Anonymous Hackers Target TikTok: ‘Delete This Chinese Spyware Now’

“Delete TikTok now,” the account tweeted today, July 1, “if you know someone that is using it, explain to them that it is essentially malware operated by the Chinese government running a massive spying operation.”

https://twitter.com/YourAnonCentral/status/1278204068175818752?s=20

https://www.forbes.com/sites/zakdoffman/2020/07/01/anonymous-targets-tiktok-delete-this-chinese-spyware-now/

#anonymous #hacked #TikTok #DeleteTikTok
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Facebook once again accidentally reveals user data

5000 developers were able to access user data from Facebook via some apps, which they were not supposed to get. The leak is fixed.

About 5000 developers had access to user data from Facebook, which they should not have been able to see. Actually, the social network has a ban on information from app users that have been inactive for more than 90 days. Actually, that didn't work.

These are apps that users have logged into with their Facebook account. App developers then get access to information such as birthday, email addresses, friend lists and location. After the Cambridge Analytica scandal, in which millions of data were tapped and used for political purposes, Facebook had restricted this access.

Now it has been noticed, says a Facebook blog post, that this 90-day limit did not always last. Nevertheless, some developers continued to gain insights. "This can happen when someone has used a fitness app to invite friends to a workout about it. We didn't notice that some of the friends were inactive for months," explains Facebook. The company doesn't say how many users are affected by this. The data leak has already been plugged. They still want to investigate the incident, but so far there are no indications of misuse of the information by third parties. "We have no indication that any information was shared that users didn't approve."

👀 https://about.fb.com/news/2020/07/improving-data-limits-simplifying-terms/

Read more 🇩🇪 🇬🇧:

https://www.cnet.com/news/facebook-shared-user-data-with-developers-after-access-should-have-expired/

https://www.heise.de/news/Facebook-gibt-einmal-mehr-aus-Versehen-Nutzerdaten-preis-4801943.html

#DeleteFacebook
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Mark Zuckerberg is trying to sue families in Hawaii, to force my people to sell him our land. He even filed lawsuits against owners who are dead. Leave Hawaiian land in Hawaiian HANDS. Stop the white man from colonizing our island.

👀 https://twitter.com/fuckpiIIar/status/1278433319991074816

#DeleteFacebook #thinkabout #why
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Multi-million dollar online fraud: Nigerian Instagram Influencer Arrested

On Instagram he posed with luxury cars and reached millions. The money, however, was probably obtained by a Nigerian who had scammed the Internet.

A Nigerian Instagram influencer and several of his accomplices have been arrested in Dubai for millions of dollars of Internet fraud. Dubai police announced on Thursday that the FBI had thanked the authorities of the United Arab Emirates for the arrest and extradition to the USA. The man, together with accomplices, is said to have defrauded nearly two million victims over the Internet.

👉🏼 Source 🇬🇧:
https://www.facebook.com/126070364137174/posts/3126225064121674

👉🏼 Read more 🇩🇪:
https://www.heise.de/news/Millionenfacher-Online-Betrug-Nigerianischer-Instagram-Influencer-festgenommen-4805836.html

#nigeria #instagram #online #fraud
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Avoid Google apps spyware!

📡 @NoGoolag (links at @microGsupport)

★English Group:
https://t.iss.one/joinchat/FyFlS0X2D7eDayZ4R4Gkzw

★Indonesian channels and group:
@microGindonesia
@StopGapps_id
https://t.iss.one/joinchat/HVU5S1HNr9FuSwsX0vRCuQ

★Off-Topic Group:
In NoGoolag group, retrieve the saved note #ot to know

★Guide: t.iss.one/NoGoolag/63
★Installers: t.iss.one/NoGoolag/182

More software
📡 @Libreware

📡 @AuroraOfficial Aurora sw channel

💬 @AuroraSupport Aurora Store group (Foss playstore alternative)

💬 @AuroraDroid Aurora Droid group (F-Droid client)

💬 @AuroraOSS
Group to discuss upcoming Aurora projects (Contacts & Dialer, Aurora Services, Aurora Sync, Aurora Maps)

🦊 @qd_invitation
Firefox Configuration Hardening
DNScrypt Proxy Android
Mixplorer updates

News
📡 @cRyPtHoN_INFOSEC_EN
📡 @cRyPtHoN_INFOSEC_DE
📡@BlackBox

Dismantling of an encrypted network sends shockwaves through organised crime groups across Europe

At a joint press conference today, French and Dutch law enforcement and judicial authorities, Europol and Eurojust presented the impressive results of a joint investigation team to dismantle EncroChat, an encrypted phone network widely used by criminal networks.

