Articles about Hacking

Shocking crime surge – THE TRUTH: England, Wales stats now include hacking and fraud

Crime stats for England and Wales have shown a huge year-on-year increase. Don't panic, though: it's due to the inclusion of fraud and computer misuse offences for the first time. In a report published this week, the UK Office for National Statistics (ONS) reckoned there were 6.2 million reported incidents of crime in the 12 …
John Leyden, 20 Jan 2017
Super-villain Dr Evil puts finger to lip in scheming manner, asks for one million dollars. Pic: New Line Cinema

'Beeeellion-dollar' mastercrooks in hotel, restaurant blitzkrieg

The Carbanak cyber criminal gang is abusing Google’s infrastructure as a conduit for botnet control. The gang became notorious when it was blamed for the theft of one billion dollars from more than 100 banks across 30 countries back in 2015. Fast-forward two years and Carbanak is now infecting users via a script that will send …
John Leyden, 19 Jan 2017
id4_white_house_648

Trump inauguration DDoS protest is 'illegal', warn securobods

A software engineer is calling on netizens opposed to Donald Trump to visit the Whitehouse.gov site and overload it with traffic tomorrow. The call to mark inauguration day by "occupying" whitehouse.gov as a form of protest against Donald Trump’s presidency is likely to succeed only in getting participants into trouble, …
John Leyden, 19 Jan 2017
Squirrel

What's the biggest danger to the power grid? Hackers? Terrorists? Er, squirrels

Video For decades now people have been claiming that the power grid could be taken down by terrorists. However, simple statistical analysis shows that the biggest danger isn't online hackers, but squirrels – aka rats with good PR. Cris Thomas, a strategist at Tenable Network Security who goes by the moniker Space Rogue, has been …
Iain Thomson, 19 Jan 2017
Image by robodread http://www.shutterstock.com/gallery-529180p1.html

IPv6 vulnerable to fragmentation attacks that threaten core internet routers

A trio of 'net experts argues that a key IPv6 protocol needs fixing to get rid of a fragmentation attack vector against routers in large-scale core networks. The vector, called “atomic fragments” has long been regarded with suspicion by IPv6 security wonks. Here, for example, is a Black Hat 2012 presentation illustrating the …
Image by Sergey Nivens http://www.shutterstock.com/gallery-461077p1.html

Kill it with fire: US-CERT urges admins to firewall off Windows SMB

The US computer emergency readiness team is recommending organisations ditch old versions of the Windows SMB protocol and firewall off access to file servers – after a potential zero-day exploit was released by the Shadow Brokers hacking group. The call from the US security clearing house does not name the Shadow Brokers as …
Darren Pauli, 18 Jan 2017
shutterstock_206717503

French spies warn politicians of hack risk as election draws near

French authorities are warning political parties about the increased threat of cyber attacks as the country prepares to elect a new president in May. Last year's US presidential election was marred by cyber attacks and leaks. US intel agencies blame Russia for the hack1 and subsequent leak of sensitive emails and other …
John Leyden, 16 Jan 2017
1980 olympics weight-lifting champs. By RIA Novosti archive, image #484445 / Dmitryi Donskoy / CC-BY-SA 3.0

Windows 10 Anniversary Update crushed exploits without need of patches

Microsoft says its Windows 10 Anniversary Update squashes more exploit delivery chains than ever. The August updates brought in a series of operating system security improvements including boosts to Windows Defender and use of AppContainer, designed to raise the difficulty of having zero day exploits execute on patched systems …
Darren Pauli, 16 Jan 2017
Iwo Jima

US Marines seek more than a few good men (3,000 men and women, actually) for cyber-war

The head of the US Marines wants to recruit about 3,000 troops skilled in online warfare and espionage to make sure the Corps is ready for 21st-century battle. On Thursday, General Robert Neller told the Surface Navy Association's annual convention that he was looking to raise his numbers from 182,000 to 185,000 in the next …
Iain Thomson, 14 Jan 2017
Trump, photo by uplift the world via Shutterstock

Trump's cyber-guru Giuliani runs ancient 'easily hackable website'

