Saturday, September 25, 2010

Myth About Indian Hackers: True Story Behind Underground Hackers

Myth About Indian Hackers: True Story Behind Underground Hackers

GUEST POST BY Vaidehi Sachin

Cyber war is nothing but an eye wash, actually speaking cyber war is a created hype by some old kids, in which one thinks himself a soldier and others as toy guns. And the computer as his Kingdome, little knowledge he possess is his wisdom, and tools he posses for hacking are his arms and ammunitions. The so called cyber war soldiers are living in their own imaginary world and each one of them thinks he is superior amongst them. By giving too much importance to this particular term ‘Cyber War” creates nothing but a fear in common public and hackers aspiring this carrier as his living and passion. These so called war participants are nothing but notorious small time criminals. They should be punished. If one particular group of hackers is clutched then maximum can be traced and the authentic hackers can sustain with integrity. its hight time to face of these disguised hackers and expose thenm to common masses.

The hacking rivalry between Pakistani and Indian hackers is known to almost everyone. Pakistani hackers are known to be most unethical hacker by Indian hackers. This cyber war is never going to stop. Because the group of hackers those who are hand in gloves with each other are making this trait as publicity gimmick. It’s just as you scratch my back and I scratch yours. This has infected several countries across the globe. In the age of Technology wars the battles are not fought by weapons or atomic powers but it’s on raise through the advent of Information Technology, the pace of cyber wars between Pakistan and India have also been increased. All these low profile hackers are either engineering students, or just school going kiddos those who learned hacking from various tools openly provided on search engine. It’s itch in them to create a horrifying aura and over hype the meager issues. One particular group from north is doing this. I know after publishing this article they may create trouble for me as their basic instincts are destructive. I give damn because I am blessed with best hacker friends and a brother to tackle these goons. Actually Information is a source of learning. But unless it is organized, processed, and available to the right people in a format for decision making, it is a burden, not a benefit.



Actually the genuine Cyber wars between the two countries first started in May 1998, when India conducted its nuclear tests. Soon after India officially announced the test, a group of hackers called milw0rm broke into the Bhabha Atomic Research Center web site and posted anti-India and anti-nuclear messages. This hacking had an intention to protest the deal. Recently it seems like a Cyber war has become publicity tool between Pakistani Hackers and Indian hackers. The irony is that they use country flags to display the bonding of love for own country. If by hacking Indian sites Pakistani hackers are doing crime then by doing the same even Indian hackers are criminals. In the recent past when I started interacting with hackers for my forthcoming magazine “cyber Ghosts”, I met different characters. They have got nothing to do with your country; they have got nothing to say expect displaying their credentials as some great hacker. Some groups have made mockery of this little knowledge, they peruse schools and collages conduct seminars, charge the students and make big money by making this subject a taboo. Young minds nowhere take any participation in securing system they just get attracted to word hacking, the practice starts with hacking girlfriends mail, password, then school website domain. And this extends in to hacking all wanted and unwanted arenas. By conducting these kind of unofficial seminars, ( I am calling it unofficial because so far government recognized such training centers are hardly in existence} private so called ethical hacking training camps are mushrooming in every part of India. Blogging on learn hacking is another blot to this black trait. If you have glance at all theses so called sites and blogs, they all somewhat similar. Hardly will you find something authentic. This particular group of hackers are worst than terrorists. They are misguiding youth of this country. They themselves have divided in to various groups, Andhra hackers, south hackers, Nepali hackers, Punjabi hackers, Maharashtra hackers, tiger hackers (from Kolkata) etc etc.. There is no harmony amongst them; they all are Indians but still big rivals to each other. Some of them even created Cyber army.
The history says this all started when IGCOE Hacker from India hacked Punjabi Pakistani Police official website. In Response to it Pakistani Hackers hacked India's several official websites. Cyber war has gone in so deep and hidden in horrifying layers. This techno war has taken a cruel shape. There are so many Indian hackers working for Pakistan, and at the same time there are many Pakistani hackers just committed to their work having to bad or malicious intention against India. For me these Indian hackers are the biggest threat for my country. Tracing these hackers is not a big issue but it’s difficult because they are operating from other countries. But the question remains here is why Government has failed to track down Indian unethical or Pak agencies agent hackers of India? There should be a combing operation to eradicate this evil. As per Indian constitution hacking is crime let it be ethical or unethical. The irony is that other nations are using these hackers to sabotage neighboring countries as well as protect their own cyber world. Actually if given a chance or If Indian hackers taken into confidence they can create wonders by protecting entire cyber network of India because India has most efficient hackers on the globe. But unfortunately they have gone haywire. I would like to site an example here buying domain is not difficult, the demine owner keeps all the security procedures, he posses all panels with him. Key panel excess is always with a demine owner. Let any password or admin go here and there but server’s crucial info is always with the domain owner and every activity is traced here. One can hack http but not the domain WHICH IS EASILY RECOVERABLE. The hacking is done on very superficial level of these particular websites, but hundreds of such low profile sites are hacked and yet not recovered. Why? Who is doing it? Who the supporters are? It’s a big mystery of this hacking industry.