Over the last months, the joint investigation made it possible to intercept, share and analyse millions of messages that were exchanged between criminals to plan serious crimes. For an important part, these messages were read by law enforcement in real time, over the shoulder of the unsuspecting senders.

👉🏼 Read more:
https://www.eurojust.europa.eu/press/PressReleases/Pages/2020/2020-07-02b.aspx

#EncroChat #encrypted #network #busted #french #dutch #Europol #Eurojust
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Surveillance under Surveillance

Surveillance under Surveillance shows you cameras and guards — watching you — almost everywhere. You can see where they are located and, if the information is available, what type they are, the area they observe, or other interesting facts.

Surveillance under Surveillance uses data from OpenStreetMap contributors that is not visualized on the regular OpenStreetMap site.

👉🏼 https://sunders.uber.space 👈🏼

#surveillance #defense
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

New Trump Appointee Puts Global Internet Freedom at Risk, Critics Say

A battle involving Michael Pack and a U.S.-funded tech group revolves around software from Falun Gong, the secretive, anti-Beijing spiritual movement with pro-Trump elements.

WASHINGTON — When Michael Pack, a conservative filmmaker and ally of Stephen K. Bannon, recently fired the heads of four U.S. government-funded news outlets, many became alarmed that he would turn the independently operated organizations, as well as the Voice of America, into “Trump TV.”

But Mr. Pack, the new chief executive of the U.S. Agency for Global Media, also cleaned house last month at the lesser-known Open Technology Fund, an internet freedom group overseen by the agency Mr. Pack now runs.

Many worry that the move could have an even greater effect.

In less than a decade, the Open Technology Fund has quietly become integral to the world’s repressed communities. Over two billion people in 60 countries rely on tools developed and supported by the fund, like Signal and Tor, to connect to the internet securely and send encrypted messages in authoritarian societies.

After Mr. Pack was confirmed for his new post on June 4, following a personal campaign of support by President Trump, Mr. Pack fired the technology group’s top officials and bipartisan board, an action now being fought in the courts. A federal judge on Thursday ruled in Mr. Pack’s favor, a decision that plaintiffs will likely appeal.

On Friday, Mr. Pack appointed an interim chief executive, James M. Miles, to head the fund, according to a letter obtained by The New York Times. Mr. Miles is little known in the internet freedom community, and his appointment needs approval from the fund’s new board, which is stacked with Trump administration officials and chaired by Mr. Pack.

This battle revolves around software developed by Falun Gong, the secretive spiritual movement persecuted by the Chinese Communist Party.

Some Falun Gong members have become notable players in American politics. The Epoch Times, a newspaper started by Falun Gong practitioners, has spent millions of dollars on pro-Trump ads, including conspiratorial ones, on Facebook and YouTube — and was even banned by Facebook last year from buying more ads because it had tried to evade advertising rules.

Now, allies of Falun Gong are making a big push for the Open Technology Fund and the State Department to give money to some of the group’s software, notably Ultrasurf, developed about a decade ago by a Falun Gong member.

https://www.nytimes.com/2020/07/04/us/politics/michael-pack-china-internet.html

#thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Facebook, WhatsApp, Twitter Suspend Review of Hong Kong Requests for User Data

Action is taken ‘pending further assessment’ of China’s national-security law for territory, WhatsApp says

"Facebook’s WhatsApp messaging service has suspended its processing of requests for user data from Hong Kong law-enforcement agencies following China’s imposition of a national-security law on the city.

