Threat Wire

Sarahah was Caught Uploading Contacts, ROPEMAKER Changes Emails Post-Delivery, default credentials are still impacting IoT devices, and a New Crowdfunding Campaign for MalwareTech is now up and running. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://threatpost.com/anonymous-messaging-app-sarahah-to-halt-collection-of-user-data-with-next-update/127668/ https://thehackernews.com/2017/08/sarahah-privacy.html https://theintercept.com/2017/08/27/hit-app-sarahah-quietly-uploads-your-address-book/ https://vimeo.com/223686149 https://twitter.com/ZainAlabdin878/status/901812205741629444 https://www.theregister.co.uk/2017/08/28/crowdfunding_for_hutchins_legal_fees/?mt=1503964117577 

https://www.theregister.co.uk/2017/08/23/ropemaker_exploit/ https://threatpost.com/ropemaker-exploit-allows-for-changing-of-email-post-delivery/127600/ https://www.mimecast.com/globalassets/documents/whitepapers/wp_the_ropemaker_email_exploit.pdf 

https://arstechnica.com/information-technology/2017/08/leak-of-1700-valid-passwords-could-make-the-iot-mess-much-worse/ https://twitter.com/ankit_anubhav/status/900803406914347008 https://twitter.com/0xDUDE/status/901062772238274561  http://www.securityweek.com/thousands-iot-devices-impacted-published-credentials-list https://threatpost.com/race-is-on-to-notify-owners-after-public-list-of-iot-device-credentials-published/127661/ 

https://arstechnica.com/tech-policy/2017/08/malwaretechs-legal-defense-fund-bombarded-with-fraudulent-donations/?comments=1 https://twitter.com/Snubs/status/897592606753869825 https://twitter.com/tarah https://www.crowdjustice.com/case/malwaretech/ 

 

Youtube Thumbnail credit:https://cdn.pixabay.com/photo/2016/06/06/10/48/communication-1439187_960_720.jpg

Cryptocurrency is being stolen with phone numbers, dreamhost was compelled to turn over data, and android had a slew of spyware apps. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://www.nytimes.com/2017/08/21/business/dealbook/phone-hack-bitcoin-virtual-currency.html http://nationalpost.com/news/world/how-hackers-are-hijacking-mobile-phone-numbers-to-grab-wallets 

http://thehill.com/policy/cybersecurity/346544-dreamhost-claims-doj-requesting-info-on-visitors-to-anti-trump-website https://www.dreamhost.com/blog/we-fight-for-the-users/ https://www.dreamhost.com/blog/narrowing-the-scope/ https://www.dreamhost.com/blog/a-win-for-the-web/ https://www.dreamhost.com/blog/wp-content/uploads/2017/08/DH-Search-Warrant.pdf https://www.dreamhost.com/blog/wp-content/uploads/2017/08/DH-DOJMotiontoShowCause.pdf https://assets.documentcloud.org/documents/3939670/8-22-17-US-Reply-Brief-DreamHost.pdf https://www.cnet.com/news/feds-pare-back-demands-for-data-from-anti-trump-protest-site/ https://arstechnica.com/tech-policy/2017/08/feds-drop-demand-for-1-3-million-ip-addresses-that-visited-anti-trump-site/ 

https://thehackernews.com/2017/08/android-spyware-malware.html https://www.android.com/play-protect/ https://arstechnica.com/information-technology/2017/08/500-google-play-apps-with-100-million-downloads-had-spyware-backdoor/ https://blog.lookout.com/igexin-malicious-sdk 

Youtube Thumbnail credit:http://maxpixel.freegreatpicture.com/static/photo/1x/Bitcoin-Crypto-Currency-Electronic-Cyber-Finance-2057405.jpg

MalwareTech pleads not guilty, fake cell phone towers can outsmart detection apps, and hackers encode malware into DNA. All that coming up now on ThreatWire.-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://twitter.com/lorenzoFB/status/897120325850329093 https://motherboard.vice.com/en_us/article/evvn8k/malwaretech-marcus-hutchins-not-guilty-plea http://www.securityweek.com/lawyer-british-hacking-suspect-will-be-vindicated https://arstechnica.com/tech-policy/2017/08/researcher-who-neutralized-wcry-pleads-not-guilty-to-writing-banking-malware/ https://twitter.com/MalwareTechBlog/status/897180606005694464 

https://www.wired.com/story/stingray-detector-apps/ http://www.cs.ox.ac.uk/files/9192/paper-final-woot-imsi.pdf 

https://arstechnica.com/science/2017/08/researchers-encode-malware-in-dna-compromise-dna-sequencing-software/ https://www.wired.com/story/malware-dna-hack https://thehackernews.com/2017/08/hacking-computer-with-dna.html https://www.wired.com/story/scientists-upload-a-galloping-horse-gif-into-bacteria-with-crispr/ 

