Issuu

1 st

Anni ve r s ar y THN

TheHackerNews

l a i r o t i d E umar K t i Moh : f e chi l n i r o t Gale i t t Edi a or:P t i d E

I nNovemberof2010t het eam atTheHackerNewsf i nal l yachi eved ourul t i mat egoalof l aunchi nganonl i nemagazi neaddr essi ngt het r i ckyandcompl i cat edwor l dofhacker sand hacki ng.I nourf i r styearTheHackerNewsmadeourf ai rshar esofmi st akes,t ypi caloff i r st t i me publ i sher s,butoursuccesses have been i nnumer abl e and The HackerNews has r eachedmanyofi tgoal si nt hi sof t enhect i candexci t i ngf i r styear .TheHackerNewswasf or t unat eenought ohaveassembl edadedi cat edandpr of essi onal t eam t hati nt r i nsi cal l yunder st oodt hati ti snotenought ohopet osucceed;youhavet opl ant osucceed.AndIam gr at ef ul t oeachandever yoneoft heset al entpeopl et hatunder st oodt hi sconceptandhel pedi mpl ementi tdai l yt ohel pi nsur eoursuccess. Ast hemai nst r eam medi aof t endeni gr at escomput erhacker sasnot hi ngmor et handi gi t al pr ankst er s,weatTheHackerNewsbel i evet hatmanyoft hesecol l ect i vehackergr oupshave t hepowert ochanget hewor l df orgood.I ni t sf i r styearTheHackerNewswant edt ohavea f r ontr ow seatsowecoul dbr i ngt oyou,ourr eader s,t hewor l dofhacker sandwebr evol ut i onar i esandt obeabl et ogi veourr eader samuchcl ear eri deawhot hesei ndi vi dual sar e, andt odi gmor edeepl yi nt ot hi sgr owi ngsubcul t ur e. Asweent eroursecondyearTheHackerNewst eam woul dl i ket o“ ThankYou”ourr eader s, f oryourcont i nuedl oyal t yandposi t i vei mput e.Becauseofyou,ourt eam r emai nsexci t edan ener gi zedt ocont i nuebr i ngourr eader st hemostupt odat ei nf or mat i ononhacki ngand hacker s.We atThe HackerNewsunder st andst he i mpor t ance ofr epor t i ng on hacki ng gr oupst hatf ocusont heet hi cal l ywr ongsi nsoci et ysuchasunr egul at edcor por at epower , secr et i vegover nment ,andi nvasi onofpr i vacy.Weagr ee~“ TheRevol ut i onwi l lnotbeFi r ewal l ed”

“ Tr ut hi st heMostPower f ulWeaponAgai nstI nj ust i ce. ”

Cel ebrat i ng stAnni versary

TheHackerNews

I thasbe e nawonde r f ul “ HACK”f i l l e dy e araswedi s s e mi nat e ds e c ur i t y andhac ki ngi nf or mat i onar oundt hewor l d.Wear egr at e f ulf orour l oy alr e ade r s hi pandwe l c omene wr e ade r sandc ont r i but or s . Le t ’ sf ac ei t .Hac ki ngi s n’ tgoi ngawayandgr owi ngs e c ur i t yc onc e r ns ar eani s s ueweal lne e dt os t ayont opof .Be i ngi nf or me daboutt he l at e s tandne we s ti ns e c ur i t yme as ur e sandt hewor kofhac ke r st o br e aki nt ot he s eme ansi sagl obali s s uewi t ht r e me ndousc ons e que nc e s . Hac ki ngands e c ur i t yv i ol at i onsaf f e c tusal l .Notonl ybi gc or por at i ons whi c hs t or ey ouri nf or mat i onbutt hehe al t handwe l f ar eofy ourpe r s onalPC’ s .

TheHackerNewshast r ac ke dt hee v e nt soft hel as ty e arandwear e amaz e datt het al e ntandf i ne s s eoft e c hype opl ewhoc anbr e aki nt ot he mos tc ompl i c at e dands ophi s t i c at e ds y s t e ms .Youc ande pe ndonus f orbr e aki ngne wsi nt hear e aofc omput e rs e c ur i t y .Ke e pr e adi ngand ke e pc he c ki ngourdai l ywe bne ws . I nc as ey oudi dnotknow,TheHackerNews( THN) ,f i r s te s t abl i s he di n201 0,hasbe c omeal e adi ngr e s our c ei npr ov i di ngi nf or mat i onandr e s our c e st os e c ur i t ye xpe r t sandhac ke r swor l dwi de .I ni t i al l y be gunasaCy be r Awar e ne s sPr ogr am,TheHac ke rNe wshase v ol v e d t owor kc l os e l ywi t handwi t hi nt hec y be rs e c ur i t yc ommuni t i e si nan e f f or tt omaket hei nt e r ne tmor es e c ur e .Wehav ewor ke dwi t hv ar i ous or gani z at i onst omanaget he i rs e c ur i t yr i s ksands e c ur et he i ri nf r a s t r uc t ur ebyanal y z i ng,de s i gni ngandi mpl e me nt i ngt hebe s tc os t e f f e c t i v es e c ur i t ypr oc e s s e s . I naddi t i ont opr ov i di ngupt odat ene wsandr e s our c e s ,TheHac ke r Ne wsnow pr ov i de sEt hi c alHac ki ngTr ai ni ng,Wor ks hops ,Se mi nar s , Se c ur i t yTe s t i ngSe r v i c e sandSe c ur i t yCe r t i f i c at i onsatourongr ound i ns t i t ut i oni nI ndi a. Thi sc us t omi z e dandr i gor ouspr ogr am of f e r sc ompr e he ns i v epr ac t i c alandadv anc e dt r ai ni ngwhi c hc anope nupabr oad s pe c t r um ofc ar e e roppor t uni t i e si nt he i nt e r nat i onalI Ts e c ur i t y mar ke t . THNi sde di c at e dt omaki ngy ourl e ar ni ngav al uabl ee xpe r i e nc ebye nhanc i ngt hede pt h ofy ourknowl e dget hr ough r e al t i me ,hands on wor ke xpe r i e nc e .Gui de dbyat e am ofpr of e s s i onal sandf ac ul t y ,y ou wi l lbef ac e dwi t hr e alI Tr e l at e dpr obl e msands c e nar i os .The s ev al uabl es ki l l swi l lhe l ppav et hewayf ory ours uc c e s si nt hef i e l dofi nf or mat i ons e c ur i t y . Webe l i e v et hatknowl e dgegr owswhe ns har e d.Wewantt os har ei tal l wi t hy ou. Thanksf oraGREATy e ar !He r e ’ st oourne xt ………. Mohi tKumar

How andwhyhast heOc c upyWal lSt r e e tmove me ntde ve l ope dands o r api dl ybr oade ne dt onowi nc l udet hous andsofc i t i e sandpe opl e st hr ough t hewor l d? Whyar et hepe opl eoft hewor l dnowc oal e s c i ngi nway st hats e e me duni magi nabl ej us taf e ws hor ty e ar sago?I ns pi r e dbyt heupr i s i ngsac r os st he Ar abwor l d;down t r odde n pe opl ewor l dwi dear ei de nt i f y i ngwi t ht he Oc c upyWal l St r e e tmome ntandar ebr e aki ngf r e eoft he i rf e e l i ngsofpowe r l e s s ne s sandc onf r ont i ngt hef i nanc i ali ns t i t ut i onswi t hde mandst hat r e f l e c t sl e gi t i mat e , l ongs t andi nggr i e vanc e sofbas i cunf ai r ne s sandi nj us t i c e s . TheOc c upyWal lSt r e e tmove me nti sde f i ni t e l yape opl e powe r dr i ve n move me ntt hathass wi f t l ys pr e adt owe l love r1 00c i t i e si nt heUni t e d St at e sandnow hasac t i veac t i onsi nove r1 , 500 c i t i e swor l dwi de ,and gr owi ng.

Soc i alme di at ool smayal s ohe l pe xpl ai nt hede mons t r at i ons ' r api dpr ol i f e r at i on asac t i vi s t sf r om ar ound t hegl obear eor gani z i ngt he ms e l ve s t hr ought heI nt e r ne tands oc i alne t wor kss uc hasFac e bookandTwi t t e ri n aj oi nte nde avort opr ot e s tt hec r i ppl i nggl obale c onomi cc r i s i sandhol d pol i t i c i ansandbanke r sr e s pons i bl e .Nott ome nt i onourbe l ove dAnony mous .Webe l i e veAnony moushashe ar dt heme s s aget hatt he yar eoneof t hes t r onge s twar r i or si nt hi sgl obalbat t l eoff r e e dom f orpe opl eandhave he l pe dt akeupar msvi at e c hnol ogyagai ns tt hec or r upt i onandmay he m of gove r nme nt swor l dwi de .The yhavebe e nabl et omovepe opl ef r om t he i r c omput e r st ot hes t r e e t swhe r ewebe l i e veas t r ongpr e s e nc ene e dst obet o " s how"gl oball e ade r swear enots t upi dandi gnor antf ol l owe r sbuthi ghl y i nt e l l i ge nti ndi vi dual swhoar es i c kandt i r e dofbe i ngdupe dbymone y , gr e e d,andc or por at es ul t ans . I ti snowpl ai nl ye vi de ntt he yt he s egl obal i z e df i nanc i al i ns t i t ut i onsar er e s pons i bl ef orc r e at i ngt het e r r i bl ee c onomi char ds hi pands t r uggl e swor l dwi de .Or di nar ype opl ear oundt hewor l dar ede al i ngwi t ht hede t r i me nt al e f f e c t soft hegl obal i z e df i nanc i als y s t e m.The yar es t ar t i ngt os e ec l e ar l y how t heobs c e ne l y we al t hy f i nanc i alol i gar c hshavegai ne di mme ns e powe rove rt hepol i t i c ale c onomyandhow t he ymani pul at ei tt os e r ve s onl yt hebi gmone y e di nt e r e s t s .Themul t i t ude sar eawake ni ngt ot hes ad f ac t st hatt he i re l e c t e dof f i c i al sar enot hi ngmor et hanboughtands ol dpol i t i c all ac ke y st hatdot hebi ddi ngoft he i rwe al t hymas t e r s .Thepe opl ear e nowf ac i ngt hef ac t st hatt he i rpol i t i c all e ade r shaver obbe dt he m andnow wantt oi mpos ef i s c alaus t e r i t yme as ur e son t he m whi l er e s c ui ngt he bankswi t houthol di ngt hebanksr e s pons i bl ei nany wayf oral lt hes uf f e r i ngandhar ds hi pt he yc aus e d. Wi t haf e ws i mpl ef ac t si ti se as yt ounde r s t andwhyt heOc c upyWal l St r e e tpr ot e s t e r sar eangr yandwhyt hemove me nthass pr e adr api dl yand wor l dwi de . I ne qual i t yi nt heUni t e dSt at e sandot he rc ount r i e shashi tal e ve l ofi mbal anc et hathasbe e ns e e nonl yonc ei nUSandgl obalhi s t or y .I naddi t i on, une mpl oy me nthasr e ac he dl e ve l st hathavebe e ns e e nonl yonc es i nc et he Gr e atDe pr e s s i on.

