BlackBox (Security) Archiv – Telegram
BlackBox (Security) Archiv
4.16K subscribers
183 photos
393 videos
167 files
2.67K links
👉🏼 Latest viruses and malware threats
👉🏼 Latest patches, tips and tricks
👉🏼 Threats to security/privacy/democracy on the Internet

👉🏼 Find us on Matrix: https://matrix.to/#/!wNywwUkYshTVAFCAzw:matrix.org
Download Telegram
Groundbreaking new material 'could allow artificial intelligence to merge with the human brain'

Scientists have discovered a ground-breaking bio-synthetic material that they claim can be used to merge artificial intelligence with the human brain.

The breakthrough, presented today at the American Chemical Society Fall 2020 virtual expo, is a major step towards integrating electronics with the body to create part human, part robotic "cyborg" beings.

Connecting electronics to human tissue has been a major challenge due to traditional materials like gold, silicon and steel causing scarring when implanted.

👀 👉🏼 https://www.independent.co.uk/life-style/gadgets-and-tech/news/artificial-intelligence-brain-computer-cyborg-elon-musk-neuralink-a9673261.html

#artificial #intelligence #brain #computer #cyborg
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Facebook 'danger to public health' warns report

Health misinformation on Facebook was viewed 3.8 billion times in the past year, peaking during the Covid-19 crisis, a report suggests.

Activist group Avaaz, which conducted the research, said Facebook posed a "major threat" to public health.

Doctors added false claims about vaccines on the social network could limit the numbers prepared to have a Covid jab if one became available.

Facebook said the findings did "not reflect the steps we've taken"

In a statement the firm said: "We share Avaaz's goal of limiting misinformation. Thanks to our global network of fact-checkers, from April to June, we applied warning labels to 98 million pieces of Covid-19 misinformation and removed seven million pieces of content that could lead to imminent harm.

"We've directed over two billion people to resources from health authorities and when someone tries to share a link about Covid-19, we show them a pop-up to connect them with credible health information."

👀 👉🏼 https://www.bbc.co.uk/news/technology-53820225

#fb #DeleteFacebook #fakenews
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
True privacy and security depend on free software

For all of the assurances you might receive from proprietary software companies that they respect your right to privacy, it is impossible to guarantee that your online communications are actually private without free software. Among technical users, it's common knowledge that privacy is dependent on strong encryption. However, the complex connection between software freedom, encryption, and privacy can be a little difficult to explain in the course of our individual activism, and is due for a more in-depth explanation.

Encryption is about keeping secrets secret, whether that means messages between you and a loved one, sensitive documents, or an entire hard drive. It also isn't only for those with something to hide: making strong encryption part of standard practice increases the safety of all those who really do need it by making it a normal thing to do. When your personal information is at stake, it's all the more important that encryption technology be based on free software. Even the most "benign" proprietary programs have a long history of mistreating their users, and a single "snitch" or backdoor in a proprietary encryption program in some cases could cost lives. At the FSF, we advocate for software freedom in any and all situations -- and in some cases, your safety may depend upon it.

👀 👉🏼 https://www.fsf.org/bulletin/2020/spring/privacy-encryption

#privacy #encryption #backdoor #activism #software #freedom #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Fact Check: Feds Did Not Accuse Dark.Fail of a Crime

A leaked FBI document mentions
Dark.fail, Dark Eye, Darknetlive, and other onion indexes but the FBI does not refer to any of them as criminal enterprises or claim they are involved in criminal activity.

Several weeks ago, DDOSecrets released a cache of more than 250 GB of files and documents from “police departments, fusion centers and other law enforcement training and support resources.” BlueLeaks, the name given to the dump, contained a small number of internal memos about darkweb marketplaces and forums. One of those documents—a Federal Bureau of Investigation Intelligence Bulletin—included references to four indexes of onion addresses: Dark.Fail, DNStats, Dark Eye, and Darknetlive.

The report, noscriptd “Administrators Operating on the Darknet Likely Relying on Legal Gateways to Route Users, Facilitating the Trafficking of Illicit Products and Services,” relies on the reporting of individuals who have been providing information to the Federal Bureau of Investigation (FBI) for at least two years.

Contrary to rumors spread by misinformed and ill-intentioned users of internet forums, the report does not describe any of the sites as criminal enterprises. Nor does the report state that any of the named sites are involved in criminal activity of any kind. The FBI said the named sites “appear to be operating legally.”

