Brit Spied For Years People Via Hacked Webcams

In Britain, a man condemned for years other people using hacked webcams spying. The 33-year-old Briton was arrested late last year as part of an international operation against users Black Shades malware, reports the National Crime Agency.

The malware was for an amount of between 40 and 100 dollars offered on the Internet and could easily be adapted for a variety of purposes, such as conducting DDoS attacks, steal passwords or install additional malware. Globally, more than 500 000 computers in more than 100 countries with malware have become infected. The British used the data of his ex-girlfriend to purchase the malware. On the computer of the man photos were found in men who had sex with each other in front of their computer.

The Briton admitted he beside the watch with the webcam via Black Shades also gained access to the emails and passwords of his victims. The 33-year-old man known to be addicted to spying on his victims. During a period of 3 years, he was here 5 to 12 hours per day working on it. He is sentenced to a suspended sentence of 40 weeks and seven years will be included in the registry for sex offenders. A Dutch man who committed the same type of offense through the Black Shades malware in 2014 was a imprisonment, as well as community service ordered.

IBM Sees Weather DDoS Attacks From Bill Gates Linux Botnet

A botnet that infects Linux computers and used to carry out DDoS attacks is active again, says IBM. It's the "Bill Gates botnet" which last year was first detected, reports IBM . The bot-amplification uses DNS to carry out the DDoS attacks.

With DNS amplification open DNS servers are used to enhance the traffic to the attacked websites or services. An interesting feature of this malware, according to the Russian anti-virus company Dr. Web together with the Finnish F-Secure paid attention to the last year malware. According to the Russian virus fighter is the Gates-malware also allegedly found because of a sophisticated modular structure that never experienced Linux malware.

At the time, it was unknown how the malware was spreading. Something where IBM still has no answer. It is not known who is behind the botnet. However, the company argues that there has been observed a significant increase in traffic, which are used forged packets and the destination IP address in China.

US Military Gets Website Temporarily Offline After Attack

The US military has its own website temporarily taken off the air after it was hacked. The Syrian Electronic Army (SEA) claimed the attack. The group employs a statement that it could carry out the attack on the content delivery network (CDN) to target the website.

In the control unit the attackers discovered that it was possible to adjust the secure content trails. So it was possible to add content to the website of the Army. As proof of the SEA posted several screenshots of the control panel. According to the US military, the attackers knew indeed a part of army.mil to compromise. To prevent further damage or theft of military data, it was decided to temporarily take down the site, so late Brigadier Malcolm Frost know . Meanwhile, the website is back online.

Large DDoS Botnet Of Tens Of Thousands Of Routers Discovered

Researchers have discovered a worldwide botnet consisting of tens of thousands of hijacked routers and is used to carry out DDoS attacks on websites. Reported security Incapsula in a new report . Although the hijacked routers were found in 109 different countries, found that a majority (85%) is located in Brazil and Thailand.

The routers are in turn controlled via servers which are in China and the United States. The researchers thought initially that the routers were acquired via a vulnerability in the firmware. Further investigation showed, however, that all devices were accessible through the standard ports HTTP and SSH. Was not changed in almost all cases the default password.

Thus, the attackers were able to install the "MrBlack" malware on the routers. In addition, a script on the hijacked routers installed it looked for other vulnerable routers. To avoid getting users advised to change the default password such attacks, install the latest firmware and ensure that the operator interface is not accessible via HTTP or SSH. Something that through this tool can be controlled.

Increase DDoS Attacks Hacked Routers And Printers

Hacked printers and routers are responsible for an increase in the number and size of DDoS attacks.Other devices connected to the web and part of the "Internet of Things" are play a role, claims the security NSFocus.

In the attacks, the attackers use the Simple Service Discovery Protocol (SSDP), which is part of the UPnP protocol. This protocol is enabled on millions of devices, including routers, media servers, webcams, smart TVs and printers. Via SSDP devices can find each other easily networks and connect with each other. Through the SSDP protocol on these devices strengthen their criminals DDoS attacks.

The criminals in this spoof the IP address of the attack site and send packets to the router or other devices. Which then react with response packets that are sent to the spoofed IP address. According NSFocus attacks can in this way by a factor of 75 to be reinforced. The company further states that there are more than 7 million SSDP devices that can be used for DDoS attacks. As soon the Internet of Things becomes reality, whereby billions of devices coming online, expects IT security exponential growth of SSDP-like attacks.

"Recently more attacks were seen being launched from smart devices", say the researchers from the security company in this report . The reason is that smart devices have a relatively high bandwidth, often not be updated 24 hours a day online."As smart devices have weak passwords or other vulnerabilities, attackers can use them to carry out DDoS attacks."Recently warned also security company Arbor Networks to use SSDP for strengthening DDoS attacks.