Youtube Thumbnail credit:https://cdn.pixabay.com/photo/2016/09/17/20/41/cellular-tower-1676940_960_720.jpg

The guy who stopped WannaCry was arrested right after DEF CON, a vulnerability on older amazon echo’s won’t be patched, and hackers are using online repos to get developer creds. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://www.wired.co.uk/article/what-is-kronos-trojan-malware-marcus-hutchins-hacker https://twitter.com/MalwareTechBlog/status/488373794168254464 https://motherboard.vice.com/en_us/article/ywp8k5/researcher-who-stopped-wannacry-ransomware-detained-in-us-after-def-con https://motherboard.vice.com/en_us/article/pagn7v/malwaretech-wannacry-indictment-kronos-malware https://www.documentcloud.org/documents/3912524-Kronos-Indictment-R.html http://uk.businessinsider.com/malwaretech-researcher-marcus-hutchins-has-been-granted-a-30000-bail-2017-8 https://twitter.com/tarah https://secure.lawpay.com/pages/torekeland/hutchinsldf http://www.bbc.co.uk/news/technology-40833951 https://www.wired.com/story/wannacry-malwaretech-arrest/ https://arstechnica.com/tech-policy/2017/08/researcher-who-stopped-wcry-worm-detained-under-mysterious-circumstances/ https://www.youtube.com/watch?v=X7DIjaQvZn0 https://www.engadget.com/2017/08/04/marcus-hutchins-kronos-malwaretech/ https://twitter.com/LOBOLAWPLLC https://twitter.com/MabbsSec/status/893624617142759425  https://twitter.com/MabbsSec https://www.wired.com/story/marcus-hutchins-arrest 

https://labs.mwrinfosecurity.com/blog/alexa-are-you-listening https://motherboard.vice.com/en_us/article/evng4p/hack-that-turns-amazon-echo-into-a-spying-device-cant-be-fixed-by-software-patch https://arstechnica.com/information-technology/2017/08/how-hackers-could-turn-an-amazon-echo-into-a-secret-bugging-device/ 

https://threatpost.com/attackers-use-typo-squatting-to-steal-npm-credentials/127235/ http://blog.npmjs.org/post/163723642530/crossenv-malware-on-the-npm-registry 

Youtube Thumbnail credit:Marcus Hutchins Frank Augstein / AP

What in the world is LeakTheAnalyst? Voting machines get hacked at DEF CON in a matter of minutes, and BroadPwn patches are now available for mobile devices. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://thehackernews.com/2017/07/data-breach-mandiant-fireeye.html http://www.securityweek.com/hackers-compromise-accounts-fireeye-threat-intelligence-analyst 

https://thehackernews.com/2017/07/hacking-voting-machine.html http://www.businessinsider.com/def-con-hacker-voting-machine-election-hacking-2017-7 https://www.cnet.com/news/defcon-hackers-find-its-very-easy-to-break-voting-machines/ https://motherboard.vice.com/en_us/article/mba858/at-def-con-i-watched-hackers-take-voting-machines-apart https://threatpost.com/voting-machines-hacked-with-ease-at-def-con/127101/ https://twitter.com/votingvillagedc 

https://www.cnet.com/news/chip-vulnerability-crashes-your-outdated-phone-via-wifi/ https://arstechnica.com/information-technology/2017/07/broadcom-chip-bug-opened-1-billion-phones-to-a-wi-fi-hopping-worm-attack/ https://threatpost.com/apple-patches-broadpwn-bug-in-ios-10-3-3/126955/ https://threatpost.com/google-patches-critical-broadpwn-bug-in-july-security-update/126688/ 

Youtube Thumbnail credit:https://i2.wp.com/itmeets.guru/wp-content/uploads/2017/05/Untitled-design-2.jpg?fit=19201080&ssl=1

