that monitor applications for known vulnerabilities.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png But vulnerabilities can take weeks or months to be discovered, and their emergence won’t stop supply chain attacks, Aboukhadijeh warns.

One study from 2020 shows that on average, a malicious package is available for 209 days before being publicly reported. Another states that 20% of malware “persist in package managers for over 400 days and have more than 1K downloads.”

“In today’s culture of fast development, a malicious dependency can be updated, merged, and running in production in days or even hours,” Aboukhadijeh said. “This isn’t enough time for a CVE to be created and make its way into the vuln scanning tools that teams use.” A proactive approachSocket has been designed with the assumption that all open source packages may be malicious. Instead of searching for known vulnerabilities, it tries to detect signs of compromised packages.

According to Aboukhadijeh, Socket uses “deep package inspection” to characterize the behavior of an open source package. It analyzes both the package code and maintainer behavior to detect the tell-tale signs of a supply chain attack.

Socket runs static analysis on a JavaScript package and all of its dependencies to look for risk markers such as install scripts, obfuscated code, high entropy strings, or usage of privileged APIs such as shell, network, filesystem, eval(), and environment variables.

“For example, if a new patch or minor version of a package adds an install script and new code to communicate with the network, that’s a huge red flag and something that every team should want to know about before they update to the new version,” Aboukhadijeh said. “Looking for just these two signals would have stopped a huge percentage of recent npm supply chain attacks.”

Socket has a total of 70 detection markers in five different categories: supply chain risk, quality, maintenance, known vulnerabilities, and license.

“We use eac[...]

___________________________
@hacking_Attack
@Hacking_Video