400 websites hacked by 3xp1r3 Cyber Army

The Bangladeshi Hacker group known as '3xp1r3 Cyber Army'  hacked and  defaced around 400 websites after breaching a server belonging to a hosting company.

A representative of the hacker group said that although many of the sites belong to Indian organizations, the breached server is located in Canada.

According to the hacker, there isn’t a specific reason for which the sites have been defaced. They simply did it to demonstrate the lack of security measures.

One of the hackers has revealed that the team is planning to declare cyberwar on a country. They couldn’t reveal the country’s name since the final decision hasn’t been taken yet.

They also plan on releasing their own hacking forum within the next 20 days. The complete list of affected websites can be found here - most of which are still defaced.

Continue Reading

Hackers accessed private,nude Photobucket pics, then posted on Reddit

Hackers have managed to gain access to a number of women's private, nude photos on Photobucket, then posted in public Web forums.

An entire thread on Reddit is devoted to posting X-rated pics stolen from Photobucket, an online photo-hosting platform. Some pose in underwear or completely nude, some hide their faces while others stare directly into the camera — but none intended to share the photos.

Unbelievably, another thread takes requests. Reddit users post names of girls whose private photos they want to see.

Skilled hackers are bypassing Photobucket's security settings and scouring for naked photos users wanted to keep private. They use software to retrieve the hidden snaps, a disturbing trend known as "fusking."

Photobucket users have the option of making their albums or individual photos private, but every single photo still has its own URL.

The image title is part of the URL, and even if the URL is private, the title isn’t hard to find.

For example, if a user has an image titled IMG_03 that is made public, they likely have an IMG_04, even if it’s not public. Frisking programs essentially speed up the guessing process and produce URLs for someone’s hidden photos, something like: http://www.photobucket/com/image/username/IMG_04.jpg.

Photobucket says it’s aware of fusking and provides a URL scrambling service that makes photos harder to hack.

“Scrambled URLs have been an option for the past two years and will be the default for all new uploads,” Photobucket spokesman David Toner said. “The company is in the process of reminding users about the option to scramble URLs to prevent fusking.”

Toner added that the breach of privacy is “very rare” and said it has “only affected a small number of Photobucket’s users.”

Experts say the best way to avoid starring in your own X-rated Reddit show is to keep nude photos off the Internet altogether — private or not.

“Privacy settings on social media sites just can’t keep up with how fast technology is adapting,” social media attorney Ethan Wall said

 “As sites get more private, hackers and people who want to get more information will continue to get more sophisticated.”Wall added.

Continue Reading

AntiLeaks claims they are behind DDoS attack on Wikileaks

Wikileaks was down around 10 days after massive DDoS attack. WikiLeaks says that they’ve been under attack since revealing TrapWire. But the hacker group called Antileaks claims responsibility for this attack.

They said the attacks were in protest over the role of Julian Assange, who is currently the guest of the Ecuadorian embassy while waiting for his plea for political asylum to be decided.

"I want to make it clear to all the conspiracy theorists out there that we have nothing to do with the United States Government or Trapwire," DietPepsi ,head of the AntiLeaks hacking group said.  "We find it quite humorous to read all these Twitter comments from people who suspect us of being NSA/CIA/FBI/or even WikiLeaks themself,"

"We gave @wlpress a 5 minute advanced notice of our next attack to take down there backup mirror(http://mirror2.wikileaks-press.org) on August 10th. We also gave a 30 minute advanced notice of our attack on the President of Ecuador's website to the german tech publication Gulli . The logs of both servers will show an attack precisely when we said it would occur. These are irrefutable facts. "

"In the end we cannot prove individually to every person that doubts our claims that we are behind these attacks. There are a lot of people who still don't believe we landed on the moon. We feel we have nothing left to prove to anybody."

Continue Reading

Microsoft Cyber-Crime Department Phishing Scam

A spam mail purporting to be from the Microsoft Cyber-Crime Department claims that all email users around the world are required to validate their account by clicking a link in the message or risk having their email address deleted from the world email server.

“As part of the security measures to secure all email users across the world, All email users are mandated to have their account details registered as requested by the Microsoft Cyber-crime Dept ( M C D ),” part of the email reads.

“You are here by required to validate your account within 24 hours so as not to have your email account suspended and deleted from the world email server. Kindly validate your email account to have your account registered, follow d link below: [Link],” it continues.

To make it more legitimate-looking, the logo of Microsoft’s Digital Crime Unit has been embedded into the notification.

When users click on the link, they’re taken to a bogus website that’s designed to collect sensitive information and send it back to the attackers, Hoax Slayer reports.

Continue Reading