Hacking hackers

Help! Someone Hijacked my 100k+ Zeus Botnet!

I've been looking for a similar chatter for a while now, given the existence of a remotely exploitable vulnerability in an old Zeus crimeware releaseallowing a cybercriminal to inject a new user within the admin panel of another cybecriminal.

It appears that this guy has had his 100k+ Zeus botnet hijacked several months ago, and now that he's managed to at least partly recover the number of infected hosts in two separate botnets, is requesting advice on how to properly secure his administration panel.

( Another way to take out bot farms, outside the box!

still couple more ways.G)

xxxxxxxxxxxxxxxxxxxxxxxxx

Data on Obama's helicopter breached via P2P?

"An Internet security company claims that Iran has taken advantage of a computer security breach to obtain engineering and communications information about Marine One, President Barack Obama's helicopter, according to a report by WPXI, NBC's affiliate in Pittsburgh. Tiversa, headquartered in

[Sat Feb 28 2009 20:40:00 GMT-0500 (Eastern Standard Time)]

A Pennsylvania company that monitors peer-to-peer file-sharing networks discovered a potentially serious security breach involving President Obama's helicopter, Marine One, NBC affiliate WPXI in Pittsburgh reported.

Sensitive information about Marine One was reportedly found by Tiversa employees at an IP address in Tehran.

Tiversa CEO Bob Boback said a defense contractor in Bethesda, Md., had a file sharing program on one of their systems that contained highly sensitive blueprints for Marine One and financial information about the cost of the helicopter.

"We found a file containing entire blueprints and avionics package for Marine One," Boback said.

Boback said the issue most likely stemmed from someone downloading the file-sharing program without realizing the problems that could result.

"When downloading one of these file-sharing programs, you are effectively allowing others around the world to access your hard drive," Boback told WPXI.

"We found where this information came from. We know exactly what computer it came from. I'm sure that person is embarrassed and may even lose their job, but we know where it came from and we know where it went," Retired Gen. Wesley Clark, an adviser to Tiversa, told WPXI.

Click here to read the full story.

xxxxxxxxxxxxxxxxxxxxxx

Off the wire: New type of SQL injection attack compromised 500,000+ Web sites

Breach Security announced that web attackers unleashed a new type of SQL injection attack in 2008 that successfully compromised more than 500,000 web sites, according to its Web Hacking Incidents Data...

[Tue Feb 24 2009 13:48:23 GMT-0500 (Eastern Standard Time)]

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Scammers abuse Google Trends to poison search results

Cyber crooks are using one of Google Inc.'s own tools to poison search results with links that spread fake security software, a researcher said Thursday. "Malware distributors have abused Google Trends before," said Craig Schmugar, a senior threat researcher with McAfee Inc. "But I've never seen the

[Fri Feb 27 2009 19:23:35 GMT-0500 (Eastern Standard Time)]

g

.