Hacking Articles Tips Tricks Videos Tutorials

For educational purpose only. You may face consequences if you misuse the information provided here. I’m not responsible for your actions.Continue reading on Medium » (https://inakcf.medium.com/loophole-in-e-learning-platforms-3fdfa450b4af?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Loophole in e-learning platforms

For educational purpose only. You may face consequences if you misuse the information provided here. I’m not responsible for your actions.

12 viewsedited 08:45

Hacking Articles Tips Tricks Videos Tutorials

15 views09:30

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Bizarro Banking Trojan Sports Sophisticated Backdoor

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bizarro Banking Trojan Sports Sophisticated BackdoorPost Views: 17
Reading Time: 1 Minute
A never-before-documented Brazilian banking trojan, dubbed Bizarro, is targeting customers of 70 banks scattered throughout Europe and South America, researchers said.
According to an analysis from Kaspersky released Monday, Bizarro is a mobile malware, aimed at capturing online-banking credentials and hijacking Bitcoin wallets from Android users. It spreads via Microsoft Installer packages, which are either downloaded directly by victims from links in spam emails or installed via a trojanized app, according to the analysis.

Once installed, it kills all running browser processes to terminate any existing sessions with online banking websites — so, when a user initiates a mobile banking session, they have to sign back in, allowing the malware to harvest the details. To maximize its success, Bizarro disables autocomplete in the browser, and even surfaces fake popups to snatch two-factor authentication codes, researchers added.

Bizarro also has a screen-capturing module.

“It loads the magnification.dll library and gets the address of the deprecated MagSetImageScalingCallback API function,” explained Kaspersky researchers. “With its help, the trojan can capture the screen of a user and also constantly monitor the system clipboard, looking for a Bitcoin wallet address. If it finds one, it is replaced with a wallet belonging to the malware developers.”

And finally, Bizarro also has a main backdoor module that is capable of carrying out more than 100 commands, according to the analysis.
See Also: ‘Scheme Flooding’ Allows Websites to Track Users Across Browsers A Fully Functional Backdoor“The core component of the backdoor doesn’t start until Bizarro detects a connection to one of the hardcoded online banking systems,” researchers explained. “The malware does this by enumerating all the windows, collecting their names. Whitespace characters, letters with accents (such as ñ or á) and non-letter symbols such as dashes are removed from the window name strings. If a window name matches one of the hardcoded strings, the backdoor continues starting up.”

The commands fall into a few main camps:

* Commands that allow the command-and-control (C2) operators to get data about the victim and manage the connection status; for instance, one asks for Bizarro’s version, OS name, computer name, Bizarro’s unique identifier, installed antivirus software and the codename used for the bank that has been accessed.
* Commands that allow attackers to search for and steal the files located on the victim’s hard drive, and those that allow adversaries to install files on the victim device.
* Commands that allow attackers to control the user’s mouse and keyboard.
* Commands that allow the attackers to control the backdoor operation, shut down, restart or destroy the operating system, and limit the functionality of Windows.
* Commands that log keystrokes.
* Commands that display various messages that trick users into giving attackers access to bank accounts, including fake popup windows (i.e., messages like “the data entered is incorrect, please try again”; error messages asking the user to enter a confirmation code; and those that tell the user that their computer needs to be restarted in order to finish a security-related operation).
* Commands that enable Bizarro to mimic online banking systems. According to Kaspersky, “To display such messages, Bizarro needs to download a JPEG image that contains the bank logo and instr[...]

___________________________
@hacking_Attack
@Hacking_Video

17 viewsedited 09:30

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Bizarro Banking Trojan Sports Sophisticated Backdoor

12 views09:30

Hacking Articles Tips Tricks Videos Tutorials

Finding my First Critical Web Cache Poisoning

Hey Fam! Hope you and your family are doing well amid this pandemic. This story is about the approach I took to find My 1st critical web…Continue reading on Medium »
Read more...

13 views10:14

Hacking Articles Tips Tricks Videos Tutorials

https://a.thumbs.redditmedia.com/lGH_1Gb7wmK71R6aCfvBkGNwB9ji2HiWcB8MRsgsMS4.jpg

Password protected uninstall

submitted by /u/KoolAidPickle22
[link] [comments]

13 views10:28

Hacking Articles Tips Tricks Videos Tutorials

12 views10:28

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Colonial Pipeline Paid Roughly 75 Bitcoins in Ransom to Hackers to Save Fuel Lines

https://external-preview.redd.it/O0CKqD09SVgLGuDGNldwvDpICdknnMhE3cQo4GmAvKw.jpg?width=640&crop=smart&auto=webp&s=441a0940093268f5cb62347ddd02824a7a3fddc1 submitted by /u/standardworks
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Colonial Pipeline Paid Roughly 75 Bitcoins in Ransom to Hackers to...

Posted in r/hacking by u/standardworks • 1 point and 0 comments

14 viewsedited 10:28