In essence, the document states that law enforcement is now aware that marketplaces are dependent on websites that provide visitors with links for an assortment of onion services.

👀 👉🏼 (TorBrowser)
http://darkzzx4avcsuofgfez5zq75cqc4mprjvfqywo45dfcaxrwqg6qrlfid.onion/post/fact-check-feds-did-not-call-darkdotfail-a-criminal-enterprise/

#feds #darkdotfail #DDoSecrets #BlueLeaks #leak
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Episode 3: Hacktivism. A Conversation with Mike Jones, A Good Man
The AnglerPhish Podcast - Hacktivism. A Conversation with Mike Jones, A Good Man (Episode 3)

Meet Mike Jones--a good man, a former original member of anonymous, a man without a country. Mike sits down with Brett Johnson to discuss some of his history, Hacktivism, Prison Sentences, Privacy, and more.

🎧 👉🏼 The #AnglerPhish #truecrime #podcast (Episode 3)

📡
@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Malaysian Navy Documents Uploaded on the Dark Web by Hackers

Documents belonging to the Royal Malaysian Navy have been breached and posted on the dark web although the Malaysian military has dismissed the data as obsolete

When we speak about the numerous cyberattacks that have been orchestrated in brazen campaigns of late, one thing stands out – threat actors breach an organization’s system to access critical files through a loophole, which then exposes the entire system to the attackers.

Although recent times have seen the hacking of victims such as Garmin who ended up parting with millions of dollars for ransom, it appears that threat actors have not restricted their sights to private sector entities – the Royal Malaysian Navy is the latest victim.

Media reports have intimated that about 70 documents belonging to Malaysian Navy were accessed by unknown hackers who uploaded them to a darknet platform.

According to Singapore’s English-language daily newspaper The Straits Times, it turns out that the affected documents were sourced from different threat actors who breached the communication channels belonging to the Malaysian military – including personnel email accounts.

While the newspaper reported the uncertainty to whether the hackers intended to sell the uploaded documents, it was revealed that the affected information touched on details concerning the strength of the Malaysian Navy.

👀 👉🏼
https://www.freemalaysiatoday.com/category/nation/2020/08/17/navy-documents-leaked-on-dark-web-claims-report/

👀 👉🏼 (Tor-Browser)
http://tapeucwutvne7l5o.onion/malaysian-navy-documents-uploaded-on-the-dark-web-by-hackers

#malaysia #navy #hackers #leak #darkweb
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
A Five-Year Analysis of the Darknet

The last five years have seen the evolution and adaptation of dark web marketplaces to usher in a new era of cybercrime.

The dark web has played host to a large community of users selling illegal goods and cybercriminal services for years.

The past five years has seen the paradigm shift in the manner in which darknet markets operate, with the evolution of these sites to adapt to changing buyer need, supply chain factors and emerging technologies.

An Overview:

Looking back, Silk Road was launched in the year 2011 at the first dark web marketplace. The years that followed were marked with steady growth that has since expanded. Tor, which happens to be one of the most popular anonymity tools used by darknet market users, was found to host roughly 80,000 platforms, according to a 2015 report.

Experts estimate that the dark web economy garners more than $1 trillion in annual revenues, a staggering figure that surpasses the Gross Domestic Product of several countries of the world.

Indeed, this success can be attributed to the fact that dark web marketplaces have continued to evolve and shift according to metamorphoses of the global threat landscape. The past five years have been marked by significant shifts to emergent platforms, communication channels and products, as darknet user paranoia continues to grow across the board.

In 2019 alone, analysts noted that the emergence of radical changes in the public sphere had a profound effect in the dark web underworld where fake news and propaganda services grew tremendously.

In addition, the channels of darknet communication were subjected to significant changes, along with shift in the manner in which dark web markets and forums were managed.

👀 👉🏼 (Tor-Browser)
http://tapeucwutvne7l5o.onion/a-five-year-analysis-of-the-darknet

#analysis #darknet
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Sixgill_Report_Underground_Financial_Fraud_H1_2020.pdf
703.4 KB
Sixgill Threat Intelligence report - underground financial fraud: h1- 2020

2020 has been an extraordinary year. The new reality of Covid-19 quarantines and shutdowns diverted our attention and put what seems like “real life” largely on hold. During this time, the digital underground continued business as usual, and we witnessed as threat actors continued, without interruption, their trade of malicious content, leaked data, and payment cards.

