Free Ethical Hacking Tools Hacking Tricks Learn How To Hack Hacking Passwords & Email Hacking

Friends, I am posting website hacking tutorials & Techniques from last 2 years. I am receiving a lot of mail from new readers regarding similar tutorials. Here I am indexing all good posts related to Website Hacking. Hope you like this collection. Pls comment if you like.

Submission Summary:

• Submission details:
• • Submission received: 6 May 2010, 09:12:21
  • Processing time: 7 min 10 sec
  • Submitted sample:
  • • File MD5: 0x781B86CC1F4C795C85A83C9289F275C5
    • File SHA-1: 0xE8C72369D91D0188D9B5138574E0CDF39296D3E5
    • Filesize: 29,117 bytes
    • Alias:
    • • Trojan.Agent.CZZK [PCTools]
      • Trojan Horse [Symantec]
      • Trojan.Win32.Agent.bcn [Kaspersky Lab]
      • BackDoor-CEP.svr [McAfee]
      • BKDR_BIFROSE.AFU [Trend Micro]
      • Troj/Agent-JZZ [Sophos]
      • Backdoor:Win32/Bifrose.ACI [Microsoft]
      • Win-Trojan/Bifrose.29053 [AhnLab]

According to CyberDefender, a Los Angeles-based security company, Mother’s Day has been increasingly targeted by malware authors due to the growing online use of credit cards and services like PayPal.  The idea is to drive shoppers to act impulsively in order to receive a great deal on the perfect gift for mom.

Cyber criminals target shoppers in many different ways:

• Tricking users into giving out personal information
• Tricking users into downloading malware to their PCs
• Redirecting users to fraudulent sites through spam

“Salesy” subject lines should not be trusted – the presence of exclamation points is a dead giveaway as well:

• The perfect gift idea for Mother's Day!
• Mom Will Love Getting this E-Card!
• Give Mom a Personalized Gift! Hurry – before time runs out!
• Mothers Day Exclusive!

Sites to be avoided, as they have previously been found by CyberDefender to contain scams:

• 2000greetings.com
• freewebcards.com
• fun-e-cards-.com
• fundsilly.com
• celebwelove.com
• fukkad.com
• funnyreign.com
• eforu.com
• ecard4all.com
• myfuncards.com

Tips from CyberDefender:

1. Make sure you have a subscription-based security software installed in your computer; in fact, some home users install two different packages to get the advantages of two different vendor offerings
2. Choose a security software vendor that uses a peer to peer network to identify threats and updates its software frequently; legitimate security firms register the PCs of their subscribers and download updates over the Internet to your home PC several times a day.  You can find out how many times by calling the vendor’s customer service number.
3. Stick to reputable online flower retailer sites such as hallmark.com, 1-800-flowers.com, americangreeting.com, proflowers.com, etc.
4. Go to a company’s website directly to order your gift, instead of clicking on links found in emails and social networks
5. Have Dad monitor children when shopping online for Mom. Children might not know the difference between a reputable and a fraudulent site
6. If a website asks for your social security number at check-out, the website is probably phishing for your private information, putting you at risk for identity theft
7. Ensure that the website you plan to order from is secured using SSL. When entering any type of credit card or payment information, you should see a “lock” icon on the bottom right of your screen (location varies among browsers)

Several security companies warned of a major malware campaign that tries to dupe users into opening rigged PDFs that exploit an unpatched design flaw in the format

Users who open the attack PDFs are infected with a variant of a Windows worm known as "Auraax" or "Emold," researchers said.

The malicious messages masquerade as mail from company system administrators and come with the subject heading of "setting for your mailbox are changed," said Mary Grace Gabriel, a research engineer with CA Inc.'s security group. A PDF attachment purportedly contains instructions on how to reset email settings. "SMTP and POP3 servers for ... mailbox are changed. Please carefully read the attached instructions before updating settings," the message states.

In reality, the PDFs contain embedded malware and use the format's /Launch function to execute that malware on Windows PCs running the newest versions of the free Adobe Reader, Adobe's for-a-fee Acrobat and other PDF viewers, such as Foxit Reader.

The /Launch feature is not a security vulnerability per se, but actually a by-design function of the PDF specification. Earlier this month, Belgium researcher Didier Stevens demonstrated how attack PDFs could use /Launch to run malware tucked into documents.

Two weeks ago, security researchers tracked a new run by the Zeus botnet that used the /Launch flaw to infect PCs.

Adobe has previously declined to answer questions on whether in-the-wild use of /Launch in rigged PDFs would prompt the company to update Reader and Acrobat, although it has said a change to the functionality might "conceivably [be made] available during one of the regularly scheduled quarterly product updates." Brad Arkin, Adobe's head of security and privacy, has acknowledged that one possible solution would be to disable the function; currently, it's turned on by default.

After analysing the attack PDF, other researchers found that hackers are using Stevens' tactic of modifying the warning that Reader and Acrobat display. Adobe Reader, for example, displays a message telling users to open only those files they know are safe. In the same Windows dialog box, Reader displays the filename of the file about to be launched. According to IBM Internet Security Systems researchers, hackers have modified the warning to simply read, "Click the 'open' button to view this document."

READ FULL ARTICLE HERE