No doubt Both Pakistani and Indian websites got hacked which means that both the countries suffered security threats. This battle may result in loss of innocent people who are not the part of war. So called great hackers website was hacked In December 2009 it was Fadia’s business site, hackingmobilephones.com was hacked by a spammer promoting pharmaceutical products for erectile dysfunction. The question remains here is why this so called “INDIA’S BEST HACKER” couldn’t protect his site from other hackers? If given a chance and assurance to capable hackers of this country they can do much much… more than Fadia. Its high time Government should take help of these hackers to protect our own cyber network and use them as cyber army. The recent Independence Day was a nightmare for some of the webmasters and website owners of both India and Pakistan. The attack was started by Pakistani hackers defacing some Indian websites on 14th August; this was followed by counter attack from Indian Hackers. In the counter attack from both the sides’ lot of websites were hacked and defaced. The attack was started by Pakistani groups called Pak Cyber Army and PakHaxors, these groups have defaced around 10-20 websites .the counter attack was lead by Indian hackers called Indishell and Indian Cyber Army who are claiming to deface more than 2000 Pakistani websites but Zone-h data confirms the 1000+ figure. Indian hackers always thought they were too sophisticated to fall into the hands of the rough cops in this country, whom various human rights groups routinely accuse of brutality. Why should government and police is so merciless with the hackers? They want to be on the official side of Internet security now but they are scared because they are treated as a criminal then it leaves an unpleasant taste. Indian hackers don’t have a strong united community, so it’s difficult to tell if there is a drop in activity may be that’s the reason the hackers are lying low. Nobody wants to mess again.

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Myth About Indian Hackers: True Story Behind Underground Hackers

GUEST POST BY Vaidehi Sachin

Underworld of Hakka Noodles

In the recent past one largest country Chinese is in news due to hackers, these hackers are called Hakka noodles, and they have hit the headlines. Computer security specialists say there are so-called patriotic hackers who focus their attacks on political targets. Then there are the intelligence-oriented hackers inside the People's Liberation Army, as well as more shadowy groups that are believed to work with the government. This country is one of the most well to do and well managed country.

The government has empowered hackers in different sectors of China. The empowerments of hackers have reduced internal cyber crime and the entire force is used for securing the cyber network of country. This does not mean this country is not hacked by any other country. They are also part of Cyber war. The interesting fact is that the maximum hackers of this country are girls between the age group of 13 to 21. So far two illegal hackers Biyu a urban girl, in her 18s, operates underground, her biggest passion is to break in to websites. Another story is of a young Chinese hacker Majia, a soft-spoken college graduate in his early 20s, is a cyberthief. He operates secretly and illegally, as part of a community of hackers who exploit flaws in computer software to break into websites, steal valuable data and sell it for a profit. Majia started hacking in college.
After a degree in engineering, he took a job with a government agency, largely to please his parents. But every night after work, he turns to his passion: hacking. Most hackers are lazyOnly a few of us can actually write code. That's the hard part. Internet security experts say China has legions of hackers just like Majia, and that they are behind an escalating number of global attacks to steal credit card numbers, commit corporate espionage and even wage online warfare on other nations. He operates from a dingy apartment on the outskirts of this city in central China.