👀 👉🏼 https://info.cybersixgill.com/underground-financial-fraud-2020

👀 👉🏼 PDF:
https://f.hubspotusercontent30.net/hubfs/5510338/Threat%20Reports/Sixgill_Report_Underground_Financial_Fraud_H1_2020.pdf

#fraud #study #report
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Anti-Piracy Outfit Hires VPN Expert to Help Track Down The Pirate Bay

Movie companies and their anti-piracy partners are pressing ahead with their legal action to track down The Pirate Bay. The site reportedly used VPN provider OVPN, which carries no logs, but a security expert - one that regularly penetration tests several major VPN providers - believes that information about the notorious site could still be obtained.

Tracking down, prosecuting, blocking and otherwise trying to prevent The Pirate Bay from operating has become an entertainment industry project for the last 15 years.

The torrent site has faced more adversaries than any other on the planet yet today the site remains stubbornly online. Exactly where and operated by whom remains either a mystery or a topic of speculation.

After a period of what seemed like calm, this year it became clear that the site’s old enemies, Swedish anti-piracy group Rights Alliance, were again working to get closer to the site and its operators.

We’ve covered the back story in detail but in summary, the site is alleged to have used Swedish VPN provider OVPN to hide its true location and Rights Alliance is now engaged in legal action to get its hands on whatever information the VPN provider may hold.

👀 👉🏼 https://torrentfreak.com/anti-piracy-outfit-hires-vpn-expert-to-help-track-down-the-pirate-bay-200821/

#piracy #vpn #thepiratebay
📡
@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
How the Dark Web Drug Supply Has Responded to COVID-19

The darknet drug markets suffered initial disruptions in shipment speeds before recovering to become more efficient than legitimate supply chain systems.

Like legitimate supply chains, dark web drug markets depend on substance imports from China, and the coronavirus pandemic led to closure of Chinese chemical supply firms and factories.

Importantly, drug dealers depend of legitimate trade routes to sustain their illicit commercial activities. The fact that EU borders remained open did not make things better for most of the darknet and legitimate supply chains as shipping capacities took a nose dive.

Nonetheless, although the coronavirus-related restrictions seemed to freeze operations across the global drug supply chains, the situation in the dark web economy was different. Mexican drug cartels suffered from the pandemic’s economic ramifications as user buying power tanked – meanwhile, the darknet drug markets did not really suffer a serious dent in drug sales.

👀 👉🏼 (Tor-Browser)
http://tapeucwutvne7l5o.onion/how-the-dark-web-drug-supply-has-responded-to-covid-19

👀 👉🏼 Online Drug Markets Are Entering a 'Golden Age'
https://www.vice.com/en_us/article/dyz3v7/online-drug-markets-are-entering-a-golden-age

👀 👉🏼 Vaccine for COVID-19 and Other Scams on the Dark Web
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/vaccine-for-covid-19-and-other-scams-on-the-dark-web/

👀 👉🏼 (PDF) From Dealer to Doorstep – How Drugs Are Sold On the Dark Net
https://www.swansea.ac.uk/media/From-Dealer-to-Doorstep-%C3%A2%C2%80%C2%93-How-Drugs-Are-Sold-On-the-Dark-Net.pdf

👀 👉🏼 (PDF) EMCDDA AND EUROPOL ANALYSE IMPACT OF PANDEMIC ON EU DRUG MARKETS
https://www.emcdda.europa.eu/system/files/attachments/13099/COVID19_DrugMarkets_EMCDDA_Europol_Final_web.pdf

#darknet #markets #drugs #europol #covid #study #pdf
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Stealing Data With CSS: Attack and Defense

Summary:
A method is detailed - dubbed CSS Exfil - which can be used to steal targeted data using Cascading Style Sheets (CSS) as an attack vector. Due to the modern web's heavy reliance on CSS, a wide variety of data is potentially at risk, including: usernames, passwords, and sensitive data such as date of birth, social security numbers, and credit card numbers. The technique can also be used to de-anonymize users on dark nets like Tor. Defense methods are discussed for both website operators as well as web users, and a pair of browser extensions are offered which guard against this class of attack.

👀 👉🏼 Want to check if you are vulnerable?
https://www.mike-gualtieri.com/css-exfil-vulnerability-tester

💡 👉🏼 Want to protect yourself?

