Malicious Gaming App Infects More than 1 Million Android Users 2015

Hacking News Of 2015

It's not at all surprising that the Google Play Store is surrounded by a number of malicious applications that may gain users' attention to fall victim for one, but this time it might be even worse than you thought.

Threat researchers from security firm ESET have discovered a malicious Facebook-Credentials-Stealing Trojan masquerading as an Android game that has been downloaded by more than a Million Android users.

Malicious Android Apps downloaded 50,000-1,000,000 times

The Android game, dubbed "Cowboy Adventure," and another malicious game, dubbed "Jump Chess" � downloaded up to 50,000 times, have since been removed from Google Play Store.

However, before taking them off from the app store, the creepy game apps may have compromised anunknown number of victims' Facebook credentials.

Both the games were created by the same software developer, Tinker Studio and both were used to gather social media credentials from unsuspecting users.

How Cowboy Adventure victimizes Android users?

Once installed, Cowboy Adventure produced a fake Facebook login window that prompted users to enter their Facebook usernames along with their passwords. A practice known as OAuth in which a 3rd party asks your Facebook login.

However, if users provide their credentials to Cowboy Adventure app, the malicious code within the game app allegedly sent their credentials to the attacker's server.

Therefore, If you have downloaded Cowboy Adventure or Jump Chess, you should immediately change not alone your Facebook password, but any service that uses the same combination of username and password as your Facebook account.

ESET senior security researcher Robert Lipovsky believes that the app malicious behavior is not just a careless mistake of the game developer, but the developer is actually a criminal minded.

Take Away

A few basic tips that you should always keep in your mind are:

• Always download apps from official sources, such as Google Play Store or Apple's App Store.
• Read reviews from other users before downloading an app (Many users complained about "Cowboy Adventure" that the game locked them out of Facebook accounts).
• Always use two-factor authentication on services that makes it harder for hackers to access your accounts with just your password.
• Always keep a malware scanning software from trusted vendors like Avast, AVG, ESET, Kaspersky and Bitdefender, on your smartphone.

Read more...

Sandisks World�s First 200Gb microSD Card Arrives

There isn't any troll in the title. The "World's Largest microSD" card sized at 200GB is now officially available for purchasing from Amazon and number of retailers.

Order a Sandisk's new high-capacity microSD card from Amazon now. However, the only issue is that it is not exactly very cheap. You will have to pay Around $240 to Buy one.

Sandisk's World's First 200GB MicroSD Card :-

Back in March when Sandisk first announced the world's first 200GB microSD card, it was expected to be priced at around $400. However, $240 has been marked as the price for the highest-capacity microSD card available in the market.

Sandisk's 200GB microSD card, or Ultra microSDXC UHS-I card, offers a transfer speed of up to 90MB per second, which is double the speed provided by its 128GB counterpart.

Transfer Speed: 1200 Photos Per Minute

The company claims that the speed will allow you to transfer up to 1,200 photos in just a single minute. The card is something of great use for photographers and filmmakers who need more storage capacity to store high-resolution photographs and videos.

Moreover, Sandisk's 200GB MicroSD card comes packaged with an SD adapter and a 10-year limited warranty.

Furthermore, the 200GB MicroSD card is waterproof, shockproof, temperature proof, magnet proof and X-ray proof to deal with any possibility of destruction.

However, if you can not spent this much for 200GB of storage space, there always remains an option for you to buy a 128GB MicroSD card that still provides you plenty of space and costs as much as $80

Read more...

This Simple Trick Requires Only Your Phone Number to Hack your Email Account !!

In order to get into your email account, an attacker does not need any coding or technical skills. All an attacker needs your email address in question and your cell phone number.

Here's How the Scam Works:

Send a text from an unknown number to the victim�s phone, asking them to verify their account by replying with the verification code they are about to receive in order to ensure their Google account is secure, but in real the code is a password resets code.

• Send another text message containing an unlock code to the registered phone.
• The victim receives the code with a text something like this: "This is Google. There has been unauthorized activity on your account. Please reply with your verification code.
• As soon as victim responds with the verification code, the email address is forfeited, and the attacker can log into victim�s Gmail account without detection.
This social engineering trick sounds so easy and requires almost no technical skills to get into anyone�s email account.

Most of us reply to the unknown phone calls and messages thinking it is from the company, as receiving messages and phone calls from companies is not something uncommon.

Always be Defensive to such Scams




Before watching the video, someone would have never thought of such a method to hack someone�s account.




Of course, the untrained mind could easily fall victim to the text asking for a response. But, asSymantec says, "Legitimate messages from password recovery services will only tell you the verification code and will not ask you to respond in any way."




The workaround is not to fall victim for such kinds of scams and always examine the messages you receive.
SOURCE- THEHACKERNEWS

Read more...

Biggest Hacker In The World

Gary McKinnon must�ve been a curious, restless child, for to gain information on UFOs, he thought it better to get a direct access into the channels of NASA. He infiltrated 97 US military and NASA computers, by installing virus and deleting a few files. All the efforts to satisfy his curiosity, but, alas, curiosity killed the cat. It was soon found that McKinnon was guilty of having hacked the military and NASA websites from his girlfriend�s aunt�s house in London. While entering and deleting the files from these websites wasn�t enough, McKinnon thought of shaming the security forces by putting out a notice on the website that said, �Your security is crap.� Well, looks like McKinnon was something, if he could shut down the US Military�s Washington Network of about 2000 computers for 24 hours, making the hack, the biggest military computer hack of all time!

Read more...