Hacking Articles Tips Tricks Videos Tutorials
467 subscribers
65.7K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Account Takeover via Response Manipulation

Hello everyone I am Abhishek pal here* with my First blog ,In this blog I am going to give details about an easy P1 bug I encountered…Continue reading on Medium »
Read more...
hacking: security in practice
Are there any good resources you would recommend to hacking victims (including victims of ongoing hacking) and the trauma associated?

This will be a little personal for most of the post but really I hope that this will be a post that can help many people based on the responses.

So I’ve been getting hacked on and off at a really high level for years, as a specific target, and I think I know why but I don’t know who is doing this and I’m starting to shut down in every aspect of my life. I didn’t do anything wrong, just thieves it seems… I fought the good fight, believe me, but after so much energy, time, income, etc lost, I seem to have gotten nowhere. A few days ago after a “dry spell” I learned I’d been infiltrated yet again.

This experience has changed me as a person and I’m just wondering if there is any sort of victims advocacy group out there (I remember I called the cops - not 911, just the local PD - when it first happened, twice, the first time I was put on hold and transferred for over 40 mins and gave up. The second they giggled and hung up, no joke.) I’m not talking about something like the FBI Internet crimes division. I’m afraid to write to them because I hear they don’t do anything first of all, and second of all, I have to presume given the facts of my case that I would just be laying out everything that I knew (and conversely what I was ignorant of) for the hackers in black and white.

I have a therapist, but can’t reach her now and I’m looking for something a little bit more specialized, like a hotline or some other resource that specializes in helping victims of cyber crime, including ongoing victims. The crazy part about being a hacking victim is quite often I feel like I don’t tell anybody because unlike other crimes where the victim naturally gets some compassion and empathy, I feel like I get looked at as if I deserve it or I get a bit of the blame. Also, I don’t want to suck the energy out of the room, and I notice the topic really does it.

I have a lot of respect for hackers and I’m sorry if this is not a typical post on this forum, but any advice you guys could lead to somebody who’s kind of reached the end of his rope mentally, you’d be doing a really good solid for someone who I’d say consistently tried to be a good person to everyone every day. Basically I have become incredibly paranoid, I don’t sleep, my diet is all messed up, I can’t work, I can’t achieve goals like I used to, I don’t exercise anymore, etc. etc. the trauma playbook. But during the “dry spell” I found a new lease on life that now very quickly has crumbled.

But this is just one persons story, I’m hoping there’s some information that can be shared on this post that can help other people that are in similar positions to me because I know that there have to be many of them out there.

Thank you so much 🙏

submitted by /u/Immediate_Cabinet725
[link] [comments]
Sent by @TheFeedReaderBot

___________________________
@hacking_Attack
@Hacking_Video
https://b.thumbs.redditmedia.com/4WUw2lrb7WF5qdfB5kA9Xjj3f878nnRcFHFBRk6LPac.jpg Hi guys, really new here and was looking into bad USB scripts, can anyone explain to me what this does? Sorry for such a noob question, but friend used it on me and worried it uploaded a file somewhere, thanks.



EDIT: Looks like it didn't upload anywhere, just created a local file and presented it in a html before deleting itself, thanks for the help.



https://preview.redd.it/ij9bfqj71aa91.png?width=1387&format=png&auto=webp&s=9108eea4461aa1f8082b870fc81e035f8e4ea76e

submitted by /u/NimblePick
[link] [comments]
Sent by @TheFeedReaderBot
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
New stealthy OrBit malware steals data from Linux devices

New stealthy OrBit malware steals data from Linux devicesPost Views: 21
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
A newly discovered Linux malware dubbed OrBit, is being used to stealthily steal information from backdoored Linux systems and infect all running processes on the machine.
Dubbed OrBit by Intezer Labs security researchers who first spotted it, this malware hijacks shared libraries to intercept function calls by modifying the LD_PRELOAD environment variable on compromised devices.

