Monday, 13 July 2015

Popular Android games stealing your Facebook credentials

Researchers with two security firms independently observed apps on the Google Play store that are stealing Facebook credentials, and one of the apps has been downloaded by up to a million Android users.
Cowboy Adventure is a working game by Tinker Studio that has between 500,000 and 1,000,000 downloads, but it is also malware – upon launching the app, certain users are met with a fraudulent Facebook login window that steals entered credentials and sends them to the attackers.
“If you have basic knowledge about OAuth, you should know that no [third] party could ask your [Facebook] account in this way,” a Wednesday post from security firm Trustlook said.

Wednesday, 8 July 2015

Digital India Unsecured:cyber crime in pune

Padma awardee Sanjay Dhande, who lost Rs 19 lakh to cyber fraudsters, says loopholes in system denying him justice.

It’s a double whammy for victim cyber crimes. Firstly, investigators have failed to nab the prime culprits. Secondly, the “flaws” in the legal system have apparently delayed and denied justice to victims. The case of Sanjay Govind Dhande, a resident of Pune, who lost Rs 19 lakh to cyber fraudsters, is a case in example.

A noted educationist and former director of the prestigious IIT Kanpur, Dhande was honoured with Padmashri in 2013. The same year, he lost a major part of his “life savings” to cyber criminals.
The case
Cyber criminals hacked Dhande’s account in ICICI’s Aundh branch in Pune in September 2013 and withdrew Rs 19 lakh from it through multiple illegal online transactions. They managed to block his mobile phone SIM card of Vodafone. Due to it, Dhande did not get any alerts from the bank regarding these transactions. Dhande got to know about it only after he got a call from the bank that his balance had gone below the lowest limit. Dhande then filed a complaint with the ICICI bank and also with the Chauhrshrungi police station.

Probe revealed that Dhande’s money was transferred to 11 bank accounts in Mumbai, West Bengal, Uttar Pradesh and Rajasthan. The money was withdrawn soon after it got transferred. After probe, police arrested three of these account holders from Mumbai. Fraudsters had paid them Rs 3,000 each for using their bank accounts. Account-holders from other places were not arrested. Probe also revealed the fraudsters has obtained a duplicate SIM card of Dhande’s contact number in Nagpur. Those involved in SIM card swapping have not being traced as yet.

Tuesday, 30 June 2015

Wireless Network security : Simple Tips



The whole aspect of security of wireless networks has become very important ever since terror e-mails were sent to media by alleged terrorists. Terrorists used unsecured wireless networks to hack into an individual's Wi-Fi network and sent e-mails just before bombs went off in Ahmedabad and New Delhi.

It is in this environment protecting your unsecured Wi-Fi network becomes very important lest somebody misuses the same.

Here are 10 simple ways in which you can secure your wireless network :


1. Change default administrator usernames and passwords :

Most routers or access points come enabled with a default set of username / password combinations. These combinations are well documented and available online for hackers to use. If a hacker can access your device's administrative pages they can modify the configuration and control all aspects of your device. These username / password combinations can be changed from the administrative panel and should be set to something difficult to guess.

Keep a password which is difficult to guess and not easy to crack. A good password is 8 characters long, not easily guessable, contains mixture of uppercase and lowercase letters as well as numbers and preferably contains special characters like.

Wednesday, 24 June 2015

How to "undo" Sent mail in gmail

Sending an important and confidential email to one of my friends and mistakenly clicked send to someone else. Holy crap!

This is something experienced by everyone of us at some point. When we accidentally hit the reply-all button, send an email to the wrong person, or sometimes forget to attach a file, and then left only with an instant pain of regret. It feels like there is no going back. Isn't it?

But to make you go back and rectify your mistakes, Google has rolled out a new feature that delays sending your email for 30 seconds after you hit Send, so that you can recall it if you want to make some changes.

You Have 30 Seconds to Unsend an Email


After the feature remained in public beta for six years, Google has finally brought this life-saving "Undo Send" feature to the main settings on the Web version of Google's Gmail service.

Monday, 8 June 2015

Simple Trick To Hijacking WhatsApp Account


The hugely popular smartphone messaging service WhatsApp, acquired by Facebook for over $20 billion last year, has reportedly been found to be prone to hijacking without unlocking or knowing your device password, making its hundreds of Millions of users vulnerable to, not just hackers, but also non-technical people.

This trick lets anyone surrounds you to get effectively control over your WhatsApp account. The attacker needs nothing more than a phone number of the target person and access to the target mobile phone for a few seconds, even if it is locked.

Hacking Whatsapp account in such scenario is not hard for your friends and colleagues.

This is not actually a loophole or vulnerability in WhatsApp, and rather it is just the way WhatsApp is designed and its account setup mechanism works.

NOTE: Moreover, we aren’t encouraging users to hack others WhatsApp account, but the purpose of publishing this article is to warn and remind our readers that you should be extra careful to whom you lend your mobile phone and not to leave it unattended for longer durations with strangers around.

The trick enables the offender to get full control over the victim’s WhatsApp account in no time and the most surprising part is that it independently works on all mobile platforms, including Android, Windows and Apple’s iOS.