👉🏼 Install the Chrome plugin:
https://chrome.google.com/webstore/detail/css-exfil-protection/ibeemfhcbbikonfajhamlkdgedmekifo

👉🏼 Install the Firefox plugin:
https://addons.mozilla.org/en-US/firefox/addon/css-exfil-protection

👀 👉🏼 Methods of Exploitation and Proof of Concept
https://www.mike-gualtieri.com/posts/stealing-data-with-css-attack-and-defense

#css #attack #defense #exploitation #vulnerability #poc
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
This media is not supported in your browser
VIEW IN TELEGRAM
me and my shadow - take control of your data

💡 What are digital traces?

Through your computer, mobile phone, and other digital devices, you leave behind hundreds of digital traces (also called data traces) every day: bits of information about you that are created, stored, and collected.

When your digital traces are put together to create stories about you or profiles of you, these become your digital shadows. These can give others huge insight into your life; and they can also be totally wrong. Either way, once they're out there, they are almost impossible to control....

👀 👉🏼 https://myshadow.org/

#shadow #data #digital #traces #yourdata #toolkit #video #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
The Digital First Aid Kit!

The Digital First Aid Kit is a free resource to help rapid responders, digital security trainers, and tech-savvy activists to better protect themselves and the communities they support against the most common types of digital emergencies. It can also be used by activists, human rights defenders, bloggers, journalists or media activists who want to learn more about how they can protect themselves and support others. If you or someone you are assisting is experiencing a digital emergency, the Digital First Aid Kit will guide you in diagnosing the issues you are facing, and refer you to support providers for further help if needed.

👀 👉🏼 https://digitalfirstaid.org/en/index.html

👀 👉🏼 Digital Security Helpline
https://www.accessnow.org/help/

#data #digital #firstaid #security #help #toolkit #guide #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Facebook Wanted to Be a Force for Good in Myanmar. Now It Is Rejecting a Request to Help With a Genocide Investigation

Just when it seemed like Facebook’s controversies might have peaked, the company now appears to be obstructing a genocide investigation, and it’s using U.S. law to do it.

The West African nation The Gambia is seeking to hold Myanmar accountable for charges of genocide against the Rohingya people, an ethnic and religious minority. In 2016 and 2017, Myanmar soldiers and their civilian proxies massacred Rohingya men, women and children, raped women and girls and razed villages, forcing more than 800,000 to flee into neighboring Bangladesh.

Facebook’s role in these atrocities isn’t news. In 2018, Facebook acknowledged it was used to “foment division and incite offline violence” in Myanmar, where the social media platform is so ubiquitous it’s often synonymous with the internet. An independent report commissioned by the company documented the same, as did independent fact-finders appointed by the U.N.

In response, Facebook took down the account of the commander-in-chief of the Myanmar military, Senior General Min Aung Hlaing, and other military officials and organizations. In 2018 alone it shut down numerous networks that sought to incite violence against Rohingya, removing 484 pages, 157 accounts, and 17 groups for “coordinated inauthentic behavior.”

To its credit, Facebook preserved the data and content it took down, and the company committed to cleaning up its act. “We know we need to do more to ensure we are a force for good in Myanmar,” a company representative said in an official statement in 2018.

Now, two years later, the company is doing exactly the opposite.

👀 👉🏼 https://time.com/5880118/myanmar-rohingya-genocide-facebook-gambia

#fb #DeleteFacebook #myanmar #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
How to stop the onion denial (of service)

As you might have heard, some onion services have been experiencing issues with denial-of-service (DoS) attacks over the past few years.

The attacks exploit the inherent asymmetric nature of the onion service rendezvous protocol, and that makes it a hard problem to defend against. During the rendezvous protocol, an evil client can send a small message to the service while the service has to do lots of expensive work to react to it. This asymmetry opens the protocol to DoS attacks, and the anonymous nature of our network makes it extremely challenging to filter the good clients from the bad.

For the past two years, we've been providing more scaling options to onion service operators, supporting more agile circuit management and protecting the network and the service host from CPU exhaustion. While these don't fix the root problem, they provide a framework to onion service operators to build their own DoS detection and handling infrastructure.

Even though the toolbox of available defenses for onion service operators has grown, the threat of DoS attacks still looms large. And while there is still a bunch of smaller-scale improvements that could be done, we believe that this is not the kind of problem that a parameter tweak or small code change will make it disappear. The inherent nature of the problem makes us believe that we need to make fundamental changes to address it.

In this post, we would like to present you with two options that we believe can provide a long-term defense to the problem while maintaining the usability and security of onion services.