US president-elect Donald Trump's freshly minted cyber-tsar Rudy Giuliani runs a website with a content management system years out of date and potentially utterly hackable. Former New York City mayor and Donald loyalist Giuliani was today unveiled by Trump's transition team as the future president's cybersecurity adviser – …
Darren Pauli, 13 Jan 2017

Shadow Brokers spew Windows hack tools after exploit auction flop

Security exploit peddlers Shadow Brokers announced their retirement on Thursday – and released 58 tools for hacking Windows PCs for free by way of a parting gift. The shady group is essentially giving up, and shoving malicious code – most of which is detected by Kaspersky and a few other antivirus makers – into the hands of as …
John Leyden, 12 Jan 2017

iPhone hacking biz Cellebrite hacked

The Israeli company that found fame when it was fingered as a potential source of hacking software used by the FBI to crack open an iPhone has itself been hacked. In a statement on its website, Cellebrite today admitted that an "external web server" containing the company's license management system had been accessed by an …
Kieren McCarthy, 12 Jan 2017

Brother-and-sister duo arrested over hacking campaign targeting Italy's bigwigs

A hacking operation featuring the EyePyramid trojan successfully compromised the systems of numerous high-profile Italian targets, including two former prime ministers, say Italian police. High-profile targets were targeted by a spear-phishing campaign that served a remote-access trojan codenamed "EyePyramid" as a malicious …
John Leyden, 12 Jan 2017

Crims shut off Ukraine power in wide-ranging anniversary hacks

Hackers of unknown origin cut power supplies in Ukraine for a second time in 12 months as part of wide-ranging attacks that hit the country in December. The attacks were revealed at the S4x17 conference in Miami in which Honeywell security researcher Marina Krotofil offered reporters some detail into the exploitation that …
Darren Pauli, 12 Jan 2017
Patrick McGoohan as The Prisoner in "Fall Out"

UK Parliament suddenly remembers it wants to bone up cyber security *cough* Russia *cough*

The UK parliament launched an inquiry into cyber-security on Tuesday. The investigation by MPs and peers follows weeks after the UK government committed to spending £1.9bn between 2016 and 2021 as part of an update to the UK’s National Cyber Security Strategy. Protecting critical national infrastructure organisations ( …
John Leyden, 10 Jan 2017
Mad Saudi

Because I'm bad, I'm bad, Shamoon: PC wiper tried to shut down Saudi snapshot defences

Security researchers have identified a second wave of Shamoon 2 PC-wiping attacks against a further target in Saudi Arabia last November. The new research shows hackers upping the ante and developing more sophisticated, multi-stage attacks. The original Shamoon attack hobbled the network of Saudi Aramco in 2012. Similar …
John Leyden, 10 Jan 2017
Statue of Liberty

NGO to crowdfund legal challenge against Investigatory Powers Act

Civil liberties advocacy group Liberty is seeking to crowdfund a judicial review of the Investigatory Powers Act. Liberty is launching the legal challenge following a landmark EU ruling in December which found that data retention had to be targeted and not practiced on a population-scale to be lawful. This is not the case …
typewriter_wtf_648

You have the right to be informed: Write to UK.gov, save El Reg

Reader appeal The government is about to commence a piece of legislation that will seriously affect The Register’s ability to Bite The Hand That Feeds IT. You have until 5pm today to tell the government it should be stopped. Most British readers will have seen news coverage about Section 40 of the Crime and Courts Act 2013. This is a …
Gareth Corfield, 10 Jan 2017

CIA director AOL email hacker coughs to crime

Justin Liverman, arrested by the FBI for breaking into the AOL email account of CIA director John Brennan, has today signed a guilty plea deal in the face of what his lawyers described as "draconian penalties." Brennan's webmail inbox was hijacked in 2015 and his emails were subsequently published by WikiLeaks. Liverman is …
Image by GTS http://www.shutterstock.com/gallery-519838p1.html

Netgear unveils world's easiest bug bounty

Netgear has broken ranks from the consumer router security shame factory to offer a bug bounty sporting extra rewards for chained exploits. Hoping to shake the SOHOpeless tag, the vendor will hand out up to US$15,000 for hackers reporting global remote unauthorised access from the internet to Netgear devices, and unauthorised …
Darren Pauli, 06 Jan 2017
St Petersburg Russia

Russia to convicted criminal hackers: 'Work with us or jail?'

