- cypherpunks - lists.cpunks.org

[old] Mar 2020 Hacking community targeted by cyber criminals in trojan campaign
by Karl 16 May '21

16 May '21

https://www.computerweekly.com/news/252479793/Hacking-community-targeted-by… 10 Mar 2020 14:30 The hacking community has been warned to be alert to cyber criminals turning popular hacking tools into a means to spread remote access trojans (Rats), in a newly uncovered campaign discovered by threat researchers at Cybereason’s Nocturnus lab. The campaign exploits the well-known and widely used njRat trojan – which is also known as Bladabindi – which was developed by Middle Eastern threat groups between seven and eight years ago. If opened, NjRat takes over the victim’s machine and can be used to extract system information, execute and manipulate files, open remote shells to let attackers use the command line, record from cameras or microphones, log keystrokes, and steal stored passwords, among other things. The new campaign spreads njRat by injecting it into downloadable hacking tools and other installers, said Cybereason. These tools are being posted on various underground forums and websites to bait other hackers into falling “victim” to njRat. The firm believes the campaign has been running for a considerable length of time and appears to be the product of a so-called “malware factory” which is churning out new iterations of the various compromised tools on an almost daily basis, possibly using some degree of automation. “This investigation surfaced almost 1,000 njRat samples compiled and built on almost a daily basis. It is safe to assume that many individuals have been infected by this campaign although at the moment we are unable to know exactly how many,” said Amit Serper, Cybereason’s vice-president of security, in a disclosure blog. “This campaign ultimately gives threat actors complete access to the target machine, so they can use it for anything from conducting DDoS attacks to stealing sensitive data off the machine.” The campaign poses a threat beyond the confines of the hacker community because if a victimised hacker already has access to your system, the hacker who hacked them will also have access to your system. Read more about cyber criminals The latest email campaigns identified by Proofpoint are spreading conspiracy theories about the coronavirus outbreak. The popularity and ubiquity of web-based apps such as Office 365 and Salesforce is a temptation too good to miss for cyber criminals. Cyber criminals are spending longer hiding in target networks before launching their attacks, as more organised groups turn to business disruption to achieve their objectives. In the campaign, njRat masquerades as a legitimate Windows process and was found to be connecting to two IP addresses, one of a compromised Wordpress site belonging to a legitimate Indian pen manufacturer, and another to Minecraft site located in Turkey that since late 2018 has been re-registered by an individual in Vietnam, who may be associated with the campaign. “It is clear the threat actors behind this campaign are using multiple servers, some of which appear to be hacked WordPress blogs,” said Serper. “Others appear to be the infrastructure owned by the threat group.” Cybereason found that all the njRat samples associated with the Turkish-Vietnamese site were targeting penetration testing and hacking tools, although the campaign is by no means targeting just the hacking community – it also seems to be targeting Chrome installers, native Windows apps, and some other programs that have nothing to do with hacking or penetration testing. “At the moment, we are unable to ascertain the other victims this malware campaign is targeting, other than those targeted by the trojanised hacking tool,” said Serper, who is continuing to monitor the campaign. Cybereason has published a lengthy list of indicators of compromise (IoCs), which can be downloaded from its website.

1 0

SciTechDaily: How to Cloak an Object to Become Invisible to a Thermal Camera
by jim bell 16 May '21

16 May '21

SciTechDaily: How to Cloak an Object to Become Invisible to a Thermal Camera. https://scitechdaily.com/how-to-cloak-an-object-to-become-invisible-to-a-th…

1 0

Hackaday: A Phased-Array Ultrasonic 3D Scanner From Scratch
by jim bell 16 May '21

16 May '21

Hackaday: A Phased-Array Ultrasonic 3D Scanner From Scratch. https://hackaday.com/2021/05/15/a-phased-array-ultrasonic-3d-scanner-from-s…

1 0

Hackaday: Simple Encryption You Can Do On Paper
by jim bell 16 May '21

16 May '21

Hackaday: Simple Encryption You Can Do On Paper. https://hackaday.com/2021/05/12/simple-encryption-you-can-do-on-paper/

1 0

Ars Technica: Binance, the biggest cryptocurrency exchange, reportedly under investigation
by jim bell 16 May '21

16 May '21

Ars Technica: Binance, the biggest cryptocurrency exchange, reportedly under investigation. https://arstechnica.com/tech-policy/2021/05/binance-the-biggest-cryptocurre…

1 0

How would you do that ...
by Stefan Claas 15 May '21

15 May '21

Hi all, a little project I am working on. https://lists.gnupg.org/pipermail/gnupg-users/2021-May/065124.html Regards Stefan

3 9

SpyVeillance: USPS Postal Service Runs iCOP Covert Ops Program Spying Americans Social Posts
by grarpamp 15 May '21

15 May '21

> https://news.yahoo.com/the-postal-service-is-running-a-running-a-covert-ope… https://www.scribd.com/document/503807748/Post-Office-Redacted Like articles from fake news, appears political anti "right-wing" bias is present in headline abstract, laughably failing to mention in same abstract violent leftist "social platforms" orgs and politicians planning and supporting protests causing thousand hospitalizations $2B+ in insurance damage claims, etc all over 2020-2021. iCOP or "Internet Covert Operations Program Yet another spying and power panopticon, just as with the USPS MICT Mail Isolation Control and Tracking Program spying and storing your correspondants forever... https://en.wikipedia.org/wiki/Mail_Isolation_Control_and_Tracking https://en.wikipedia.org/wiki/Multiline_optical-character_reader https://en.wikipedia.org/wiki/Informed_Delivery That's just two of the many spy programs in one entity. There are many more in that entity, and many more entities. Hardly even 10% of them listed below, which doesn't include GovCorp licensed private Corporate Spying Influence and Power programs... https://en.wikipedia.org/wiki/Mass_surveillance_in_the_United_States US Postal Service Running 'Covert Operations Program' To Spy On Americans' Social Media Posts, Share With Agencies The US Postal Service (USPS) has been running a secret program to track and collect Americans' social media posts - including those about planned protests, according to a document obtained by Yahoo News. The surveillance program - operated by the law enforcement arm of the USPS, is known as iCOP or "Internet Covert Operations Program" - has not been previously made public according to the report. The work involves having analysts trawl through social media sites to look for what the document describes as “inflammatory” postings and then sharing that information across government agencies. -Yahoo News "Analysts with the United States Postal Inspection Service (USPIS) Internet Covert Operations Program (iCOP) monitored significant activity regarding planned protests occurring internationally and domestically on March 20, 2021," reads a government bulletin dated March 16, marked as "law enforcement sensitive" and distributed throughout the Department of Homeland Security's fusion centers. "Locations and times have been identified for these protests, which are being distributed online across multiple social media platforms, to include right-wing leaning Parler and Telegram accounts." The report cites intelligence that 'a number of groups were expected to gather in cities around the globe on March 20 as part of a World Wide Rally for Freedom and Democracy' against pandemic lockdown measures. "Parler users have commented about their intent to use the rallies to engage in violence. Image 3 on the right is a screenshot from Parler indicating two users discussing the event as an opportunity to engage in a ‘fight’ and to ‘do serious damage,’" reads the bulletin," though it hedges with "No intelligence is available to suggest the legitimacy of these threats." The bulletin includes screenshots of posts concerning the protests from Facebook, Parler, Telegram and other social media sites (only one of which - Parler - was 'canceled' by big tech). "iCOP analysts are currently monitoring these social media channels for any potential threats stemming from the scheduled protests and will disseminate intelligence updates as needed," reads the bulletin. Post Office Redacted by Yahoo News "It's a mystery" said University of Chicago law professor Geoffrey Stone - who was appointed by President Obama to review the National Security Agency's bulk data collection program revealed by Edward Snowden. "I don’t understand why the government would go to the Postal Service for examining the internet for security issues." "There are so many other federal agencies that could do this, I don’t understand why the post office would be doing it. There is no need for the post office to do it — you’ve got FBI, Homeland Security and so on, so I don’t know why the post office is doing this," he added. The Postal Service has had a turbulent year, facing financial insolvency and allegations that its head, Postmaster General Louis DeJoy, who was appointed by President Donald Trump, was slowing down deliveries just as the pandemic vastly increased the number of mail-in ballots for the 2020 election. Why the post office would now move into social media surveillance, which would appear to have little to do with mail deliveries, is unclear. “This seems a little bizarre,” agreed Rachel Levinson-Waldman, deputy director of the Brennan Center for Justice’s liberty and national security program. “Based on the very minimal information that’s available online, it appears that [iCOP] is meant to root out misuse of the postal system by online actors, which doesn’t seem to encompass what’s going on here. It’s not at all clear why their mandate would include monitoring of social media that’s unrelated to use of the postal system.” -Yahoo News "If the individuals they’re monitoring are carrying out or planning criminal activity, that should be the purview of the FBI," said Levinson-Waldman. "If they’re simply engaging in lawfully protected speech, even if it’s odious or objectionable, then monitoring them on that basis raises serious constitutional concerns."

2 3

[BREAKING] [FLASH] IDF CONFIRMS LEBANON FIRES MISSLE AT ISRAEL
by Se7en 13 May '21

13 May '21

1 1

[BREAKING] [FLAS] CDC PRESSER
by Se7en 13 May '21

13 May '21

BREAKING: CDC ANNOUNCES FULLY VACINATED PERSONS MAY STOP WEARING MASKS AND RESUME ACTIVITY, SAYS UNVACCINATED STILL AT RISK AND MUST WEAR MASKS | DR FAUCI ANNOUNCES WHITE HOUSE TO BEGIN RESEARCH INTO PAN-CORONAVIRUS VACCINE -- |-----/ | Se7en / The One and Only! | se7en(a)cock.email / | 0x0F83F93882CF6116 / | https://se7en-site.neocities.org

1 0

From Newsmax - Rep. Matt Gaetz: Forget Packages, USPS Is Tracking You
by jim bell 13 May '21

13 May '21

Rep. Matt Gaetz: Forget Packages, USPS Is Tracking You https://www.newsmax.com/t/finance/article/1020241?dkt_nbr=6F12124rzatp&keyw…

1 0