Cl os et of oury e ar saf t e rt hef i nanc i alc r i s i s , t heune mpl oy me ntr at ei ss t i l l att hehi ghe s tl e ve ls i nc et heGr e atDe pr e s s i onandj obsar edi f f i c ul tt o s e c ur eandc ont i nuet obel i mi t e d.Cor por at epr of i t sasape r c e ntoft he e c onomyar eatar e c or dal l t i mehi gh,andunbe l i e vabl y ,CEO payhas s oar e d300% s i nc e1 990andc or por at epr of i t shavedoubl e d.Whi l eCEOs ands har e hol de r shavebe e nc as hi ngi n, wage sasape r c e ntoft hee c onomy havedr oppe dt oanal l t i mel ow.Thet op1 % ofAme r i c anwagee ar ne r s c ont i nue st ohauli nt hel ar ge s tpe r c e nt ageoft hec ount r y ' st ot alpr e t ax i nc omet hanatanyot he rt i mes i nc et hel at e1 920s .Af t e radj us t i ngf ori nf l at i on,ave r agehour l ye ar ni ngshave n' ti nc r e as e di n50y e ar sandt he mi ni mum wagehasdr oppe d.I nf ac t ,i nc omei ne qual i t yhasgot t e ns oe xt r e mei nt heUSt hati tnowr anks93r di nt hewor l di n" i nc omee qual i t y . " Andt he nt he r ei st hegl ar i ngi ne qui t yoft axe s ;i t ’ saf abul oust i met omake at onofmone yi nAme r i c a,be c aus et axe sont henat i on' shi ghe s t e ar ne r s ar ec l os et ot hel owe s tt he y ' vee ve rbe e ni nhi s t or ywhi l et her e s toft he c ount r ys t r uggl e swi t hi t s9% une mpl oy me ntr at e . I fAme r i c aandot he rwor l dgove r nme nt sc annotf i gur eoutorwi l lnotf i nd awayt oaddr e s st hegr i e vanc e soft heOc c upyWal lSt r e e tpr ot e s t or st he n i ti smor et hanl i ke l yt hatt he i rc ount i e swi l lbe c omei nc r e as i ngl y" de s t abi l i z e d”I nhi s t or yt hebal anc ebe t we e n" l abor "and" c api t al , "hasr ar e l y ,i f e ve r ,f oundi t ss e l fatt hepoi ntwhe r e“ c api t al ”i ss oc l e ar l yi nc ompl e t e c ont r ol .I fnot hi ngc hange st hi si mbal anc et he nt hec ur r e ntpr ot e s t swi l l l i ke l ybeonl yt hebe gi nni ngandde t e r i or at i onandc ont i nue dde s t abi l i z at i onc anonl ybet hepr e di c t e dout c ome .

DUQU -Anot herSt uxneti nt heMaki ng?

Bar e l yay e ari nt odi s c ov e r i ngSt uxne t ,t hewor l dr e c e nt l ys awi t spowe r f ulv ar i anti nt hef or m ofDuqu.I ti sbe l i e v e dt hataHungar i anbl ogge rwast hef i r s tt ohav eat r y s twi t ht hev i r usi ne ar l ySe pt e mbe ratan I SPhos t i ngs e r v i c e .

W hyi ti si mport ant :Duquhasgai ne dal otofat t e nt i onbe c aus eof s t r i ki ngs i mi l ar i t i e swi t hi t sf amouspr e de c e s s or , St uxne t . Se v e r al Se c ur i t yr e s e ar c he r shav ec onc l ude dt hat99pe r c e ntofDuqus of t war er ul e s ar es ameasSt uxne ti nc l udi ngs our c ec odeandke y sf ore nc r y pt i on. The r ei sr e as onabl ee v i de nc ebyt hatt hedamagec aus e dbySt uxne twas r e al .He nc e ,Duqui sofc onc e r nt oe v e r ys e c ur i t ypr of e s s i onalatt he mome nt .

How i tf unct i ons:Duquc amouf l age si t sowndat abe hi ndnor mal we bt r af f i ct oav oi ds us pi c i onf r om ne t wor kadmi ni s t r at or s .Thi si nf or mat i oni st he ns e ntov e rt oar e mot ec ommandandc ont r ols e r v e r( CC s e r v e r )us i nght t pr e que s t .Thes e r v e rr e s pondswi t h abl ank JPG i mage , i nr e s pons et owhi c h, Duqus e ndsbac kani mageappe nde dwi t h e nc r y pt e ds t ol e ni nf or mat i on.TheI Paddr e s soft heCCs e r v e rus e df or t he s ei ni t i alope r at i onswas206. 1 83. 1 1 1 . 97andwast r ac ke dt oI ndi a. TheCCs e r v e rhasbe e nde ac t i v at e ds i nc et he n. TheTr oj anhor s e ,unl i keSt uxne t ,i sabl et or e c or dke y s t r oke s ,c ol l e c t v ar i ousde t ai l sofs y s t e m whi c hi st he ne nc r y pt e dandappe nde dt oan i magef i l e .Thedat amays i mpl ybec onf i gur at i onandde s i gndat af r om t hes y s t e ms ,pr e s umabl yt oal l ows ome onege tc ompe t i t i v eadv ant age . TheTr oj anhasbe e nc onf i gur e dt or unont hehos tmac hi nef or36day s , af t e rwhi c ht het hr e atv e c t orwi l laut omat i c al l yde s t r oyi t s e l ff r om t he s y s t e m.Howe v e r ,addi t i onalc ompone nt ss e ntf r om t heCCs e r v e rc an e xt e ndt hel i f ebe y ondt hi st i mepe r i od. Purpose:Duquappe ar st obef oc us i ngon dat ami ni ngr i ghtnow, s c out i nghos tmac hi net ogai ni nf or mat i onorf e at ur e saboutt hee nv i r onme nt .Ther e alpur pos eofs pr e adi ngt heTr oj anhasbe e nobs c ur e andt hedat ac ol l e c t i onmayj us tbeani ni t i als t ageofal ar ge rs e t up.

Compl exi t y:The r ei snot hi ngnov e laboutt heat t ac kv e c t orandi tc an bes af e l yas s ume dt hatt hec r e at oratl e as thadac c e s st oSt uxne tc ode . Onc eac e r t ai npi e c ei si nc i r c ul at i on, ot he r sbui l duponi t . Andt hi smay bet hec as ewi t hDuqu.Duqul i keSt uxne t ,us e sas t ol e ndi gi t alc e r t i f i c at ef r om aTai wane s ec ompanyt opr ov ei t saut he nt i c i t y .Al s o,Duqu c oul dnâ€™ thav ebe e nar oundf ort ool ongs i nc et hedr i v e rs i gndat ehas be e nr e c or de dt obeJul y201 1 .The r ei sal s oal i ke l i hoodoft hes ame t e am be i nge mpl oy e dt oc r e at et heSt uxne tv ar i ant .Li ket heSt uxne t , Duqut ooi saSt at es pons or e dat t ac k, s i nc enoot he rpar t ywoul de ngage i nanac t i v i t yt hatr e qui r e sampl et e c hni c alc al i be rbutbr i ngsnoobv i ousmone t ar ybe ne f i t .

Ot her Theori es:Var i oust he or i e sar ef l oat i ng ar ound aboutt he mot i v e and or i gi n ofDuqu.One oft he i nt e r e s t i ng one si s by @r e v e r s e modeont wi t t e r .Ac c or di ngt ohi m,oneoft hegal axypi c t ur e s c ome sf r om 66. 49. 1 41 . 227,whi c hs ugge s t sahe br e wc onne c t i onwi t h Duqu.I nt hepas twe e k,af e wmor ev ar i ant shav ebe e ndi s c ov e r e d,but notmuc hc anbes ai daboutt he m asi tt ooe ar l y .

Anal y s i s :Duqugi v e st hei mpr e s s i onofs ome t hi ngmuc hbi gge rc omi ng upt hanwhatme e t st hee y e .I ti sal s oi nt e r e s t i ngt onot et hatt het e c hni que sus e dt ode pl oyt he s eat t ac ksar enots t at eoft hear t . Thede pt hof i nf or mat i ont hatc anbee xt r ac t e dus i ngDuqui snodi f f e r e ntf r om what St uxne tc oul ddo.Ne i t he ri si tanymor es ophi s t i c at e df r om whatwe hav es e e nwi t hAur or a.The ywe r ei nt r i gui ngbe c aus eoft hec omi ngt oge t he rofapos s i bl yde s t r uc t i v eope r at i onoft he i rs t at ur e .Buti t â€™ snot t hes amewi t hDuqu.Apar tf r om t hec ompl e xi t i e si ts har e swi t hi t s pr e de c e s s or ,Duquc r e at or shav eal s ous e dage ol dt e c hni que sâ€“bad pas s wor dpol i c y ,us eofUSBdr i v eout s i deofwor kandt hel i ke st oai d s pr e adt hev i r us .Sowhati si taboutt hi st r oj anv i r ust hati sc at c hi ng e v e r ye y e bal l ? Duqube ar st e s t i monyt ot hebe gi nni ngofane r awhe r ec y be rwarwi l l gr owbi gge rt hannuc l e arandt hel i ke s . I ti snott hatwewe r ec aughtunawar eofnat i ons t at e se s pi onagepr ogr amst hi st i me . I ti st hef r e que nc y wi t hwhi c ht he ywe r edi s c ov e r e dc or r obor at e st het he or yt hatf ut ur e wi l ls e eas t e e pr i s ei nc y be r c r i me .De al i ngwi t ht hi si sgoi ngt obea maj orf oc usf oramaj or i t yofuss e c ur i t ypr of e s s i onal s . ________________________________________________ AboutAut hor:Ni dhi Ras t ogi i saCy be rs e c ur i t ypr of e s s i onal bas e di n Ne w Yor k.Shehasov e r7y e ar sofe xpe r i e nc ei nav ar i e t yofr ol e si nc l udi ngwi r e l e s ss e c ur i t y ,mobi l ede v i c e s ,andappl i c at i onde v e l opme nt atc ompani e sl i keVe r i z onWi r e l e s s ,GE Ene r gy ,andLTI .Ni dhii sa gr aduat e of Uni v e r s i t y of Ci nc i nnat i and c an be c ont ac t e d at ni dhi . gupt a@gmai l . c om

Adoomsdayworm :TheSput ni kof201 1

Thi si sat he or e t i c alpr i mat obr i ngoutadi s c us s i onaboutwhe t he ranI nt e r ne tdooms daywor mc anbec r e at e dt hati ss oi nt r ac t abl et hati tc annot bee r adi c at e d.Thi swor mc oul dal s ohav et heabi l i t yt oc ar r ymul t i pl e we aponi z e dpay l oads .

Canadooms daywor ms hutdownt heI nt e r ne t ?Idon' tt hi nkany one c oul ds hutdownt heI nt e r ne tbutIbe l i e v eawor mc ande f i ni t e l yc r e at e ac c e s spr obl e ms .Ani nt r ac t abl et y peofmal war eage nti snotanabs t r ac t c onc e ptors c i e nc ef i c t i on.

Adooms dayl i kev i r ushasbe e npl agui ngt heU. S. Dr onef l e e t .The yke e p t r y i ngt odi s i nf e c tt he i rhar ddr i v e sbuti tke e psc omi ngbac k.ThePe nt agonhasbe e npl ague dbyt hewor m age nt . bt z ;t he yar es t i l lt r y i ngt o r e mov ei taf t e r3y e ar s . Someanal y s tt hi nkage nt . bt zwasc r e at e dby Chi na. TheDr one â€™ shi ghl ys e c ur epc â€™ sandne t wor ksar enotc onne c t e dt o t hei nt e r ne t .Thei nf e c t i on wasi nt r oduc e d bymobi l eme di al i kez i p dr i v e sandc ds .

Le t ’ sputt oge t he rt hebe s tas pe c t sofwor msandbi ol ogi c ali nf e c t i ous age nt s .

TheAI DSv i r ushasc onf ounde dme di c als c i e nc ef ornumbe rofy e ar s .I t s e e mst obeoneoft hemos ts uc c e s s f ulv i r us e si nmode r nhi s t or y .Fr om t hear t i c l e“ WhyDi s e as e sSuc h AsAI DS Ar eSo Suc c e s s f uland So De adl y : ”“ Ce l l t oc e l lt r ans mi s s i oni sat hous andt i me smor ee f f i c i e nt , whi c hi swhydi s e as e ss uc hasAI DSar es os uc c e s s f ulands ode adl y , ” wr i t e sMot he s .“ Andbe c aus et her e t r ov i r us e sar eal r e adyi nc e l l s ,t he y ar eoutofr e ac hoft hei mmunes y s t e m. ”

Thes t at e me nt ,“ Ce l l t oc e l lt r ans mi s s i oni sat hous andt i me smor ee f f i c i e nt ”i st hebe s tanal ogyt os oc i al ne t wor ki ngs i t e st hathav et hegr e at e s t t r ans mi s s i ont hr oughput . Ont hes e c ondl i ne ,“ The yar eoutoft her e ac hoft hei mmunes y s t e m, ” c ompar e si fy out akeac or por at i onwi t h1 , 000node st hatar ei nf e c t e di t ’ s e as yf ordat as e c ur i t yt opus hdownas ol ut i onandr e mov et hewor m. The PCst hatar eac t ual l yout s i det hei mmunes y s t e m ar eal mos tal way shome PCs ,i Pods ,Andr oi dphone s ,ands mal lne t wor kPCgr oups .