Russia is reportedly letting convicted crackers take a seat in its offensive operations units, as an alternative to doing time. The effort, said to have started in 2013, saw at least one legitimate security professional flee Russia to seek asylum in Finland after he allegedly refused to help operate a distributed denial of …
Team Register, 05 Jan 2017
Couple in snorkelling gear at the travel agents... Comedy snap. Photo by Shutterstock

Travel booking systems ‘wide open’ to abuse – report

Updated Legacy travel booking systems disclose travellers’ private information, security researchers warn. Travel bookings worldwide are maintained in a handful of Global Distributed Systems (GDS) built around mainframe computers linked to the web but without adequate security controls, say the researchers. “The systems have since …
John Leyden, 04 Jan 2017
Netanel Rubin at Chaos Communications Congress 2016.

Hackers could turn your smart meter into a bomb and blow your family to smithereens – new claim

Smart meters are "dangerously insecure," according to researcher Netanel Rubin – who claimed the gear uses weak encryption, relies on easily pwned protocols, and can be programmed to explode. The software vulnerability hunter derided global efforts to roll out the meters as reckless, saying the "dangerous" devices are a risk …
Darren Pauli, 04 Jan 2017
passport

Xmas software update knackered US Customs computer systems

If you were trying to enter the US on Monday, queues were much longer than usual. That's because a Christmas software update borked the main computer systems used by US Customs and Border Protection (CBP). On Monday, the main passenger checking system used by CBP to check for undesirables trying to get into the Land of the …
Iain Thomson, 03 Jan 2017
Bitcoin, photo via Shutterstock

Bitcoin breaks US$1,000

Bitcoin has surpassed the US$1,000 mark for the first time in three years. The high water mark was breached Monday trading at US$1,019 at the time of publication. It follows a steady increase in the value of the crypto currency in recent months buoyed by China's devaluation of the yuan, the removal of high valuation bank …
Team Register, 03 Jan 2017
NYC

Trio charged with $4m insider trading by hacking merger lawyers

US prosecutors have charged three Chinese men with making more than $4m (£3.2m) by allegedly trading on information obtained from hacking top merger and acquisition law firms. The defendants are charged with targeting at least seven top international law firms with offices in New York, which advised companies on corporate …
Kat Hall, 28 Dec 2016

A year in infosec: Bears, botnets, breaches ... and elections

How often can we say that an IT blunder might have changed the course of world history? Hillary Clinton’s use of a private email server whilst serving as outgoing US President Barack Obama’s Secretary of State became a key element in the US presidential election this year. The FBI investigation around Clinton’s use of a …
John Leyden, 26 Dec 2016
Merry Christmas Australia

Australia's future technology headlines … for 2018!

Today's the last day anyone from Vulture South will show up for work until January 3rd. So while we're at the beach, cricket and bottom of a beer glass, we leave you with our almost-traditional prediction for technology news in the year after next Without any further ado, let's get into it. Google dodges Google Tax Australia …
Simon Sharwood, 22 Dec 2016

'DNC hackers' used mobile malware to track Ukrainian artillery – researchers

The Russian hacking crew controversially linked to hacks against the Democrat Party during the US election allegedly used Android malware to track Ukrainian artillery units from late 2014 until 2016, according to new research. Threat intelligence firm CrowdStrike reckons that mobile malware was used to harvest communications …
John Leyden, 22 Dec 2016

Netflix US Twitter account hacked

Netflix's US Twitter account was briefly hijacked on Wednesday. The feed was taken over by a hacking group, OurMine, who used the hijack to promote its website and invite Netflix to get in touch. The social media team running the Netflix US Twitter account, which has 2.5 million followers, got off easily. Previous account …
John Leyden, 21 Dec 2016
Amateur radio gear

