But recently something interesting or dangerous for Iran’s security came to light when a hacker hacked Iran’s state-run broadcast channel. After hacking it a masked man appeared on screen followed by an image of Supreme Leader Ali Khamenei with flames around him.

The group called itself “Adalat Ali”, or Ali’s Justice.

This showed up when three people were shot dead when protesters clashed with security forces in new unrest over the death of Mahsa Amini. Mahsa Amini was arrested by the morality force for not wearing hijab properly, that is for covering their hair. After the Islamic revolution in Iran, it was compulsory for every female to cover their head. This represents nothing more than the patriarchal thought process of males.

The post Iran’s national security is on stake when a spooky masked man hacked the state run broadcast channel appeared first on The Tech Outlook.

Uber Technologies Inc. stated on Monday that it was a target of the Lapsus$ group, which got access to the company’s internal systems and posted messages to employees, including a graphic image. Some hacking groups use malware or steal data, such as credit card numbers or social security numbers, and then sell it. Others are backed by the government and attempt to extort corporate secrets or conduct espionage.

Lapsus$ is a nebulous team that hides behind anonymous online aliases, but members of the group have left enough digital breadcrumbs for law enforcement and private researchers to identify some of them. According to security researchers and law enforcement officials, the group likely includes members from Brazil and the United Kingdom, with several of them being teenagers. It has developed a set of techniques that, while not technically sophisticated, have proven to be devastatingly effective at breaking into some of the world’s largest technology companies in its short history.

Many of these threats target on the systems that businesses have put in place to function effectively in an era of remote work, such as company help desks and systems used to reset passwords and remotely control corporate networks.

The hacking group, Lapsus$, has targeted firms including Nvidia, Microsoft Corp, and Okta Inc, an authentication services company relied on by thousands of major businesses.

In Uber’s case, the attacker most likely bought a username and password that actually belonged to an Uber contractor on the dark web after it was stolen from the contractor’s computer via malicious programs, the company said in a blog post on the incident on Monday. The hacker then attempted to log into Uber’s networks using these credentials.

Because Uber requires a “two-factor authentication,” “login, these attempts resulted in messages being sent to the contractor’s phone asking if they were really attempting to log in. This initially stopped the attack, but the hacker did not give up and continued to make the requests. “The contractor eventually accepted one, and the attacker successfully logged in,” “Uber stated.

The post Uber a target of an international group of hackers, Lapsus$ group appeared first on The Tech Outlook.

According to a tweet shared by CyberKnow, Anonymous Russia is now threatening Pentagon. The Pentagon serves as the headquarters for the United States Department of Defense. During World War II, it was built on an expedited schedule. The phrase The Pentagon is frequently used as a metonym for the Department of Defense and its leadership as a symbol of the United States military.

#anonymousrussia attempting to threaten the pentagon seems bold.#cybersecurity #infosec #RussiaUkraineWar #UkraineRussiaWar pic.twitter.com/q7zgW7n7W4

— CyberKnow (@Cyberknow20) September 19, 2022

The reason for this is most likely due to the sanctions imposed on Russia for attacking Ukraine. Sanctions are penalties imposed by one country on another to deter aggressive behavior or violations of international law. They are among the most difficult actions that nations can take short of going to war. Western countries have targeted wealthy individuals, banks, businesses and state-owned enterprises.

The post Hacktivist group ‘Anonymous Russia’ is now attempting to pose a threat to the Pentagon appeared first on The Tech Outlook.

A threat actor is anybody who potentially damages cybersecurity. They are the key driver of malicious actions targetting against any organization or company. Aoqin Dragon attacks the cybersecurity space by getting access primarily through exploitative documents or fake removable devices. According to SentinelOne’s researcher Joey Chen’s report in The Hacker News, “Other techniques the attacker has been observed using include DLL hijacking, Themida packed files, and DNS tunneling to evade post-compromise detection.”

Aoqin Dragon has been evolving in their tactics to target the cybersecurity space. It has also advanced to three distinct infection chains according to the reports by SentinelLabs. Between 2012 and 2015, it exploited vulnerable documents from Microsoft Office. These tactics were observed by FireEye in 2014 in a gear-phishing campaign organized by the Chinese-backed Naikon APT group targeting an APAC government entity and the US think tank.

The second infection method is processed by masking its malicious attempts in the form of anti-virus icons. So, they seem like believable anti-viruses in an effort to trick new users into launching them on their devices.

In their third infection method from 2018 till now, it has turned into removable disk shortcut files. It performs DLL hijacking and loads an encrypted backdoor payload upon clicking.

The evolution of Aoqin Dragon’s cyber-espionage operations is believed to be of Chinese-government’s political interest.

The post How threat actor Aoqin Dragon has initiated cyber-espionage for decades appeared first on The Tech Outlook.

1. Adrain Lamo

Adrián Alfonso Lamo Atwood, an American threat analyst and hacker. Lamo first gained media attention for breaking into several high-profile computer networks, including those of The New York Times, Yahoo!, and Microsoft. When he broke into the New York times server in 2002, he gained access to the personal data of 3000 people who had contributed to the news agency’s Op-Ed column. In 2003, he was arrested and sentenced to two years of probation and fined $65,000 dollars.

2. Vladimir Lenin

Vladimir Leonidovitch Levin is a Russian hacker known for his involvement in the attempt to fraudulently transfer USD 10.7 million via Citibank’s computers. The most interesting fact about the hack was that he never used the internet to execute his hack. He tapped into the telecommunications server and simply listened to customers giving out their personal information to the bank.

3. Albert Gonzales

Perhaps the biggest such fraudster in history, Albert Gonzales is an American computer hacker and computer criminal who is accused of masterminding the combined credit card theft and subsequent reselling of more than 170 million card and ATM numbers from 2005 to 2007. He is currently serving his criminal sentence of 20 years in federal prison.

4. Gary McKinnon

Gary McKinnon, hacker and a Scottish systems administrator. In 2002, the hacker was accused of perpetrating the “biggest military computer hack of all time”. He was able to gain access to 97 American military networks, and reportedly left them a message as well, that read:  “Your security is crap.” While the US has tried to extradite him, he remains in the UK’s asylum.

5. Kevin Poulsen 

Kevin Lee Poulsen is an American former black-hat hacker. According to the New York Times, to ensure he won a prize from the radio, Poulsen hacked into Los Angeles’ phone network. In what is known as one of the greatest hacks of all time, when a programme displayed a number on the screen to call if they had information about him, all the phone lines of the programme went instantly dead.

The post Hacking Attacks: The Most Infamous Hackers of All Time appeared first on The Tech Outlook.