0 Russian cybercrime market doubles in size

Russian cybercrime investigation and computer forensics company and LETA Group subsidiary Group-IB released a 28-page report prepared by analysts from its computer forensics lab and its CERT-GIB unit on the Russian cybercrime market in 2011.

The report outlines the main risks associated with various types of hacker activities, analyzes the main trends in the development of the Russian cybercrime market, estimates the shares and the financial performance of the Russian segment of the global cybercrime market, and forecasts market trends for this year.

Key trends in 2011:

Russian cybercrime doubles
The global cybercrime market was more than $12.5 billion in 2011. The global Russian speaking component of that market was more than $4 billion; and the Russian national cybercrime market was $2.3 billion, essentially doubling last year's number of $1.2 billion.

Mafia professionalizes Russian cybercrime
Traditional crime syndicates are beginning to organize the previously disorganized Russian cybercrime market. In addition, these crime syndicates are beginning to work more closely together, sharing compromised data, botnets, and cashing schemes.

Online fraud and spam account for more than half of Russian cybercrime
In 2011, the largest type of Russian cybercrime was online fraud at $942 million; followed by spam at $830 million; cybercrime to cybercrime, or C2C (including services for anonymization and sale of traffic, exploits, malware, and loaders) at $230 million; and DDoS at $130 million.

Criminal profiles
In its report, Group-IB specialists and CERT-GIB analysts profile details of 5 cyber criminals caught in 2011: Vladislav Khorokhorin, Oleg Nikolayenko, Yevgeniy Anikin, Maksim Glotov, Andrey Sabelikov.

Group-IB suggests that Russian laws are critical in getting traction against the global Russian cybercrime market. Although they feel there has been progress with recent laws introduced by Russian President Dmitriy Medvedev and enacted by the Russian State Duma, these laws do not yet go far enough.

The report recommends also steps that will significantly improve the number of solved computer crimes, change the existing law enforcement practices, and establish proper international cooperation in this field.

These recommendations include:

• Clarify language of new laws - Amend the law with an additional conceptual apparatus related to issues of information security and information technologies. For example, the term "botnet" needs to be introduced, perhaps under a different name, which remains and will remain for the foreseeable future the main tool for committing the majority of cybercrimes. In addition, change the term "computer information" in the existing law, which does not fully reflect the nature of computer information, leading to possible incorrect interpretations of this term.
• Increase penalties - Make the penalties for crimes committed using computer technologies more severe.
• Update, amend and augment criminal procedures - Create more effective criminal procedures around gathering "digital evidence" such as describing the procedures and actions related to procuring, securing, and investigating; and creating a separate definition for the crime scene of a cybercrime and establish a specific place of investigation of such crimes.
• Improve law enforcement - Organize federal and regional training programs for the judicial, prosecutorial, investigative, and law enforcement agencies, including seminars regarding the issues of cybercrime investigation.
• Improve international coordination - Develop a document for submission to the UN, establishing the principles of international interaction against cybercrime, while also respecting the sovereignty of the member states, as opposed to the Budapest Convention.

Resource: net-security.org

1 Flashcrew.In Domain

Now blog it's with our old domain flashcrew.in ..
so son u have to see some more great updates and adding again online free tools...
and more usefull  articles for u all

1 fimap v.0.9 released

A little tool for local and remote file inclusion auditing and exploitation.
fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap should be something like sqlmap just for LFI/RFI bugs instead of sql injection..

Download:
http://code.google.com/p/fimap/downloads/list

0 Online Penetration Tools For Scanning Various Services

subhashdasyam.com released a bunch of online security tools to scan various services and protocols. This could be with a great help if you want to use your Mobile Phone or handheld. However, this is not intended to replace real good scanners or manual techniques. Some scanners are still buggy and can lead you to misinterpretation. So use them with care

Avaible Scanners

• Antivirus Scanner
• Port Scanner
• SSH Scanner
• VNC Scanner
• RDP Scanner
• SQL Injection Dumper

More Info Click Here

Pls Donate for him hard work :) I think are usefull free services

0 Anonymous declares war on New Zealand\'s Government

Operation Payback

Press Release:

Anonymous Attacks NZ Government Websites 

Auckland, NZ - With the passage of The Copyright (Infringing File Sharing) Amendment Bill by the New Zealand Parliament, Anonymous has launched a major operation to chastise the government of New Zealand for this act of oppression [1]. 

Operating under the flagship "Operation Payback", Anonymous has targeted the domain of the New Zealand parliament for internet silence.

On Saturday, April 30 at 23:59 UTC, the website was rendered inoperable by a successful denial of service effort.

In a video address published minutes before the attack [2], Anonymous asserted: "Guilty until proven innocent - we shall never accept this, and nobody should."

Promising a continued large-scale effort, Anonymous is planning a sustained campaign which is likely to include activist action on the ground.

Security services protecting the parliament website were "confident [the] website will stand up", with "adequate firewalls in place" [3].

