Skip to main content

Tell me how did this happen? AND win a 32 GB persistent boo-table KALI LINUX OS.


How did this happen? Frame a plot/solution via a story (A video/Write-up). The winner would win a 32 GB persistent bootable KALI LINUX OS.
Submit the You-tube video link/ Write-up @ hackin2minutes@gmail.com

Winner will be announced LIVE on my you-tube channel CYBER WIZARD                                                     
Subscribe my Youtube channelCYBER WIZARD

                                                            Story
Professional, coordinated attackers with a plan, breached a server maintained by Anonym University and walked off with nearly 800,000 records, and have used the information to commit at least 30 acts of identity theft.
Anonym officials reported on 19/06/2018, that between June and December of this year, a server containing records on some 3,500 employees was breached. Notification using all campus email was initiated, and the staffers were told to watch for unusual patterns on their credit card statements.
The investigation is ongoing, with both an external expert consultant and a cyber-crime investigators from Cyber team.
“The integrity of the Anonym’s system has been restored and there is no indication of any additional instances of compromise of personal information,” said Dr. Praveen, university president.
The lack of further incident is good news to be certain, Dr. Praveen’s memo to the university staff on the incident is both disturbing and eye opening from an Information Security perspective. If anything, it can serve as a nightmare scenario for organizations on data protection.
According to the investigation details till now, between June and December of this year, the attackers targeted a single folder on the main Anonym’s server. The folder housed several files on it with personal information, but no single file had a complete set of information.
“However, by working between files, the hacker(s) have been able to piece together enough information to be able to engage in the theft of identity of at least 100 employees...by working between files, data regarding Name, Adhar number,Pan number, Date of Birth, and Deposit Account numbers were accessed. Additional directory information such as address, phone numbers, college email address, etc. was also likely compromised.”
In addition, the stolen data has been used to apply for SBI credit cards under the employee’s name.  
“The access pathway used to invade our main server has been sealed. We hope to know, by the end of this week precisely who had their information compromised,” Dr. Praveen added.

Story by SAWAN BHAN
Subscribe CYBER WIZARD

Last Date of Submission : 29/06/2018

Comments

Popular posts from this blog

WHY IS CYBER SECURITY IMPORTANT?

WHY IS CYBER SECURITY IMPORTANT? Cyber Security is important because without any understanding or consideration of the issue you are waiting to be attacked. It may not happen now, or next week, but eventually you will be breached and you will have to deal with the fallout. In fact, in the last few years, cyber crime has grown at such a rapid rate it is now an issue all businesses should constantly be monitoring and managing. The latest “Cost of data breach study: Australia”, by IBM and the Ponemon Institute, concluded that in 2014 the likelihood of an Australian company or organisation experiencing a data breach involving at least 10,000 records had increased to 18 per cent over a 24 month period – that is, nearly one in five Australian companies or organisations will experience a serious data breach in the next two years. And this breach rate continues to grow. The problem is also growing rapidly in other Asia-Pacific nations. The Australian Institute of Criminology ...

LINUX PRIVILEGE ESCALATIONS BY SAWAN BHAN

WHAT IS PRIVILEGE ESCALATION? Privilege escalation is the act of exploiting a bug, design flaw or configuration oversight in an OS or application to achieve an higher access to resources that are normally protected from an application or user. The result could lead to unauthorized actions. OBJECTIVE In this blog, we will talk in detail as what security issues could lead to a successful privilege escalation attack on any Linux based systems. Linux Permission Model Linux has inbred from UNIX the concept of ownership and permissions of files . File permissions are used to protect systems against malicious tampering. 1.       In the above two screenshots, we can see that the file ‘p.txt’ only has read & write access by the owner ‘ root’ . 2.       We can see the permission denied error when I tried reading the file when I tried to access as “ sawan ”. Security Professionals usually perform Privil...