Whate l s ec anwel e ar naboutabi ol ogi c almode l ?I fy ouwal ke di nt ot he mi ddl eofc r owde dr oom andas ke di fany onekne w Mar yMal l on or Gae t anDugas ,y ou’ dpr obabl yhav eal otbl anks t ar e s .Gae t anDugaswas t heAI DSpat i e ntz e r o,andMar yMal onewast hei nf amousTy phoi d Mar y .The ys har es omes i mi l ar i t i e st hathe l pe dt he mt oi nf e c tal otof pe opl e . The yappe ar e dhe al t hyanddi dnothav eanyout war ds i gnsofany he al t hi s s ue s .

Thege s t at i onpe r i odf orAI DSwasmor et han1 0y e ar sandDugasi nf e c t e dal otofme ndur i ngt hatt i me .Mar yMal l onwasac ook.Shehandl e d f oodandut e ns i l s ,andatonet i me ,s hewor ke di nahos pi t al .Mar ys he wasac ar r i e roft y phoi dbutdi dnotge ts i c k.Someoft he s ei de asc oul d bui l dagoodmode lf orawor m.

Wi t ht he above and whatIknow ofmal ware,l et â€™ sbui l da model : 1 )I twoul dhav et oope r at ei nt henoi s el e v e loft heI nt e r ne t . 2)I twoul dhav et obe hav easaWe bCr awl e rors pi de rt os t ayof foft he r adarofmal war ec ompani e s .

3)I twoul dhav et oi nf e c ti t shos t swi t hmi ni mal di s c omf or t ;t hati s , mi ni mal l ys l owt he m downori tmakei tappe arasi fi twasnotat y peofmal war et hats ome bodywoul dwantt aket hee f f or tt or e mov e . 4)I twoul dhav et oi nf e c tv e r ys l owl y . 5)I twoul dhav et obes e l f awar e â€”i twoul dhav et or e c ogni z ei t s e l ft r y i ng t or e i nf e c tahos t . 6)A mode lwoul dhav et obebui l tf ori tt oj udgehow i t sgr owt hr at e woul dhav et obe modul at e d.

7)AI DShadage s t at i onofupt o1 0y e ar s .Age s t at i ont i meont heI nt e r ne tofonl yoney e arwoul dbeani nc r e di bl yl ongt i me . 8)Thewor m woul dhav et obemodul are nought ot akedi f f e r e ntpay l oads . 9)I twoul dhav et ot r yt oj us ti nf e c thomePCs . HomePCshav ebe e nde l uge dwi t hs t r angemal war eandbogusant i v i r uspopupads .Re c e nt l y , Mi c r os of tt r i e dt oi s s ueamal war es ol ut i on.Thi sant i mal war ef l agge d Goggl eChr omeasaTr oj an, andac t ual l yr e mov e dGoggl eChr omef r om a numbe rofPCs . 1 0)I tmayal s oc ont ai nc odet owr i t et opl ac e sonhar ddr i v e st hatar e nor mal l yi nac c e s s i bl et oant i mal war epr ogr ams . 1 1 )I twoul dhav et os e l fmor ph,i twoul dhav et oe v ol v e . 1 2)Beabl et opr e s e ntdi f f e r e nts i gnat ur e st oant i mal war e . 1 3)I twoul dhav et obeabl et ot ar ge ts pe c i f i cI Paddr e s s e s . 1 4)I twoul dhav et or e ac hac e r t ai nc r i t i c almas sbe f or er e v e l i ngi t s e l f .

W hatki ndofweaponwoul dt hi sdoomsdayworm be?

De pe ndi ngonpay l oad,i tc anhav emul t i pl eobj e c t i v e s .Fore xampl e, i t c anbeaps y c hol ogi c al ,f i nanc i alorpol i t i c alwe apon.Todaype opl ear e addi c t e dt ot hei nt e r ne tf orf ac ebookand ot he rs oc i als i t e s .Pe opl e de ni e dt he i rdai l yi nt e r ne tf i xwoul dbemor eanxi ousandde pr e s s e d.As apol i t i c alt ooli tc ans l owdownt hei nt e r ne tr i ghtbe f or eane l e c t i on. The i nc umbe ntpar t ywi l lr e c e i v emos toft hebl ame .Todaymanype opl eus e t hei nt e r ne tf ort he i rf i nanc i alt r ans ac t i ons .Se l l i ngs t oc kt r ans f e r r i ng mone ye t c .anydi s r upt i onont hei nf or mat i ons upe rhi ghway .Sl owi ng downt hei nt e r ne tdur i ngf i nanc i almar ke tv ol at i l i t yc anhav ev e r yne gat i v eaf f e c t .

Ac ount r yt hatge t st hef i r s tdooms daywor m ont hei nt e r ne thaswont he e qui v al e ntas pac er ac e . Hav i ngadooms day swor mc anbet hee qui v al e nt t ot he1 957Sput ni kl aunc h.

Igott hei de af oradooms daywor mf r om aChi ne s ehac ke rwe bs i t e .I donâ€™ ts pe akChi ne s e ,s oIhadt ous eGoogl eTr ans l at e ,andast he ys ay s ome t i me st hi ngsge tl os ti nt het r ans l at i on.

_________________________________________________ AboutAut hor:Pauls t ar t e dhi sc ar e e rwor ki ngonI BM 360andt he PDP1 1 .Hewasane ar l yadv oc at eofus i ngHac ki ngSof t war et oc he c k c or por at edat as y s t e msandhaspr e s e nt e dt al ksatt heCOMPUTERSECURI TYI NSTI TUTE.Paul â€™ sar t i c l e shav eappe ar e di nt heI nf oSe c ur i t y magaz i ne . I n1 995Paul ,de v e l ope dade f e ns eagai ns tWARDI ALERS.Hi spr oc e s s waspubl i s he di nI nf oSe c ur i t yMagaz i ne . Adi al e ri sapr ogr am t hatdi al s as e r i e sofphonenumbe rand l ogsnumbe rt hatar ec onne c t e dt oa mode m. Hei sc ur r e nt l yac omput e rs e c ur i t yanal y s tandf ut ur i s t .

De my s t i f y i ngt heAndr oi dMal war e

Mc Af e e â€™ sf i r s tquar t e rt hr e atr e por ts t at e d t hatwi t h6mi l l i onuni ques ampl e sofr e c or de d mal war e ,Q1201 1wast hemos t ac t i v ef i r s tquar t e ri n mal war e hi s t or y . Mc Af e es t at e dt hatAndr oi d de v i c e sar e be c omi ngmal war ehav e nswi t hAndr oi d be i ngt hes e c ondmos tpopul are nv i r onme ntf ormobi l emal war eaf t e rSy mbi ani n t hef i r s tquar t e r . I nt hi sAr t i c l e ,wear egoi ngt ot akey ou t hr ought hev ar i ousphas e ss oast ounde r s t andhowandwhatt he s emal war e sar e e xac t l ymadeupof .Fi r s tofal l ,wewi l ls t ar twi t hdi s c us s i ngt hebac kgr oundofAndr oi dandt he nmov eont ot hebas i c sofhow anAndr oi d pac kagear c hi t e c t ur ei sde v e l ope d.Wes hal lt he nanal y z eanandr oi d mal war ei nc ompl e t ede t ai l .

I nt roduct i ont ot heAndroi dpl at f orm

Andr oi di samobi l e bas e dope r at i ngs y s t e m bas e dont heLi nuxke r ne l . Andr oi dappl i c at i onde v e l ope r swr i t epr i mar i l yi nt heJav al anguage , c ont r ol l i ngt hede v i c ev i aGoogl e de v e l ope dJav al i br ar i e s .

TheAndr oi dc ompi l e rs ui t ec ompi l e st hede v e l ope r ' sJav af i l e si nt oc l as s f i l e s ,andt he nt hec l as sf i l e sar ec onv e r t e di nt ode xf i l e s .De xf i l e sar e by t e c odef ort heDal v i kVM whi c hi sanons t andar dJVM t hatr unson Andr oi dappl i c at i ons .TheXMLf i l e sar ec onv e r t e di nt oabi nar yf or mat t hati sopt i mi z e dt oc r e at es mal lf i l e s .Thede xf i l e s ,bi nar yXMLf i l e s , andot he rr e s our c e s ,whi c har er e qui r e dt or unanappl i c at i on,ar epac kage di nt oanAndr oi dpac kagef i l e .The s ef i l e shav et he. apke xt e ns i on, butt he yar ej us tZI Pf i l e s .Onc et heAPK pac kagei sge ne r at e d,i ti s s i gne dwi t hade v e l ope r ' ske yandupl oade dont ot heAndr oi dmar ke tv i a Googl e ' swe bs i t ef r om whe r et heus e rc andownl oadt he s eAPKf i l e sand i ns t al lt he m ont heAndr oi dde v i c e .

The r ear ec ur r e nt l ymor et han2mi l l i ondownl oadabl eappl i c at i onsi n t hec e nt r alr e pos i t or yofAndr oi dappl i c at i onsr unbyGoogl eandandr oi dappl i c at i onsc anal s obedownl oade df r om ot he rt hi r dpar t ys i t e s .

Requi rement s

-Toolt ounpac kt he. apkf i l e:Wi nz i p -Toolt oc onv e r tt he. de xt oa. j arf i l e:de x2j ar -GUIt oolf orJav ade c ompi l at i on:JDGUI -Sampl eAndr oi dmal war ef oranal y s i s

Det ai l edSt eps St epI : Tos t ar tt hemal war eanal y s i spr oc e dur e ,f i r s tdownl oadas ampl eandr oi dmal war e .I nt hi sc as e ,wewi l ldownl oadi Cal e ndar . apk,whi c hwas oneoft he1 1s us pi c i ousappl i c at i onsr e mov e df r om t heAndr oi dmar ke t be c aus ei twasf oundt oc ont ai namal war easpe rGadge tMe di a. As c an oft heappl i c at i on on Vi r us Tot alr e v e al e dade t e c t i on r at eof 46. 5% ass howni nt hef i gur ebe l ow.

St epI I : Ext r ac tt hei Cal e ndar . apkf i l eus i ngWi nz i pt ov i e wt hec ont e nt soft he . apkf i l e .

He r ewes e et he. de xandt he. xmlf i l ewhi c hwedi s c us s e di nt hee ar l i e r par toft hear t i c l e . St epI I I :

Thene xts t e pwi l lbet oge tabe t t e rv i e woft hec odeus i ngt he‗de x2j ar ‘ t ool .Whatt hede x2j art ool ki tdoe si s ,i sc onv e r t st heDal v i ke xe c ut abl e . de xf i l e si nt ot heJav a. c l as sf i l e s .

We j us tdr op t he =c l as s e s . de x‘f i l ef r om ourappl i c at i on i nt ot he de x2j ar ‘ sdi r e c t or yandpe r f or mt hec onv e r s i onus i ngt hec ommand: de x2j ar . batc l as s e s . de x

Fi g.3Thi sc r e at e st he„ c l as s e s . de x. de x2j ar . j ar f i l ei nt hes amedi r e c t or y .

St epI V:Tos e et her e adabl ef or matoft hec l as sf i l e s ,wemakeus eof JDGUI .Ope nt he‗c l as s e s . de x. de x2j ar . j ar ‘ f i l eus i ngJDGUI .

Thi sgi v e sy ouas y s t e mat i cv i e woft hec ompl e t es our c ec odeoft heandr oi dappl i c at i on.

