Posts

Showing posts from August, 2017

POS: Security Flaws allows hacker to change price, steal data

Image
Researchers at ERPScan discovered that SAP’s POS product, that is a component of the company’s SAP for Retail giving, was stricken by many flaws. Specifically, the system’s server element, Xpress Server, lacked necessary authorization checks for vital practicality. This allows AN assailant with access to the system to send malicious configuration files to Xpress Server and gain complete management of each the frontend and backend of the PoS system. A hacker will abuse tens of commands, permitting them to steal knowledge from all the credit and debit cards used at the targeted store, and apply special costs and discounts to such that things. These discounts is applied for such that times in order that AN item contains a tiny value only fraudsters visit purchase it. Fraudsters may also got wind of the system in order that their purchases area unit charged to the previous customer’s card. An assailant may also modification the info displayed on a receipt, as well as to s

MalwareTech: Not guilty for unleashing a Kronos banking malware

Image
British cybersecurity researcher credited with serving to curb the recent WannaCry ransomware attack pleaded innocent  to federal charges accuse him of making malicious computer code to steal banking info 3 years past. Marcus Hutchins entered his plea in Wisconsin tribunal, wherever prosecutors charged him and an nameless co-defendant with conspiring to commit pc fraud within the state et al. Authorities arrested the 23-year-old man August. 2 at McCarran International airport in urban center, wherever he was aiming to board a flight to his zero in Ilfracombe, England. He had been in las vegas for DEFCON. Hutchins' professional, Marcia Hofmann, aforementioned when Monday's transient hearing that Hutchins can fight the costs which “when the proof involves lightweight, we have a tendency to square measure assured he are going to be totally guiltless.” “Marcus Hutchins could be a sensible young man and a hero,” Hofmann aforementioned. Hutchins left later during

GOT: Star's Personal detail leaked from HBO

Image
Recently group of Hacker released HBO dumps which contain the Private information of the starts of the GOT: Game of Thrones. As there is no doubt that the most awaited season 7 of Game of Thrones has been started to telecast on the television channel HBO. At the same time hacker claimed that they have breached the network of the channel HBO, collect data and demand the ransom as not to publish the content of Game of Thrones on the internet. Hacker releases the one minute video on the internet to chief executive of HBO claiming that they have taken 1.5TB of data which contain upcoming videos of the season 7 of GOT, scripts of the episodes, email of the stars, also many more confidential records. As the proof of their work hacker “Mr Smith” released some of the 3.4 GB data which containing some private info of the stars, technical data of HBO’s internal network, emails, drafted scripts. The hacker demanded to pay $12 - $15M in the equivalent cryptocurrency Bitcoin. I

Bateleur: New Malware mainly target to the Restaurant Chain

Image
A ill-famed hacking group is come back with a replacement methodology of distributing Trojan malware, with the aim of making backdoor into the networks of edifice chains across the U.S.A.. Known as  “Bateleur”, the researchers at Proofpoint United Nations agency uncovered it, it's thought to be the work of Carbanak, a group that focuses its attacks on company targets. The cluster has purloined over $1bn from banks worldwide and is assumed to be behind a string of alternative attacks all over the world. Carbanak has antecedently targeted cordial reception organisations as well as retailers, and suppliers. This time, however, it's trying to infiltrate chain restaurants through a backdoor into their Windows systems, facultative the cluster to require screenshots, steal passwords, execute commands, and many more to do. In order to extend the possibilities of infection, the JavaScript backdoor is in the course of new macros, anti-analysis tools, and sandbox evasi