Amateur radio fans drop the ham-mer on HRD's license key 'blacklist'

On Monday, The Register reported on the story of Jim Giercyk, an amateur radio enthusiast who had his copy of the popular Ham Radio Deluxe (HRD) software revoked after posting a negative review. Since our story was published, a number of Reg readers, including Giercyk himself and HRD's makers, have followed up with us …
Shaun Nichols, 21 Dec 2016

Strong non-backdoored encryption is vital – but the Feds should totally be able to crack it, say House committees

A bipartisan House working group on encryption has today come to the conclusion that encryption is vital to US national interests, even as it seeks to mitigate the problem the technology can pose for law enforcement. Citing the Federal Bureau of Investigation's effort earlier this year to force Apple to help the agency decrypt …
Thomas Claburn, 21 Dec 2016

Kingpin in $1m global bank malware ring gets five years in chokey

A villain at the heart of an organized crime network that stole £840k ($1m) from victims' online bank accounts has been jailed. Tomasz Skowron, 29, of Meredith Road, Worthing, England, was sent down for five years and three months on Monday at Croydon Crown Court, after pleading guilty to conspiracy to defraud, fraud, and …
Plane. Image via shutterstock

This is your captain speaking ... or is it?

Updated Vulnerabilities in Panasonic in-flight entertainment systems create a possible mechanism for attackers to control in-flight displays, PA systems and lighting, say researchers. Ruben Santamarta, principal security consultant at IOActive, said it had found vulnerabilities in Panasonic Avionic In-Flight Entertainment (IFE) …
John Leyden, 20 Dec 2016

Sports blog jocks to crypto-cash nerds – here's who got pwned

Two more websites say they have had user accounts sniffed by hackers. Sports blog network Bleacher Report says that someone may have accessed a database containing user email addresses and passwords, while blockchain development site Ethereum says that a hacker managed to get hold of a database backup that contained the …
Shaun Nichols, 20 Dec 2016
Auctioneer with hammer

Bayrob: Romanian auction fraud suspects extradited to the US

Three suspected cybercriminals have been arrested and extradited from Romania to the US over a multi-million dollar malware-facilitated scams. The suspects are believed to be members of a gang, nicknamed Bayrob by Symantec researchers, which allegedly earned a living from online fraud for nearly a decade. The indictment claims …
John Leyden, 19 Dec 2016
Very colourful For Sale sign (limited offer etc). Photo by Shutterstock

FYI! – Your! hacked! Yahoo! account! is! worth! $0.0003!

The hacked database containing the account details of more than one billion Yahoo! users is reportedly being sold for a meager $300,000. This according to a report by the New York Times, which spoke with researchers at US computer security biz InforArmor. Those eggheads claim to have knowledge of at least three groups – two …
Shaun Nichols, 19 Dec 2016
Photo by MediaGroupBestForYou / Shutterstock

'I told him to cut it out' – Obama is convinced Putin's hackers swung the election for Trump

Analysis Outgoing US President Barack Obama has promised to take action against Russia over its alleged interference in the presidential election campaign. American intelligence agencies have concluded that hackers linked to the Kremlin infiltrated the computer network of the Democratic National Committee as well as the email account …
John Leyden, 17 Dec 2016

Crim charges slapped on copyright trolls who filmed porn, torrented it then sued downloaders

More than a dozen criminal charges have been filed against Prenda Law lawyers, who are accused of using porno movies to extort millions of dollars from victims. Attorneys Paul Hansmeier and John Steele have each been charged in a US federal indictment with ten counts of wire fraud, five counts of mail fraud, and one count each …
Shaun Nichols, 16 Dec 2016
AVSWinvote box

US voting machine certification agency probes potential hack

The US agency charged with ensuring that voting machines meet security standards may have been compromised, according to evidence uncovered by cyber security firm Recorded Future. In a statement, the EAC confirmed it was investigating a potential breach. EAC has become aware of a potential intrusion into an EAC web-facing …
John Leyden, 16 Dec 2016
Rupert Murdoch pictured in 2014. Pic: Shutterstock