St epV:Wi t ht hec ompl e t es our c eoft heappl i c at i oni nf r ontofy ou, y ou c anpe r f or mt heac t ualanal y s i soft hes our c eands e ei fs ome t hi ngi s ami s s .Wenot i c ec l as sf i l ename d‗Sms Re c e i v e r . c l as s ‘whi c hs e e me d we i r dbe c aus east hi si saCal e ndarappl i c at i ont he r es houl dnotbeany ne e dofaSms Re c i e v e r .

Onf ur t he ri ns pe c t i onoft hes our c ec odeof‗Sms Re c e i v e r . c l as s ‘ , wef i nd t hati tc ont ai nst hr e enumbe r swhi c h ar e1 0661 85829 ,1 0661 33 , 1 06601 41 2004andl ookr at he rs us pi c i ous ,l i ket he r ei sanat t e mptt o bl oc kanyme s s age sf r om t he s enumbe r sc omi ngt ot heAndr oi dmobi l e de v i c et hathast hi sappl i c at i oni ns t al l e dandr unni ng.

Af t e rGoogl i ngt he s enumbe r s ,wef oundoutt hatt he yar eHi ghpr e mi um r at eSMSnumbe r swhi c hbe l ongt oChi naMobi l e .

Wewi l lt r yandunde r s t andwhyt heappl i c at i ont r i e st os uppr e s sde l i v e r yr e por t sf r om t he s enumbe r si nl at e rs t e ps .

Thef i r s tmos ts us pi c i oust hi ngwenot i c ei si nt hes howI mg( )f unc t i on. Onc et he r ear e5c l i c kst he r ei sac al lt oaf unc t i ons e ndSms ( ) .

St e pVI :Onc edonewi t ht he‗Sms Re c e i v e r . c l as s ‘wemov eont ot he anal y s i soft hec odeofne xtc l as sf i l ei . e .‗i Cal e ndar . c l as s ‘ .

Sower unt hought hef i l eandc he c kf ort he‗s e ndSms ( ) ‘ f unc t i ont os e e whati tdoe s .Voi l a! !Ass howni nt hef i gur eabov e ,wes e et hatwhe nt he f unc t i on s e ndSms ( )i sc al l e d,t he r ei sa SMS s e ntt ot he numbe r 1 0661 85829wi t ht het e xt921 X1 .

St epVI I :Att hee ndofs e ndSms ( )f unc t i ont he r ei sac al l t os av e ( )f unc t i on.Sowel ookf ort hes av e ( )f unc t i oni nt hec odeandf i ndi tt obej us t abov et hes e ndSms ( )f unc t i on.

Onpr ope ranal y s i sandunde r s t andi ngoft hes av e ( )f unc t i on,wef i nd t hatt hes t r i ng―Y i spas s e dwhe ne v e rt hes av e ( )f unc t i oni sc al l e d.I t i sal s oc onc l ude dt hatt hes e ndSms ( )f unc t i onc anbec al l e donl yonc e andne v e ragai nduet ot he―i f l oops e tf ort hes e ndSms ( )f unc t i on.

St epVI I I :Put t i ngal lt hef i ndi ngst oge t he rwemadedur i ngt heanal y s i swec ange tac l e arpi c t ur eoft hewhol ewor ki ngoft hemal war e .

Theappl i c at i ons e ndsaSMSt ot hepr e mi um numbe r1 0661 85829wi t h t het e xt921 X1andi nt hebac kgr oundbl oc ksanyi nc omi ngde l i v e r yr e por t sf r om t henumbe rs ot hatt hev i c t i m doe snotge tanyr e s pons er e gar di ngt heSMSt hatt heappl i c at i ons e ndsi nt hebac kgr ound.Al s o,t he SMSi ss e ntonl yonc eandne v e ragai ns ot hatt hev i c t i m hasnos us pi c i ononwhatc aus e dt heSMSc har ge st ohi m.

Concl usi ons: Api e c eofmal war ewi t hr ootac c e s st oaphonec annot onl yr e adany dat as t or e doni tbutc anal s ot r ans mi tdat aany whe r e . Thi si nc l ude sc ont ac ti nf or mat i on,doc ume nt s ,ande v e ns t or e dac c ountpas s wor ds .Wi t h r ootac c e s si t ' spos s i bl et oi ns t al lot he rc ompone nt st hatar e n' tv i s i bl e f r om t hephone ' sus e ri nt e r f ac eandc an' tbee as i l yr e mov e d. Theway st o s af e guar df r om t he s eAndr oi dmal war e sar e : -Downl oadAppl i c at i onsonl yf r om Tr us t e dSour c e s -Che c koutt her at i ngsandr e v i e wsbe f or edownl oadi nganappl i c at i on -Lookatt heappl i c at i on' spe r mi s s i onsv e r yc l os e l y -I ns t al lAndr oi dOSUpdat e sass oonast he y ' r eav ai l abl e -I ns t al laMobi l eSe c ur i t yAppl i c at i on

Thi sar t i c l es howsane xampl eofhow mal war e smayaf f e c ti nnoc e nt us e r s .Wi t houtt heus e r sac t ual l yknowi ngabouti t ,The yar ec apabl eof pe r f or mi ngmal i c i ousac t i onsi nt hebac kgr ound.The s emal war e smay c aus ey ouf i nanc i all os s e sbyde bi t i ngy ourc al lbal anc e s ,ormayt ar ge t y oubys t e al i ngy ourpas s wor dsormayj us tc or r upty ourphone . I ti sv e r y i mpor t antt os af e guar dagai ns tt he s ebyt aki ngpr e c aut i ons .I ti sal way s be t t e rt obes af et hant obes or r y !

________________________________________________ AboutAut hor:Di ne s hShe t t yi sc ur r e nt l ywor ki ngasaI nf or mat i on Se c ur i t yCons ul t antwi t hPal adi onNe t wor ks .Di ne s hi sComput e re ngi ne e rf r om Ramr aoAdi kI ns t i t ut eofTe c hnol ogyandal s oaECCounc i l Ce r t i f i e dEt hi c alHac ke r . Emai l:di ne s h. s he t t y @l i v e . c om

TheGr eatBr ows erWarof2011 Thegr e atbr ows e rwari sbac kwi t hav e nge anc e . Thi sy e arhasbe e nqui e t s i mi l art opr e v i ousone swi t hl ot sofupdat e dv e r s i onsr ol l i ngout .We wi l ls t ar tof fwi t hs omes t at i s t i c st os howy out heov e r al lus ageofbr ows e r s .The nwewi l ldoananal y s i sons omeoft hec r i t e r i awhi c hmake sa br ows e rpopul ar .Thec r i t e r i aar e–s pe e d,s e c ur i t yands t abi l i t y .

Le t ’ sbe gi nwi t ht hepopul arandwor l dwi deus agef r ont .Wewi l lagai n di v i dei ti nt ot wos c e nar i os . TheBi gs c r e e ns c e nar i owi l lf oc usonbr ows e rpopul ar i t yonPC’ sandl apt ops .Thes mal ls c r e e ns c e nar i owi l lc ov e r t het abl e t sands mar tphone s .

TheBi gscreenscenari o Thebi gs c r e e ns c e nar i oc ompr i s e sofde s kt opandl apt op.Thi sy e arhas be e nt hewor s ty e arf orMi c r os of t ’ sI nt e r ne te xpl or e r .The yr ol l e dout v e r s i on9oft hee xpl or e rs e r i e sc l ai mi ngt hati twi l l makey ourwe bbe aut i f ulbutc l e ar l yi thasl os tgr oundbymor et han5% t hi sy e arandt hec ur r e ntov e r al le s t i mat eofI Ei sbe l ow50%.Fi r e f oxr e mai ne dmos ts t abl e . The i rv e r s i on5c oul dn’ tdomuc hmagi cbuts t i l lv e r s i on4ofFi r e f oxi s s t i l lt he i rmos tpopul arbr ows e r .Fi r e f oxonc eagai ni st her unne rupt he r ac eaf t e rI E.Thet hi r d and t hef as t e s tgr owi ngbr ows e ri sGoogl e Chr ome ,whi c hhasc l i mbe dt oune xpe c t e dhe i ght si nt hi swar .Chr ome i st hr owi ngupdat eaf t e rupdat e sandt hi sy e art he yr e l e as e dt hr e ene w v e r s i onsofChr omeandbyt het i meIam wr i t i ngt hi spos t ,t he yhav e l aunc he dv e r s i on1 3ofChr ome ( t hat ’ si ns ane ) .Ev e nt houghI Es t i l l hol dst hef i r s ts poti thasbe e nl ar ge l yduet ot hes uppor toft hewi ndows pl at f or m. He r ear es omei nt e r e s t i ngs t at i s t i c s .Mi c r os of ts ki ppe dt hes uppor tof I E9f orWi ndowsXPandpur e l yf oc us e doni t sVi s t aandwi ndows7 us e r s . Thought he r ehasbe e nanov e r al l di pi nt heus ageofI E8,I E9has br oughts omes i l v e rl i ni ngsf orMi c r os of t .Mor et han65% ofWi ndows7 us e r shav es hi f t e dt oI Ev e r s i on9. Thi si sr e al l ygoodne wsf orMi c r os of t . Theov e r al lus ageofI E9i ss t i l lnotmor et han28% wor l dwi debuti ts t i l l hasbe e nr e por t i ngas t e adygr owt h. I thass hownt hef as t e s tgr owt hr at e s i nc ei t sl aunc hi nJune .Thi sbr i ngsMi c r os of t ’ sov e r al lbr ows e rmar ke t s har et opas s50%.Fi r e f oxi st heol de s tc ompe t i t orandi thasas har e c l os et o28%.Fi r e f oxhass howns omer e s i s t anc eov e rt hepas tf e wy e ar s ands t i l li ti st het opbr ows e ri nc ount r i e sl i keChi naandRus s i awho hav ehi ghi nt e r ne tus e r s .ButFi r e f oxdoe s n’ thav et hes t r ongbankbal anc et hatGoogl eorMi c r os of thas .I nt her e c e ntmont hs ,Chr omehas gr ownataf as t e rr at ec ompar e dt oFi r e f ox.Ev e nt he9t hv e r s i onofI E hass hownaqui c kgr owt hbutt hene wv e r s i onsofFi r e f oxhav es hown mar gi nalgr owt h.Mi c r os of thasdoneagr e atj obt oi nt e gr at et hehar dwar eac c e l e r at i onofI E9wi t ht hewi ndowsmac hi net ogi v eabe t t e rpe r f or manc e .

Abov ei st hebr ows e rus agef i gur ef orAug201 0t oAug201 1 .Thes c e nehasc hange dal ot .I t â€™ st r uet hatt he r e wasat i mewhe nI Ehe l dmor et han80% oft hebr ows e rmar ke tbutt he r ewe r enotmanyc ompe t i t or st hat t i me .Nows e v e r albi gname shav ej umpe di nt ot hi swarandhe nc ei t â€™ smor ef i e r c e .I ft heabov ef i gur es c ar e d Mi c r os of tt he nt hene xtonewi l lhi tt he mr e al l yhar d. He r ei sani magewhi c hs howst heov e r al lbr ows e rus agef r om 2008t i l l201 1 .

The r ear et hr e ev e r ys i mpl eanal y s i st hatwec anmakeoutoft hi sf i gur e : 1 .I Ehass t e adi l ydr oppe di nbr ows e rus ages har ewor l dwi de . 2.Fi r e f oxi sal mos ts t agnant . 3.I fI Ef e l l andFi r e f oxwass t agnantt he nwhe r edi dt her e mai ni ngv al ue go! ! ?It hi nky ouknowt heans we r .I t ’ sCHROOOMEEEEE.