In addition to independent criminals like Majia, Here's a list of the people who've been infected with my Trojan horse,. As he explains it, an online "trapdoor" he created has already lured 2,000 people from China and overseas - people who clicked on something they should not have, inadvertently spreading a virus that allows him to take control of their computers and steal bank account passwords. Indeed, in China - as in parts of Eastern Europe and Russia - computer hacking has become something of a national sport, and a lucrative one. There are hacker conferences, hacker training academies and magazines with names like Hacker X Files and Hacker Defense, which offer tips on how to break into computers or build a Trojan horse, step by step. For less than $6, one can even purchase the Hacker's Penetration Manual. And with 380 million Web users in China and a sizzling online gaming market, analysts say it is no wonder Chinese youth are so skilled at hacking. Many Chinese hackers interviewed over the past few weeks describe a loosely defined community of computer devotees working independently but also selling services to corporations and even the military.

Because it is difficult to trace hackers, exactly who is behind any specific attack and how and where they operate remains to a large extent a mystery, technology experts say. And that is just the way Majia, the young Chinese hacker, wants it. Computer hacking is illegal in China. Last year, Beijing revised and stiffened a law that makes hacking a crime, with punishments of up to seven years in prison. Majia seems to disregard the law, largely because it is not strictly enforced. But he does take care to cover his tracks. He admitted the lure was money. Many hackers make a lot of money, he said. Exactly how much he has earned, he will not say. But he admits to selling malicious code to others; and boasts of being able to tap into people's bank accounts by remotely operating their computers.

Financial incentives motivate many young Chinese hackers like Majia, experts say. Scott J Henderson, author of The Dark Visitor: Inside the World of Chinese Hackers, said many had been seeking to profit from stealing data from big corporations, or teaching others how to hijack computers. "They make a lot of money selling viruses and Trojan horses to infect other people's computers," Henderson. "They also break into online gaming accounts, and sell the virtual characters. It's big money." Majia even claims to know details of the Google attack. These two chines hackers have recentely teamed up and gave many TV channel apperances.

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Company Profile of Newsmakers Broadcasting and Communications Pvt. Ltd. AKA NBC

Company Profile of Newsmakers Broadcasting and Communications Pvt. Ltd. AKA NBC

Promoter's & company profile


NBC Awards


NEWS MAKERS


NBC Journalism Academy


NBC Voice



Cy3er Gh057


Cyber Terror


Beyond the News


Afternoon News


Maritime


ArtScape


Company Profile of Newsmakers Broadcasting and Communications Pvt. Ltd. AKA NBC

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Friday, September 24, 2010

CYBER GHOST: We are live once again to provide you best cyber & hacking news

CYBER GHOST: We are live once again to provide you best cyber & hacking news

Hi Friends.. Amarjit Singh here and hope you all will be happy to see me once again. Well you will not find any old post here.. why no need to tell.

Do not ask me what happened and where I was....because I am only thinking about our new venture these days. As most of you guys are aware that Cyber Terrors will be launched on30th Oct in which I am working as co-author.....along with this we are also planning to launch a new Magazine..which will be first on its type. The magazine name is CYBER GHOST and published on monthly basis. The target is all you guys and I am damm sure the I will get a huge response from all you guys. This magazine will be launched on 7th OCT....and the venue for its launching party is CHANDIGARH, PUNJAB...Yes its my mother land Punjab.

So..I am closing here for today..keep you eyes open for tomorrow and keep visiting this blog. If you any query, just drop me a comment here

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Beware of Fake Subject Notification: Afternoon Voice 24 September

Beware of Fake Subject Notification: Afternoon Voice 24 September

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Remarkable Revenge against BURN QURAN DAY

Remarkable Revenge against BURN QURAN DAY

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Little & Sensible Hacker Friend: Chit Chat with Hacker on Social Networking Site

Little & Sensible Hacker Friend: Chit Chat with Hacker on Social Networking Site


---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

My Little Lonely Hacker: Chit Chat with Hacker on Social Networking Site

My Little Lonely Hacker: Chit Chat with Hacker on Social Networking Site


---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Cyber war between Porki and patriotic hackers

Cyber War Between Porki & Patriotic Hackers

SOURCE: Cyber Terror

The hacking rivalry between Pakistani and Indian hackers is known to almost everyone. Pakistani hackers are known to be most unethical hacker and our Indian hackers call them porkis.