However, like many organizations and individuals before them, they have committed the dire error of underestimating Anonymous. Unable to resist the anger of the masses, system administrators proceeded to cut their own website off from international traffic soon after the attack began.

This effectively accomplished much of our work for us. This cowardly act also demonstrated a willingness on part of the New Zealand governement to isolate themselves from the international community in order to maintain control over their citizenry.

Unwilling to confront their defeat, the security services promptly buried their head in the sand, denying that any attack ever took place. The extent of their humiliation became painfully obvious to everyone but them when an independent news source finally acknowledged an Anonymous victory [4].

In addition to the protests against the NZ parliament; Anonymous also protested the website of NZ FACT (New Zealand Federation against Copyright Theft) an organization which actively encourages the persuing of "file sharers" and encourages punitive punishments.

  Service was denied to this website for over 10 hours and counting (at time of release).

Operation Payback is a long-standing Anonymous action, members of which have taken it upon themselves to defend freedom of information on the internet.

The operation was involved in the high-profile actions against Visa and Mastercard upon their withdrawal of support to Wikileaks.

Operation Payback has successfully challenged and in some cases destroyed legal firms and online security companies. 

Sources:

2.    http://www.youtube.com/watch?v=EHKhbxr7Gxg

3.    Threat to bring down Parliament website taken seriously. NZ Hearald. Wednesday Apr 27, 2011. http://www.nzherald.co.nz/nz/news/article.cfm?c_id=1&objectid=10721808

4.    Parliament’s site Under Attack: Hackers Claim Responsibility. Scoop. May 3, 2011. http://www.scoop.co.nz/stories/PA1105/S00029/parliaments-site-under-attack-hackers-claim-responsibility.htm

0 BackTrack 5 Release

BackTrack 5 Release

As BackTrack 5 development rolls on full steam ahead, we’ve been getting numerous questions about the future release. We thought we’d publish a blog post with general information about BT5 for the impatient. The codename of this release will be “revolution”, for a bunch of reasons.
BackTrack 5 will be based on Ubuntu Lucid (10.04 LTS), and will (finally) support both 32 bit and 64 bit architectures. We will be officially supporting KDE 4, Gnome and Fluxbox while providing users streamlined ISO downloads of each Desktop Environment (DE). Tool integration from our repositories will be seamless with all our supported DE’s, including the specific DE menu structure.
Perhaps most importantly BackTrack 5 “revolution” will be our first release to include full source code in it’s repositories. This is a big thing for us, as it officially joins us to the open-source community and clears up any licensing issues which were present in BackTrack 4.
The absence of source code availability in BT4 was mainly due to lack of resources when we initially structured the BT4 development environment. Newly armed with our support from Offensive Security, we have now built a *proper* development environment, which allows us to do some pretty awesome things.
Our tool list has completely been revamped and refreshed. Each tool’s functionality was assessed and decided upon before inclusion to BT5. Obviously, we are constantly staying up to date with interesting new tools and are adding them to our repositories when appropriate. In addition, our menu structure has been much optimized – streamlined with both the PTES and OSSTMM standards. This will make finding and using the right tools much easier.
BackTrack is intended for all audiences from the most savvy security professionals to early newcomers to the information security field. BackTrack promotes a quick and easy way to find and update the largest database of security tools collection to-date. Our community of users range from skilled penetration testers in the information security field, government entities, information technology, security enthusiasts, and individuals new to the security community.
Feedback from all industries and skill levels allows us to truly develop a solution that is tailored towards everyone and far exceeds anything ever developed both commercially and freely available. The project is funded by Offensive Security. Whether you’re hacking wireless, exploiting servers, performing a web application assessment, learning, or social-engineering a client, BackTrack is the one-stop-shop for all of your security needs.

Download Now : http://www.backtrack-linux.org/downloads/

0 Every week 57,000 fake Web addresses try to infect users

Every week, hackers are creating 57,000 new Web addresses which they position and index on leading search engines in the hope that unwary users will click them by mistake.
Those who do, will see their computers infected or any data they enter on these pages fall into the hands of criminals. To do this, they use an average of 375 company brands and names of private institutions from all over the world, all of them instantly recognizable.

eBay, Western Union and Visa top the rankings of the most frequently used keywords; followed by Amazon, Bank of America, Paypal and the US revenue service.

These are the conclusions of a study carried out by PandaLabs, which has monitored and analyzed the major blackhat SEO attacks of the last three months.

Some 65% of these fake websites are positioned as belonging to banks. For the most part, they pose as banks in order to steal users’ login credentials. Online stores and auction sites are also popular (27%), with eBay the most widely used.

Other financial institutions (such as investment funds or stockbrokers) and government organizations occupy the following positions, with 2.3% and 1.9% respectively. The latter is largely accounted for by the US revenue service or other tax collecting agencies.

Payment platforms, led by Paypal, and ISPs are in fifth and sixth place, while gaming sites – topped by World of Warcraft- complete the ranking.

Just as in previous years malware or phishing was typically distributed via email, in 2009 and particularly this year, hackers have opted for BHSEO techniques, which involves creating fake websites using the names of famous brands, etc.

This way, when users search for these names, a link to the malicious website will appear among the first results returned. When they visit these sites, one of two things will happen: either malware will be downloaded onto the user’s computer, with or without their knowledge, or the website spoofs the appearance of a genuine page, a bank say, and users will unwittingly enter their details which will fall into the hands of criminals.

Full post

0 MySpace apps send user IDs to advertisers

In the wake of the discovery that some third party Facebook applications transmit users' ID to ad agencies and Internet tracking companies, The Wall Street Journal has revealed that MySpace and some of the game applications on it are doing exactly the same thing.

This is not the first time MySpace has been found "oversharing" - at the time, they said they were working on a method to obfuscate the ID information sent to ad agencies via "HTTP referrers".

An extenuating circumstance is the fact that - unlike Facebook - MySpace doesn't require of or encourage its users to make an account in their real name, so knowing a user ID doesn't immediately mean that usable information can be harvested. On the other hand, many users simply don't think of creating an online persona to protect their privacy.

Three popular MySpace applications - TagMe, GreenSpot and RockYou Pets - have been found transmitting the information, a thing that is against the rules set by the social network.

"It has recently come to our attention that several third-party app developers may have violated these terms and we are taking appropriate action against those developers," a MySpace spokesman said.

0 Spam and virus trends according to Google

Postini - the spam engine that powers Google's e-mail security and archiving services - handles some 3 billion e-mails per day, so it's fair to say that the statistics derived from the data it aggregates show a rather accurate picture of spam and virus trends.



The analysis of the data for Q3 of this year shows that spam is down by 16% when compared to the numbers of the previous quarter, but that payload virus volume is up by a whooping 42%, making Google's experts speculate that the spam volumes in Q4 will raise again because the malicious payloads of this quarter are meant to enslave computers into spamming botnets just in time for them to be used during the holiday season.

"With the commercialization of spam in 2006, we’ve often seen a correlation between spam, malware campaigns, and seasonal consumer patterns," say the specialists. "The actual content of this virus wave consisted mainly of traditional spoofing of major brands, along with a new tactic involving recycling previously sent e-mails taken from the hard drives of infected computers. This new method is more difficult to detect as the wording and content is familiar to the recipient."

Also back is the trend of embedding malicious shortened URLs into the messages, spammers posing as financial authorities and sending out fake notifications of a rejected or unauthorized transaction, bogus Non-Delivery Reports and e-mails containing "news" of a celebrity death.

0 Metasploit Framework 3.5.0 comes with over 600 exploits

The Metasploit Framework is a development platform for creating security tools and exploits. The framework is used by network security professionals to perform penetration tests, system administrators to verify patch installations, product vendors to perform regression testing, and security researchers world-wide.

Metasploit now has 613 exploit modules and 306 auxiliary modules, from 551 and 261 respectively in version 3.4.

General release notes for 3.5.0:

• Sessions now include additional information by default. This is often the username/hostname of the remote session.
• Dead sessions are now automatically detected and closed without requiring user interaction.
• The msfcli interface is now a thin wrapper around msfconsole; auxiliary modules and passive exploits now work.
• All modules now track which local user launched them (via module.owner)
• Resolve Windows error codes intro descriptive strings
• Automatically choose a preferred "reverse" payload if non was specified
• Warn the user if an antivirus program has corrupted the installation (EICAR canary)
• A socks4a proxy auxiliary module is available capable of routing through a meterpreter session
• Host names will now resolve properly on Windows with Ruby 1.9.1+
• Improved performance and accuracy of FTP and telnet brute force scanners.

0 FBI warns businesses about corporate account take overs

The FBI has issued a fraud advisory to warn businesses about the various bank fraud scams currently employed. Created by financial institutions, industry trade associations, Federal law enforcement and regulatory agencies, it explains how this attacks are usually executed.

These so called "corporate account take overs" are rising in numbers, because cyber criminals have found them rather easy to perpetrate - especially when it comes to small business that don't have a dedicated IT staff that could detect the fraud in time. The rewards are great - often surpassing hundreds of thousands of dollars - and the risk is low.

The FBI warns about unsolicited e-mails purportedly coming from delivery services, financial institutions, the IRS, the Better Business Bureau, Federal courts, and even from compromised e-mail accounts of other employees or executives of the firm. They urge people to be wary of attachments seemingly containing PDFs or various MS Office files, since they are usually constructed in such a way to allow them to exploit a vulnerability within the system.

The FBI offers also offers a bevy of tips for protecting oneself, detecting these attacks and responding to them. They urge business owners to educate their employees and themselves, to strengthen the security of the computers and of the corporate network, and that of the corporate banking processes.

They advise an everyday check of corporate accounts and being on the lookout for warning signs. If suspicious activity is detected, they encourage an immediate interruption of online activity and reporting the potential problem to immediate superiors, to the financial institution and to the police.

For detailed advice and helpful links, business owners are advised to examine carefully the advisory.