Malware Steals Data From Offline Computer Via Mobile Phone

Researchers have developed malware with which it is possible to go from computers that are not connected to the Internet to steal its data. Air-pinch, such as disconnecting systems is referred to the Internet, is a popular method for securing systems in critical environments.

Yet these systems are also at risk, according to researchers at the Cyber ​​Security Research Center at Israel's Ben-Gurion University. They developed a way in which a mobile phone can be used to steal data from a computer. To carry out the attack requires that both the computer and mobile phone with malware are infected. The " GSMem malware "the researchers let the memory of the computer act as an antenna and then send via GSM frequency data to the infected phone.

On the other hand, the phone must have been infected with a rootkit that researchers call the "Receiver Handler". This malware to be installed in the firmware of the mobile phone. The GSM malware could be installed via physical access or by intercepting the machine during the delivery process. To install the rootkit was social engineering, a malicious app or physical access can be used. The amount of data that can be stolen is limited in this way. It is enough to steal passwords and encryption keys in about two minutes, reports Wired .

By using a separate receiver can be collected at a distance of 30 meters much more data. In environments where air-gapped computers are used, it may be illegal to use a smartphone, but are simple devices allowed. Therefore, researchers developed the malware works on simple mobile phones. However, they expect a smartphone with better results and this will also be testing in the future. During the Usenix Security Symposium in Washington next month, the researchers will provide more details on their attack.

FBI Launches Campaign Against Economic Espionage

The FBI in the United States a campaign launched to warn companies and research institutes for economic espionage. According to the investigation department of industrial espionage is a growing threat that causes more damage. The exact damage is difficult to determine, but the losses are "substantial" amount and possibly hundreds of billions of dollars annually, according to the FBI.

They are mostly foreign competitors and countries that trade secrets, manufacturing methods, innovations and insights in trade and labor disputes  search. The FBI would not only see an increase in the attempts to steal company secrets, but the way is getting nastier too. "We had cases where people literally warehouses and factories within walking to steal trade secrets," said Randall Coleman, deputy director of the FBI's Counterintelligence Division. "It is shocking to see how much effort they do to steal information."

The companies would use different ways to sit behind the espionage attacks to steal information from US companies. Thus, current and former foreign employees of US companies and research institutes contacted. In addition, "technical operations" conducted as computer hacking, searching bins and bribing staff. Finally go on seemingly innocent business relationships with US companies in order to make economic information as booty.

The FBI gives American companies and organisations also advice how to protect their business and trade secrets. This relates to matters such as ongoing security training for staff to draw up a plan to protect business secrets and implement physical security measures. There is also a 36 minute video made ​​based on a real case, which tries to make the threat clear.

Sony Compensate Damage Of Hacked PSN Gamer

A gamer who the Sony PlayStation Network account was hacked and used to reimburse hundreds of dollars in fraudulent purchases gets the damage from Sony. The player with the alias "Kadjar" on social news site Reddit message that last week he suddenly got all kinds of confirmations of purchases that he had not done. It would be an amount of more than $ 600.

The gamer logged onto his PSN account and removed the credit card that was linked to the account. By linking a credit to the account it is possible to buy all sorts of games and expansions through the PSN store from Sony. The attacker used this to yourself to purchase any games at the expense of Kadjar. After the card was removed took gamer contact Sony. An employee said that the company is an amount up to $ 150 would compensate.

Kadjar did have the option to cast doubt on the transactions at his bank, but warned the employee that his PSN account banned would be in this case. Therefore, the gamer would lose all his previous purchases. The attacker who had hacked the account of the gamer had deactivated the PlayStation 4 of Kadjar and activated its own console. The Sony Helpdesk allows one activation every six months. Therefore, the gamer would half a year without access to his own account.

Solution

The story was widely picked up by the media and made ​​sure Sony On contacting Kadjar and told to investigate the matter.The gamer is now reporting on Reddit that the investigation showed that his account was indeed hacked and Sony will arrange everything. Also told the employee that the Sony headquarters knew his situation and that there will be now examined whether the policy should be adjusted.

Former NSA Director: China Has hacked Every Major Company In USA

The Chinese government has in the hunt for valuable data hacked computers of any large American company, as the former director of the NSA did this week during a lecture know at the University of Missouri. "The Chinese are the most aggressive. About 80% of all economic espionage conducted by the Chinese," as told Mike McConnell.

"The Chinese have invaded every large company of any significance in the United States and have stolen information," said the former Director of the NSA. In particular, information for windmills, cars, airplanes, spaceships, plant design and software of Chinese attackers interest would have. McConnell even claimed that the Chinese government, in the last year of the reign of George W. Bush, had more than 100,000 hackers who only engaged in computer hacking.

"They steal terabits of data," McConnell continued. He would regularly have been involved in investigating burglaries at US companies and government agencies. "It has never happened that we encountered no Chinese malware." If the theft of trade secrets is not stopped it will have strategic implications for the US, warned McConnell.