This cyber war is never going to stop. This has infected several countries across the globe. In the age of Technology wars the battles are not fought by weapons or atomic powers but it’s on raise through the advent of Information Technology, the pace of cyber wars between Pakistan and India have also been increased. Actually Information is a source of learning. But unless it is organized, processed, and available to the right people in a format for decision making, it is a burden, not a benefit.Cyberwars between the two countries first started in May 1998, when India conducted its nuclear tests. Soon after India officially announced the test, a group of UK based hackers called milw0rm broke into the Bhabha Atomic Research Center web site and posted anti-India and anti-nuclear messages.
Recently it seems like a Cyber war has been started between Pakistani Hackers and Indian hackers. This all started when IGCOE Hacker from India hacked Punjabi Pakistani Police official website. In Response to it Pakistani Hackers hacked India's several official websites. Whenever Indian hacker hacks Pakistani website they leave message on that website “You Porki You is hacked”. Porki word had come from pork, Muslims they hate pork and they treat this term as slang. May be that’s the reason Indian hackers have preferred using this word for pakihackers.

As per Indian constitution hacking is crime let it be ethical or unethical. The irony is that other nations are using these hackers to sabotage neighboring countries as well as protect their own cyber world. Actually if given a chance or If Indian hackers taken into confidence they can create wonders by protecting entire cyber network of India because India has most efficient hackers on the globe. Definitely one would like to know that who wins the battle Pakistani hackers or Indian Hackers, the answer is nun. There is nothing to win but it’s a loose .Both Pakistani and Indian websites got hacked which means that both the countries suffered security threats. This battle may result in loss of innocent people who are not the part of war. The common method which is used widely is SQL Injection.SQL Injection involves entering SQL code into web forms, eg. Login fields, or into the browser address field, to access and manipulate the database behind the site, system or application. The other methods which were used are Brute force or Dictionary Attacks. The hackers might have cracked FTP password to gain access to Server. Earlier Pakistani hackers used to be called Pakbugs and Indian hackers named HMG.
There are some so called ethical hackers over rated by media and over hyped more than their actual caliber, but some hackers do not even know who this Ankit Fadia is, There are lot of arguments and facts against him, Some people says he is not a HACKER he is just a businessman.

At the age of 14 Ankit Fadia started a website called “HackingTruths”, which he claims was judged as the “second best hacking site in the world by the FBI”. The question is that no one knows when did FBI started rating hacking sites? And suppose if FBI do so then why should they over look or neglect rating other such sites and blogs which has much more potential than fadia’s claims. FBI is and investigation agency and it has got nothing to do with the ranking of any such website. Fadia’s claims seems to be flopped because he has never created any tools for hacking. Most intelligence agencies like NSA have expert cryptanalyst with PhD’s and super fast clusters to get their job done why will they require this mature guy to do such serious job? So called great hackers website was hacked In December 2009 it was Fadia’s business site, hackingmobilephones.com was hacked by a spammer promoting pharmaceutical products for erectile dysfunction. The question remains here is why this so called “INDIA’S BEST HACKER” couldn’t protect his site from other hackers? If given a chance and assurance to capable hackers of this country they can do much much… more than Fadia. Its high time Government should take help of these hackers to protect our own cyber network and use them as cyber army.
The recent Independence Day was a nightmare for some of the webmasters and website owners of both India and Pakistan. The attack was started by Pakistani hackers defacing some Indian websites on 14th August; this was followed by counter attack from Indian Hackers. In the counter attack from both the sides’ lot of websites were hacked and defaced. The attack was started by Pakistani groups called Pak Cyber Army and PakHaxors, these groups have defaced around 10-20 websites .the counter attack was lead by Indian hackers called Indishell and Indian Cyber Army who are claiming to deface more than 2000 Pakistani websites but Zone-h data confirms the 1000+ figure.

Indian hackers always thought they were too sophisticated to fall into the hands of the rough cops in this country, whom various human rights groups routinely accuse of brutality. Why should government and police is so merciless with the hackers? They want to be on the official side of Internet security now but they are scared because they are treated as a criminal then it leaves an unpleasant taste. Indian hackers don’t have a strong united community, so it’s difficult to tell if there is a drop in activity may be that’s the reason the hackers are lying low. Nobody wants to mess again.

Cyber War Between Porki & Patriotic Hackers

SOURCE: Cyber Terror

---If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net

Tuesday, September 14, 2010

Cyber Terrors Coming Soon: Unite Indian Hackers

Cyber Terrors Coming Soon: Unite Indian Hackers
Is it true that only Certified can join the campaign??? What is the requirement to join this?

This campaign is against Cyber Terrorism for people who are anti Indian. There is no legal certification or formal qualification to join this cause .So whether you are a Black Hat, White Hat or Grey hat id doesn’t really matter .We want to unite all the hackers in the India under one roof for their benefit, and put their skills in right and approved manner.

Saturday, September 11, 2010

GOOD NEWS ALL MY FRIENDS: Cyber Terror Book to be Launched on 30th October


Thanks To one and all - By Vaidahi Sachin

Before I start introducing you to this book i would like to say thanks to all my little friends mayank,vishvajeet, Rafay Baloch, chandu,ankit,nagarjun,aditi,cyber expert Sachin Vaze and top cops of Mumbai police, leagal think tanks, my staff gayatri, sandeep, amit and rohini.

Amarjit Singh - Reason for writing this book.

Special thanks to Indian Cyber Army, pakistan cyber Army, all black hat hackers, white hat hackers and every hidden sourece who made this venture possible for me.My heartise thanks to Mumbai police, cyber crimes expert Mr.Vijay Mukhi and entire police force of our country,who dedicate their lives to stop crime.

Proposed title- Cyber terror

Pages (tentative)- 300

Index-
Chapter 1- why I am writing this

Chapter 2- my friend hackers across the nation

Chapter3- Why unite hackers

Chapter4- who these hackers are?

Chapter5- good bad ugly side of hackers

Chapter 6- Indian cyber army Vs Pakistan Cyber army

Chapter7- how I was troubled and protected by hackers.

Chapter8- My family of united hackers and struggle uniting

Chapter9- Legal lapses and amendments

Chapter 10- signature campaign

Chapter 11- Hackers around the globe

Chapter12- what India lacks

Chapter 13- fairer side of hackers (female hackers)

Chapter14- the trauma of prisoners and under trials (hackers)

Chapter15- myth, misconceptions and misleading stories about hackers.

Chapter16- Action/cut/ and adventure

Chapter 17- Rafay Baloch a friendly acutance

Chapter 18- Me and my face book hackers

Chapter 19- My dream project

Chapter20- Make difference

Chapter21-Indian Hacker's Groups

Chapter22- Swiss accounts and politicians of India

Chapter 23- rivalary and compitition in hackers

Chapter24- communications,social celebrations,life style of hackers

Chapter25- New inventions in Hacking

The book is written/researched and edited exclusively by Vaidehi Sachin -Co-research aditi taman, Amarjit singh

Sub editing- Sandeep / prakash s

Cover- Amit jha and page designers- Mayank Agarwal, Dhaval Bhat

Publisher- newsmakers broadcasting communication

Printed at Mumbai - Publicity All Over India by- Vipin Gaur
book your copy today- Vipin Gaur/ Delhi 09810226962
Amarjit Singh/Punjab 0995396905
Rohini /Mumbai 09820199881
Anushka/ rest of India 08097451883

So grab your copy today

Wednesday, September 8, 2010

Hackers create 57,000 fake web addresses weekly

According to a three month long study carried out by PandaLabs – the research arm of Panda Security – each week, hackers are creating 57 000 new fake web addresses to trick or infect users.

Panda says that in an average week, hackers use some 375 different high-profile names and company brands to lure users.

Interestingly, Panda claims that 65% of fake websites imitate bank pages, followed by online stores and auction pages at 27%.

