Man Robs German Banks With USB Stick

The German police are searching for a man who robbed two banks in Berlin this summer via a USB stick. On camera images show how the man, opening a cash machine and connect a USB stick. Hereinafter, a combination on the keypad is entered after which the ATM spends money.

The man hit twice on the same day in August, both at a branch of Postbank Kreissparkasse, according to the police report. How much money is at the 'USB robbery "stolen was not disclosed. The use of USB devices with malware to empty ATMs is not new, but mainly takes place outside Europe, such as Mexico and Russia. A police spokesman leaves in front of the Berliner Zeitung that the method of attack by malware 20 times in Europe is used in which four times in Germany.

Luxembourgers Develop USB-Cleaning Machine

USB sticks are for years by malware used to spread from computer to computer, but the Computer Incident Response Center (CIRC) of the Luxembourg government has now developed a real USB-cleaning machine to process simple and fast strange USB sticks.

The CIRCLean USB Sanitizer is a solution mean to retrieve documents from untrusted USB sticks. It converts an untrusted document automatically to a readable format and saves the clean file to a trusted or USB stick. As a platform used CIRCLean a Raspberry Pi, a small computer. This means that it is also not necessary to connect the suspect USB flash drive to a computer.

"CIRCLean can as a kind of air gap between the untrusted USB memory stick and the computer to be seen," said the Luxembourg CIRC. The advantage of the device is that no technical knowledge is required and anyone can use it. The software that is running on via the Raspberry Pi GitHub available and can be verified by anyone.

Germany Investigates Espionage Virus On Government Laptop

The German government has launched an investigation into espionage by the US secret service NSA and British intelligence agency GCHQ because of an infected laptop. On the laptop of a department of the Federal Chancellery's highly advanced Regin-espionage virus was discovered, reports Der Spiegel.

According to the Russian anti-virus firm Kaspersky Lab, the relevant NSA or been responsible for the development of the malware. Previously, the virus was already spying on a USB stick found by a staff member of Chancellor Angela Merkel.How infects computers Regin exactly is still unknown, but once active can collect the data in a very sophisticated way.Further details about the study and how the malware was detected not given by Der Spiegel. Earlier, the German authorities decided to investigate eavesdropping on the mobile phone of Merkel by the NSA, but this study was stopped in June because of a lack of evidence.

Windows User Reports Malware Often Than Mac User

Windows users are more in touch with malware than Mac users, according to research (pdf) from Kaspersky Lab and B2B International among 12,000 consumers worldwide. 45% of consumers surveyed faced the last year at least once with malware.

Windows users was 83%, while 6% of Mac users reported a malware incident. 13% of Android owners came to own say in the last twelve months in touch with malware. Windows users with malware came in contact 89% said they do not know how the infection occurred, but 81% points to visit a suspect or unreliable website. According to 77% of the computer became infected after visiting a hacked website.

According to 78% of the infection was contracted through an infected USB stick, while just over 70% of the debt puts when opening an email attachment. Reduced performance were the main consequences of an infection. 35% of users said that the system after the infection was slow or not working well. 30% were redirected to websites and ads, and 20% had to do with the installation of unwanted software.

Damage

33% of malware incidents led to charges by victims. This mainly involves repair costs, the purchase of a virus, recover lost data, purchase a cleaning tool, replacement of damaged parts, purchasing an entirely new system and the payment of ransom to restore access to the system or data to get. On average, the loss $ 160.

Chrysler Calls 7800 SUVs Back Because Of Vulnerability

Chrysler has in the United States 7800 SUVs because of a vulnerability in the radios recalled. Using the vulnerability, an attacker can remotely the system "manipulate," the carmaker. Recently, scientists show how remote a Jeep could partially control.

Chrysler says it has already taken measures to prevent such attacks. Through these measures will be blocked access to certain vehicle systems. For this, customers or dealers do not have to do anything. The vulnerability which the 7800 SUVs are now being recalled is different from the problem that the two researchers demonstrated in July and which the carmaker 1.4 million vehicles called back.

As with the recall in this case goes to a voluntary recall. The problem is with Jeep Renegade SUVs of 2015 with a 6.5-inch touchscreen. Customers receive a USB stick which they can update the car software itself. Another option is to download the software or go through the dealer, who will perform the installation. For this purpose, no fee will be charged.

In the press release Chrysler also announced that it is not aware of any accidents or complaints were the result of attacks on the vulnerability. Below is a picture of the USB key that was sent recently to American car owners to patch the previously discovered vulnerability in Chrysler cars. An action where security experts much criticism had on.

