Skip to Content

AOL Tech

hack posts

Computers, Web

Lazy Passwords Leave 21K Routers, Cams, Phones Open to Attack


In the "yet another thing to be paranoid about" category comes a report that nearly 21,000 routers, webcams and VoIP products are wide open to remote attack, simply because their owners have committed the ultimate sin: failing to change the manufacturer's default password for the devices.

The study was performed by Ang Cui, a grad student at Columbia University's Intrusion Detection Systems Laboratory, which has sponsored the likes of DARPA and the Department of Homeland Security. Researchers have now scanned over 130 million IP addresses, and discovered nearly 300,000 devices to be remotely accessible. And the 21,000 devices with default passwords are, of course, the most vulnerable -- "runts of the litter", if you will.

Read more →

Computers, Web

Atheists Fall Victim to Cyber Attack


Months before the Global Atheists Convention is held in Melbourne this March, a couple of major atheist Web sites have been forced to shut down due to coordinated, denial-of-service attacks. The Sydney Morning Herald reports that the Atheist Foundation of Australia (AFA) and the Global Atheist Convention both had their sites paralyzed by the attack, which overloaded both sites with traffic. At that point, the Global Atheists Convention had already sold over 1,000 tickets, with the AFA hailing it as the largest gathering of atheists in Australian history. Yesterday's attack, though, put a sudden stop to the sales, and, as of Thursday morning, both sites had still not yet regained full consciousness.

Read more →

Web

After Phishing Attempt, Wife Bans FBI Head From Online Banking

Don't feel bad if you've recently fallen for an e-mail scam. They're not always easy to identify. Just ask FBI Director Robert Mueller. Mueller received an e-mail from his bank asking him to verify some account information. After entering said information, Mueller says he realized that the e-mail was part of a phishing scam. According to CNET News, he immediately changed his passwords and breathed a sigh of relief.

The FBI chief avoided the wrath of phishers, but not his wife (video after the break). She nixed online banking in their household and said, "It is our money. No more Internet banking for you!" During a speech Wednesday in California, Mueller said that he'd tried to explain to his wife, promising that he'd learned his lesson and calling the near slip-up a "teachable moment." He was taught a lesson, alright, and one he should have learned long ago, at that. "If Mama ain't happy, ain't nobody happy." [From: CNET News]

Read more →

Computers, Web

Hotmail Scam Reveals Most Common Password: 123456

It's never fun to be on the wrong end of a hack. But often, we can use them as learning experiences So, what did we learn when around 10,000 Hotmail, MSN, and Live.com account passwords were revealed on PasteBin last weekend? Either people are lazy or our memories have withered away to nothing in this digital age. According to Wired, the most common password on the list was "123456." That's right, a series of consecutive numbers was the password to 64 e-mail accounts on the list.

Bogdan Calin from the security site Acunetix analyzed the password list and found other disturbing trends, too. For example, just 6-percent used passwords that mixed numbers and letters. Nearly 42-percent of the passwords used only lowercase letters. What's truly scary is that the list only included addresses beginning with the letter 'A' or 'B,' which means we're only seeing a small small sampling.

Read more →

Car Tech, Web

Scammers Expose Thousands of Hotmail Passwords, Microsoft Confirms

Just today, news broke that an anonymous user of PasteBin.com, a legitimate site marketed to software developers, posted more than 10,000 Hotmail addresses and passwords to the site last Thursday. According to NeoWin, most of the addresses appear to belong to European users, and all seem to be authentic. As shocking as it may be to find out that a benign site like PasteBin could host (albeit unwittingly -- reports have come in suggesting that the PasteBin user account was hacked) such grossly illegal content, TheNextWeb tells us we shouldn't be particularly surprised. A recent blog post on the site reports that a quick Google search will yield several PasteBin posts containing the passwords for thousands of Hotmail, Yahoo!, and even Gmail accounts.