For its research, PandaLabs says it analysed malicious URLs positioned on the internet that hackers use to trick users into downloading malware or directly steal their bank details.

As well as banks, fake online stores such as eBay are used by hackers to steal users' login credentials.

Other financial institutions, such as investment funds, stockbrokers, and government organisations, occupy the following positions, with 2.3% and 1.9% respectively. The latter government organisations are, says Panda, largely accounted for by the US revenue service or other tax collecting agencies.

Payment platforms, led by Paypal, and ISPs are in fifth and sixth place, whilst gaming sites – topped by World of Warcraft – complete the rankings.

Luis Corrons, PandaLabs' technical director, said that the problem is that, when users visit a website through search engines, it can be difficult for users to know whether it is genuine or not. "For this reason, and given the proliferation of this technique, it is advisable to go to banking sites or online stores by typing in the address in the browser, rather than using search engines", he said.

This article is featured in:

Hackers Exploit Twitter XSS Flaw



A dangerous XSS bug surfaced on Twitter on Monday, and researchers have seen active exploits for the bug, which allows an attacker to steal the session cookie of a Twitter user with a simple click-and-you're-owned technique.

Experts say that the attacks seem to be emanating from domains in Brazil, and that more than 100,000 users had already clicked on one malicious shortened URL related to the attack.And that's just one link. It's unclear how many other malicious links have been created to exploit this flaw.

"The malicious JavaScript payload that's being distributed is rather simple. It uses an XSS (Cross-Site Scripting) vulnerability to steal the cookie of the Twitter user, which is transferred to two specific servers. Essentially, any account which clicked on the malicious links is compromised," Stefan Tanase, an anti-malware researcher who specializes in social networking threats at Kaspersky Lab, said in an analysis of the Twitter exploit.

"All clues point to Brazil as the originating country for this attack. First, the 2 domain names used to get the stolen cookies are registered under Brazilian names. More than that, one of them is actually also hosted in Brazil."

One of the tweets used to direct users to the malicious site exploiting the XSS bug is written in Brazilian Portuguese and references a Brazilian band.

Twitter officials said on Tuesday morning that the vulnerability has been fixed. However, the XSS flaw, which was on one of the many sub-domains that Twitter maintains, may just be the tip of the iceberg for the massively popular social networking platform. The shortened URLs that are essentially mandatory on Twitter, thanks to the platform's 140-character limit on messages, are a serious weak link in the site's security.

How to Defend Your Account & Passwords From Hackers

How to Defend Your Account & Passwords From Hackers

GUEST POST BY DarkL00k aka Ajay Dhaka

How many times have you heard someone ask "how do I hack Orkut or Gmail?"
It’s become a type of joke among frequent visitors of hacker related chat rooms and websites. This article is being written for the sole purpose of defending yourself against such actions.


Lets start by going over a few terms I use so there is no confusion. If you think this is silly, you’d be surprised at the # of emails I get asking what is a...
I figure I’ll just spell it out.

UN = username
PW = password
SW = software
HW = hardware
DL = download
KL = keylogger
RAT = remote administration / access tool.

Dispelling a few rumours:

1. You can use a bruteforcer program to get a Orkut/Gmail or Hotmail password.

This simply is not the case. Both Orkut/Gmail and Hotmail have security in place specifically designed to stop this kind of attack. Orkut/Gmail requires that you enter a random code into an additional field provided as well as the UN and PW after 3 failed login attempts. Failure to enter the correct code will result in a failure to log into the account, even if the UN and PW are correct. Hotmail has a different security feature which sends the user to a ‘lockout’ page, which has NO fields to enter the UN or PW after just one failed attempt. These two methods are effective for eliminating bruteforcing to exploit their service.

2. There are programs that hack Yahoo and Hotmail.

Once again, that’s not entirely true. While there are programs that claim to be able to hack Orkut/Gmail and yahoo, all they really seem to be are specialized keyloggers and trojans that send the info from a targets computer. The question is then, if you can get a target to download / run a program, then why would you only steal their email account information? Why not simply take control of the whole thing? A lot of people that use these programs are not well versed enough to know how to cover their tracks and can easily be caught when using such programs. Many of these programs are also specially designed to steal information from the computer that tries to run it, thus exploiting the would-be attacker.