FBI Gag orders are ruled constitutional, android ransomware threatens to leak your personal data, and verizon customers had a data breach. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://www.cnet.com/news/court-rules-fbi-can-continue-to-request-data-in-secret/ https://www.reuters.com/article/us-usa-surveillance-idUSKBN1A21XJ? feedType=RSS&feedName=technologyNews&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+reuters%2FtechnologyNews+%28Reuters+Technology+News%29 http://cdn.ca9.uscourts.gov/datastore/opinions/2017/07/17/16-16067.pdf https://en.wikipedia.org/wiki/USA_Freedom_Act 

https://www.cnet.com/news/this-ransomware-will-share-your-browser-history-with-friends/ http://www.zdnet.com/article/this-android-ransomware-threatens-to-expose-your-browsing-history-to-all-your-contacts/ https://thehackernews.com/2017/07/leakerlocker-android-ransomware.html 

http://www.zdnet.com/article/millions-verizon-customer-records-israeli-data/ https://www.cnet.com/news/israeli-tech-firm-exposes-verizon-customer-records/ https://thehackernews.com/2017/07/over-14-million-verizon-customers-data.html https://threatpost.com/third-party-exposes-14-million-verizon-customer-records/126798/ 

 

Youtube Thumbnail credit:https://cdn.pixabay.com/photo/2016/08/11/23/54/judge-1587300_960_720.jpg

Nuclear power plants are being targeted by hackers, NotPetya news isn’t over, Facebook wins a battle over privacy, and there’s lot of debate over 1Password’s new cloud push. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://www.nytimes.com/2017/07/06/technology/nuclear-plant-hack-report.html?_r=0 https://www.cnet.com/news/hackers-targeting-us-nuclear-power-plants-report-finds/ https://arstechnica.com/security/2017/07/dhs-fbi-warn-of-attempts-to-hack-nuclear-plants/ 

https://arstechnica.com/security/2017/07/heavily-armed-police-raid-company-that-seeded-last-weeks-notpetya-outbreak/ https://www.welivesecurity.com/2017/07/04/analysis-of-telebots-cunning-backdoor/ https://thehackernews.com/2017/07/notpetya-ransomware-police-raid.html https://www.cnet.com/news/hackers-linked-to-latest-ransomware-attack-demand-250000-goldeneye-not-petya/ https://thehackernews.com/2017/07/petya-ransomware-decryption-key.html 

https://www.theguardian.com/technology/2017/jul/03/facebook-track-browsing-history-california-lawsuit  

https://motherboard.vice.com/en_us/article/evdbdz/why-security-experts-are-pissed-that-1password-is-pushing-users-to-the-cloud https://twitter.com/1Password/with_replies https://1password.com/sign-up/ 

Youtube Thumbnail credit:https://upload.wikimedia.org/wikipedia/commons/3/3e/Kerncentrale_Doel_in_werking.jpg

DHS Removes Laptop Ban on Airplanes, Microsoft 10 To Block Ransomware?, and NotPetya Is A Wiper, Not Ransomware. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------Links:https://labs.bitdefender.com/2017/06/massive-goldeneye-ransomware-campaign-slams-worldwide-users/ https://motherboard.vice.com/en_us/article/qv4gx5/a-ransomware-outbreak-is-infecting-computers-across-the-world-right-now https://krebsonsecurity.com/2017/06/petya-ransomware-outbreak-goes-global/ https://www.cnet.com/news/petya-goldeneye-malware-hits-cadbury-chocolate-factory/ https://motherboard.vice.com/en_us/article/new8xw/hacker-behind-massive-ransomware-outbreak-cant-get-emails-from-victims-who-paid https://securelist.com/expetrpetyanotpetya-is-a-wiper-not-ransomware/78902/ https://arstechnica.com/security/2017/06/petya-outbreak-was-a-chaos-sowing-wiper-not-profit-seeking-ransomware/ https://www.cnet.com/news/ukraine-ransomware-petya-goldeneye-medocs-microsoft-global/ https://twitter.com/JanusSecretary https://www.dhs.gov/news/2017/06/28/fact-sheet-aviation-enhanced-security-measures-all-commercial-flights-united-states https://www.cnet.com/news/laptop-ban-planes-to-us-replaced-by-tighter-security/ https://motherboard.vice.com/en_us/article/nevwj7/homeland-security-will-begin-heightened-screenings-of-phones-on-all-us-bound-flights https://www.aclu.org/blog/free-future/new-tsa-policy-may-lead-increased-scrutiny-reading-material https://thehackernews.com/2017/06/windows10-controlled-folder-access-ransomware-protection.html https://blogs.windows.com/windowsexperience/2017/06/28/announcing-windows-10-insider-preview-build-16232-pc-build-15228-mobile/#vTaqpWj70bWJlW2S.97 https://arstechnica.com/information-technology/2017/06/windows-10-will-restrict-data-access-to-authorized-apps-to-combat-ransomware/ Youtube Thumbnail credit:https://regmedia.co.uk/2017/03/21/shutterstock_laptop_airplane.jpg?x=648&y=348&crop=1