While it can gain persistence using two different methods to block removal attempts, OrBit can also be deployed as a volatile implant when copied in shim-memory.

It can also hook various functions to evade detection, control process behavior, maintain persistence by infecting new processes, and hide network activity that would reveal its presence.

For instance, once it injects into a running process, OrBit can manipulate its output to hide any traces of its existence by filtering out what gets logged.

“The malware implements advanced evasion techniques and gains persistence on the machine by hooking key functions, provides the threat actors with remote access capabilities over SSH, harvests credentials, and logs TTY commands,” Intezer Labs security researcher Nicole Fishbein explained.

“Once the malware is installed it will infect all of the running processes, including new processes, that are running on the machine.”

Although OrBit’s dropper and payload components were completely undetected by antivirus engines when the malware was first spotted, some anti-malware vendors have since updated their products to warn customers of its presence.
https://www.bleepstatic.com/images/news/u/1109292/2022/Linux-OrBit-payload-detection.png
Linux malware surge?OrBit is not the first highly-evasive Linux malware that has surfaced recently, capable of using similar approaches to fully compromise and backdoor devices. Symbiote also uses the LD_PRELOAD directive to load itself into running processes, acting as a system-wide parasite and leaving no signs of infection. BPFDoor, another recently spotted malware targeting Linux systems, camouflages itself by using the names of common Linux daemons, which helped it remain undetected for more than five years.

Both these strains use BPF (Berkeley Packet Filter) hooking functionality to monitor and manipulate network traffic which helps hide their communication channels from security tools.
Trending: CISA warns of hackers exploiting PwnKit Linux vulnerability A third Linux malware, a rootkit under heavy development dubbed Syslogk and unveiled by Avast researchers last month, can force-load its own modules into the Linux kernel, backdoor compromised machines, and hide directories and network traffic to evade detection.

Even though not the first or the most original malware strain targeting Linux lately, OrBit still comes with its share of capabilities that set it apart from other threats.

“This malware steals information from different commands and utilities and stores them in specific files on the machine. Besides, there is an extensive usage of files for storing data, something that was not seen before,” Fishbein added.

“What makes this malware especially interesting is the almost hermetic hooking of libraries on the victim machine, that allows [...]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking New stealthy OrBit malware steals data from Linux devices New stealthy OrBit malware steals data from Linux devicesPost Views: 21 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe…
the malware to gain persistence and evade detection while stealing information and setting SSH backdoor.”
Trending: Offensive Security Tool: Axiom Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Trending: How do QR Codes work and how criminal hackers use them to generate phishing attacks – Demo Source: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/ezgif.com-gif-maker-2-1-90x90.jpg High severity OpenSSL bug could lead to remote code execution1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/hacker-alert-iStock-1330604319-580x358-1-90x90.jpg New RedAlert Ransomware targets Windows, Linux VMware ESXi servers2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/django-5-90x90.jpg Django fixes SQL Injection vulnerability in new releases3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/ezgif.com-gif-maker-1-90x90.jpg Rogue HackerOne employee steals bug reports to sell on the side4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/ezgif.com-gif-maker-2-90x90.jpg Microsoft Exchange servers worldwide backdoored with new malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ezgif.com-gif-maker-1-90x90.jpg CISA warns of hackers exploiting PwnKit Linux vulnerability1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/eba5863be05547fb146c9c8c0ed43c52-90x90.jpg Dozens of cryptography libraries vulnerable to private key theft1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ezgif.com-gif-maker-90x90.jpg Researchers crack MEGA’s ‘privacy by design’ storage, encryption1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/f9ed623c5c-90x90.jpg Google Warns Spyware Being Deployed Against Android, iOS Users2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/170720-poulsen-fancy-bear-tease_zzzwzw-90x90.jpg Fancy Bear Uses Nuke Threat Lure to Exploit 1-Click Bug2 weeks ago
The post New stealthy OrBit malware steals data from Linux devices first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video