Mark Dalby

HITBSecNews – Keeping Knowledge Free for Over a Decade

HITBSecNews – Keeping Knowledge Free for Over a Decade

HITBSecNews – Keeping Knowledge Free for Over a Decade

A new version of rogue antivirus malware that targets the Macintosh operating system does not need victims to type in their administrator passwords to install and infect the machine, a security company said today.

The latest version of the malware has been overhauled to look like a native Mac OS X application and is using the application name MacGuard, according to an Intego blog post. But particularly concerning is the fact that unlike previous versions, which were dubbed Mac Defender, MacProtector, and MacSecurity, MacGuard installs itself without prompting for the admin password.

“If Safari’s ‘Open safe files after downloading’ option is checked, the package will open Apple’s Installer, and the user will see a standard installation screen,” the antimalware company’s post says. “If not, users may see the downloaded ZIP archive and double-click it out of curiosity, not remembering what they downloaded, then double-click the installation package. In either case, the Mac OS X Installer will launch.”
Hack In The Box

Sony was forced to shut down the PlayStation Network for half an hour early Monday morning after its networks were inundated by customers trying to reset their passwords.

“We’re currently experiencing an extremely heavy load of password resets, so we recently had to turn off services for approximately 30 minutes to clear the queue,” wrote Nick Caplan, head of communications, at the Sony PlayStation EU blog. “If you’ve requested your password reset, please give it a bit of time to reach your email.”

On Saturday, when Sony began restoring its online services to millions of users in the Americas, Europe, and Australia (but not Japan), Sony said customers would have to wait for an email with a link to reset their passwords before being allowed back into the PlayStation Network. Unfortunately this process has been bogged down with delays, with customers awaiting the email lashing out on Sony’s blogs, forums, and social networks.
Hack In The Box

These days anyone could be watching you, monitoring your every move, waiting to pounce and poach passwords to access your personal data.

“There are new attacks every day, we see something like 90,000 new pieces of malicious codes coming into our labs every day — that’s one every second,” said Graham Cluely, Senior Technology Consultant at the software security company, Sophos.

“The main motive to all of this is to make money,” he added. “They want your email passwords so they can begin to commit identity theft and raid your bank accounts. The most common passwords are words that you find in the dictionary like “password,” “tablecloth” or even the name of a football club. Cluely dismissed these types of passwords as rubbish.”
Hack In The Box

News ≈ Packet Storm

I seem to do this quite a lot for people,  So I’m thinking it’s time to write some instructions.

Take the following scenario….

I’ve forgotten the Wireless password for my router (WEP / WPA Key).

Ok first up, if your on Sky or O2 broadband there is a sticker under your router so stop being a *#!@$ and do a little manual investigation before googling.

If the sticker is non-existent then follow the below…

1. Plug your computer into your router via a cable (of get on a computer that already has the WEP key installed and is connected)
2. Open your browser of choice (Firefox, Chrome, Safari). If this happens to be Internet Explorer…
   • STOP!
   • Turn off your device.
   • Run a nice cold bath.
   • Chuck it in

   You don’t deserve to use a computer!!!

3. Type the following into your web browser… http://192.168.1.1 or if that doesn’t work try http://192.168.1.254
4. A pop up box should come up asking for a username and password.. this is normally username: admin password: password.  If for some reason this doesn’t work go to http://www.routerpasswords.com/ to get your password.
5. Now once you have logged in you should see a category that says something along the lines of.. “Wireless Security” or sometimes just “Wireless” click on that and voila! there is your WEP Key.

note: there are occasions where the above addresses don’t work, if this is the case please add a comment and i’ll get you the relevant address.

Happy Hacking,

Mark