The4t hbr ows e ri nt hi sl i s ti sSaf ar iwhi c hi sl ar ge l ys uppor t e dbe c aus e i ti st hede f aul tbr ows e ri nMac .Thef i e r c ebat t l ebe t we e nt het opt hr e e hasl e f tal mos tnos pac ef oranyot he rbr ows e rs ot he r ehar dl yany t hi ng t os ayaboutt he4t hs pot .Thef i f t hs potbe l ongst oOpe r a.I nt hi sbat t l e i tr e mai nsc l os et oSaf ar iandke e pst ur ni ngupanddown.We l lwe c annoti gnor eOpe r a,i t ’ sont hef i f t hs poti nt hebi gs c r e e ns c e nar i o. Why ? ? ?Le t ’ sf i ndout .

Smal lscreenscenari o

Unt i l ll as ty e art hi ss e gme ntc ons i s t e donl yofmobi l ephone s .Butt hi s y e arwehav eane w gue s t ,Tabl e t s .Le t ’ ss t ar twi t hwe l c omi ngourne w gue s t .Thewor l dwi dei nt e r ne tus ageoni pad2pas s e d1 %i nJul yt hi s y e ar . Thi sf i gur ei s2. 2% i nUSA.Ther e as onIc hos eonl yI pads t at she r e i st hatr e s toft heot he rt abl e tc ompe t i t or sar es of art hatt he i rt ot al doe s n’ te v e namountt o. 5% oft ot ali nt e r ne tus ageont abl e t s .AsIj us t s ai d,Ope r as houl dnotbei gnor e dandt her e as oni st hati ti st hebe s t mobi l ebr ows e rf r om t hepas tde c ade . I tac c ount sf orne ar l y22% oft ot al br ows e rus ageonmobi l ede v i c e sandc ont i nue st obeatt het opl i s t .You mi ghts ayt hatt hef i gur e swe r ef armor ei mpr e s s i v ei fwel ookatt hel as t 5y e ars t at sbutmobi l ede v e l opme nthass e e nt r e me ndousc hange si n pas t5y e ar sandi t sf ul lc r e di tgoe sagai nt oGoogl e ’ sy e tanot he rr e v ol ut i onar ypr oduc tc al l e dAndr oi d.He r ei nt hi sf i gur ewec ans e et hepas t t hr e ey e ars t at i s t i c sf ors mal lde v i c ebr ows e r s .

Smal lscreenscenari o

Unt i l ll as ty e art hi ss e gme ntc ons i s t e donl yofmobi l ephone s .Butt hi sy e ar wehav eane wgue s t ,Tabl e t s .Le t ’ ss t ar twi t hwe l c omi ngourne wgue s t .The wor l dwi dei nt e r ne tus ageoni pad2pas s e d1 %i nJul yt hi sy e ar . Thi sf i gur ei s 2. 2% i nUSA.Ther e as onIc hos eonl yI pads t at she r ei st hatr e s toft heot he r t abl e tc ompe t i t or sar es of art hatt he i rt ot aldoe s n’ te v e namountt o. 5% of t ot ali nt e r ne tus ageont abl e t s .AsIj us ts ai d,Ope r as houl dnotbei gnor e d andt her e as oni st hati ti st hebe s tmobi l ebr ows e rf r om t hepas tde c ade .I t ac c ount sf orne ar l y22%oft ot al br ows e rus ageonmobi l ede v i c e sandc ont i nue st obeatt het opl i s t .Youmi ghts ayt hatt hef i gur e swe r ef armor ei mpr e s s i v ei fwel ookatt hel as t5y e ars t at sbutmobi l ede v e l opme nthass e e nt r e me ndousc hange si npas t5y e ar sandi t sf ul lc r e di tgoe sagai nt oGoogl e ’ sy e t anot he rr e v ol ut i onar ypr oduc tc al l e dAndr oi d. He r ei nt hi sf i gur ewec ans e e t hepas tt hr e ey e ars t at i s t i c sf ors mal lde v i c ebr ows e r s .

Youc anc l e ar l ys e et hatOpe r awi nst hebat t l e ,butt hef i ghti sc l os ehe r e .I t ’ s notasope nast hepr e v i ouss c e nar i o. I fNoki aandi phonear ef i ght i ngf ort he s e c onds pott he nBl ac kbe r r yandAndr oi dar ef i ght i ngf ort het hi r d.Ther ac e i sr e al l yt oughhe r e .Butt hef ut ur eofOpe r adoe s n’ tl ookasbr i ghtasi thas be e ni nt hepas t .Thei nt e ns egr owi ngmar ke tofappl epr oduc t sandt hef as t f l owofAndr oi dar oundt hewor l dwi l l s ur e l ys ur pas sal l s t at sandagai ni twi l l beabat t l eofl os tgr ounds .He r eIwi l ls howy ouani nt e r e s t i ngf i gur e .The s e ar et hes t at sofmobi l ebr ows e rus agef orpas tt hr e emont hs .

The s ear et hef i gur e swhi c har ec ur r e nt l ybuz z i ngi nt hewhol ewor l d.The l as tt hr e emont hsi nt e r ne tus aget hr oughs mar tphone sandt abl e t ss hows t hatAndr oi dhaswont her ac ewi t hi phone , Noki aandBl ac kbe r r y . Cur r e nt l y , t he r ear emor et han500, 000unl oc ksofAndr oi dphone se ac hdayi nUSA.I t wi l lber e al l yi nt e r e s t i ngt os e ehowt hi sbat t l es hape sup.Wec annotne gl e c t anypl ay e r si nt hi ss e gme ntbe c aus et hef i ghti sc l os eandanys i ngl ec ool pr oduc tf r om e i t he roft he mc anc hanget hewhol egame . Le tusnow anal y z ewhi c hbr ows e rwi l ls ui ty out hemos tac c or di ngt oy our us age .Wewi l lbeus i ngt het hr e ec r i t e r i at ome as ur e .Agai n,t he yar es pe e d, s e c ur i t yands t abi l i t y .Youc anc hoos ey ourpr e f e r e nc eac c or di ngl y .Wewi l l bet e s t i ngt het opt hr e ebr ows e r sname l yI E8, Fi r e f ox5, andChr ome8( mos t popul arone si ne ac hc at e gor y ) .

Speed

I fy ouar et al ki ngabouts pe e dt he nt he r ei snof i ght .Chr omei st r ul yt he wi nne ri nt hi ss e gme nt .Googl ehasr e al l yt hr ownt he i rbe s te ngi ne e r i ngt o makeChr omel i ght e ni ngf as t . Thewayi tl oadst hec ac heandi t saut os ugge s t i onofur l â€™ smake st hebr ows i nge xpe r i e nc er e al l yf as t .Hac ki ngAl e r tc onduc t e das mal le xpe r i me ntt oj us t i f yt hi sf ac t .Wec onduc t e das pe e dt e s tf or l oadi ng hac ki ngal e r t . bl ogs pot . c om on t het hr e ebr ows e r s .He r ear et he s c r e e ns hot s

Speed I fy ouar et al ki ngabouts pe e dt he nt he r ei snof i ght .Chr omei st r ul yt he wi nne ri nt hi ss e gme nt .Googl ehasr e al l yt hr ownt he i rbe s te ngi ne e r i ngt o makeChr omel i ght e ni ngf as t . Thewayi tl oadst hec ac heandi t saut os ugge s t i onofur l â€™ smake st hebr ows i nge xpe r i e nc er e al l yf as t .

Securi t y

He r et he r ewasac l os ef i ght .Thi sf i ghtwasbe t we e nI EandChr ome . Whi l et e s t i ngmyhac ki nge xpe r i me nt sIpr e f e rus i ngFi r e f oxbe c aus eof i t sl amede f aul ts e c ur i t yme as ur e sc ompar e dt oI EandChr ome .Bot hI E andChr omehav eanaut omat i cc l i e nts i dec odef i l t e r i ngandc e r t i f i c at e c r os sv al i dat i ngf e at ur ewhi c hi sabs e nti nFi r e f ox.Butc ons i de r i ngt he i nc r e di bl ec onne c t i v i t yoft hel at e s tI E9i nt e gr at i onswi t ht hewi ndows mac hi ne , Iwi l l v ot eI Et obeabe t t e ropt i onf ort hos ewhowantc ompl e t e s e c ur i t ywhi l et he yar eoni nt e r ne t .

St abi l i t y

Whe ni tc ome st os t abi l i t y ,Fi r e f oxi st heul t i mat ewi nne r .Fe we rc r as he s ,mor emul t i pl et abs uppor tande xc e l l e ntpe r f or manc ewhe nbr ows e r i sus e df orl oc al hos ts e r v e rope r at i ons . I ts t andsouti nt hec r owdandde l i v e r st hebe s tpe r f or manc e .I ti smos tpr e f e r r e dbyus e r swhowantt o us ei tast heGUIf ors e r v e rope r at i onsl i kec onne c t i ngwi t hs e r v e r s WAMP,XAMPP,Or ac l edat abas ee t c .Fi r e f oxhaspr ov e dr e al l ys t abl e unde rs uc hs i t uat i ons .Thebat t l e gr oundi sol dbutt hepl ay e r sar ene w andf r e s h.I t ’ snotonl yaboutupdat i ngv e r s i ons ,i nf ac ti t ’ saboutbr i ngi ngt hec hangei nus e re xpe r i e nc e .Wear et oos mal lt oc r i t i c i z et hehar d wor kt hatt he s ec ompani e sputi nt opr ov i deusqual i t ypr oduc t s .Forus i t ’ sme r e l yac hoi c eofbr ows e rbutf ort he mi t ’ st he i ry e arl onge f f or t . What e v e rt he yputbe f or eusi sane ngi ne e r i ngmar v e ls owhoe v e rwi ns t hebat t l e ,t heul t i mat ewi nne rwi l lbet heus e r s . Ihopet hi sar t i c l ewi l lhe l py ouc hoos ey ourf av our i t ef l av ourofbr ows e r . Iwi s hgoodl uc kt oal lt hebr ows e r sandhopet os e emor et wi s t sne xt y e ar ! ! ! _________________________________________________

AboutAut hor:

Abhi navs i ngha. k. aDaRkLoRd, I nf or mat i onSe c ur i t ye xpe r tand Sy s t e msEngi ne e ratTCS Founde r@ Hac ki ngAl e r t:hac ki ngal e r t . bl ogs pot . c om Emai l:abhi nav bom@gmai l . c om

Di gi talForensi cTechnol ogy

Today ,mos toft heLawe nf or c e me ntf or e ns i cage nc i e sal lov e rt hewor l d, e s pe c i al l yi nt heUSof t e nus eEnc as et ool .Thi st oolc ons i s t smos t l yof f unc t i onal i t ywhi c hr e duc e si nv e s t i gat i ont i me ,i de nt i f yac c ompl i c e s ,and pr ov i del e adsf orot he runs ol v e di nv e s t i gat i on.

W hat â€™ smorewi t hEncase?

TheEnc as ef or e ns i ct oolc ome swi t hgr e ats ol ut i onsf orc apt ur i ng,anal y z i ngandr e por t i ngondi gi t ale v i de nc e .Thei nv e s t i gat orc anal s oge tI nt e r ne tac t i v i t y ,Emai l ,Doc ume nt s ,Gr aphi c s ,Addr e s sbookswi t hmor e t he n300di f f e r e nt di f f e r e ntf i l ef or mat s .I nv e s t i gat or sc anr e c ov e r1 00% ofde l e t e df i l e s ,r e f or mat t e ddi s ks ,s wapands l ac ks pac e ,hi dde nf i l e s , pr i nts pool sandmor e .I naddi t i on,Enc as ef or e ns i che l psy out oi de nt i f y e nc r y pt e ddat a,s t e nogr aphyandmor eandmor e .

How Encaseworks?

Thef i r s ts t e pi nt hi si nv e s t i gat i v epr oc e s si st oac qui r et hee v i de nc e .The goali st oobt ai n

ane xac tr e pl i c aoft hedat awi t houtc ompr omi s i ngi t si nt e gr i t y .Be c aus e c omput e rs y s t e msmayc ont ai nv ol at i l e / t e mpor ar ydat ai nRAM,t heac qui s i t i onpr oc e s si sady nami cone .I nt hi ss c e nar i oi ti spe r mi s s i bl et o s hut downt hes us pe c t ’ sc omput e randbooti twi t haDOSbootut i l i t y . EnCas ef orDOSal l owsf oraf or e ns i c al l ys oundac qui s i t i onofdat awi t hout r unni ngt her i s kofal t e r i ngac c e s sdat e sandt i mes t amps .EnCas ef or DOSwr i t e sbl oc k

t hes us pe c t ’ shar ddr i v edur i ngac qui s i t i on,t huspr e v e nt i ngac c i de nt al dat amodi f i c at i ons .