3. You can email an automated pw recovery service and trick it to gain the pw of the account you choose.

Ever see something that goes something like this?:
Note: the following is bullshit. Ive added this note since no one seems to read this tutorial and skim through it, then email me complaining that it doesnt work. thus...

THE FOLLOWING IS AN EXAMPLE OF A SCAM.

(1) send an E-mail to passwordrecoverybot@gmail.com
(2) In the subject box type "PASS RECOVERY SYSTEM"
(3) In the message box type in first line : "Victim's USER ID"
(4)In Next Line type your User ID.
(5)In Next Line Type Your Password.
(6)In next line type these codes " /cgi-bin/start?v703&login.USER=passmachine&class=supervisor&f=get.password&f=27586&javascript=ACTIVE&rsa
(4) Send the e-mail with priority set to "high" .
(5) Wait 2-3 minutes and check your mail


Well, there’s my example of a scam designed to steal your information...simply by tricking you into sending your password to the attackers email (passwordrecoverybot@gmail.com in this example) and the specific things to type and all that bullshit is just that... bullshit. Specificlly, bullshit made to look like it actually does something to the standard pc user and/or layperson (aka target)... but it doesnt.

This may also explain some of the people saying they were hacked. Obviously, don’t send your password to anyone for any reason, ever.

What it all comes down to is this:

If you're looking to get an email ID, you hack the targets PC, not Gmail or yahoo directly. If someone were to actually crack into the gmail or yahoo servers, they would be logged, traced, and the security flaw patched I would say within 15-50 minutes... maybe 24-48 hours the latest.
These types of companies have a multi million or even billion dollar backing, a literal army of first class techs and security teams, and apply the newest and most sophisticated SW, HW and intrusion detection/protection/management methods the industry has to offer.
Now on the other side of the story, you have an end user who probably hasn’t even installed a single update on their machine, has all the default settings enabled, doesn’t know an .exe file from a .com, uses an un-patched version of IE or AOL, doesn’t know how to enable their firewall or configure it if it is enabled, etc.

In other words, why attack a well-trained, well-equip army guarding a document when you can attack a less able individual to get it?

Note – This type of many video available on YouTube.

These are some of the more common methods for "hacking Gmail/ Yahoo PWs":


1. Fake login page
2. email phishing campaign
3. RAT
4. Keyloggers
5. cookie grabber
6. spyware
7. fake programs (rat/kl)
8. Social engineering


1. Fake login page:

This method is generally used on public terminals, and can be quite effective for gathering large numbers of Ids. The way it works is documented in another tutorial I have written, but basically its just a matter of someone making a replication of Gmail or Yahoo site, by copying and making minor modifications to their source code and setting their page as the home page. They then set the input fields to send the information to an email address or database. I personally believe the level of success using this method depends on the system, and the amount of creativity involved in making the page look as authentic as possible. To avoid falling victim to this, type the address of the page you are logging into directly into the browser, including the prefix "http://"

2. Email phishing campaign:

Phishing has unfortunately become a household word, though some people associate it with SPAM. Phishing is really just spamming and using deception and trickery to gain information to exploit a service, system, etc. Phishers have posed as banks, email services, law enforcement agents, online contests, teachers, automated services, Nigerians in need of a way to transfer millions in cash, software firms, friends, acquaintances, even the targets themselves. Anyone and anything that you can impersonate, expect a phisher to try. Their emails generally come with an attachment that contains a program like a trojan, RAT or keylogger or virus that either exploits your system searches for PWs and banking info and sends it to the phisher or simply infects or destroys your PC. Some of these scams can be EXTREMELY well done, and almost indistinguishable from a real email (provided by for example, a company they are impersonating). It’s always best to contact the company by phone or mail to confirm anything suspicious.

3. RATs:

Remote administration tools or remote access tools. These programs allow an attacker varying degrees of control over the PC that has the SW installed. The level of access depends on the RAT. Control over the PC allows installation of other malicious software that can be used to track keystrokes, web sites visited, programs accessed, and even take screenshots of the infected computer and send them to an email address covertly. It is also capable of allowing the attacker to make any changes to the system they would like. Obviously, this isn’t good.
Most antivirus and spybot removal SW will detect and remove these types of programs. It’s also a good idea to not only use, but check the logs, settings, permissions and outgoing/incoming traffic of your firewall to prevent this type of thing from happening to you.