The company is “pausing” such reviews “pending further assessment of the impact of the National Security Law, including formal human rights due diligence and consultations with human rights experts,” a WhatsApp spokeswoman said in response to a Wall Street Journal query on Monday […]

Dubai-based Telegram Group Inc. said in a statement that was earlier reported by the Hong Kong Free Press that it doesn’t intend to process “any data requests related to its Hong Kong users until an international consensus is reached in relation to the ongoing political changes in the city.” A Telegram representative said in a statement that the company “has never shared any data with the Hong Kong authorities in the past.”

https://9to5mac.com/2020/07/06/whatsapp-and-telegram/

https://www.wsj.com/articles/whatsapp-to-suspend-processing-law-enforcement-requests-for-user-data-in-hong-kong-11594034580

#china #hk #fb #DeleteFacebook #wa #twitter
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

National Security Agency |Cybersecurity Information

Securing IPsec Virtual Private Networks

Many organizations currently utilizeIP Security (IPsec) Virtual Private Networks (VPNs) to connect remote sites andenable telework capabilities. These connections use cryptographytoprotect sensitive information that traversesuntrusted networks. To protect this trafficand ensure data confidentiality, it is critical that these VPNs use strong cryptography.This guidance identifiescommon VPN misconfigurations andvulnerabilities.

👀 PDF:
https://media.defense.gov/2020/Jul/02/2002355625/-1/-1/0/SECURING_IPSEC_VIRTUAL_PRIVATE_NETWORKS_EXECUTIVE_SUMMARY_2020_07_01_FINAL_RELEASE.PDF

#nsa #cybersecurity #IPsec #vpn #information #guide #pdf
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

U.S. looking at banning Chinese social media apps, including TikTok

(Reuters) - Secretary of State Mike Pompeo said on Monday that the United States is “certainly looking at” banning Chinese social media apps, including TikTok, suggesting it shared information with the Chinese government, a charge it denied.

“I don’t want to get out in front of the President (Donald Trump), but it’s something we’re looking at,” Pompeo said in an interview with Fox News.

U.S. lawmakers have raised national security concerns over TikTok’s handling of user data, saying they were worried about Chinese laws requiring domestic companies “to support and cooperate with intelligence work controlled by the Chinese Communist Party.”

Pompeo said Americans should be cautious in using the short-form video app owned by China-based ByteDance.

“Only if you want your private information in the hands of the Chinese Communist Party,” Pompeo remarked when asked if he would recommend people to download TikTok.

👀 Read more 🇬🇧:
https://www.reuters.com/article/us-usa-tiktok-china-pompeo/pompeo-says-u-s-looking-at-banning-chinese-social-media-apps-including-tiktok-fox-idUSKBN2480DF

👀 Read in 🇩🇪:
https://t3n.de/news/social-media-apps-china-visier-1297614

#DeleteTikTok #TikTok #usa #china #pompeo #ToddlerTrump
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Darknet Diaries - EP 69: Human Hacker

We all know that computers and networks are vulnerable to hacking and malicious actors, but what about us, the humans who interface with these devices? Con games, scams, and strategic deception are far older than computers, and in the modern era, these techniques can make humans the weakest link in even the most secure system. This episode, security consultant and master social engineer, Christopher Hadnagy, joins us to share his stories and wisdom. He describes what it was like to be a social engineer before the world knew what social engineering was and tells some of his amazing stories from his long career in penetration testing.

🎧 https://darknetdiaries.com/episode/69/

#DarknetDiaries #podcast
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@NoGoolag
📡@BlackBox

Introducing Project Freta - Microsoft Launches Free Linux Forensics and Rootkit Malware Detection Service

Microsoft has announced a new free-to-use initiative aimed at uncovering forensic evidence of sabotage on Linux systems, including rootkits and intrusive malware that may otherwise go undetected.

The cloud offering, dubbed Project Freta, is a snapshot-based memory forensic mechanism that aims to provide automated full-system volatile memory inspection of virtual machine (VM) snapshots, with capabilities to spot malicious software, kernel rootkits, and other stealthy malware techniques such as process hiding.

The project is named after Warsaw's Freta Street, the birthplace of Marie Curie, the famous French-Polish physicist who brought X-ray medical imaging to the battlefield during World War I.

"Modern malware is complex, sophisticated, and designed with non-discoverability as a core tenet," said Mike Walker, Microsoft's senior director of New Security Ventures. "Project Freta intends to automate and democratize VM forensics to a point where every user and every enterprise can sweep volatile memory for unknown malware with the push of a button — no setup required."

