Beware This Clever "Fake Attachment" Gmail Phishing Scam

 Beware This Clever "Fake Attachment" Gmail Phishing Scam

With a little know-how, most phishing scams are pretty easy to detect. This one, on the other hand, is devilishly clever and just might dupe you if you’re not careful.

The way this phish scam works is simple. Wordfence, who brought light to the scam, says the attacker creates an email address to disguise themselves as someone you know. Then they send you an email with an attachment, like a PDF or Word doc, that looks legitimate. When you click the attachment to see a preview of it, you get redirected to a Google sign-in page where you enter your credentials.
Here’s the trick: those attachments aren’t attachments—they’re embedded images designed to look like attachments that link out to a fake Google sign-in page. You can see an example of how real they look in Tom Scott’s tweet below.

What’s worse is everything about the fake Google sign-in page looks normal. The logo, text boxes, and tagline are all there. The only difference is in the address bar, where careful eyes will see that the page is actually a data URI with the prefix “data:text/htyml”, not a URL with the standard “https://”. But if you don’t spot it, the attackers get your information and use it to send out more of the same phish emails to your contacts.
Google has since updated Chrome to 56.0.2924, which makes it easier to spot fake forms like these, but it doesn’t exactly stop this type of scam dead in its tracks. And whether you use Chrome or not, it’s important to stay vigilant and keep your eyes peeled when checking email.


If you like the post please share it ... :)

Share:

Read More

The Anonymous Group: What is it and How big is it

Research proved that Anonymous hacktivists group is relatively much bigger than you anticipated and become quite popular among people all over the world but how did it all start?

The Anonymous group has been gaining a lot of attention in the past few years. This is mainly due to the way they act and the way they portray themselves. People donning Guy Fawkes masks and taking down the government and non-government agencies are sure to attract some attention, and because the activity of Anonymous is not restricted to a single country, they have gained global attention.




With many people talking about the hacktivist group, people have often wondered just how big the group is, given their widespread activities. However, that question is not easy to give a definitive answer to. As to what the group is, we take a look at that here.

Beginning

Anonymous first came in existence in 2003 when unknown users who were tagged as Anonymous posted images on 4chan’s /b/ board. The images were about random things but the Anonymous tag soon gained popularity on the website. The group then escalated their activities to internet pranks, troll events, and raiding websites like that of Habbo Hotel, a hotel in Finland.
In 2004, they started to use the website of Encyclopaedia Dramatica as a platform for their activities. For some years, they did little more than mass pranks and take action against communities that supported anti-piracy acts.

Change of Stance

In 2008, Anonymous started Project Chanology, a direct campaign against the Church of Scientology. The campaign included repeatedly carrying out DDoS attacks on the Church’s website, the Anonymous members, or Anons as they are called, used to make prank calls to the Church’s hotline, and sending black faxes to them to waste their ink cartridges. This project resulted in the group gaining global criticism from the media and authorities and global appreciation from casual internet users.

In 2010, Anonymous took their next big step, taking down the website of Aiplex software using a DDoS attack. Aiplex was a company based in India which partnered with different film studios to launch DDoS attacks against P2P sharing platforms and websites like The Pirate Bay. The group next took down the website of Recording Industry Association of America and Motion Pictures Association of America.

Under their project “Payback is a Bitch” they hacked the website of Copyright Alliance, giving their reason as an act against all those that want to silence people’s rights to spread information. After this, they attacked websites of companies like Amazon, PayPal, VISA, and Mastercard. This attack, named Operation Avenge Assange, was carried out because the aforementioned companies boycotted WikiLeaks.

Other groups and agendas of Anonymous

Anonymous is a hacktivist group that has grown enormously since it first came into existence. There are a number of groups that are associated with Anonymous, with LulzSec and Operation AntiSec. These groups have also targeted government agencies, video game companies, media groups, etc. LulzSec was formed after Anonymous attack HBGarry.

Official LulzSec logo Via: Enter

Speaking about the philosophy behind Anonymous, there is no particular set of guidelines that the group follows. It is merely a vast and intricate network of like-minded hackers who work with common ideas and goals. Recently, they have been involved in taking down Donald Trump’s Trump Towers’ website following the presidential candidate’s remarks on Muslim immigrants in the USA.



However, the most notable of Anonymous projects, which has gained them the most admirers, is their campaign against ISIS. The group are quite active in taking down any website that copies or spreads the propaganda of the terrorist outfit. They that had moved to the dark net, posting a message next to an advert for a pharmaceutical company that sold Prozac and Viagra. The group have also acted against paedophile websites, saying that they are against the injustice of any kind.

Anonymous – Web Warriors Full Documentary

If you like the post please share it ... :)

Share:

Read More

Hacking WPA/WPA2 without dictionary/bruteforce

Hacking WPA/WPA2 without dictionary/bruteforce

Fluxion (linset)

I hadn't ventured into Hackforums since a while, and this time when I went there I saw a thread about a script called Fluxion. It's based on another script called linset (actually it's no much different from linset, think of it as an improvement, with some bug fixes and additional options). I did once think about (and was asked in a comment about) using something like a man in the middle attack/ evil twin attack to get WPA password instead of going the bruteforce/dictionary route, but never looked the idea up on the internet nor spent much time pondering over it. However, once I saw the thread about this cool script, I decided to give it a try. So in this post I'll show you how I used Fluxion, and how you can too.
Disclaimer : Use this tool only on networks you own .Don't do anything illegal.

Contents

• Checking if tool is pre-installed, getting it via github if it isn't.
• Running the script, installing dependencies if required.
• Quick overview of how to use Fluxion.
• Detailed walk-through and demonstration with text explanation and screenshots
• Video demonstration (not identical to the written demo, but almost the same)
• Troubleshooting section

Just double checking

The first thing I did was make sure that Kali doesn't already have this tool. Maybe if you are reading this post a long time after it was written, then you might have the tool pre-installed in Kali. In any case, try this out:

fluxion

I, personally tried to check if linset or fluxion came pre-installed in Kali (though I didn't expect them to be there).

Getting the script

Getting the script is just a matter of cloning the github repository. Just use the git command line tool to do it.

If you have any problems with this step, then you can just naviagate to the repostitory and manually download the stuff.

Update : There seems to be some legal trouble with Fluxion. The creator of the script has removed the source code of the tool, and uploaded code that is supposed to delete fluxion from your computer. I don't know the specifics of what is going on, but will provide updates ASAP.

Update : Now the repository is gone altogether!
What this means : As of now, this tutorial is useless. If you can find the source code for Fluxion, then you can use it and continue with the tutorial. Otherwise, not much can be done without the tool.


Update Again!
You can try this repo - https://github.com/wi-fi-analyzer/fluxion. It's an old version, might or might not work.

git clone https://github.com/wi-fi-analyzer/fluxion

There are 4 dependencies that need to be installed

Running the script

Just navigate to the fluxion directory or the directory containing the scripts in case you downloaded them manually. If you are following the terminal commands I'm using, then it's just a simple change directory command for you:

cd fluxion

Now, run the script.

sudo ./fluxion

Dependencies

If you have any unmet dependencies, then  run the installer script.

sudo ./Installer.sh

I had 4 unmet dependencies, and the installer script run was a buggy experience for me (though it might be becuase I have completely screwed up my system, editing files I wasn't supposed to and now I can't get them back in order) .It got stuck multiple times during the process, and I had to ctrl+c my way out of it many times (though ctrl+c didn't terminate the whole installer, just the little update popup). Also, I ran the installer script twice and that messed up with some of the apt-get settings. I suggest that after installation is complete, you restore your /etc/apt/sources.list to it's original state, and remove the bleeding edge repositories (unless you know what you're doing). To know what your repository should look like, take a look here.

Anyways, one way or the other, your unmet dependencies will be resolved, and then you can use Flexion.
PS: For those trying to use apt-get to install the missing stuff - some of the dependencies aren't available in the default Kali repos, so you'll have to let the script do the installation for you, or manually add the repos to /etc/apt/sources.list (look at the script to find out which repos you need to add)

Fluxion

Once again, type the following:

sudo ./fluxion

This time it should run just fine, and you would be asked a few very simple questions.

• For the wireless adapter, choose whichever one you want to monitor on. For the channels question, choose all, unless you have a specific channel in mind, which you know has the target AP.
• Then you will see an airodump-ng window (named Wifi Monitor). Let it run while it looks for APs and clients. Once you think you have what you need, use the close button to stop the monitoring.



Fluxion using airodump-ng

• You'll then be prompted to select target.
• Then you'll be prompted to select attack.
• Then you'll be prompted to provide handshake.
• If you don't have a handshake captured already, the script will help you capture one. It will send deauth packets to achieve that.
• After that, I quit the procedure (I was using the script in my college hostel and didn't want to cause any troubles to other students).

If you are with me so far, then you can either just close this website, and try to use the tool on your own (it look intuitive enough to me), or you can read through the test run that I'm going to be doing now.

Getting my wireless network's password by fooling my smartphone into connecting to a fake AP

So, in this example run, I will try to find out the password of my wireless network by making my smartphone connect to a fake AP, and then type out the password in the smartphone, and then see if my Fluxion instance on my Kali machine (laptop) gets the password. Also, for the handshake, I will de-authenticate the same smartphone.

PS: You can probably follow this guide without having any clue how WPA works, what handshake is, what is actually going on, etc., but I suggest you do read up about these things. Here are a few links to other tutorials on this website itself that would prove useful (the first two are theoretical, yet nice, the third one is a pretty fun attack, which I suggest you try out, now or later):

1. Things you should know about Wireless Hacking - Beginner Level Stuff
2. Things you should know about Wireless Hacking Part II - Intermediate Level Stuff
3. Evil Twin Attack

This is the theoretical stuff. Experience with tools like aircrack-ng, etc. would also be useful. Take a look at the navigation bar at the top and look at the various tutorials under the "Wireless Hacking" category.

Anyways, with the recommended reading material covered, you can comfortably move on to the actual hacking now:

The real stuff begins!

This section is going to be a set of pictures with captions below them explaining stuff. It should be easy to follow I hope.

Select language

After selecting language, this step shows up.
Note how I am not using any external wireless card, but my laptop's internal card.
However, some internal cards may cause problems, so it's better to use an
external card (and if you are on a virtual machine you will have to use an external card).

The scanning process starts, using airodump-ng.

You get to choose a target. I'm going after network number 21, the one my smartphone
is connected to.

You choose an attack. I am going to choose the Hostapd (first one) attack.

If you had already captured a 4-way handshake, then you can specify the location
to that handshake and the script will use it. Otherwise, it will capture a handshake
in the next step for you. (A tutorial on capturing the handshake separately)

If you didn't capture a handshake beforehand, then you get to choose which
tool to use to do that. I'm go with aircrack-ng.

Once you have a handshake captured (see the WPA Handshake: [MAC Address] on top, if it's
there, then you have the handhake), then type 1 and enter to check the handshake. If everything's fine,
you'll go to the next step.

Use the Web Interface method. I didn't try the bruteforce thing, but I guess it's just
the usual bruteforce attack that most tools use (and thus no use to us, since that's
not what we are using this script for).

This offers a variety of login pages that you can use to get (phish) the
WPA network's password. I went with the first choice.

After making your decision, you'll see multiple windows. DHCP and DNS requests are being handled in
left two windows, while the right two are status reporting window and deauth window (to get users
off the actual AP and lure them to our fake AP)

In my smartphone, I see two network of the same name. Note that while the original network is WPA-2
protected, the fake AP we have created is an open network (which is a huge giveaway stopping most people
from making the mistake of connecting to it). Anyways, I connected to the fake AP, and the DNS and DHCP windows
(left ones), reacted accordingly.

After connecting to the network, I got a notification saying that I need to login to the wireless network.
On clicking that, I found this page. For some people, you'll have to open your browser and try to open a website (say facebook.com) to get this page to show up. After I entered the password, and pressed submit, the script ran the
password against the handshake we had captured earlier to verify if it is indeed correct. Note how the
handshake is a luxury, not a necessity in this method. It just ensures that we can verify if the password
submitted by the fake AP client is correct or not. If we don't have the handshake, then we lose this ability,
but assuming the client will type the correct password, we can still make the attack work.

Aircrack-ng tried the password again the handshake, and as expected, it worked.
We successfully obtained the password to a WPA-2 protected network in a matter of minutes.

If you like the post please share it ... :)

Share:

Read More

10 top smartphones launched in #2016

 10 top smartphones launched in #2016

1. Best smartphone - iPhone 7 Plus

 

Apple's dual camera, big screen phone is a winner

Gorgeous water resistant design

Dual camera

Iterative design

Could be too big for some

Here we have the iPhone 7 Plus - probably the best-looking smartphone around. Some feel its sheer size does make it tricky to hold, but there's no denying Apple's beautiful 5.5-incher is a winner. If you're an iPhone user and you fancy picking up the best smartphone around, this should definitely be your first choice. Apple has chosen to stick with the iPhone 6S design, improving it with rerouted antenna lines and a more integrated camera bump. There are glorious new colours available, and to top it off, the casing is now water resistant.

2. The other best smartphone - Samsung Galaxy S7 Edge

 

 

Curving into the future with impressive specs

Premium design

Best camera

Fingerprint magnet

Cartoonish UI

The Samsung Galaxy S7 Edge is so close to being the best smartphone in the world right now. It boasts the brilliant dual curved display, with the screen bending around on both sides so it looks like no other phone ever made (apart from the S6 Edge last year). Yep, this futuristic smartphone is a looker, and it'll have your friends begging for a chance to play with it.

3. Google Pixel XL

 

The best large smartphone

Great camera

Virtual Assistant

Not water resistant

Design a little uninspired

We can't tell you how close it is between the Google Pixel XL, iPhone 7 Plus and S7 Edge for the title of 'best smartphone in the world.' All three are beautiful, but the sleek design, intuitive UI, and leading ecosystem puts the iPhone 7 just in front. The Google Pixel XL is still an amazing smartphone - especially if you adore large screens and virtual assistants.

4. iPhone SE

 

The best small smartphone

Small!

Great battery life

Old, boxy design

16GB storage base model

Notice how all of these smartphones have 5+ inch screens? What if you have small hands? You can't reach all four corners of the screen. It's a problem not many of us face, but the truth is -- some people just prefer smaller phones but don't want to sacrifice high-end specs. The iPhone SE is for you. With a 4-inch screen and guts which match the iPhone 6S, including the 12MP rear camera, 2GB RAM, Apple Pay, Retina display, and Apple A9 chipset, this thing is a little pocket rocket.

5. OnePlus 3T

 

The best smartphone from an alternative brand

Low price for great spec

Premium build

No MicroSD

Getting more and more expensive

Looking to upset dominance by the big brands is OnePlus, who took the mobile world by storm in 2014 with one goal, to be the flagship killer. It's fourth smartphone, the OnePlus 3T, has finally achieved that goal. With a slightly more expensive price tag of £399, you'll get all the mod-cons of much more expensive handsets, including an HD screen, fingerprint sensor, a decent camera and powerful specs. And, whereas previous OnePlus phones lacked finesse - the OnePlus 3T as a genuine premium feel and the software is rock solid.

6. Nexus 6P

 

The best value smartphone

All metal design

Great price

Still pretty big

No wireless charger

The Nexus may have been superseeded by the Google Pixel, but that only makes the highly affordable Nexus 6P a steal. The phone is made by Huawei and includes a 5.7-inch 2K display, 2GB of RAM and a Qualcomm Snapdragon 810 chipset inside. The battery life is very impressive for a phone this size but sadly there's no wireless camera. The camera offers a 12MP sensor and there's a fingerprint sensor on the back for the very first time.

7. LG G5

 

The best smartphone with a removable battery

Innovative

Interesting dual camera

Not a luxe as rivals

Accessories are a gimmick

This phone is aimed at those who want a truly innovative, gadgety smartphone, and while it doesn't look as special as the Galaxy S7 Edge, it does have a kick-ass unique feature. This phone, you see, has a modular design, letting you add optional attachments (such as a camera grip or high-res audio). It's also the only flagship smartphone in 2016 which lets you swap the battery. Sure, it doesn't feel as premium as the Samsung or iPhone, but if you want to make a geeky statement, this is the phone for you.

8. HTC 10

 

The best smartphone for music

Great battery life and camera

Amazing sound and software

Chunky

Uninspired design

The HTC 10 is a phone that takes the design heritage, DNA and all the other good bits of last year's One M9 and, well, does them again, but better. It's again shown the rest of the competition how to make a premium smartphone, and its camera, battery life and performance is right up there too. HTC has really worked on the criticisms of the previous generation devices, and created their best ever flagship smartphone.

9. Huawei Mate 9

 

The best smartphone for battery life

Outstanding battery life

Fingerprint sensor and large display

Sub-par UI

Misses the mark on design

If your budget can't quite stretch to a snazzy California or South Korean-designed smartphone, you may wish to consider a Chinese brand instead. The Huawei Mate 9 is the best smartphone to hail from the People's Republic. It has a great 5.9-inch display, and brilliant battery life thanks to the large 4,000 mAh unit. It's not without its flaws though, the Emotion UI isn't great (although, has been improved over previous generations), and the design just isn't as sleek as its rivals.

10. Motorola Moto X Force

 

The best durable smartphone

Unbreakable screen

Close to stock Android

Noticeably plastic screen

Poor speaker

The Moto X Force is a refreshing phone - rather than trying to be elegant and premium - it's durable and will survive a beating. That's mainly down to the screen, which features a thick, toughened outer layer which won't break - not matter how hard you try. The casing is also pretty rugged, our favourite finish being the 'Ballistic Nylon' back. The specs are pretty powerful, and the battery life is also impressive.


If you like the post please share it ... :)

Share:

Read More

Top 10 trending YouTube videos of #2016

Top 10 trending YouTube videos of #2016

 01. Adele Carpool Karaoke

Not only did Adele and James belt their hearts out, but they also had the best witty banter. Pretty sure these two might have redefined friend goals.

02. Pen-Pineapple-Apple-Pen/PIKO-TARO

 

We bet you can't say "pen pineapple apple pen" five times fast. Also, we don't think you could ever get tired of watching this video. 

03. What's Inside a Rattlesnake Rattle?

In case you've also always wondered what's inside a rattlesnake rattle, you won't have to wonder anymore after viewing this vid.

04. Nike Presents: The Switch

For all you soccer lovers out there, Nike released this short video as part of their #SparkBrilliance campaign.

05. Grace VanderWaal Gets the Golden Buzzer on America's Got Talent

This was the moment when it all started for Grace VanderWaal! She appeared on America's Got Talent this summer and performed an original song on the ukulele. The rest, as you know, is history.

06. Water Bottle Flip Edition by Dude Perfect

This video takes the water bottle flip trend to an expert level. Don't try this at home, kids.

07. Channing Tatum vs. Jenna Dewan-Tatum in Lip Sync Battle

You haven't lived until you've seen Channing Tatum perform Beyoncé's "Who Run the World (Girls)."


08. Last Week Tonight With John Oliver's Segment on Donald Trump

John Oliver performed this segment in February 2016, and the video quickly went viral shortly after it aired.

09. Casey Neistat's $21,000 First Class Seat

YouTuber Casey Neistat traveled from Dubai to NYC when he received a free upgrade to first class...and documented the entire experience.
10. Brothers Convince Little Sister of the Zombie Apocalypse

 In what might be the greatest prank of the year, two brothers played a joke on their sister after she emerged from wisdom teeth surgery. They decided to convince her that they were living an IRL episode of The Walking Dead. We're definitely filing this away for our next prank war.




If you like the post please share it ... :)

Share:

Read More

Top 10 Things Searched on Google in 2016 #INDIA

 Top 10 Things  Searched on Google in 2016 #INDIA

In an unprecedented scenario, India searched for Olympic Rio 2016 the most, even more than cricket — which is a feat in itself for the changing tides of time for sports in India.


Sultan, Kabali and Udta Punjab were the top three searched movies in 2016. Although MS Dhoni didn’t make it to the top 10 searched movies of the year, Disha Patani and Sushant Singh Rajput who starred in the movie are the top searched actors.

Top 10 Trending Searches

• Olympic Games Rio 2016
• Pokemon Go
• Euro 2016
• Sultan
• Kabali
• iPhone 7
• IPL 2016
• Donald Trump
• Udta Punjab
• P V Sindhu

Top 10 Trending News Events

• Rio Olympics 2016
• US Elections
• Brexit
• 7th Pay Commission
• Auto Expo 2016
• Oscars 2016
• Demonetisation
• Surgical Strike
• Zika Virus
• BRICS Summit

Top 10 Trending People

• Donald Trump
• P V Sindhu
• Sonam Gupta
• Dipa Karmakar
• Disha Patani
• Urvashi Rautela
• Vijay Mallya
• Pooja Hegde
• Sakshi Malik
• Arnab Goswami

Top 10 Trending Movies

• Sultan
• Kabali
• Udta Punjab
• Airlift
• Ae Dil Hai Mushkil
• Sanam Re
• Sairat
• Rustom
• Housefull 3
• Mohenjo Daro

Top 10 Trending Mobile Devices

• Freedom 251
• iPhone 7
• Redmi note 3
• Lenovo k4 Note
• Samsung j7
• Moto G4
• One plus 3
• iPhone SE
• Google Pixel
• Lenovo k5 note

Top 10 Trending Bollywood Actor (Male)

• Sushant Singh Rajput
• Kabir Bedi
• Harshvardhan Kapoor
• Pulkit Samrat
• Salman Khan
• Arshad Warsi
• Suraj Pancholi
• Anupam Kher
• Ranveer Singh
• Vicky Kaushal

Top 10 Trending Bollywood Actor (Female)

• Disha Patani
• Urvashi Rautela
• Pooja Hegde
• Mandana Karimi
• Urmila Matondkar
• Nimrat Kaur
• Vaani Kapoor
• Nora Fatehi
• Kiara Advani
• Saiyami Kher

If you like the post please share it ... :)

Share:

Read More

Top 10 Coolest Gadgets of #2016

 Top 10 Coolest Gadgets of #2016

We met tons of brand new tech startups at CES this year and saw gadgets ranging from health-focused wearables, drones, 3D printers, and AR/VR headsets. We even got views of the Las Vegas strip from 1,000 feet off the ground in the UberCHOPPER.

 1. The EHang 184 is a human-sized drone built by the Chinese UAV company EHang. It is an autonomous drone that will be able to carry a single passenger for 23 minutes at a speed of 60 MPH. The 184 also has gull-wing doors and arms that fold up.

 2. Lenovo announced that the company would be producing the first Google Project Tango phone. The conference was short on details, but we know is that Lenovo is going to release a phone that is going to cost less than $500 this summer. The company doesn’t have a final design just yet, but pictured above is a glimpse one of the 5 designs.

 3. Garmin’s Varia Vision is an augmented reality display that you mount to your sunglasses. And it’s not just about displaying how well you’re doing, it can alert you about traffic and directions. The$400 device could be a dream come true for cyclists when it comes out in Q1 2016.


 

 4. Parrot unveiled the 700-gram Parrot Disco drone, and we went hands-on. It can fly up to 45 minutes and reach speeds of just under 50 mph. The 1080p 14-megapixel camera at the front of the drone is the same one that Parrot used for its Bebop 2 quadcopter.

 5. The Daqri smart helmet is an industrial device that projects important information in front of the eyes of the wearer. It doubles as a hard hat and safety goggles making it ideal for anyone working with heavy machinery or in technical fields.

 6. The Nima from 6 Sensor Labs is a$249 gadget that can test food for gluten in under 2 minutes with antibody-based test and disposable pods. Something like this could change the lives of those with Celiac disease or gluten sensitivity. 6 Sensor Labs took home the $50,000 Hardware Battlefield grand prize.

7. The GoSun Stove is a solar powered grill that uses a unique design that directs sunlight towards a cylinder, which the company says can heat up to 550 degrees in some models in 10 to 20 minutes. The food cooks inside a solar evacuated tube that absorbs more than 80% of the sunlight reflected onto the tube.

8. Lexus had their new hoverboard on display. The car company has said that it uses “magnetic levitation” and “liquid nitrogen cooled superconductors and permanent magnets” to achieve hover flight.

9. We spoke with Bonaverde’s Hans Stier on our Battlefield stage about their end-to-end  connected coffee machine.

10. The Grillbot is like a Roomba for your grill. Lazy grillers can appreciate a robot that you plop down to automatically clean your dirty grill. Selling for $129, the robot has three replaceable metal bristles that help the robot both clean and move around your grill. The device has a rechargeable battery, three electric motors, and an LCD alarm and timer so you can leave it and walk away while it does its thing. However it can only work on surfaces cooler than 200 degrees.



If you like the post please share it ... :)

Share:

Read More