NTP attack - By rolling back the time

Interesting and simple:


From the article:

• First Attack - Involves the use of a so-called Kiss-of-Death packet to exploit a rate-limiter built into NTP. The attacker can exploit this situation from anywhere—an off-path attack—by spoofing a single Kiss of Death packet and can stop a client from querying a server for years
• Second Attack - a denial of service attack where even if the Kiss-of-Death packet vulnerability is patched, an attacker could still use the packet to disable NTP on the victim’s client 
• Third attack - Requires an attacker be in man-in-the-middle position and able to hijack traffic to an NTP server using BGP or DNS hijacks. The attack rolls back time on the server’s clients that circumvents a 16-minute panic threshold built into NTP and allows an attacker to manipulate the client’s cache and cause, for example, a cryptographic object to expire, they wrote. 
• The final attack is carried out by an off-path attacker and also rolls back time on the client side by exploiting problems in IPv4 packet fragmentation 

For more info:
https://threatpost.com/novel-ntp-attacks-roll-back-time/115138/

From Fitbit to Sickbit in 1O Seconds. This sickbit could also make other computers sick.

Good news is that it is supposed to be a Proof Of Concept. (Do you feel safe?)


From the article:

A vulnerability in FitBit fitness trackers first reported to the vendor in March could still be exploited by the person you sit next to on a park bench while catching your breath

This malware can be delivered 10 seconds after devices connect, making even fleeting proximity a problem. Testing the success of the hack takes about a minute, although it is unnecessary for the compromise.

For more info:
http://www.theregister.co.uk/2015/10/21/fitbit_hack/

Knowledge Is Power - PGP Desktop Video

This lesson looks at PGP Desktop features available such as Virtual Disk, PGP Zip, and the PGP Shredder.


Link:
http://www.symantec.com/connect/videos/pgp-universal-server-32-desktop-102-install-config-other-pgp-desktop-features

Basics - What is a VPN?

Link:
https://blogs.sophos.com/2015/10/19/what-is-a-vpn/

Knowledge Is Power - Symantec Endpoint Encryption (SEE) Videos

Link

http://www.symantec.com/connect/videos/symantec-endpoint-encryption-see-videos

If you think you are using Google Chrome , check again , it could be "eFast Malware" in disguise

Nice , simple but an very effective trick.



From the article:

According to security bloggers at Malwarebytes, the malware installs itself as the default internet browser and the default program for various popular file types, including .html, .jpg, .gif and .pdf, as well as a number of web links such as http, https and irc.


eFast is able to mirror the aesthetics of Chrome as it uses the same source code, available across the open-source project Chromium.

eFast places ads across existing web pages, linking to third-party e-commerce sites or other malicious platforms.


For More info:
https://thestack.com/security/2015/10/20/efast-malware-hijacks-browser-with-chrome-clone/

Hacking Chip-and-PIN is not "improbable" (according to EMVCo and the UK Cards Association) anymore.

All truth passes through three stages. 

First, it is ridiculed. 

Second, it is violently opposed. 

Third, it is accepted as being self-evident.

— Arthur Schopenhauer, German philosopher (1788 – 1860)

From the article:

When in 2010 a team of computer scientists at Cambridge University demonstrated how the chip and PIN system used on many modern payment cards can be bypassed by making the POS system accept any PIN as valid, the reaction of the EMVCo and the UK Cards Association was to brand the attack as "improbable".

The FUNcard chip was programmed to intercept the POS systems' PIN query and return an answer that says that the PIN is correct.

The card itself didn't look suspicious - the "double" chip still allowed the card to be inserted into POS systems.

Thusly modified cards were used in France by a group of fraudsters that were ultimately arrested in 2011 and 2012 because they repeatedly used them at the same few locations.

According to Wired, the French authorities estimated that before getting arrested, they managed to spend nearly 600,000 euros.

For More info:

http://www.net-security.org/secworld.php?id=19003