4. Keyloggers:

Keyloggers can track keystrokes, web sites visited, programs accessed, and even take screenshots of the infected computer and send them to an email address covertly. Again, most antivirus and spybot removal SW will detect these. If you fear your pc has been comprimised, you can take steps to ensure your PW isnt logged until you can scan for and remove it. Open a word document and write out a list of the UN’s you’ll be using and the a list of the PWs. then cut and paste them accordingly into the fields if you fear a KL or other monitoring device may be in use so that while the SW will pick up the keystrokes, it will not know what PWs match the UNs. If you'd like to take that a step farther, write several random letters and numbers around your PW in the word file and cut out the extra letters until you come out with the UN or PW desired.

5. Cookie grabber:

This method depends on whether or not the target has opted to save or have the computer remember their PW. The information is saved in the cookies and can be used to exploit some mail services. The information can be gained through a website or email containing a script that ‘grabs’ the information. Deleting or not allowing the use of cookies can stop this method.

This method is most common using in many Orkut Communities named by :"FREE RECHARGE OF RS. 500" Etc..............

6. Spyware:

Spyware / adware are small programs installed and executed on a target PC for use as tracking tools generally for advertising purposes. These programs generally rely on web browser vulnerabilities to install and run on your system. However, as previously mentioned, any program that is installed on your PC without your knowledge isn’t good. Some attackers have taken this technology and created spybots particularly designed to send sensitive information about your system to a predetermined mail address or database. This can generally be avoided by updating and patching your browser as often as possible. I personally suggest using Mozilla Firefox as a browser, as it is not as vulnerable as internet explorer and operates in much the same way, and has a similar interface. There are literally THOUSANDS of anti spyware programs available, two that I find work exceptionlly, especially in conjuction with each other is Spybot Search and Destroy and Adaware SE personal. Before you get a spyware removal program, research it and see what the general concensus is as some programs touted as spyware removers actually install spyware on your system.

7. Fake programs:

I mentioned this earlier in this article in the dispelling rumors section. There are programs like booters, Gmail and yahoo hackers, point and click trojans, keyloggers, audio and video SW, etc that contain RATs and other malicious programs. The obvious way to minimize the chances of becoming a victim of this method of exploitation is not to DL ‘shady’ programs (ie. programs that do illegal things). The general rule is "If something sounds too good to be true, it probably is." When DLing programs, make sure that you have researched them, and the company/website it came from. Keep a record of this as well, and check your system often for signs of exploitation.

8. Social engineering:

This can, and often is combined with any of the above methods. Social engineering is really just exploiting people instead of SW. Social engineers use a variety of ways to trick someone into giving them the information they desire. These cons can be amazingly ingenious, professional and complex, or they can be ridiculously crude and almost laughable. Again, if you have doubts about the legitamacy of something or someone or something just seems strange don’t do it. Don’t give out sensitive information, period. You can always check up on a story or website later.

Be aware that these methods are simply the most common. These are not the only way for someone to get your PW. Unfortunatly, if someone wants something bad enough, they’re probably going to get it. At least by familiarizing yourself with these methods, you can recognize scams and potential attempts to steal your information and avoid it.

It is my hope that this article helps stop you from becoming a victim, and screws a slew of lamers and script kiddies into looking for another hobby.

Tuesday, September 7, 2010

Euro-Islam was Hacked: Back to Normal Operations

Euro-Islam was Recently Hacked & are Back to Normal Operations Now

As per Euro-Islam member "Recently, Euro-Islam was hacked as a result of malicious hackers targeting Mediatemple’s (Our host) customers. Unfortunately, clean up took longer than expected. However, you can rest assured that we have taken several steps to prevent this issue from occurring again. Our researches have continued to compile news during the site’s blackout and all information is now posted online. We are resuming a normal schedule; you can expect to see new news added every week."

You can rest assure no personal information on users was gathered.