The intuition to keep in mind when considering these designs is that we need to be able to offer different notions of fairness. In today's onion services, each connection request is indistinguishable from all the other requests (it's an anonymity system after all), so the only available fairness strategy is to treat each request equally -- which means that somebody who makes more requests will inherently get more attention.

The alternatives we describe here use two principles to change the balance: (1) the client should have the option to include some new information in its request, which the onion service can use to more intelligently prioritize which requests it answers; and (2) rather than a static requirement in place at all times, we should let onion services scale the defenses based on current load, with the default being to answer everything.

👀 👉🏼 https://blog.torproject.org/stop-the-onion-denial

#tor #onion #DoS #attack
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Episode 6: Synthetic Fraud with Vigilant Eye Inc Founder and Detective…
The AnglerPhish Podcast - Synthetic Fraud with Vigilant Eye Inc Founder and Detective Jesse Gossman (Episode 6)

Synthetic Fraud is the fastest growing financial crime on the planet and accounts for over 80% of all new account fraud. Brett Johnson and Jesse Gossman, Law Enforcement Officer and Founder of Vigilant Eye, sit down to discuss.

🎧 👉🏼 The #AnglerPhish #truecrime #podcast (Episode 6)

📡
@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
AI Wins Against Humans In Simulated Air To Air Combat In What Air Force Colonel Calls a “Big Blue vs Gary Kasparov” Moment

Hypothetical question: What if future historians consider the big event of 2020 to be the time that AI was proven to be better than humans at Air to Air combat? It has just done that, and this demonstration via simulators will no doubt accelerate AI research in ways that has an impact on a broad range of both military and civilian applications.

First some background: The idea of artificial intelligence engaging in air to air combat is not new. But for as long as I can remember most serious professionals considered it a pipe dream, especially those that wanted a career. This is especially true in the Air Force. Since the Air Force culture is that you must be a pilot to become a senior officer or lead any significant organization, how can you have a service if there are no pilots?

The very few forward thinking military professionals I knew who supported pursuit of concepts of autonomy were not taken seriously. Many were ridiculed. It has been that way for decades. Even after years of advancements in drones and AI and incredible research into the potential of pilotless AI, that remains the dominate view in the Air Force. Academia and some in industry have built simulated AI in the past that humans could not beat, but research like this was discounted by the Air Force. Don’t believe me? Watch the reaction of the audience at the US Air Force at the Air Force Association Air Warfare Symposium on 28 Feb 2020 when Elon Musk tells them that “the fighter jet era has passed, it is drones.” The entire senior leadership of the US Air Force was there. No one cheered. They hemmed, hawed, murmured, laughed.

👀 👉🏼 https://www.oodaloop.com/archive/2020/08/21/ai-wins-against-humans-in-simulated-air-to-air-combat-in-what-air-force-colonel-calls-a-big-blue-vs-gary-kasparov-moment/

#ai #simulation #combat #airforce #bigblue #kasparov
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag
Data-Centric Environment Rise of Internet-Based Modern Warfare “iWar” – Survivability, Availability and Accessibility without Geographic Borders

Rise of Internet-Based Modern Warfare ‘iWar’,” addresses a collection of modern security concerns that range from social media attacks and internet-connected devices to a hypothetical defense strategy for private sector entities. This Issue’s first article, noscriptd “Evaluation of Comprehensive Taxonomies for Information Technology Threats” evaluates the different taxonomies of cyber-physical threats and their associated impact on mission capabilities. The second offering identifies a number of social media cyber-attacks as well as solution-based platforms to ascertain whether malicious activity has occurred.

This Issue’s third article investigates the performance of several binary classifiers and their ability to distinguish between non-verified and verified tweets based on the age of training data, under the noscript “Times Change and Your Training Data Should Too: The Effect of Training Data Recency on Twitter Classifiers.” The final article in this Issue, noscriptd “Rebooting Letters of Marque for Private Sector Active Cyber Defense,” discusses a modern interpretation of a Constitutional Clause to allow the private sector to defend themselves outside of their network borders.

👀 👉🏼 PDF:
https://www.csiac.org/wp-content/uploads/2020/03/CSIAC_Journal_V7N4_hv5.pdf

👀 👉🏼 https://www.csiac.org/journal-issue/data-centric-environment/

#iWar #security #cyber #threats #malicious #attacks #csiac #pdf
📡@cRyPtHoN_INFOSEC_DE
📡
@cRyPtHoN_INFOSEC_EN
📡
@BlackBox_Archiv
📡
@NoGoolag