NeoWin has alerted Microsoft to the problem and PasteBin has taken down the original Hotmail posting. Still, we should all stay on our toes. Today would be a good day to change that e-mail password. It'll only take a couple minutes, and might save you a lot of grief. [From: NeoWin, via TheNextWeb]

Web

Woman Finds Bank Account Hacked, With $27k Extra

In a strange twist on a now familiar story, an English woman last May found that her bank account had been accessed by criminals and that the money therein had increased. Amanda Fothergill, 40, of Darlington, received a phone call from a stranger who claimed to have deposited a substantial amount of money in her account. Shocked, Fothergill checked her balance only to discover a brand new deposit of £17,200 (around $27,500). The crook, who would call in ensuing weeks as frequently as once a day, tried to convince Fothergill to transfer £14,000 to another account, leaving her with £3,000 for her trouble. For her part, Fothergill wasted no time in notifying both the police and her bank, Abbey. Sadly enough, her prompt honesty was not exactly rewarded.

Read more →

Web

Malware Robs Your Bank Account and Then Covers Its Tracks

You might want to keep a closer eye on those bank statements. Hackers have developed a sophisticated and scary program that quickly alters online bank statements in order to hide exactly how much money cyber-crooks have been siphoning from the account.

According to Wired, the malware, called URLZone, infects a computer when the user visits a compromised site, or a site set up by hackers. Then, the program steals the user's bank account log-in information and begins draining funds that it then sends to other designated accounts. However, the victim doesn't realize the money is missing because the program rewrites the text in the html code. So, when the browser displays the page, it looks like either no money has been stolen or just a small amount has been transferred.

Read more →

Computers, Web

Convicted Hacker Left in Charge of Prison Computer System


In a twist of Alanis Morrissettian irony, a man serving a six-year prison sentence for stealing millions of dollars through online credit card fraud recently succeeded in (surprise!) hacking into his prison's computer network, effectively paralyzing the entire system. The really incomprehensible part, though, is that officials at Ranby Prison, close to Retford, Nottinghamshire, England, gave him access to the computer.

Apparently in dire need of an internal TV station at the facility, officers decided against hiring a third party (e.g., not a convicted hacker) to set up the system. They instead opted to keep the operation in (the Big) house, delegating the duty to one Douglas Havard. So, as convicted hackers are wont to do, Havard, left unguarded, worked his way into the prison's hard drive, and set up a labyrinth of passwords to lock everyone else out of the system. And, just a week ago at this very same prison, an inmate actually got his hands on a master key.... Yeah.

Read more →

Web, Social Networking

New Twitter Worm Hijacks Your Account via Direct Message

Another day, another Twitter worm. The latest worm (or Tworm, if you please) to hit the micro-blogging site is even sneakier and more dangerous than others we've warned you about. That's because it's being spread via direct messages (DM) from users you know, not random spam accounts.

Let's keep it simple. If you receive a DM with the link pictured above, don't click on it. Delete the message immediately. According to Mashable, this link will direct you to a fake (but apparently pretty believable) log-in page, where, if you enter your account information, the worm will infect your account and set about infecting others by sending the link. If you already clicked on the link and your account has been hacked, simply change your password and report the problem to Twitter. Mashable says that Twitter is aware of and is handling the problem. As usual, avoid any suspicious links, even if they're from friends. [From: Mashable]

Computers, Web

New Cyber Threat Study Delivers Surprising Results


The SANS Institute, an IT security education and research group, has released a study of computer and network vulnerabilities that can only be described as massive. Involving some 15,000 organizations, the study is one of the first to offer hard data about the the number and severity of digital threats across the entire computing landscape.

According to the data collected by SANS, the biggest threats out there right now don't stem from exploited operating systems, but rather the vulnerabilities of applications and the server-based software that powers the Internet. For all of its faults, Windows isn't the problem. By the same token, Apple isn't the solution. Most attacks on today's computers focus on vulnerabilities in Web browsers, Flash, Acrobat Reader, Microsoft Office. Alternatively, they go right to the source and weasel their way onto legitimate sites.

Read more →

Web

New York Times Web Site Hit With Malicious 'Advertisement'

Such problems seldom affect major Web sites, but an "unauthorized advertisement" has been causing trouble for some visitors to The New York Times site, CNET News reports. Even more odd, the Times isn't sure how the ad got on the site or even if the site has been compromised by the attack. In a note to readers, the Times said that it is "working to prevent the problem from recurring."

