Saturday, December 28, 2013

Introduction to SoftICE

  1. SoftICE is a kernel mode debugger for Microsoft Windows. Crucially, it is designed to run underneath Windows such that the operating system is unaware of its presence.
  2. Unlike an application debugger, SoftICE is capable of suspending all operations in Windows when instructed. For driver debugging this is critical due to how hardware is accessed and the kernel of the operating system functions.
  3. Because of its low-level capabilities, SoftICE is also popular as a software cracking tool.
  4. Microsoft offers two kernel-mode debuggers, WinDbg and KD, for no charge.
  5. However, the full capabilities of WinDbg and KD are available only when two interlinked computers are used.
  6.  SoftICE therefore is an exceptionally useful tool for difficult driver related development.
  7. The last released version was for Windows XP. Newer versions of Windows are seemingly unsupported as the tool is no longer listed on Compuware's website.
  8. A commercial kernel-level debugger called Syser claims to continue where SoftICE left off.
    A shareware but free to use OllyDbg is a 32-bit assembler level debugger from Oleh Yuschuk. However, it can only be used for user-mode debugging.

Monday, December 9, 2013

Regular Testing Essential to Stop Hacker Access

  1. RATs, or Remote Access Trojans (aka Remote Administration Tools), can give hackers total remote control of any compromised system(s). Once this type of malware payload is successfully delivered, through a phishing email, USB delivery or a malicious site, a hacker can easily get up to all kinds of costly mischief.
  2. This week, reports surfaced that a banking Trojan employing RAT technology known as Neverquest is poised to explode in the coming months.
  3. What do RATs do?
    • “Put simply, a RAT is malware that gives criminals a backdoor to the infected system. 
    • Once a RAT payload has been delivered, a hacker will have all the access and privileges to everything on the system or device the user does. 
    • Most APTs (Advanced Persistent Threats) employ some kind of RAT technology because of the absolute power it gives an attacker to do basically whatever they want.
     

     

Saturday, December 7, 2013

Huawei security centre in UK gets security clearance

  1. Huawei supplies software and equipment which channels phone calls and data around Britain and has found itself at the centre of a debate, particularly in the United States, over whether it is a risk for governments to allow foreign suppliers access to their networks
  2. Britain will clear Chinese telecoms equipment firm Huawei to run a UK-based cyber security centre if it agrees to tighter rules to allay spying and hacking fears, a person familiar with the matter said.
  3. Check detailed news at http://articles.timesofindia.indiatimes.com/2013-12-05/hardware/44806476_1_potential-chinese-state-influence-huawei-cyber-security.

2M Facebook, Gmail, Twitter Passwords Stolen in Massive Hack

  1. Hackers have stolen usernames and passwords for nearly two million accounts at Facebook, Google, Twitter, Yahoo and others, according to a report released this week.
  2. The massive data breach was a result of keylogging software maliciously installed on an untold number of computers around the world, researchers at cybersecurity firm Trustwave said. 
  3. The virus was capturing login credentials for key websites over the past month and sending those usernames and passwords to a server controlled by the hackers
  4. On Nov. 24, Trustwave researchers tracked that server, located in the Netherlands. They discovered compromised credentials for 93,000 websites, including:
    318,000 Facebook accounts
    70,000 Gmail, Google+ and YouTube accounts 60,000 Yahoo accounts 22,000 Twitter accounts 9,000 Odnoklassniki accounts (a Russian social network) 8,000 ADP.accounts 8,000 LinkedIn accounts
  5. http://www.8newsnow.com/story/24135669/2-million-facebook-gmail-twitter-passwords-stolen-in-massive-hack