Murdoch's 21st Century Fox agrees £18.5bn Sky takeover deal

British broadcaster and phone service provider Sky is to be bought by Rupert Murdoch’s 21st Century Fox for £18.5bn, according to reports. The price reflects a valuation of £10.75 per share, according to Reuters, who, along with the BBC, claimed that some investors were unhappy with the valuation but did not go into specifics …
Gareth Corfield, 15 Dec 2016
Image composite Andreas Berheide https://www.shutterstock.com/gallery-584422p1.html

A single typo may have tipped US election Trump's way

A single typo from a Clinton campaign aide gave Russian hackers access to a decade's worth of emails, some 60,000 in total, owned by Clinton campaign chairman John Podesta. Clinton campaign aide Charles Delavan wrote in an email to one of Podesta's aides. later published by Wikileaks, that Podesta must "immediately" change his …
Darren Pauli, 14 Dec 2016
A group of people hold out mobile phones in a circle. Photo by Shutterstock

TalkTalk hacker gets iPhone taken away by Norwich Youth Court

The 17-year-old lad who confessed to hacking crimes against UK ISP TalkTalk was today slapped with a 12-month rehabilitation order and had his iPhone confiscated. The teen received the sentence, of sorts, at Norwich Youth Court, in east England, where chairman of the bench Jean Bonnick reportedly told the unnamed individual …
Paul Kunert, 13 Dec 2016

CIA: Russia hacked election. Trump: I don't believe it! FAKE NEWS!

President-elect Donald Trump has dismissed a report by the CIA claiming that there is proof that Russian government hackers smoothed his route to the White House. On Friday, representatives from the CIA told US Congress that it had evidence that the Russians had hacked the servers of both the Democrats and Republicans, but had …
Iain Thomson, 12 Dec 2016
Confidential on white screen in boardroom. Photo by Shutterstock

Top tech company's IP was looted by China, so it plans to hack back

360° Cyber Security Game The poster child for the green energy revolution is in ruins: its executives say they have hard evidence that China's People's Liberation Army stole its breakthrough technology before it could commercialise it. So now the company plans to hack back. The Prime Minister needed response options, so the head of state asked The …
Simon Sharwood, 12 Dec 2016
St Petersburg Russia

Germany warns Moscow will splash cash on pre-election propaganda and misinformation spree

Germany's intelligence agency has accused Russia of hacking its politicians and election systems under the guise of online activism. Federal Office for the Protection of the Constitution (BfV) chief Hans-Georg Maassen says Russia is intending to “weaken or destabilise the Federal Republic of Germany”. Germany's national …
Darren Pauli, 12 Dec 2016

Ransomware scum offer free decryption if you infect two mates

Ransomware scum are suggesting that victims infect their friends instead of paying for decryption keys. The ransomware variant "Popcorn Time", unrelated to the popular Bittorrent client by the same name, first tells users they have a week in which to pay one bitcoin (US$770) in order to have their files decrypted. The menace …
Darren Pauli, 11 Dec 2016

Russian hackers got Trump elected? Yeah, let's take a close look at that, says Obama

President Obama has bowed to pressure and announced a formal investigation into Russian hacking aimed at influencing the recent presidential election. White House spokesman Eric Schultz announced on Friday that the Obama administration would seek to have the report wrapped up before President-elect Donald Trump takes office in …
Kieren McCarthy, 09 Dec 2016
Q in James Bond

UK.gov state of the nation report: Infosec's very important, mmmkay

The UK government’s first annual report on the implementation of the 2015 National Security Strategy has reaffirmed that cyber-security remains a key priority. The 39 page report (pdf) lists cyber-security alongside Russia’s actions in Syria and Ukraine and terrorism as among the greatest threats Britain faces. The range of …
John Leyden, 09 Dec 2016

Moscow says writing infrastructure attack code is a thought crime

Malware writers whose wares are used by separate attackers to pop Russian national infrastructure could end up fined and in jail, if a new Russian bill become law. The bill (Number 47571-7, Russian) reported by local media threatens those involved in the manufacture of malware subsequently used in damaging attacks against …
Darren Pauli, 09 Dec 2016