Cyber attack targeted Google password system

Washington, Apr 20(ANI): The mysterious cyber attack against search engine giant Google last year reportedly included an attempt to hack a vital company-wide password system, which controls user access to most of Google’s web services, e-mail and business applications.

The program, code named Gaia, was attacked in a lightning raid, taking less than two days last December, CBS News quoted a source, saying.

However, Gmail users’ passwords do not appear to have been stolen, and the company quickly initiated security changes to its networks, the source added.

Gaia is intended to enable users and employees to sign in with their password just once to operate a range of services.

The new details seem likely to increase the debate about the security and privacy of vast computing systems such as Google’s, which store personal information of millions of individuals and businesses.

When news of the attack initially became public, it led to a row between Google and China, ultimately resulting in a decision by the company to reroute search queries to its Hong Kong site. (ANI)

Frenchman hacks Obama’s Twitter account

A French man has been arrested for hacking into the Twitter account of U.S. President Barack Obama, French police said on Wednesday.

The 25-year-old man, who lives in central France, also stole information online about other celebrities, including Britney Spears, stealing passwords for email accounts and publishing personal information on the Web.

“This individual spread information about a dozen American personalities, notably Barack Obama, on specialist blogs,” Adeline Champagnat, head of the French office against online fraud, told Reuters by telephone.

The hacker, who went by the online name of HackerCroll, was driven by the thrill of the challenge and appeared to be more interested in the private life of his victims than on obtaining especially sensitive data.

“It would have been more of a problem if he (Barack Obama) had posted sensitive information,” said Champagnat, without saying what he had done with the president’s Twitter account.

French police were given a heads-up several months ago by the U.S. Federal Bureau of Investigation and officials believe he acted alone.

“He thinks he is good at this, and he is,” said Champagnat, adding he had had no specialist training.

(Reporting by Gerard Bon; Writing by Sophie Taylor)

Obama Twitter account hacker released by French police

London, March 25 (ANI): The hacker who broke into US President Barack Obama’s Twitter account has been released by the French police.

The unemployed 25-year-old was taken into custody after being chased by both French officials and FBI agents, according to a foreign news agency.

The suspect, who used the pseudonym “Hacker Croll”, was said to have had no specialist training and gained access into the popular micro-blogging website by simply guessing users” passwords, reports The BBC.

His targets also include other US celebrities, including Britney Spears, according to officials.

He has now been ordered to appear at court in the central French city of Clermont-Ferrand on June 24. (ANI)

Cyber criminals targeting World Cup fans: Internet security firm

London, Mar 23(ANI): An Internet security firm has revealed that football fans across the world are being targeted by cyber criminals in the run-up to the World Cup, which gets under way in South Africa on June 11, with a wave of spam e-mails, fake offers and attempts to steal banking details.

Internet analysts with Symantec, a security software company, have claimed to have intercepted millions of phishing e-mails and uncovered hundreds of fake websites aimed at fans, who are eager to get tickets for the games or to watch them online.

They have discovered an illicit network of thousands of computers hijacked by cyber criminals to send out spam e-mails, which concentrate only on the World Cup.

The fake messages intercepted claims to provide discounted flights rates, cheap hotel accommodation and VIP membership card offering outlandish benefits.

Symantec further urged fans to avoid clicking on suspicious links, and said: “Never fill out forms in messages that ask for personal or financial information or passwords. A reputable charitable organization is unlikely to ask for your personal details via email.”

“When in doubt, contact the organization in question through an independent, trusted mechanism, such as a verified telephone number, or a known internet address that you type into a new browser window. Do not click or cut and paste from a link in the message,” The Times quoted Symantec, as saying in a statement.

Although the majority of the mails are never opened, enough people click on the links to make phishing attacks a multi-million pound industry. (ANI)

Most Brit teens hack “for fun”!

London, March 19 (ANI): A new survey has found that one-fourth of British teens try to access their pals’ Facebook accounts.

The poll of 1150 under-19s showed that the most common way of access was by “cracking” each other”s passwords.

It was seen that about 50 percent of youngsters who accessed other accounts used their personal computers or those at school.

Teens said they mainly did it for fun while 21 percent confessed they wanted to cause trouble.

Twenty percent of those who admitted to hacking believed they could make money from it with 5 percent describing it as a career option.

The respondents taking part in the survey, commissioned by Tufin Technologies, maintained anonymity.

Seventy-eight percent knew hacking was not right.

“Playing around with computers and trying to understand the system can be leveraged for good and bad purposes,” the BBC quoted Reuven Harrison, co-founder of Tufin Technologies, as saying.

Harrison added: “There”s a fine line at which point it becomes something bad. Children don”t always understand where that line is.” (ANI)

Jackson virus and spam spreads on Internet

SAN FRANCISCO: Security researchers warned Thursday of the increasing levels of viruses and spam using Jackson’s name to snare unsuspecting users.

One e-mail carries the subject line “Remembering Michael Jackson” was circulating with a worm in tow. The e-mail has a zip file attached that infects victims if downloaded.

“The e-mail, which claims to come from sarah@michaeljackson.com, says that the attached ZIP file contains secret songs and photos of Michael Jackson,” Graham Cluley, senior technology consultant at Sophos, wrote on a blog. “However, the reality is that opening the attachment exposes you to infection – and if your computer is hit you will be spreading the worm onto other Internet users.”

Cluley said that the malware also spreads via USB memory sticks. Another e-mail promises an exclusive look at a YouTube video of the “last work of Michael Jackson,” but instead installs a malicious program that steals passwords.

Source –

http://economictimes.indiatimes.com/Jackson-virus-spreads-on-Internet/articleshow/4731724.cms

UK Parliament PCs infected with Conficker virus

London, Mar.27 (ANI): The IT system in the British Parliament has become infected with the Conficker computer virus, The Telegraph reports.

The worm virus, which has affected more than 15 million computers around the world, has become established on computers used by MPs, Lords and parliamentary staff.

Known variously as Conficker, Downadup, and Kido, it buries itself deep inside a PC’s Windows operating system, from where it can be used by hackers to steal users’ passwords and personal information.

Although it is not clear when or how the machines became infected, there were claims last night that parliament had failed to follow standard online security procedures.

“This incident clearly shows, once again, that when it comes to even the most basic of security procedures, parliament is lagging behind everyone else,” the paper quoted Rob Cotton, of IT security company NCC Group as telling Channel 4.

He added: “Unauthorised machines shouldn’t even be capable of coming anywhere near an official network like this, particularly one which could provide a doorway to seriously sensitive material. Even worse, this particular virus is one that has been around since November last year, and security updates and patches have previously been issued to deal with it.”

A spokesman for the Houses of Parliament declined to comment. (ANI)

’123456′ is world’s worst password used on the Internet

Melbourne, Mar 19 (ANI): ’123456′ is the most common password used by people on the Internet.

Obscenities, names of fast cars and even ncc1701 – the ship number for Star Trek’s Starship Enterprise, have made it to the list of top 500 worst passwords of all time.

Compiled by Whatsmypass.com, the list features passwords most commonly used by Internet users.

And topping the list of the most common password is 123456, followed by “password” in second place.

Other popular password choices were first names, repeated letters and numbers, pop-culture references.

Even batman, bond007 and cocacola made it to the list, reports the Courier Mail.

The website said that almost one out of nine people use at least one of the passwords mentioned on the list, and one out of every 50 people use one from the top 20.

In fact, a study commissioned by digital communications agency @www found that an average adult had as many as 15 passwords to remember.

But 61 per cent of people used the same passwords for as many different accounts as possible in order to make life easier. (ANI)

FAA confirms data breach; 45,000 affected

FAA confirms data breach; 45,000 affectedA computer breach at the Federal Aviation Authority (FAA) has led to the theft of personal information on more than 45,000 employees and retirees, the agency confirmed this week.

All told, the FAA said the hackers hijacked 48 files, two containing sensitive personal information that could expose the employees and retirees to identity theft.

From the statement:

Two of the 48 files on the breached computer server contained personal information about more than 45,000 FAA employees and retirees who were on the FAA’s rolls as of the first week of February 2006.

The server that was accessed was not connected to the operation of the air traffic control system or any other FAA operational system, and the FAA has no indication those systems have been compromised in any way.

Appropriate law enforcement agencies have been notified and are investigating the data theft.

FCW reports that the FAA was doing such a good job at protecting data in its computer systems that the Office of Management and Budget chose it to be one of four agencies to guide other federal agencies in their cybersecurity efforts.

Obama’s Twitter account hacked along with those of other celebs

San Francisco – A mysterious team of hackers has managed to hijack the Twitter account of US president-elect Barack Obama along with celebrities like Britney Spears, CNN anchor Rick Sanchez and Fox News commentator Bill O’Reilly, Twitter confirmed Monday.

The security snafu on the trendy micro-blogging site came days after a successful “phishing” scheme tricked many users into providing their usernames and logons.

It is unclear whether the hacked accounts were a result of that scheme, but the results were undeniably embarrassing.

Obama’s Twitter page, which was last used to deliver a quick victory message on election night, was updated to bring users to a survey site where they coud vie to win 500 dollars in free petrol.

The Twitter page of Spears referred to an intimate part of her body, which it said was “about 4 feet wide with razor sharp teeth.” Sanchez told his fans that “I am high on crack right now might not be coming into work today” while conservative O’Reilly proclaimed that he was gay.

In a blog posting, Twitter said that 33 high profile accounts had been compromised by an individual who hacked into support tools used to help account holders remember their passwords.

“We immediately locked down the accounts and investigated the issue. Rick, Barack and others are now back in control of their accounts,” the company said. “We considered this a very serious breach of security and immediately took the support tools offline.” (dpa)