Microsoft just had a pretty bad week, WannaCry is still alive and kickin!, the CIA’s Brutal Kangaroo hits the web, and OpenVPN has flaws, so make sure to update. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://thehackernews.com/2017/06/ghosthook-windows-10-hacking.html https://threatpost.com/ghosthook-attack-bypasses-windows-10-patchguard/126462/ https://www.cyberark.com/threat-research-blog/ghosthook-bypassing-patchguard-processor-trace-based-hooking/ http://www.zdnet.com/article/microsoft-no-known-ransomware-windows-we-tried-to-hack-it/ https://arstechnica.com/information-technology/2017/06/microsoft-should-shore-up-windows-10-ss-security-then-offer-it-to-everyone/ https://thehackernews.com/2017/06/windows10-builds-source-code.html https://www.theregister.co.uk/2017/06/23/windows_10_leak/ https://arstechnica.com/information-technology/2017/06/32tb-of-windows-10-beta-builds-driver-source-code-leaked/ https://thehackernews.com/2017/06/honda-wannacry-attack.html https://www.cnet.com/roadshow/news/wannacry-ransomware-causes-honda-plant-shutdown-in-japan/ https://www.cnet.com/news/wannacry-hits-traffic-cameras-in-australia/ https://wikileaks.org/vault7/#Brutal%20Kangaroo https://thehackernews.com/2017/06/wikileaks-Brutal-Kangaroo-airgap-malware.html https://motherboard.vice.com/en_us/article/wjq3zq/wikileaks-docs-show-how-the-cia-allegedly-infected-offline-computers https://guidovranken.wordpress.com/2017/06/21/the-openvpn-post-audit-bug-bonanza/ https://ostif.org/the-openvpn-2-4-0-audit-by-ostif-and-quarkslab-results/ https://www.privateinternetaccess.com/blog/2017/05/openvpn-2-4-2-fixes-critical-issues-discovered-openvpn-audit-reports/ https://thehackernews.com/2017/06/openvpn-security-flaw_21.html

198 million us voters data has been exposed, the US warns of north korean cyberattacks, a hacker pleads guilty to attacks on military, and the CIA hacks routers with CherryBlossom. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/  Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://thehackernews.com/2017/06/us-voters-data-leaked.html http://www.securityweek.com/republican-contractor-exposes-details-198-million-american-voters https://threatpost.com/republican-data-broker-exposes-198m-voter-records/126357/ https://gizmodo.com/gop-data-firm-accidentally-leaks-personal-details-of-ne-1796211612 https://www.upguard.com/breaches/the-rnc-files https://theintercept.com/2017/06/19/republican-data-mining-firm-exposed-personal-information-for-virtually-every-american-voter/ https://thehackernews.com/2017/06/cia-wireless-router-hacking-tool.html https://www.wired.com/story/wikileaks-cia-router-hack/ https://arstechnica.com/security/2017/06/advanced-cia-firmware-turns-home-routers-into-covert-listening-posts/ https://www.cnet.com/news/cia-reportedly-hacked-wi-fi-routers-for-years-wikileaks/ https://wikileaks.org/vault7/releases/  https://wikileaks.org/vault7/document/SRI-SLO-FF-2012-177-CherryBlossom_UsersManual_CDRL-12_SLO-FF-2012-171/page-30/#pagination  https://motherboard.vice.com/en_us/article/british-hacker-pleads-guilty-to-hacking-us-military-satellite-phone-and-messaging-system http://www.securityweek.com/hacker-admits-stealing-satellite-data-dod https://thehackernews.com/2017/06/british-hacker-military-system.html https://public-newsroom-nca-01.azurewebsites.net/news/hacker-stole-satellite-data-from-us-department-of-defence https://thehackernews.com/2017/06/north-korea-hacking-malware.html https://www.cnet.com/news/north-korea-behind-cyberattacks-since-2009-more-expected-us/ https://www.wired.com/story/north-korea-cyberattacks/ https://www.us-cert.gov/ncas/alerts/TA17-164A https://www.operationblockbuster.com/wp-content/uploads/2016/02/Operation-Blockbuster-Destructive-Malware-Report.pdf  Youtube Thumbnail credit:https://c1.staticflickr.com/9/8489/8170302472_5fc33f17fa_b.jpg