The objective is to infer the presence of malware from memory, at the same time gain the upper hand in the fight against threat actors who deploy and reuse stealthy malware on target systems for ulterior motives, and more importantly, render evasion infeasible and increase the development cost of undiscoverable cloud malware.

https://www.microsoft.com/en-us/research/blog/toward-trusted-sensing-for-the-cloud-introducing-project-freta/

https://thehackernews.com/2020/07/microsoft-linux-forensics-rootkit.html

#microsoft #linux #cloud #Freta #forensics #research #rootkit #malware
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Police data - BlueLeaks server confiscated near Zwickau (Germany)

A few weeks ago, the transparency collective Distributed Denial of Secrets published hundreds of thousands of internal data from 200 police stations in the USA. The case now also occupies the public prosecutor's office in Zwickau, which apparently confiscated a server of the collective.

Zwickau police have confiscated a server on which data from US police departments known as BlueLeaks was available for download. This was announced by Emma Best via Twitter, a person associated with the Leaking collective Distributed Denial of Secrets (DDoS). The server is the "primary public download server" and no sources are in danger due to the confiscation.

In another tweet, an excerpt from an e-mail from the provider is attached, in which the provider states the file number and writes that he should only now have informed the persons concerned. He was not allowed to say more about the case. This provider is apparently the company Hetzner, which maintains a data centre near Zwickau. A used IP address of DDoS also refers to Hetzner.

A short-term inquiry by netzpolitik.org on Tuesday evening, on what basis the server was seized and what the operators are accused of, has not yet been answered by the Zwickau public prosecutor's office.

https://twitter.com/NatSecGeek/status/1280519169151205381

More info 🇩🇪:
https://netzpolitik.org/2020/polizei-daten-blueleaks-server-bei-zwickau-beschlagnahmt/

#BlueLeaks #DDoS #Zwickau
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

White Hat and Black Hat: Racism debate about designations for hackers

Do the hacker terms white hat and black hat evoke racist associations? The head of Android security sees it that way and causes a debate.

https://twitter.com/DaveKSecure/status/1279472868712013824

#lostnfound #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Microsoft takes legal action against COVID-19-related cybercrime

Today, the U.S. District Court for the Eastern District of Virginia unsealed documents detailing Microsoft’s work to disrupt cybercriminals that were taking advantage of the COVID-19 pandemic in an attempt to defraud customers in 62 countries around the world. Our civil case has resulted in a court order allowing Microsoft to seize control of key domains in the criminals’ infrastructure so that it can no longer be used to execute cyberattacks.

Microsoft’s Digital Crimes Unit (DCU) first observed these criminals in December 2019, when they deployed a sophisticated, new phishing scheme designed to compromise Microsoft customer accounts. The criminals attempted to gain access to customer email, contact lists, sensitive documents and other valuable information. Based on patterns discovered at that time, Microsoft utilized technical means to block the criminals’ activity and disable the malicious application used in the attack. Recently, Microsoft observed renewed attempts by the same criminals, this time using COVID-19-related lures in the phishing emails to target victims.

This malicious activity is yet another form of business email compromise (BEC) attack, which has increased in complexity, sophistication and frequency in recent years. According to the FBI’s 2019 Internet Crime Report, the most-costly complaints received by their Internet Crime Complaint Center (IC3) involved BEC crimes, with losses of over $1.7 billion, representing nearly half of all financial losses due to cybercrime. While most of the public’s attention in recent years has justifiably focused on the malign acts of nation state actors, the increasing economic harm caused by cybercriminals must also be considered and confronted by the public and private sectors. For our part, Microsoft and our Digital Crimes Unit will continue to investigate and disrupt cybercriminals and will seek to work with law enforcement agencies around the world, whenever possible, to stop these crimes.

https://blogs.microsoft.com/on-the-issues/2020/07/07/digital-crimes-unit-covid-19-cybercrime/

#microsoft #DCU #cybercrime #corona
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Firefox Send offline due to malware distribution

Mozilla has taken his Firefox send offline. This is due to malware abuse of the file transfer. The service is being revised.

The Firefox Send web service, which was launched by browser manufacturer Mozilla just under a year ago, is offline. However, this is not a short failure or error. Mozilla itself pulled the plug on the service, which is supposed to transfer files quickly, easily and encrypted over the web.