Tesla Model S Patches Vulnerabilities Via Update

Cars manufacturer Tesla is well protected against hacking, according to two researchers who eventually painstakingly did manage to hack a Tesla Model S. Marc Rogers of CloudFlare and Kevin Mahaffey of Lookout Mobile found a total of six vulnerabilities in the Tesla, as they leave today via a blog posting know. The two researchers will present their findings this week at the Def Con conference presenting in Las Vegas.

For the study, about two years confiscated, they had to get the car literally falling apart. Through the vulnerabilities they had full control of the infotainment system of the vehicle. They then installed malware was remotely controlled and which they could carry out all actions that could also be implemented through the touchschreen or smartphone app of the Tesla. Thus it was possible to switch from the car while it was driving, so the examiner opposite Forbes know.

In addition to the required physical access to the researchers discovered that it was possible to attack the remote infotainment system. The system used a vulnerable browser, with a four year old WebKit vulnerability, reports Wired . This allows an attacker would the car remotely attacks as a Tesla user from the car a malicious website would visit. In this case it would also be possible to start the engine remotely or turn off.

However, the researchers discovered that Tesla had introduced a security measure. In case the engine is switched off when the car is driving, the brake is activated and stop the car if the speed falls below 8 km per hour. The researchers reported the problems to Tesla, which has delivered an update. Unlike Chrysler, which because of security issues had to recall 1.4 million cars so that they could be updated using a USB stick, Tesla updates brings "over-the-air" and require customers to bring their vehicle back to the dealer. However, they must accept the update, because there is no automatic installation location.

Infected Version TrueCrypt Used For Cyber Spying

A Russian website has years of an infected version of the popular encryption program TrueCrypt offered, which in reality turned out to be a Trojan horse that has been used for cyber-espionage. That leaves the Slovak anti-virus company ESET in a report published today ( pdf ) know.

The website was a truecryptrussia.ru offered in Russian translated version of TrueCrypt. Visitors who met but were offered an infected version specific criteria. What criteria were precisely known. Once installed on the system was also installed a backdoor that allows the attackers had full control over the computer. At least since June 2012 was offered via truecryptrussia.ru malware.

As a select number of victims were attacked in this way, could also backed by long time undetected, according to ESET. The TrueCrypt website also served as Command & Control domain. Communication between the attackers and infected computers ran through the website. Researchers also think the site was managed by the attackers and that it is not a hacked website.

Apart from the TrueCrypt website spread the malware, called Potao, also via e-mail attachments and USB sticks. This was done on a simple but effective way. The malware placed himself on the USB stick and made all other files invisible. In addition, the malware got the name of the USB stick and a disk icon. Users would have thought that it was a disk or shortcut while they opened the malware in reality.

Most targets of the malware were located in the Ukraine. It was among other things the Ukrainian government, the Ukrainian army and a major Ukrainian news agency. Members of the Russian and Ukrainian popular pyramid games were spied by the malware. So were victims of infectious TrueCrypt version mainly in Russia.

SHA1 hashes: Early Potao versions: 

8839D3E213717B88A06FFC48827929891A10059E

5C52996D9F68BA6FD0DA4982F238EC1D279A7F9D 

CE7F96B400ED51F7FAB465DEA26147984F2627BD 

D88C7C1E465BEA7BF7377C08FBA3AAF77CBF485F 

81EFB422ED2631C739CC690D0A9A5EAA07897531 

18DDCD41DCCFBBD904347EA75BC9413FF6DC8786 

E400E1DD983FD94E29345AABC77FADEB3F43C219 

EB86615F539E35A8D3E4838949382D09743502BF 

52E59CD4C864FBFC9902A144ED5E68C9DED45DEB 

642BE4B2A87B47E77814744D154094392E413AB1 

Debug versions: 

BA35EDC3143AD021BB2490A3EB7B50C06F2EA40B 

9D584DE2CCE6B654E62573938C2C824D7CC7D0EB 

73A4A6864EF68C810C7C699ED51B759CF1C4ADFB 

1B3437C06CF917920688B25DA0345749AA1A4A46 

Droppers with decoy documents: 

FBB399568E0A3B2E461A4EB3268ABDF07F3D5764 

4D5E0808A03A75BFE8202E3A6D2920EDDBFC7774 

BCC5A0CE0BCDFEA2FD1D64B5529EAC7309488273 

F8BCDAD02DA2E0223F45F15DA4FBAB053E73CF6E 

2CDD6AABB71FDB244BAA313EBBA13F06BCAD2612 

9BE3800B49E84E0C014852977557F21BCDE2A775 

4AC999A1C54AE6F54803023DC0FCF126CB77C854 

59C07E5D69181E6C3AFA7593E26D33383722D6C5 

E15834263F2A6CCAE07D106A71B99FE80A5F744B 

A62E69EF1E4F4D48E2920572B9176AEDB0EEB1C6 

900AD432B4CB2F2790FFEB0590B0A8348D9E60EB 

856802E0BD4A774CFFFE5134D249508D89DCDA58 

A655020D606CA180E056A5B2C2F72F94E985E9DB 

04DE076ACF5394375B8886868448F63F7E1B4DB9 31 

Droppers from postal websites:

94BBF39FFF09B3A62A583C7D45A00B2492102DD7 

F347DA9AAD52B717641AD3DD96925AB634CEB572 

A4D685FCA8AFE9885DB75282516006F5BC56C098 

CC9BDBE37CBAF0CC634076950FD32D9A377DE650 

B0413EA5C5951C57EA7201DB8BB1D8C5EF42AA1E 

0AE4E6E6FA1B1F8161A74525D4CB5A1808ABFAF4 

EC0563CDE3FFAFF424B97D7EB692847132344127 

639560488A75A9E3D35E4C0D9C4934295072DD89 

USB-spreaders:

850C9F3B14F895AAA97A85AE147F07C9770FB4C7 

BB0500A24853E404AD6CA708813F926B90B38468 

71A5DA3CCB4347FE785C6BFFF7B741AF80B76091 

7664C490160858EC8CFC8203F88D354AEA1CFE43 

92A459E759320447E1FA7B0E48328AB2C20B2C64 

BB7A089BAE3A4AF44FB9B053BB703239E03C036E 

DB966220463DB87C2C51C19303B3A20F4577D632 

37A3E77BFA6CA1AFBD0AF7661655815FB1D3DA83 

181E9BCA23484156CAE005F421629DA56B5CC6B5 

A96B3D31888D267D7488417AFE68671EB4F568BD 

224A07F002E8DFB3F2B615B3FA71166CF1A61B6D 

5D4724FBA02965916A15A50A6937CDB6AB609FDD 

8BE74605D90ED762310241828340900D4B502358 

5BE1AC1515DA2397A7C52A8B1DF384DD938FA714 

56F6AC6197CE9CC774F72DF948B414EED576B6C3 

F6F290A95D68373DA813782EF4723E39524D048B 

48904399F7726B9ADF7F28C07B0599717F741B8B 

791ECF11C04470E9EA881549AEBD1DDED3E4A5CA 

E2B2B2C8FB1996F3A4A4E3CEE09028437A5284AE 

5B30ECFD47988A77556FE6C0C0B950510052C91E 

4EE82934F24E348696F1C813C24797618286A70C 

B80A90B39FBA705F86676C5CC3E0DECA225D57FF 

971A69547C5BC9B711A3BB6F6F2C5E3A46BF7B29 

C1D8BE765ADCF76E5CCB2CF094191C0FEC4BF085 

2531F40A1D9E50793D04D245FD6185AAEBCC54F4

32 Other droppers:

D8837002A04F4C93CC3B857F6A42CED6C9F3B882 

BA5AD566A28D7712E0A64899D4675C06139F3FF0 

FF6F6DCBEDC24D22541013D2273C63B5F0F19FE9 

76DA7B4ABC9B711AB1EF87B97C61DD895E508232 

855CA024AFBA0DC09D336A0896318D5CC47F03A6 

12240271E928979AB2347C29B5599D6AC7CD6B8E 

A9CB079EF49CEE35BF68AC80534CBFB5FA443780 

1B278A1A5E109F32B526660087AEA99FB8D89403 

4332A5AD314616D9319C248D41C7D1A709124DB2 

5BEA9423DB6D0500920578C12CB127CBAFDD125E 

Plugins: 

2341139A0BC4BB80F5EFCE63A97AA9B5E818E79D 

8BD2C45DE1BA7A7FD27E43ABD35AE30E0D5E03BC 

54FEDCDB0D0F47453DD65373378D037844E813D0 

CC3ECFB822D09CBB37916D7087EB032C1EE81AEE 

F1C9BC7B1D3FD3D9D96ECDE3A46DFC3C33BBCD2B 

9654B6EA49B7FEC4F92683863D10C045764CCA86 

526C3263F63F9470D08C6BA23E68F030E76CAAF3 

E6D2EF05CEDCD4ABF1D8E3BCAF48B768EAC598D7 

CEBAB498E6FB1A324C84BA267A7BF5D9DF1CF264 

324B65C4291696D5C6C29B299C2849261F816A08 

C96C29252E24B3EEC5A21C29F7D9D30198F89232 

CDDDE7D44EFE12B7252EA300362CF5898BDC5013 

84A70CDC24B68207F015D6308FE5AD13DDABB771 

Fake TrueCrypt setup: 

82F48D7787BDE5B7DEC046CBEF99963EEEB821A7 

9666AF44FAFC37E074B79455D347C2801218D9EA 

C02878A69EFDE20F049BC380DAE10133C32E9CC9 

7FBABEA446206991945FB4586AEE93B61AF1B341 

Fake TrueCrypt extracted exe: 

DCBD43CFE2F490A569E1C3DD6BCA6546074FD2A1 

422B350371B3666A0BD0D56AEAAD5DEC6BD7C0D0 

88D703ADDB26ACB7FBE35EC04D7B1AA6DE982241 

86E3276B03F9B92B47D441BCFBB913C6C4263BFE

Critical Vulnerabilities In Tor And Tails Corrected

There are new versions of Tor Browser and Tails appeared, two programs for people who want to protect their privacy and anonymity on the Internet, where critical vulnerabilities are fixed. Users also have strongly advised to upgrade, since users of Tor Browser still using an old version surfed in the past been the target of attacks, their actual IP address was traced .

Via Tor Browser, users can easily hide their IP address. The browser consists of a modified version Firefox and software to connect to the network-Tor. This week a new version of Firefox, allowing the developers of Tor Browser also had to release a new version. Tor Browser 4.5.3 also includes a new version of OpenSSL and NoScript Torbutton, as well as a fix for a bug that allowed the browser crash and a patch to improve the usability of Tor Browser on websites. Updating via Torproject.org if the update function of the browser.

Tails

Users of Tails get urgent advice to Tails 1.4.1 upgrade. Tails is a complete operating system from a DVD or USB stick to use and is totally focused on privacy. It is based on Debian and contains various tools to access the Internet anonymously, including Tor Browser. In the past, for which the new versions of Tor Browser and Tails were not coordinated.

Therefore Tails users could sometimes several weeks stuck with an outdated Tor Browser. Now Tails development team has been waiting for the new Tor Browser, which added to the operating system. In addition, several Debian-related vulnerabilities are resolved. Updating via the Tails website .

Frisian USB Stick For Anonymous Surfing Costs 999 Euros

A Frisian company has launched a USB flash drive 999 which users can go online anonymously and encrypted communication. The Crypto Boss, as the stick is called, comes with a browser, photo editing suite, accounting, email client and an office suite. Also, there PGP encryption software included to be able to e-mail. It therefore seems to privacy operating system Tails.

By default, the operating system of the Crypto Boss using the Tor network, which users can go online anonymously. Data is stored on the USB drive, so there are no traces on the hard drive of the computer. Furthermore, all data is encrypted by default. To use the Crypto Boss, users must also specify a password.

"The big advantage of Crypto Boss versus others is that we provide a combination of hardware and software that is immediately ready for use. Other privacy-centric operating systems must be downloaded by the user and installed in a very roundabout way to a USB stick. The Crypto Boss is much more user friendly and actually used by everyone from the box, "said the Frisian company behind the stick located in Drachten.

The Crypto Boss comes in three versions. The 32GB version costs $ 999, while versions of 64GB and 128GB respectively cost 1199 euro and 1399 euro. If USB drive seems to be using the Corsair Flash Survivor Stealth. For users who are looking for a similar, cheaper solution is the aforementioned Tails . This is also an operating system to the Internet with anonymous and encrypted communication which also contains various tools like LibreOffice, GIMP and Audacity. It is also free to download and use.

FBI Gets Security Expert From Plane After Tweet

The FBI on Wednesday met a security of an aircraft and its computer equipment confiscated because of a tweet. He was not yesterday after his release along with the airline. Chris Roberts posted a message online in which he expressed his doubts about the safety of the aircraft network, but the American investigative thought he plane of United Airlines wanted to hack, so notify CNN and Forbes.

After his arrest his iPad, MacBook Pro, three hard disks and various USB stick were confiscated. His phone was allowed to keep Roberts. All devices were encrypted, however. "It will be interesting to see if the encryption keeps" the security expert showed through Twitter know. Against both Forbes and CNN Roberts from his frustration that vulnerabilities in aircraft are not resolved, even though they are known for years. He was questioned after his arrest four hours.

United Airlines

Roberts has his computer still not recovered, but has by now released. Yesterday he tried to fly to the RSA Conference in San Francisco, where he will give a presentation. After the expert had received his boarding pass and wanted to board the plane he was stopped by security personnel of the airline.

Eventually he could at the last minute along with another airline, but the American civil rights movement EFF criticizes the actions of United Airlines. "As a member of the research community, it is his job to find vulnerabilities so they can be resolved," said Andrew Crocker of the EFF. Crocker notes that the EFF is worried about this kind of reflexes on legitimate security research, which ultimately can have a paralyzing effect on researchers, eventually causing problems go unnoticed.

Malware Can Steal Data From Offline Computer Via Heat

Israeli researchers can steal developed a method by which malware through heat data from computers that are not connected to the Internet. BitWhisper , as the researchers from Ben Gurion University call their attack, uses the built-in thermal sensors of computers and the heat power , processor, video card and other dispensing components.

To carry out the attack, the computer that is not connected to the Internet become newly infected with malware. This could for instance via a USB stick. In addition, should read this computer next to a computer that is connected to the Internet and also been infected. The malware on the offline computer can then communicate through the heat sensor with the heat sensor of the online computer, somewhat similar to Morse code.

By allowing the temperature of the system increases and lowering the malware can forward information to the receiving system. In their model, the researchers got the first heat rise by one degree, to which in turn let to normal temperature bags.To find infected computers around the malware can periodically "ping heat" issue, for example, to determine whether a government employee has placed an infected laptop near.

The two systems can subsequently infected via the "heat-ping", which the temperature is increased by one degree, to exchange a handshake and thus set up a connection. At this time can be exchanged using this attack method only 8 bits of data per hour, reports Wired . Thus, an attacker could send a password or a secret key, but no large amounts of data.

In addition, the attack only works when the systems up to 40 centimeters far apart. According to the researchers, there are many organizations where there are multiple computers on one desk next to each other. One that is connected to the Internet, and one that is connected to an internal network. Soon the researchers will publish a report on their research. On YouTube is now a demonstration video in which one infected computer via heat signals can operate the USB rocket launcher from another infected computer.

Microsoft Allows Users To Download Windows 7 ISO

Microsoft has launched a new website where users with a valid license can download a full version of Windows 7, for example, if they have no CD or want to install the operating system from a USB stick.However, this is only the "retail versions" of Windows 7.

These are versions which are sold in retail stores, among other things. Computers that are supplied as standard with Windows 7 use in most cases, an OEM version and who can not use the " Microsoft Software Recovery download "website. To download users must first give up their license the ISO file, after which the language as well as a 32-bit or 64-bit version can be selected. The ISO is then burn to a CD, but there is also a special Microsoft tool to convert the ISO to a USB stick.

Microsoft points to the site to another page where users ISO files from Windows 8.1 can download without specifying the license key. The difference is that windows 7 without a license key can be installed, after which the operating system 30 days is to be used fully. Windows 8.1, however, install only with a valid license.

Crypto Stick For Secure Login And Encryption Is Now Called Nitrokey

The Crypto Stick, a USB stick with which Internet users can log in and secured files and email can encrypt, has been given a new name, namely Nitrokey . The new name should reflect the development of the stick, which is now finally ready for consumers.

The secret keys Nitrokey used to encrypt or sign located on the USB stick. According to the developers, it is impossible to extract these secret keys Nitrokey, making the device would be immune to viruses and Trojans. Furthermore, the PIN that the user must choose and the "do not manipulate the" smart card to ensure that the Nitrokey in case of theft or loss is still protected. Both the hardware and software Nitrokey are both open source.

The USB stick can be used for various purposes, such as secure login via a One Time Password for example Google or Dropbox, email encryption based on S / MIME and OpenPGP, encrypting files and hard drives and user authentication on both local computers as networks. Mozilla uses the Crypto Stick to secure its infrastructure.

The Crypto Stick is already since 2008 as "hobby open source project" in development. The developers say that they have learned during this time that developing a system that works is one thing, but delivering a device that is stable and ready for consumers, is a whole different story. The development of the latest version of Crypto Stick took two years to complete and is now complete. Now the system operates stably concentrate the developers at its production. Because of the new phase of the project has decided to change the name of Crypto Stick Nitrokey. "The goal is to provide the best open source securitykey to our users remains unchanged," they note