31337 hacker tells how he owned Gamma

data.langly.fr has the post in English and very well written The hacker writes well and explains how he owned (penetrated) the website gamma-international.de, which redirects to finsupport.finfisher.com The hacker 31337 explains himself including how to stay anonymous, and not reveal who you are to the site that he attacked. He uses Google tricks including the … Read more

How did the Attacker Gain Entry?

In the realm of incidence reporting and response Management: CERT has a process to use. One has to have a Computer Security Incident Response Team (CSIRT) A security incident occurs when unwanted scans and attacks are happening. Breaking a security policy is also a security incident.   Of course breaking into a server and stealing data … Read more

Smartphone manufacturer Xiaomi downloads all personal data

International Business Times  story The Xiaomi phones are sold in China and the head of global expansion was a Google executive. F-Secure a Finnish co.   and their blog: Finances of F-secure and more I know them as an Anti-Virus company among other things.  

Need to decrypt your files from cryptolocker infection?

FireEye and FoxIT have a website to recover your files from an infection – we have an old blogpost  about Synology systems getting infected and encrypted.   Here is the website from FireEye and FoxIT: https://decryptcryptolocker.com/

Dont pick up stray USB hard drives

Another social engineering hacking method is to leave USB hard drives for unsuspecting people. NetworkWorld.com article goes into some details of why the USB hard drive is insecure and can be easily programmed with malware (malicious software). This malware can be designed to inject itself into your computer, or a server. and without you knowing it … Read more