Theprocedureusedi nt hi si nvest i gat i onwasasf ol l ows: I nv e s t i gat or ss t ar tt hei nv e s t i gat i onbyat t ac hi ngt hes us pe c t shar ddr i v e i nt ohi sf or e ns i cc omput e r , ( Dr i v ec anbeMac i nt os h,Li nux,Wi ndowsor Dosmac hi ne )t he ni t smake sabi t s t r e am mi r r ori mageoft hedr i v e .Thi s mi r r ori magei smount e dasar e adonl ye v i de nc ef i l e .Thi sf e at ur epr e v e nt st e mpe r i ngt hedat aandi nv al i dat ee v i de nc e .Enc as eal s oe ns ur ei t s mi r r ori magei st hes ameast heor i gi nalonebyc al c ul at i ngc y c l i c alr e dundanc yc he c ks umsandmd5has h.

Whi l ee xami ni ngadr i v e ,t hi st oolgoe sbe ne at ht heope r at i ngs y s t e mt o v i e wal loft hedat a–i nc l udi ngf i l es l ac k,unal l oc at e ds pac eandwi ndows s wapf i l e si nwhi c hde l e t e df i l e sandot he rpot e nt i al e v i de nc ec anbes t or e d s omet i me s .I ti sal mos ti mpos s i bl et ov i e ws uc har e asoft hede r i v e .

Enc as eal s ogi v e sy ouas or t i ngopt i onf orbe t t e re xami nat i on.Thei nv e s t i gat ors or t st he nbas e donv ar i ousc r i t e r i as uc hase xt e ns i onort i me s t ampmor e ov e rEnc as eal s oc ompar e sknownf i l es i gnat ur e swi t hf i l ee xt e ns i ons oi nv e s t i gat or sc ande t e r mi newhe t he rt heus e rhast r i e dt ohi de ort e mpe re v i de nc ef r om de t e c t i onbyc hangi ngi t se xt e ns i on.Enc as eal s o gi v e sy out hec us t omi z ef unc t i onal i t y .

I nv e s t i gat or sc anpr e v i e wdat awhi l edr i v e sorot he rme di aar ebe i ngac qui r e d. Onc et hei magef i l e sar ec r e at e dt hee xami ne rc ans e ar c handanal y z emul t i pl edr i v e sorot he rme di as i mul t ane ous l y .Enc as eal s of e at ur e s ac as ei nde xe r .Thi st oolhasac ompl e t ei nde xi nmul t i pl el anguage s ,al l owi ngf orf as tande as yque r i e s .

Enc as ef or e ns i cf e at ur eEnSc r i ptpr ogr ammi ngc apabi l i t i e s .Enc as e ,an obj e c t or i e nt e dpr ogr ammi ngl anguages i mi l art oj av aorC++ he l psus e r s t oc r e at ec us t om pr ogr amst ohe l pt he m aut omat et i me c ons umi ngi nv e s t i gat i v et as ks , s uc hass e ar c hi ngandanal y z i ngs pe c i f i cdoc ume ntt y pe sor ot he rl abor i nt e ns i v epr oc e s s e sandpr oc e dur e s .Onc ei nv e s t i gat or shav e abookmar ke dr e l e v antdat a, t he yc anc r e at ear e por tbas e dons ui t abl ee v i de nc ewhi c hwi l ls uppor tf orpr e s e nt at i oni nc our t ,manage me ntand ot he raut hor i t i e s .

Forensi cExami nat i on ofDi gi t alEvi dence– A Gui def orLaw Enf orcement ,produced by t he U. S.Depart mentofJust i ce [ DOJ04] ,of f erst hef ol l owi ngsuggest i onsf ort heanal ysi sofext ract eddat a:

#Ti mef rameanal ysi s–De t e r mi newhe ne v e nt soc c ur r e dont hes y s t e mt oas s oc i at eus agewi t hani ndi v i dualbyr e v i e wi nganyl ogspr e s e ntandt hedat e / t i me s t ampsi nt hef i l es y s t e m,s uc hast hel as tmodi f i e dt i me . # Dat ahi di nganal ysi s– De t e c tandr e c ov e rhi dde ndat at hatmayi ndi c at e knowl e dge ,owne r s hi p,ori nt e ntbyc or r e l at i ngf i l ehe ade r st of i l ee xt e ns i onst o s how i nt e nt i onalobf us c at i on;gai ni ngac c e s st opas s wor dpr ot e c t e d,e nc r y pt e d, andc ompr e s s e df i l e s ;gai ni ngac c e s st os t e ganogr aphi ci nf or mat i onde t e c t e di n i mage s ;andgai ni ngac c e s st or e s e r v e dar e asofdat as t or ageout s i det henor malf i l e s y s t e m. i cat i onandf i l eanal ysi s–I de nt i f yi nf or mat i onr e l e v antt ot hei nv e s t i #Appl gat i onbye xami ni ngf i l ec ont e nt , c or r e l at i ngf i l e st oi ns t al l e dappl i c at i ons , i de nt i f y i ngr e l at i ons hi psbe t we e nf i l e s( e . g. ,e mai lf i l e st oe mai lat t ac hme nt s ) ,de t e r mi ni ngt hes i gni f i c anc eofunknownf i l et y pe s ,e xami ni ngs y s t e mc onf i gur at i ons e t t i ngs , ande xami ni ngf i l eme t adat a( e . g. , doc ume nt sc ont ai ni ngaut hor s hi pi de nt i f i c at i on) . #Ownershi pandpossessi on–I de nt i f yt hei ndi v i dual swhoc r e at e d, modi f i e d, orac c e s s e daf i l e ,andt heowne r s hi pandpos s e s s i onofque s t i one ddat abypl ac i ng t hes ubj e c twi t ht hede v i c eatapar t i c ul art i meanddat e ,l oc at i ngf i l e sofi nt e r e s ti n nonde f aul tl oc at i ons , r e c ov e r i ngpas s wor dst hati ndi c at epos s e s s i onorowne r s hi p, andi de nt i f y i ngc ont e nt soff i l e st hatar es pe c i f i ct oaus e r .

EnCas eFor e ns i cFe at ur e sandFunc t i onal i t yChe c kl i s t

Acqui si t i onGranul ari t y: -Er r or s :Spe c i f yt henumbe rofs e c t or st hatge tz e r oe dwhe nane r r ori s f ound. -Ac qui s i t i onBl oc ks :De f i net hebl oc ks i z e . -Ac qui s i t i on Re s t ar t :c ont i nueawi ndows bas e d ac qui s i t i on f r om i t s poi ntofi nt e r r upt i on. -Logi c alEv i de nc eFi l e s :ane v i de nc ec ont ai ne rwi t honl yt hef i l e sorf ol de r sy oune e d. -CRC:i magev e r i f i e dbyc y c l i c alr e dundanc yc he c ks um ( CRC)andMD5 -Li nEnut i l i t y-ac qui r ee v i de nc ev i abootdi s k -Wi nEnut i l i t y–ac qui r eRAM e v i de nc e

Aut omat i onTool s: -Fi l t e r sandCondi t i ons :mor et han1 50av ai l abl e -Combi nef i l t e r st oc r e at ec ompl e xque r i e sus i ngs i mpl e“ OR”or“ AND” l ogi c -Ac t i v eDi r e c t or yI nf or mat i onExt r ac t or -Har dwar eAnal y s i s :aut omat i c al l yc ul l st hr ought her e gi s t r yandc onf i gur at i onf i l e s -Re c ov e rpar t i t i ons :aut omat i c al l yr e bui l dst hes t r uc t ur eoff or mat t e d NTFSandFATv ol ume s . -Re c ov e rde l e t e df i l e s / f ol de r s Anal ysi sFeat ures -Wi ndowse v e ntl ogpar s e r -Li nkf i l epar s e r–f i ndi nunal l oc at e ds pac e -Compound( e . g. ,z i ppe d)doc ume ntandf i l e -Fi l eSi gnat ur eanal y s i s -Has hanal y s i s -Fi l ef i nde r–f i ndf i l e si nunal l oc at e ds pac e

Vi ewers -Nat i v ev i e wi ngf or~400f i l ef or mat s -Bui l t i nRe gi s t r yVi e we r -Ext e r nalFi l eVi e we r s -I nt e gr at e dPi c t ur eVi e we rwi t hGal l e r yVi e w -Ti me l i ne / Cal e ndarv i e we r Searchi ng -Bi nar ys e ar c h–s e ar c hr awbi nar ydat a -Pr oxi mi t ySe ar c h -I nt e r ne tande mai ls e ar c h -Cas eSe ns i t i v e•GREP•Ri ghtt oLe f tRe adi ng -Ac t i v eCodePage :ke y wor dsi nmanyl anguage s . -Bi gEndi an/ Li t t l eEndi an,UTF8/ UTF7 -Se ar c hf i l es l ac kandunal l oc at e ds pac e Report i ng-Aut omat i cReport s -De t ai l e dl i s t i ngofal lURLsandc or r e s pondi ngdat e sandt i me sofwe b s i t e sv i s i t e d -Doc ume nti nc i de ntr e s pons er e por t -LogRe c or ds -Re gi s t r y -De t ai l e dhar ddr i v ei nf or mat i onaboutphy s i c alandl ogi c alpar t i t i ons -Vi e w dat aaboutt heac qui s i t i on,dr i v ege ome t r y ,f ol de rs t r uc t ur e sand bookmar ke df i l e sandi mage s . -Expor tr e por t si nRTForHTMLf or mat s . BookmarkFeat ures -Hi ghl i ght e dDat a -Not e s -Fol de rI nf or mat i on -Not abl eFi l e s -Fi l eGr oups

I nt ernetandEmai lI nvest i gat i on -Br ows e rHi s t or yAnal y s i s -I nt e r ne tar t i f ac t s -WEBHi s t or y&c ac heanal y s i s -HTMLc ar v e r -HTMLpager e c ons t r uc t i on -Kaz aat ool ki t -I ns t antMe s s e nge rt ool ki t-Mi c r os of t ®I nt e r ne tExpl or e r ,Moz i l l aFi r e f ox,Ope r aandAppl eSaf ar iEmai lSuppor tI nc l ude s -Out l ookPSTs / OSTs( ‘ 97–‘ 03) -Out l ookExpr e s sDBXs -Mi c r os of tExc hangeEDBPar s e r -Lot usNot e sv 6. 0. 3,v 6. 5. 4andv 7 -AOL6. 0,7. 0,8. 0and9. 0PFCs -Yahoo -Hot mai l -Ne t s c apeMai l -MBOXar c hi v e s

Syst em Support -Har dwar eands of t war eRAI Ds . -Dy nami cdi s ks uppor tf orWi ndows2000/ XP/ 2003Se r v e r -I nt e r pr e tandanal y z eVMwar e ,Mi c r os of tVi r t ualPC,DDandSaf e Bac k v 2i magef or mat s . -Fi l es y s t e ms :Wi ndowsFAT1 2/ 1 6/ 32,NTFS;Mac i nt os hHFS,HFS+; SunSol ar i sUFS,ZFS;Li nuxEXT2/ 3;Re i s e r ;BSD FFS,Fr e e BSD’ sFas t Fi l eSy s t e m 2( FFS2)andFr e e BSD’ sUFS2;Nov e l l ’ sNSS&NWFS;I BM’ s AI Xj f s , JFSandJFSwi t hLVm8;Ti VoSe r i e sOneandTwo;CDFS;Jol i e t ; DVD;UDF;I SO9660;andPal m __________________________________________________ Submi t t edBy:JATI NJAI N ( I nf or mat i onSe c ur i t yCons ul t ant ) Jat i nj ai n23@y ahoo. c om

APTEs t a bl i s he da saCl a s s i cThr e a t

APT=TargetPhi shi ng+Soci alengi neeri ng+ Lackofi nf ormat i on securi t y awareness + I T asset s mi sconf i gured. Theor i gi nofwor dAt t ac ki sAt t ac h:c . 1 600,f r om Fr .at t aque r ( 1 6c . ) , f r om Fl or e nt i neat t ac c ar e( bat t agl i a)" j oi n( bat t l e ) , "t hus t hewor di sadoubl e tofat t ac h,whi c hwasal s ous e d1 5c . 1 7c .i n t hes e ns enowr e s e r v e dt oat t ac k. I ti si nt e r e s t i ngbe c aus et heAPT at t ac ksar ebas e donmal i c i ousat t ac hme nt sandar enothi ghl yadv anc e dands ophi s t i c at e d.At t ac ke r st akeadv ant ageofor gani z at i onsmaki ngs i mpl emi s t ake s .The yc al lt heat t ac kanAPTbe c aus et heor gani z at i onsdonotknow whathappe ne dbuts e nd e mai l st ot ar ge t swi t hmal i c i ousat t ac hme nt .Theac tofmoni t or i ngt he i rt r e at me ntande s c al at i ngpr i v i l e ge si sj us tas t e poft he Soc i alEngi ne e r i ngPe nt e s tus i nge mai l sorar e alat t ac k.

Themos tc ommonwayf orc y be rat t ac ke r st ogai nac c e s st oanor gani z at i on' sne t wor ki st hr oughs pe arphi s hi ng,i nwhi c ht heat t ac ke rs e ndsan e mai lt hatl ooksl i kei tc amef r om at r us t e d s our c e , whe nope ne d,i ns t al l st hatwhi c hwi l le nabl et he mt oe xpl oi tt het ar ge t ' sne t wor k.Thec ompr omi s e ds y s t e mc ont i nue st o wor kwi t houtanye v i de nc et hatt hene t wor ki sc ompr omi s e d.I nf or mat i oni sgat he r e df orf ut ur eat t ac ksandt oe s c al at epr i v i l e ge s .

Theat t ac ke r sus ene wl yde s i gne dandc us t omi z e dmal war et oc i r c umv e ntmos tc ommonde f e ns e sandf oc ust he i rt ool sandt e c hni que sonas pe c i f i ct ar ge torj us te v adi ngt e c hni que s ,br e aki ng t heTr oj anf i l ei nt omul t i pl epi e c e sandz i pt he m ass i ngl ef i l e , c hangi ngt hec ont e nt oft heTr oj an us i nghe xe di t orand al s o c hanget hec he c ks um ande nc r y ptt hef i l eandc hangeTr oj an’ s s y nt axt oc onv e r tane xe c ut abl ef i l et oVBs c r i ptorOf f i c ef i l e s . Cr e at eadr oppe r ,whi c hi sapar ti nat r oj ani z e dpac ke tt hati ns t al l st hemal war eont het ar ge ts y s t e msandc r e at e sawr appe r us i ngt ool st oi ns t al lTr oj anont hev i c t i m´sc omput e rwi t hani nnoc e ntl ooki nge xt e ns i on( . pdf ,. doc ,e t c )i snotne c e s s ar i l yadv anc e d.Whe nt hev i c t i mr unst hewr appe df i l e ,i tf i r s ti ns t al l st he Tr oj ani nt hebac kgr oundandt he nr unst hewr appi ngappl i c at i on i nt hef or e gr ound. TheTr oj ans e r v e ri si ns t al l e dont hev i c t i m´s mac hi ne ,whi c hope nsapor tf ort heat t ac ke rt oc onne c t .The c l i e nti si ns t al l e d on t heat t ac ke r smac hi ne ,whi c hi sus e dt o l aunc hac ommands he l lont hev i c t i msmac hi ne .

Commands he l lTr oj ansgi v e sr e mot ec ont r olofac ommands he l l onav i c t i m´smac hi ne .TheTr oj anl ooksf orus i ngt hev i c t i m´s mac hi nef ori l l e galpur pos e s ,s uc h ast os c an,f l ood,i nf i l t r at e ot he rmac hi ne s , s t e ali nf or mat i ons uc haspas s wor dsands e c ur i t y c ode sus i ngke y l ogge r s ,r e pl ac eOSc r i t i c alf i l e s ,downl oadot he r mal war e s ,r e c or ds c r e e ns hot s ,audi oandv i de o,di s abl et hel oc al

ant i v i r usandt hepe r s onal f i r e wal l andi nf e c tt hev i c t i msc omput e rasapr oxys e r v e rf orr e l ay i ngat t ac ksandus e st hatmac hi neas ac onv e r tc hanne l .

Compr omi s e dmac hi ne sbe c omes pr i ngboar dst oi nf e c tot he rmac hi ne sandt hee nt i r ene t wor k.Ast hene t wor kbe c ome si nf e c t e d, bac kdoor sar e i ns t al l e dt ogai nf ur t he rac c e s st ot hec ompany ’ si nf r as t r uc t ur e .Wi t ht hepr ope rc r e de nt i al si nhand,t heat t ac ke r c ont r ol st hec ompr omi s e ds y s t e m.Ast hei nf i l t r at i onc ont i nue s , t hev i c t i m’ sne t wor kpas s wor ds ar egr abbe d,e mai landf i l e sar e s t ol e n,ande v e nt hene t wor kt opol ogyi t s e l fi sunc ov e r e d.The at t ac kc ont i nue st oe xpandi t sr e ac hi nt hene t wor ki nt omor es e ns i t i v es y s t e msv i at heBot ne tmas t e r ’ sCommandandCont r oli nf r as t r uc t ur epl ac i ngmor eandmor ec r i t i c al dat a;s uc hasf i nanc i al dat a,mar ke t i ngpl ans ,andr e s e ar c handde v e l opme nti nf or mat i on,atr i s k.Wi t honec ompr omi s e ds y s t e m,anat t ac ke rc ane s t abl i s hf ul l c ont r ol ov e rmuc hoft hec or por at e , e nt e r pr i s e , orc r i t i c alne t wor ki nf r as t r uc t ur e . Re c onnai s s anc e ,s c anni ng,gai ni ng ac c e s s ,mai nt ai ni ng ac c e s s andc l e ar i ngt r ac kar ebas i cs t e psf oranyat t ac ke rorpe nt e s t e rand hi di ngf i l e s ,c r ac ki ngpas s wor ds ,e s c al at i ngpr i v i l e ge s ,e xe c ut i ng appl i c at i ons ,c ov e r i ngt r ac ksar enotne wadv anc e me nt sandAPT i sj us tane ws c ar yt hi ngt os ay .

____________________________________________ AboutAut hor:Lui zFi r mi noi s24y e ar sofi nf or mat i ons e c ur i t y e xpe r i e nc ewor ki ngf orBr az i l i an Fe de r alGov e r nme nt ,Roc he , Sar aLe eandHSBC.Spe c i al i z e di nf i ndi ngnov e lway st oappl y s af e guar dsandc ount e r me as ur e sandt omanagei nf or mat i ons e c ur i t yar e as .

Oc t obe rMont hUpdat e sf r om THN

NSSLabsof f ersBount i esf orexpl oi t s( 1 0/ 06/ 201 1 ) Expl oi t Hub, whi c hope r at e sape ne t r at i ont e s t i ngs i t eandi sr unbyNSSLabs , announc e dabugbount ypr ogr am f orr e s e ar c he r st ode v e l ope xpl oi t sf or1 2 hi ghv al uev ul ne r abi l i t i e si nMi c r os of tandAdobepr oduc t s .Thec ompany , whi c hhass e tas i de$4, 400i nr e war dmone y , pl anst ogi v e$1 00t o$500t ot he f i r s tpe opl et os ubmi tawor ki nge xpl oi tf ort hev ul ne r abi l i t i e s .Readmore: ht t p: / / goo. gl / qW cLn

St udentArrest ed f orhacki ngThai l and Pri meMi ni st erAccount s ( 1 0/ 07/ 201 1 ) Pr i meMi ni s t e rYi ngl uc kShi nawat r a' spe r s onalTwi t t e rac c ountwashac ke d onOc t obe r2nd, 201 1i nwhatof f i c i al ss ai dwaspos s i bl ypar tofac ons pi r ac yt o e mbar r as st hegov e r nme nt .Pol i c ei nThai l andhav ear r e s t e dauni v e r s i t ys t ude ntwhoi ss ai dt ohav eadmi t t e dhac ki ngi nt ot hePr i meMi ni s t e r ' sTwi t t e r ac c ountand pos t i ngme s s age sac c us i nghe rofi nc ompe t e nc e .22y e ar ol d Ae kawi t Thongde e wor akul ,a f our t h y e ar St ude nt . Read more : ht t p: / / goo. gl / pmNhL

Androi d mal ware-W orkson remot ecommandsf orm encrypt ed bl og( 1 0/ 08/ 201 1 ) Re s e ar c he r sf r om Tr e ndMi c r ohav es pot t e dapi e c eofmal i c i ouss of t war ef or Andr oi d. Thi si st hef i r s tknownAndr oi dmal war et hatr e adsbl ogpos t sandi nt e r pr e t st he s easc ommands . I tc anal s odownl oadandi ns t al l addi t i onal appl i c at i ons , t he r e f or ef ur t he rc ompr omi s i ngt heaf f e c t e dde v i c e . Tr e ndMi c r oc al l s t hemal war e" ANDROI DOS_ANSERVER. A. "I ft heappl i c at i oni si ns t al l e d,i t as ksf orav ar i e t yofpe r mi s s i ons .Readmore:ht t p: / / goo. gl / uAEI l

Apache Pat ch rel eased f or Reverse proxy Bypass Vul nerabi l i t y ( 1 0/ 08/ 201 1 ) Se c ur i t ye xpe r t satCont e xthav edi s c ov e r e dahol ei nt heApac hewe bs e r v e r t hatal l owsr e mot eat t ac ke r st oac c e s si nt e r nals e r v e r s .Se c ur i t ye xpe r t sar e war ni ngf i r msr unni ngt heApac hewe bs e r v e rt oke e pupt odat ewi t ht hel at e s t pat c he saf t e rt heApac heSof t war eFoundat i oni s s ue das e c ur i t yadv i s or yt oal l c us t ome r s hi ghl i ght i ng a ne w v ul ne r abi l i t y . Read more : ht t p: / / goo. gl / 54OoG

U. S.dronesaf f ect edbyKeyl oggerVi rus( 1 0/ 1 0/ 201 1 ) y l ogge rofs omes or thasi nf i l t r at e dc l as s i f i e dandunc l as s i f i e dc omput e r Ake s y s t e msatCr e e c hAi rFor c eBas ei nNe v ada, r e c or di ngt heke y s t r oke sofpi l ot s t as ke dwi t hope r at i ngunmanne ddr oneai r c r af ti nAf ghani s t anandot he ri nt e r nat i onal c onf l i c tz one s . Thev i r us , f i r s tde t e c t e dne ar l yt wowe e ksagobyt he mi l i t ar y ' sHos t Bas e dSe c ur i t ySy s t e m,hasnotpr e v e nt e dpi l ot satCr e e c hAi r For c eBas ei n Ne v adaf r om f l y i ngt he i rmi s s i onsov e r s e as .Read More : ht t p: / / goo. gl / d3si 8

FBIshutdown1 8Chi l dPornW ebsi t es( 1 0/ 1 1 / 201 1 ) A manwasr e c e nt l yi ndi c t e donf e de r alc har ge sofr unni ng1 8Chi ne s e l anguagec hi l dpor nogr aphywe bs i t e soutofhi sapar t me nti nFl us hi ng, Ne wYor k. Thewe bs i t e swe r ebe i ngadv e r t i s e dt oChi ne s e s pe aki ngi ndi v i dual si nChi na, i nt heU. S. ,andot he rc ount r i e s .Ac c or di ngt ot heFBI ," Vi r t ual l ye v e r yday , c hi l dr e nar el ur e dawayf r om t he i rf ami l i e sbyc y be rs e xualpr e dat or s .Read more:ht t p: / / goo. gl / e6RMK

Sonyhacked agai n -93, 000 account scompromi sed wi t h brut ef orceat t ack( 1 0/ 1 2/ 201 1 ) Sonyhaswar ne dus e r sagai ns tamas s i v ebr ut e f or c eat t ac kagai ns tPl ay St at i on andSonyne t wor kac c ount s .Theat t ac k–whi c hus e dpas s wor dandus e rI D c ombi nat i onsf r om anuni de nt i f i e dt hi r dpar t ys our c e–s uc c e e de di nc ompr omi s i ng60, 000Pl ay St at i onNe t wor kand33, 000SonyOnl i neEnt e r t ai nme nt ne t wor kac c ount s .Readmore:ht t p: / / goo. gl / 9V0bh

Cyber Cel l Mumbai W ebsi t es hacked by Paki st ani Hacker ( 1 0/ 1 5/ 201 1 ) Paki s t anihac ke r" Shadow008"f r om Paki s t aniCy be rAr myagai ns t r i kebac k onI ndi a' sMos tI mpor t antwe bs i t eofCy be rc e l l l oc at e datMumbai , I ndi a. The We bs i t e si sDe f ac e dt odayMor ni ngandMi r r orofHac kal s oav ai l abl eonLe ge ndh.Readmore:ht t p: / / goo. gl / xTI b7

SesameSt reetYouTubeChannelHacked,PornPost ed( 1 0/ 1 7/ 201 1 ) Someoft hewor l d’ swor s tl owl i f e sde c i de dt ohac kt heSe s ameSt r e e tYouTube c hanne landr e pl ac es omeoft hev i de oswi t hpor nogr aphi cc l i ps .Forabout20 mi nut e sy e s t e r day ,v i s i t or st ot heYouTubec hanne loft hepopul arc hi l dr e n’ s s hows awhar dc or epor n.Readmore:ht t p: / / goo. gl / eG2H4

Mi l eyCyrusNeedsALect ureonCyberSecuri t y( 1 0/ 1 7/ 201 1 ) Theman,whoi sc ur r e nt l yf ac i ngup t o1 21y e ar sbe hi nd bar s ,hasbe e n c har ge d wi t h 26 c ount sofi de nt i t yt he f t ,wi r e t appi ngand unaut hor i s e d ac c e s st opr ot e c t e dc omput e r . Chane y ,whohasbe e ni nc ont ac twi t hTMZf or t hel as tt woy e ar s ,hasc ont ac t e dt hegos s i pwe bs i t ewi t hde t ai l sonhow he hac ke d i nt o Mi l e y Cy r us ' s Gmai l ac c ount . Read more : ht t p: / / goo. gl / az0Od

' Good t o Know'campai gn :Googl e Col l aborat es wi t h Ci t i zens Advi ceBureauf orOnl i neSaf et y( 1 0/ 1 7/ 201 1 ) Googl e ’ sf i r s te v e radv e r t i s i ngc ampai gnf oronl i nes af e t yl aunc he st oday ,i n as s oc i at i onwi t ht heCi t i z e nsAdv i c eBur e au.I tc ov e r st opi c ss uc hasc hoos i ng apas s wor d,s c am e mai l sandus i ngt wof ac t oraut he nt i c at i on.Readmore: ht t p: / / goo. gl / i 1 3Zj

Duqu-NextMaj orCyberW eaponl i keSt uxnet( 1 0/ 1 8/ 201 1 ) TheSt uxne tc y be r wor mc oul ds oonbemodi f i e dt oat t ac kv i t al i ndus t r i al f ac i l i t i e si nt heUSand abr oad,c y be r s e c ur i t ye xpe r t swar ne d We dne s dayata Se nat ehe ar i ng. Comput e rs e c ur i t yc ompani e sagr e et hatt he s ev i r usi sunpr e c e de nt e d and i t me ans t he dawn of a ne w wor l d. Read More : ht t p: / / goo. gl / 0sLl N

AdobeFl ashbugal l ow spyi ngW ebcam hol e( 1 0/ 20/ 201 1 ) Thef l awwasdi s c l os e di n2008andc anbee xpl oi t e dt ot ur nonpe opl e ' swe bc amsormi c r ophone swi t houtt he i rknowl e dge .At t ac ki nv ol v e dput t i ngt he AdobeFl as hSe t t i ngsManage rpagei nt oani Fr ameandmas ki ngi twi t ha game ,s ot hatwhe nt heus e rc l i c ke dont hebut t onshewoul dac t ual l yc hange t hes e t t i ngsandt ur nont hewe bc am.Readmore:ht t p: / / goo. gl / ga6DF

Hackers l eak Ci t i group CEO’ s personaldat a af t er Occupy W al l St reetarrest s( 1 0/ 21 / 201 1 ) Themobi l ephonenumbe randhomeaddr e s sofVi kr am Pandi t ,t hec hi e fe xe c ut i v e ofCi t i gr oup,hav e be e n pl ac e d on t he we b by hac ki ng gr oup Cabi nCr 3wi nr e t al i at i onf ort hec uf f i ngofpr ot e s t e r satanOc c upyWal lSt r e e t de mo.ReadMore:ht t p: / / goo. gl / ygi o2

Anonymous Hackers Take Down 40 Chi l d Porn W ebsi t es ( 1 0/ 22/ 201 1 ) Anony moushast ake ndownmor et han40dar kne t bas e dc hi l dpor nwe bs i t e s ov e rt hel as twe e k.De t ai l sofs omeoft hehac kshav ebe e nr e l e as e dv i apas t e bi n#OpDar kne t ,i nc l udi ngpe r s onalde t ai l s1 500us e r sofas i t ename d' Lol i t a Ci t y , ' andDDoSt ool st hatt ar ge tHi dde nWi ki andFr e e dom Hos t i ng— al l e ge d t obet wooft hebi gge s tdar kne ts i t e shos t i ngc hi l d por n.Read More : ht t p: / / goo. gl / zcML9

Mi crosof t ’ sof f i ci alYout ubechannelhacked( 1 0/ 23/ 201 1 ) I tappe ar st hats ome onehashac ke di nt oMi c r os of t ’ sac c ountonYout ubeand r e mov e dal lv i de os .Al s ot hehome t ownhasbe e nc hange dt o“ He y ” .I nt he i r pl ac ear es hor tc l i pss ol i c i t i ngadv e r t i s e r s , nots ur pr i s i ngl y , ast hec hanne lhas s ome24, 000+s ubs c r i be r s .ReadMore:ht t p: / / goo. gl / 6U3Cp

Lat estSecuri t yFl aw i nSkypeEnabl esI Paddress&Locat i onTracki ng( 1 0/ 25/ 201 1 ) Thes e r i ousbr e ac hi nt hewi de l y us e d,i nt e r ne tv i de oc hatpr ogr am me ans t hatanye v i lc omput e rne r dc oul de as i l yhuntdownus e r s 'whe r e about s ,ac c or di ngt oas t udyc oaut hor e dbyanNYUPol ypr of e s s or .Read more: ht t p: / / goo. gl / EsV0W

AnonymousDDOSOakl andpol i cesi t eaf t ervi ol ence( 1 0/ 27/ 201 1 ) Cy be rac t i v i s t sas s oc i at e dwi t hAnony moushav et ar ge t e dt heOakl andPol i c e De par t me nt( OPD)andot he rl awe nf or c e me ntage nc i e st hatpar t i c i pat e di na c ont r ov e r s i alc r ac kdownagai ns tOc c upy Oakl andpr ot e s t or s .Read More: ht t p: / / goo. gl / ZyE6b

USsat el l i t eswasvi ct i m byChi neseHackers( 1 0/ 27/ 201 1 ) Comput e rhac ke r s ,pos s i bl yf r om t heChi ne s emi l i t ar y ,i nt e r f e r e dwi t ht wo U. S. gov e r nme nts at e l l i t e sf ourt i me si n2007and2008t hr oughagr ounds t at i on i n Nor way ,ac c or di ngt oac ongr e s s i onalc ommi s s i on.Read More : ht t p: / / goo. gl / QQI S3

Facebook EXE at t achmentVul nerabi l i t y can Compromi se wi t h UsersSecuri t y( 1 0/ 27/ 201 1 ) Nat hanPowe rf r om Se c ur i t y Pe nt e s thasdi s c ov e r e dne wFac e bookVul ne r abi l i t y ,t hatc ane as i l yat t ac hEXEf i l e si nme s s age s , c aus epos s i bl eUs e rCr e de nt i al st obeCompr omi s e d.ReadMore:ht t p: / / goo. gl / DKaW L

Mal waref orxboxKi nectcreat edby1 5yearsol dI ndi anresearchers ( 1 0/ 27/ 201 1 ) A1 5y e arol dI ndi ans e c ur i t yr e s e ar c he r' Shant anuGawde 'f r om Mal ConRe s e ar c hhasc r e at e damal war et hatut i l i z e st heMi c r os of txboxki ne c tc ont r ol l e r . Ki ne c tf orXbox360, ors i mpl yKi ne c t , i samot i ons e ns i ngi nputde v i c ebyMi c r os of tf or t he Xbox 360 v i de o game c ons ol e . Read More : ht t p: / / goo. gl / m4rdx

How Facebook Ti cker exposi ng your i nf ormat i on and behavi or wi t houtyourknowl edge( 1 0/ 28/ 201 1 ) Ne l s onNov ae sNe t o,aBr az i l i an( i nde pe nde nt )Se c ur i t yandBe hav i orRe s e ar c hhav eanal y z eapr i v ac yi s s uei nFac e bookTi c ke rt hatal l owsanype r s on c has i ngy ouwi t houty ourknowl e dgeorc ons e nt.Hee xpl ai nt hatt hi si snota c odev ul ne r abi l i t y ,buthe r et hewhol ei s s uei sr e l at e dt ous e r spr i v ac y .Read Moreatht t p: / / goo. gl / DsdGP

Anonymous hackers t hreat eni ng a Mexi can drug cart el ( 1 0/ 29/ 201 1 ) Anony mousMe xi c oi sgoi nghe adt ohe adwi t honeoft hemos tdange r ous c r i mi nalor gani z at i onsi nt hewor l d,t heMe xi c anc ar t e lLosZe t as . Me xi c an Anony moushac ke r si swar ni ngaMe xi c andr ugc ar t e lt or e l e as eoneofi t s me mbe r s , ki dnappe d f r om a s t r e e t pr ot e s t . Read More : ht t p: / / goo. gl / M8Tf a

DuquTroj anf oundi nI ndi anServer( 1 0/ 30/ 201 1 ) Twowor ke r satawe bhos t i ngc ompanyc al l e dWe bWe r kst ol dRe ut e r st hat of f i c i al sf r om I ndi a' sDe par t me ntofI nf or mat i onTe c hnol ogyl as twe e kt ook s e v e r alhar ddr i v e sandot he rc ompone nt sf r om as e r v e rt hats e c ur i t yf i r m Sy mant e cCor pt ol dt he m wasc ommuni c at i ngwi t hc omput e r si nf e c t e dwi t h Duqu.ReadMore:ht t p: / / goo. gl / MHJ0h

Facebook "Trust ed f ri ends" Securi t y Feat ure Easi l y Expl oi t abl e ( 1 0/ 31 / 201 1 ) Las twe e kFac e bookannounc e dt hati noneday600, 000ac c ount spos s i bl yge t hac ke d. Anot he rpos s i bl es ol ut i onf orFac e bookt oc ombats e c ur i t yi s s ue si st o f i nd3t o5" Tr us t e df r i e nds " . Thi sExpl oi ti s90%Suc c e s s f ul ont hev i c t i mswho add f r i e ndswi t houtknowi ngt he m orj us tf ori nc r e as i ngt henumbe rof Fr i e nds .ReadMore:ht t p: / / goo. gl / aurRI