While the ad doesn't appear to be very dangerous, it's certainly very annoying (Update: see below). When you visit the site, the ad warns that your computer might be at risk of infection and sends you to a site that supposedly offers anti-virus protection. (Although there have been no reports on the subject, and we certainly aren't going to download it ourselves to find out, this 'anti-virus' program is likely malicious.) Here's where it gets annoying. A reader told CNET News that the scam "hijacked his browser," forcing him to close out of it, since he couldn't leave the page. Another reader (who also took the screen capture above) told All Things Digital that he realized the ad was a scam, since he runs OS X and the ad mimics a Windows XP page.

Read more →

Computers, Web

Ways the Internet Could Come Crashing Down


For many (us included), living without the Internet would be akin to living without oxygen. It just can't be done. Much to our horror, there are some nefarious types out there who are constantly plotting to bring the Web crashing down, forever denying us access to cute pictures of cats and free pornography. (That is all it's good for, right?)

Thankfully, some caring folks at News.com.au have compiled a list of 10 ways to destroy the Internet. Now, it's up to all you good-hearted geeks to study this 'inside information' (straight from a secret underground war room, we bet), and figure out ways to prevent such a tragedy. Below, we paraphrase a few of News.com.au's biggest threats and offer some of our own solutions, too.
  • Threat: Submarines equipped with giant scissors patrol the seas, cutting underwater cables. Solution: Easy. Just train sharks equipped with torpedoes to protect those cables.
  • Threat: Nations deploy armies of hackers to wreak havoc by creating super-viruses. Solution: Just replace each hacker's wireless mouse with an old, corded rolling-ball mouse. They'll become so frustrated that they'll just give up.
  • Evil-doers use an electromagnetic pulse to destroy hardware. Solution: Consult Benjamin Linus from 'Lost.' He seems to know a thing or two about electromagnetic activity.

Read more →

Cell Phones, Computers, Web

Hacked Hacker's Service Dropped by AT&T and Webhost


Kevin Mitnick, at one time considered "the most wanted computer criminal in United States history," is experiencing a dramatic role reversal. The man who once targeted, and infiltrated, the computer systems of Sun, IBM, and Nokia now has a huge target on his own back.

According to The Register, both his cell provider, AT&T, and his Web host, HostedHere.net, have kicked Mitnick to the curb due to a rash of apparently indefensible attacks against his accounts. Mitnick recently hired an attorney because personal information -- including his account passwords, land-line and cell numbers, billing address, and even the last four digits of his social security number -- began appearing in chat rooms and public forums. The unknown hackers, assuming it's more than one, have even cyber-assaulted his former girlfriend, posting her phone records on the Web.

Read more →

Computers, Web

Australian Police Bust Hacker Ring Only to Have It Backfire

What began as a major assault on an underground hacker forum last Wednesday soon became a major embarrassment for Australian police. While authorities may or may not have learned valuable information about the hackers, they've certainly learned a lesson in humility.

According to The Sydney Morning Herald, hackers broke into a federal police computer system days after the same police bragged about busting up that very hacker ring on the television show 'Four Corners.' Last Wednesday, federal and Victoria police raided a location suspected to be connected with the administrator of r00t-y0u.org, an Australian hacker forum with about 5,000 members, and seized control of the forum in order to glean information about its members. There was just one problem. One of the hackers, delighted to find that the federal cops had "left [their server's] MYSQL password blank," had no trouble in accessing the feds' computer, stealing police files, and posting evidence of his exploits on the document-sharing site Pastebin.com -- all in all, making authorities look very foolish.

Read more →

Cell Phones

Don't Panic Over Cell Phone Viruses, Says N.Y. Times


Cell phones, long considered to be immune from malicious viruses due to the variety of different operating systems and the strict policies of providers, have recently demonstrated a vulnerability to viral infection (specifically smartphones with downloading capabilities). Despite the growing risk of handset botnets, the New York Times assures us there is no immediate need for panic or concern.

Verizon is currently the only cell manufacturer promoting anti-virus software for mobiles, even though (so far), the only smartphones affected by hackers and botnets have been Symbian-based Nokia phones and the iPhone. The so-called 'Sexy Space' botnet involves a text message containing a malicious link, which, once opened by a Nokia smart phone, could disseminate spam and even spread to, and attack, computer networks.

Read more →

Switched Video

Follow Switched on Twitter

Deals of the Day

loading...

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews
  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources