DNSTOP: STAY ON TOP OF YOUR DNS TRAFFIC

DNSTOP: STAY ON TOP OF YOUR DNS TRAFFIC

dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of:

Source IP addresses
Destination IP addresses
Query types
Response codes
Opcodes
Top level domains
Second level domains
Third level domains
etc…
dnstop supports both IPv4 and IPv6 addresses.

To help find especially undesirable DNS queries, dnstop provides a number of filters. The filters tell dnstop to display only the following types of queries:

For unknown/invalid TLDs
A queries where the query name is already an IP address
PTR queries for RFC1918 address space
Responses with code REFUSED
dnstop can either read packets from the live capture device, or from a tcpdump savefile.

Download:
http://flexydrive.com/5x3cr58tqg0m

Brought to you by Codesoft Solutions Ltd.
Website: http://www.codesoft.co, Email: info@codesoft.co

Facebook Went Down Across the World

Popular social networking site Facebook went dark for a few minutes this morning (Thursday). Judging by the panicked reactions to the outage across other social media, the outage seems to affected most people around the world.

During the downtime, when you navigated to any Facebook page or profile, a notification was displayed on screen simply read “Sorry, something went wrong. We’re working on getting this fixed as soon as we can.”

No explanation has been given yet, but the instant reactions across the world undermine how curiously rare this kind of outage in this day and age.

Brought to you by Codesoft Solutions Ltd.
Website: http://www.codesoft.co, Email: info@codesoft.co

FIFA World Cup 2014, Big Opportunity for Cybercriminals

With the beginning of FIFA World Cup tournaments in Brazil, Football fever is going viral across the world. Soccer or Football is the most popular sport in the world with billions of fans who don’t even miss a single tournament.

 

Now, this is the most awaited and rejoicing atmosphere for Football fans as well as cybercriminals right now. For bad actors, the World Cup is a perfect opportunities to scam people online.

 

While you are busy figuring out websites where you can stream live Fifa Matches on your PCs without missing a single moment of the world cup tournament, cyber criminals are also busy to launch phishing attacks in form of scams and malwares in order to victimize the system by several Trojans and viruses.

 

This isn’t surprising as cyber criminals have become smart enough to gain from every possible eventuality they get and their prior/common target is every time the users’ interest based major news and current events.

 

The most popular threat this World Cup targets users in the form of phishing attacks. You may see links in messages over emails and social networking sites serving attractive contents of this World Cup such as Free Tickets, merchandise, news and footage of highlights, online streaming videos of footballers behaving badly and many more.

 

 

But once clicked, the victims are redirected to the malicious websites that trick users into revealing their private information or installing malicious softwares in order to put their computer systems at risk of malwares and viruses infection or identity theft.

 

Researchers at the security software maker firm, Symantec, have identified several email scams and in coming days, they also expects to see these scam attempts targeting Soccer fans on social networks as well.

 

#1 FREE TICKETS TO WORLD CUP

The most common scam is Free Tickets to World Cup 2014. In this Football fevered atmosphere, everyone is seeking to get a free pass or a ticket to the tournament in Brazil and What if you won an all-expenses paid trip to Brazil? It’s really like a dream comes true for any Soccer fan.

 

The security firm has identified several emails that contain a malicious zip file and inside it is an executable file. Once executed, it will allow your computer to be taken over by Trojans and remote administration tools.

 

#2 NEWS AND HIGHLIGHTS OF WORLD CUP TEAMS AND PLAYERS

Apart from free tickets, news and highlights about different World Cup teams and players can also be used to thwart users into opening up malicious attachments or clicking malicious links.

 

Researchers have discovered emails that are currently circulating about Neymar da Silva Santos Júnior, a young star player with the Brazilian national team. The email have a malicious word document that could exploit a known vulnerability in the victims’ Microsoft Word.

 

#3 FREE ONLINE STREAMS OF FIFA WORLD CUP MATCHES

Once the FIFA World Cup begins, cyber criminals starts targeting users by emails and social networks’ scams that claim to provide free live stream of various matches. Before you can unlock access to the live stream, it first ask you to fill out a survey or download and install software in order to fetch money from your pockets.

 

HOW TO PROTECT FROM WORLD CUP SCAMS

 

• If you are served any link for free tickets to World Cup, consider it as a scam because free stuffs are never free.
• If you have to watch live World Cup match, check your local service providers to see where and when you can catch World Cup games online.
• Avoid unknown sources to know happenings of your favorite teams and players; visit only official news websites.
• If any site ask you for password or credit card information, double check it before proceeding.
• Beware of links that either lead you to any application or external Website.
• Make sure you have installed an updated Anti-virus solution to avoid latest threats.

Codesoft Solutions Ltd

NHC Building, Samora Avenue, Opposite TIB Bank

2nd Floor

info@codesoft.co

http://www.codesoft.co

Facebook: Codesoft Solutions Ltd Tanzania

Courtesy of ehacking news

Facebook To Use Your Web Browsing History for Targeted Ads, Here’s How To Opt-Out Now

Surfing the Internet?? Facebook CEO Mark Zuckerberg is watching your every move on Web, and this time even more closure.

 

It’s not surprising that Facebook collects data of its 1.3 billion users, just like everyone else, which the company has said it only holds onto your data for security and advertisement purposes. But, this would be first time when some company is using people’s browsing history to deliver ‘targeted Ads’ on its service.

 

The biggest social networking giant recently announced it has plans to use information from our Web browsing and app history to deliver more targeted advertisements to us.

 

HOW IT WORKS

The move will track you with every site you visit, even its a non-Facebook website. EVERY SITE?? No! No! No! The company can’t track your online activity while visiting any website, but only those that have Facebook “LIKE”, “Recommend”, “Share” buttons across the web, and I think almost all have at least one included in it.

 

Yes! Any website with a Facebook buttons, like the one you reading right now, or any website that allows you to login with your Facebook account is somehow connected to Facebook. Based on this fact, any website you visit will store information about your visit in the browser, which can be easily read by Facebook later on, whether you click a “like” button on any website or not.

 

 

FACEBOOK’S TERMS OF SERVICE

Now this is How Facebook describes the feature in its Terms of Service:

“We and our affiliates, third parties, and other partners (“partners”) use these technologies for security purposes and to deliver products, services and advertisements, as well as to understand how these products, services and advertisements are used. With these technologies, a website or application can store information on your browser or device and later read that information back.”

BRIEF EXPLANATION

So, let me give you an easy overview. Let’s suppose you are planning to buy a new mobile phone and searching for its price and review on multiple websites using your desktop or mobile apps. So, keeping your interest in mind, Facebook will show you Interest-based Ads to help you get the best price and brands to consider. Sounds really good!

 

However, this type of tracking can be really dodgy as well. Because along with your online activity, other personal information such as your location, age, medical habits, and many more are collected and added to their databases in an effort to create your profile for marketers.

 

HOW TO STOP FACEBOOK FROM SHARING YOUR WEB BROWSING HISTORY

If you don’t want any third-party website to send your data to Facebook or any prying eyes, you can opt-out through a special tool available on the Digital Advertising Alliance site and let the companies know that you are not at all interested in sharing your data.

 

Codesoft Solutions Ltd

NHC Building, Samora Avenue, Opposite TIB Bank

2nd Floor

info@codesoft.co

http://www.codesoft.co

Facebook: Codesoft Solutions Ltd Tanzania

Courtesy of ehacking news

Chinese Android Smartphone comes with Pre-installed Spyware

A popular Chinese Android Smartphone comes pre-installed with a Trojan that could allow the manufacturer to spy onto their users’ comprising their personal data and conversations without any restrictions and users knowledge.

 

GOOGLE PLAY STORE OR A SPYING APP?

According to the researchers at the German security firm G Data, the Star N9500 smartphone, a popular and cheap handset device in China, comes pre-installed with Uupay.D Trojan horse, disguising as a version of the Google Play Store.

The trojan camouflage as the Google Play Store, so it enables Chinese Company to secretly install malicious apps, which creates the whole spectrum of abuse.

 

STEALING WITHOUT RESTRICTIONS

The nasty Spyware runs in the background and has capability to steal personal information, copy users’ data, record calls automatically with unlimited time and send costly SMS to premium services, thereby sending all the stolen information to an anonymous server based in China.

The malware is also capable to activate the microphone on users’ smartphone at any time in order to turn users’ smartphone into a bugging device that allows hackers to hear anything you are saying near by the phone.

 

“The spy function is invisible to the user and cannot be deactivated,” reads the blog post published yesterday. “This means that online criminals have full access to the smartphone and all personal data. Logs that could make an access visible to the users are deleted directly.”

 

REMOVAL OF THE TROJAN NOT POSSIBLE

In addition, the malicious software allow preventing security updates from being downloaded and one can not disable the program. “The program also blocks the installation of security updates,” claimed G Data.

 

Moreover, it is not possible to uninstall the trojan because it is embedded in the firmware of the Star-phone device.

 

Codesoft Solutions Ltd

NHC Building, Samora Avenue, Opposite TIB Bank

2nd Floor

info@codesoft.co

http://www.codesoft.co

Facebook: Codesoft Solutions Ltd Tanzania

Courtesy of ehacking news

HIGH-TECH WAYS TO CHEAT ON EXAMS

China’s students have apparently developed skills for building cheating devices to use during an SAT-like exam that look like they have been pulled straight from a James Bond movie.

Ahead of China’s massive college entrance exam — the Gaokao — that took place on Saturday and Sunday, local media outlets released photos of cheating devices confiscated by police around the country in recent weeks.

The photos show intricate cheating equipment, a majority of which were created by students in the southwestern city of Chengdu before taking a different test, the National Professional and Technological Personnel Qualification Examination.

Some of the uncovered equipment included miniature cameras installed into both a pen and a set of glasses, as well as wireless earphones resembling small earplugs. In one instance, a grey tank top was wired with a plug capable of connecting to a mobile phone that could be used to send out information. There was also a camera installed in the shirt.

“Cheating happens in every country, but it’s extremely rampant in China,” Yong Zhao, the presidential chair at the University of Oregon’s College of Education, told VICE News. “This isn’t the first time and it won’t be the last”

Brought to you by Codesoft Solutions Ltd

info@codesoft.co

NHC Building, Samora Avenue, Opposite TIB Bank

2nd Floor. http://www.codesoft.co

Courtesy of business insider

iOS 8 Safari Browser Can Read Your Credit Card Details Using Device Camera

While shopping online we need to first surf through number of pages and then finally have to fill credit and debit cards details manually into the browser, which is the annoying for most of the user. But now the new Safari feature in iOS 8 solves this problem by integrating camera-based Credit and Debit card reader.

Apple will soon introduce this feature to Safari in its latest Operating System iOS 8 that will allow its iPhone/iPad users to scan their physical credit and debit cards with their device camera and optical character recognition, according to 9to5Mac.

So when a user has to shop online using their iPhone or iPad and reach the payment screen for payment, safari browser will automatically display this “Scan Credit Card” option.

This option will help your camera to capture the image of your credit card, which the device will analyze by using the optical character recognition to input the card number into the appropriate text field in the online payment form in Safari web browser.

“There’s also a way to scan and save cards using the camera directly from within the Passwords & AutoFill settings,” the site reported. “It seems web developers won’t have to do anything to enable this feature – Safari detects when it’s needed and presents the option above the keypad.”

Till now, it’s unclear whether this scanned information of users’ credit card can be saved in devices, or if “Scan Credit Card” option will recognize the cardholder’s name or the card’s expiry date.

No doubt, new technologies are very beneficial, not perfect. Every new technology also attracts cyber criminals. Now time will show that this iOS 8 Credit Card scanner will be a boon for iPhone users or not.

Possible exploitation could be possible by malicious payment pages and mobile apps. We are looking forward to know how this new feature could be exploited by cybercriminals. Stay Tuned.

Brought to you by Codesoft Solutions Ltd, Cyber-Crime Department
Website:www.codesoft.co, Email: info@codesoft.co

Terrorist Group Al-Qaeda Uses New Encryption Softwares After NSA Revelations

Last year, Just after Snowden leaks, the U.S Government warned that NSA surveillance revelations will make harder to track bad guys trying to harm the United States, as disclosures can be helpful to terrorist groups.

In response to the NSA revelations, the terrorists at Al-Qaeda have started using strongest encryption techniques in order to bypass the standard cryptographic protections in its various communications, according to the recent report released by the Threat Intelligence company, Recorded Future.

The analysis carried out by the intelligence firm revealed that the Infamous Terrorist Organizations, Al-Qaeda that attacked civilian and military targets in various countries, has switched to new encryption software for the first time in seven years, following the revelations of the US National Security Agency (NSA) by former contractor Edward Snowden.

Al-Qaeda is a global militant Islamist and takfiri organization which operates as a network comprising both a multinational, stateless army and a radical Sunni Muslim movement calling for global jihad.

Brought to you by Codesoft Solutions Ltd Tanzania

For more details visit our website http://www.codesoft.co or send email to info@codesoft.co

Location: NHC Building,Samora avenue,Opp TIB Bank,2nd Floor

Hackers lock iPhones remotely and demanding $100 to unlock it

In recent hours, a number of users from Australia had a nightmare as cyber criminals locked their devices and demanding payment of a ransom.

Sponsored Links

The locked devices show the following message “Device Hacked by Oleg Pliss” and instructs victims to send $100 dollars to lock404@hotmail.com to unlock their devices.

The cyber attack came to light, after one user from Melbourne shared his experience in Apple support forum and asked help to fix the problem.  Following his post, several users have reported of being affected by this attack.

It appears hackers used stolen Apple IDs and passwords to access iCloud account that allowed them to lock victim’s devices and display a message.

What you should do? Don’t pay the Ransom !
Affected users are advised to contact Apple directly to regain access to their account.  

Once you have access to your account, change the password immediately and enable two step authentication feature for your account.

Brought to you by Codesoft Solutions Ltd Tanzania

info@codesoft.co

NHC Building,Samora avenue,Opp TIB Bank,2nd Floor

 

Courtesy of ehackingnews