On the service's website it says: "Firefox Send is temporarily unavailable while we work on product improvements. Thank you for your patience as we improve the Firefox Send experience". Details or a public statement as to why the Service is currently unavailable from Mozilla are not available on the website.

https://send.firefox.com/

👉🏼 Read more 🇬🇧:
https://www.zdnet.com/article/mozilla-suspends-firefox-send-service-while-it-addresses-malware-abuse/

👉🏼 Read more 🇩🇪:
https://www.golem.de/news/mozilla-firefox-send-wegen-malware-verbreitung-offline-2007-149529.html

#mozilla #ff #firefox #send #malware
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Bunker.is - a non-profit isp

collaborating to create shared platforms with open products and no vendor lock-in

👉🏼 #Cloud:
A nextcloud instance for our contributors

👉🏼 #VPN:
We provide vpn services to our contributors

👉🏼 #Search:
A non-tracking search engine

👉🏼 #Etherpad:
A shared open etherpad instance

👉🏼 #Mail:
We provide mail accounts to our contributors

👉🏼 #Ethercalc:
An open public ethercalc instance

👉🏼 #Cryptpad:
We provide an open public instance of cryptpad

Our free services are possible due to the generosity of our users. Becoming a contributor gives you access to a wider range of services.

We dont think the users should be the product. We think you should know who has access to your data and why. Meet us and find out more.

👉🏼 https://bunker.is/ 👈🏼

#bunker #isp
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

PimEyes - A Polish company just abolishes our anonymity

Research by netzpolitik.org shows the potential for abuse of PimEyes, a free search engine for 900 million faces. All of whom have photos on the Internet could already be part of their database.

Dylan smiles into the camera, arm in arm with the other guests of a queer boat party. Behind them, glasses glisten on the shelves of a bar. Eight years ago a party photographer uploaded this snapshot on the internet. Dylan had already forgotten it - until today. Because with a reverse search engine for faces, everyone can find this old party photo of Dylan. All they have to do is upload his profile picture from the Xing career network, free of charge and without registration. But Dylan wants to keep his private and professional life separate: During the day he works as a banker in Frankfurt am Main.

The name of the search engine is PimEyes. It analyses masses of faces on the Internet for individual characteristics and stores the biometric data. When Dylan tests the search engine with his profile picture, it compares it with the database and delivers similar faces as a result, shows a preview picture and the domain where the picture was found. Dylan was recognized even though, unlike today, he did not even have a beard then.

Our research shows: PimEyes is a wholesale attack on anonymity and possibly illegal. A snapshot may be enough to identify a stranger using PimEyes. The search engine does not directly provide the name of a person you are looking for. But if it finds matching faces, in many cases the displayed websites can be used to find out name, profession and much more.

👀 👉🏼 🇬🇧 PimEyes - A Polish company just abolishes our anonymity
https://netzpolitik.org/2020/pimeyes-face-search-company-is-abolishing-our-anonymity/

👀 👉🏼 🇩🇪: https://netzpolitik.org/2020/gesichter-suchmaschine-pimeyes-schafft-anonymitaet-ab/

👀 👉🏼 🇬🇧 https://www.bbc.com/news/technology-53007510

👀 👉🏼 🇬🇧 https://petapixel.com/2020/06/11/this-creepy-face-search-engine-scours-the-web-for-photos-of-anyone/

👀 👉🏼 🇩🇪 Automated face recognition -
Enforce our data protection rights at last!
https://netzpolitik.org/2020/automatisierte-gesichtserkennung-setzt-unsere-datenschutzrechte-endlich-auch-durch/

#PimEyes #facialrecognition #searchengine #privacy #anonymity #ourdata #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Atlas of Surveillance - A project of the Electronic Frontier Foundation

The Atlas of Surveillance database, containing several thousand data points on over 3,000 city and local police departments and sheriffs' offices nationwide, allows citizens, journalists, and academics to review details about the technologies police are deploying, and provides a resource to check what devices and systems have been purchased locally.

👀 👉🏼 https://atlasofsurveillance.org/ 👈🏼 👀

👀 👉🏼 https://www.eff.org/press/releases/eff-launches-searchable-database-police-agencies-and-tech-tools-they-use-spy

#eff #atlas #surveillance
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag