By Habiba Rashid
The hackers from Black Reward Team are also claiming to have deleted nearly 250 terabytes of data from the website from its servers and computers.
This is a post from HackRead.com Read the original post: Iran’s Fars News Agency website hacked as part of anti-govt protests

On Friday, 25th November, the hacktivist group by the name of Black Reward attacked the database of the Iranian hardline Fars News Agency, claiming to have deleted nearly 250 terabytes of data from the website from its servers and computers.

The hackers also claimed to have obtained the confidential bulletins and directives sent by the news agency to the office of Supreme Leader Ali Khamenei.

For your information, Fars is the Iranian government-backed news agency managed by the Islamic Revolutionary Guard Corps (IRGC).

According to the message posted by the hacker group, the compromised data also includes recorded calls, information on internal portals related to administrative conversations and news folders, image archives, and financial documents of the news agency. 

**English Translation via Google**

“For years, the wage earners of “Fars Sludge Spreading Company” have been thinking that no one is protecting them and they are going to gas for themselves. But false imagination! Spreading lies, spreading rumors, creating cases against the people of Iran, working and writing, has a heavy penalty; especially when the “truth becomes clear”, the curtains fall and the lowly nature of these wage earners is revealed to everyone.”

“Most of the black deeds letters of each and every official employee and unofficial collaborator of Fars Sludge Company are in our possession today with all the details and we give this warning to other ration eaters of the IRGC and Mullahs that dark and difficult days are waiting for them. We will come to you one by one.”

“We also give this good news to our dear compatriots that all the information of the Fars Sludge Company, including the confidential news bulletins that they sent to the leadership and the IRGC, along with faxes, recorded calls, information on internal portals related to administrative conversations and news folders, image archives.”

“Also, the financial documents have all been downloaded, and we have also removed nearly 250 terabytes of data, or in other words, what is and what is not Fars Sludge Spreading Company from the beginning until now, from all the servers and computers belonging to this collection – For woman, life, freedom for #Mehsa\_Amini.”

However, Fars News has denied the extent of the hack as described by the hackers. They described the hackers as only being able to destroy the information and news from Friday and reiterated that other information and databases of the news agency had not been breached. 

This is not all. The hackers also published a video apparently showing a journalist from the agency engaged in an indecent sexual act at the agency’s office. The alleged security camera footage has gone viral on Iranian social media. 

The video was posted from the news agency’s manager Habib Torkashvand’s Twitter account which was hacked by the Black Reward group. It was captioned:

“These are the freeloaders of Fars! At the beginning of every week, after coming to the office, they must check who has been at their desk the day before and jerked off!”

Fars News denied that the footage belonged to them but some of the users on Twitter have identified the person in the video to be one of the economic editors of the website. 

Furthermore, this is not the first time Black Reward has attacked the state or the agencies supporting it. As reported by Hackread.com earlier in October, the group claimed to have hacked the email system of Iran’s Nuclear Power Production and Development company and threatened to release its documents if the government did not halt its clampdown on protestors. They said the total data obtained was 50 GB in size. 

However, after the 24-hour deadline passed and the government’s offensive against the protestors did not stop, Black Reward published a trove of documents from Iran’s nuclear program. 

In the past weeks, the group also hacked the emails of managers and employees of Press TV state channel and the employees of Al-Zahra University in Tehran as well as the Legal Medicine Organisation of the country, urging them to support the protests happening in the country.

In mid-September when anti-regime protests began, Black Reward along with the group called Tepandegan, sent millions of texts inviting people to participate in protest rallies. 

Black Reward group’s hack comes just days after an Iranian hacker group by the name of Moses Staff, posted previously unseen footage of a deadly bombing in Jerusalem on Wednesday morning. The footage was obtained from a surveillance camera used by a major Israeli security organization.

1.  Hackers turn to Signal, Telegram and Dark Web to assist Iranians
2.  Anonymous Hits Iranian State Sites, Hacks Over 300 CCTV Cameras
3.  Iran State-Run TV’s Live Transmission Hacked by Edalate Ali Hackers

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Iran’s Fars News Agency website hacked as part of anti-govt protests

By Habiba Rashid
The 2022 database is said to contain WhatsApp user data from 84 countries with Egypt having the largest chunk of stolen phone numbers.
This is a post from HackRead.com Read the original post: Nearly 500 million WhatsApp User Records Sold Online

In what is becoming a rather common trend, a threat actor is claiming to sell 487 million WhatsApp users’ mobile phone numbers on a popular hacking community forum which surfaced as an alternative to popular and **now-sized Raidforums**.

The 2022 database is said to contain WhatsApp user data from 84 countries with Egypt having the largest chunk of stolen phone numbers (45 million), Italy with 35 million, and the US with 32 million. 

The complete list of countries is included in the original report by Cybernews which also contains the exact amount of numbers up for sale. According to the threat actor, they are willing to sell the US dataset for $7000, the UK one for $2500, and the German one for $2000. 

Image: Cyber News

Upon being requested, the threat actor also shared a sample of data with researchers who then confirmed that the numbers included in the sample were in fact **WhatsApp users**. The exact sample contained 1097 UK and 817 US mobile numbers. 

The seller did not reveal their process for obtaining the database and simply said they “used their strategy” to collect the data. Whatever the method used, the damage that can be caused by this leakage should not be taken lightly.

Such data is readily bought by attackers to use for smishing and vishing attacks. It is advised that you cautiously interact with unknown calls, unsolicited calls, and messages. Impersonation and fraud are also common worries associated with mobile number leakage. 

Meta has refused to comment on this for now, while in their **report**, Cybernews speculates that this information could have been obtained by harvesting information at scale, also known as scraping, which violates WhatsApp’s Terms of Service. 

However, Hackread.com can confirm that, at the time of writing, the listing was deleted from the hacker forum. Another listing was published in which another threat actor is claiming to sell details of WhatsApp users.

Image: Hackread.com

It is worth noting that in January 2021, Facebook also **sued a Portuguese company** for developing malicious Chrome extensions allowing data scraping. In October 2021, Meta also sued a Ukrainian man for scraping and selling 178 million users of the social network and selling the data on hacker forums.

This news comes a year after **massive Facebook data leak** made the headlines in which data of 500 million users from 106 countries was scraped and leaked online. In April 2021, a threat actor was selling two scraped LinkedIn databases containing **500 million and 827 million account** details.

In June 2021, in another web scraping related incident, a threat actor was **selling 700 million LinkedIn users accounts**.

1.  Hackers leak scraped data of 87,000 GETTR users
2.  Scraped data of 1.3 million Clubhouse users published online
3.  Database of 176 million Pakistani mobile phone users sold online
4.  Leaky Server Exposing Scraped Data of 150,000 Mastodon Users
5.  Twitter Confirms Data Breach as 5.4M Accounts Sold on Hacker Forum

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Nearly 500 million WhatsApp User Records Sold Online

By Owais Sultan
This article will explain to you how to create ISO files from discs while mentioning 3 top ISO creators which are easy to understand and use;
This is a post from HackRead.com Read the original post: How to Create ISO Files from Discs – 3 Best Ways

An ISO file is a disk image of an optical disc. It is a single file that contains all the data from a CD, DVD, or Blu-ray disc. The data is stored in an uncompressed format. ISO files are used to create exact copies of optical discs. They are also used to distribute large amounts of data over the internet.

It is not difficult to answer this question “how to create ISO files from discs.” Numerous freeware tools help to create an ISO file from a DVD or disc. Using them will help you to back up DVDs, BDs, and CDs to your hard drive.

It is the best strategy to create and save ISO backups for your essential program installation. In addition, unlimited online backup services allow for a near-perfect disk backup plan.

A key feature of ISO images is that they are independent and perfectly demonstrate disk data. As they are the sole files, saving and managing them is easier than copying folders and files directly onto a disk.

Windows do not have a default system to make ISO image files, so you have to download a program/tool that does that. Luckily, numerous free tools are available to create ISO images easily, and some of them are given below;

**How to Create ISO Files from Discs – Best Methods**

**Method 1: DVDFab DVD Copy**

Compatibility: Windows, Mac

This top-list DVD copy software is the most prevailing program to compress any DVD and lossless backup. It restores a DVD to a blank disc while offering six different copy mode options. 

This free ISO creator lets users save their DVDs in ISO image format. It comes with a free trial for 30 days.

**Features **

*   It is the best ISO creator and DVD burner, which supports users to copy a DVD to their hard drive in ISO image format. You can also mount or burn a DVD, ISO file, or folder to any blank disc.
*   A DVD copy is also the best program to compress DVD-9 to DVD-5.
*   Moreover, it can copy DVD-9 to DVD-9, DVD-5 to DVD-5, and DVD-5 to DVD-9.
*   It is a free DVD burner that can read all DVDs without caring about their scratches and copy them in the same original quality.

**Method 2: ISO Workshop**

It is a freeware ISO creation desktop program for Windows computers. It will help you to make, copy, and burn ISO files and perform other operations related to ISO files.

ISO Workshop’s GUI will be attractive to users as it is clear and straightforward. It works best for Windows NT over 7 versions. The EXE file size for installation is lightweight at approximately 4 MB, making it a tool that can be used easily.

Its “extraction feature” will help you to extract the ISO content quickly. When you choose an ISO file from your system, it will automatically upload its content. It is best to convert multiple disk images to the ISO file format. It supports PDI, DMG, GI, B5I, ISO, CDI, MDF, IMG, BIN, NRG, and B6i formats. 

Upload the disk file and pull out the content to the required place to backup files. Tap on the top-right button to burn the ISO file. 

**Method 3: ISODisk**

ISODisk is freeware ISO-creating software. It supports making virtual CD/DVD drivers for over 20 drives. It also helps to make and mount an ISO image. Moreover, it offers direct access to ISO image files. 

It can automatically create an ISO image from CD/DVD-ROM. You can easily access the contents of a folder with Windows Explorer after making it a virtual disk.

This standalone program does not require any installation of additional software. Its simple functionality makes it best for beginners. There is a well-managed functions tab with its user guide.

The home dashboard puts all functions within reach. So it is fast to mount or create ISO files from CD-ROMs within 2-3 clicks. Besides being beginner-friendly, it offers advanced functions to the experts. But you cannot use it to compress or encode ISO files. 

The software installation will require you to have; windows computer, 64 MB memory, and 10 MD storage space.

Here is how to create ISO from DVD using DVD Copy software;

**How to use DVDFab DVD Copy?**

*   Install DVDFab 12, and select the required Copy option. Insert the DVD which you want to back up. You can also navigate it using the “Add button.” 

*   You can use the “Drag and Drop” if your required file is ISO. 
*   After choosing the copy mode, select the required output DVD size. It is also possible to set the volume label and other copy choices. 

*   At last, choose the final directory and click “Start Button” to start the DVD copy process. 

**FAQ****Can I mine the ISO file from the disc?**

Third-party software helps to create an ISO file from the physical disc. There are multiple ISO creators in the market. However, you must be very picky as most contain the virus. So we will recommend a DVD copy, ISO workshop, and ISO disk. A DVD copy is greater than others as it can work on any device and offer multiple other features than creating ISO files. 

**How much time is required to create an ISO image file?**

It is very easy to create an ISO image file using any third-party software; however, it may take 50-60 minutes. The time may vary according to the disc size and your device performance. 

**Conclusion**

All ISO creator tools mentioned in the list are freeware. They will never charge you if you use them for making disk backups, copying disks, or sharing them on any platform. However, you must ensure you downloaded them from a trustworthy or official website to avoid viruses. 

1.  Stellar Converter for OST for OST to PST Conversion
2.  The new Wondershare PDFelement with added features
3.  6 Best Ways to Make a Collaborative PowerPoint Presentation
4.  5 PDF Tricks You Should Know To Improve Document Productivity
5.  Google software shows how to remove watermarks from Stock photos

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

How to Create ISO Files from Discs – 3 Best Ways

By Owais Sultan
A parental control app is an effective software that can help parents stay on guard, prevent, and react timely to online and offline dangers.
This is a post from HackRead.com Read the original post: Top 6 Cell Phone Tracker Apps for Parental Control

Do you have difficulty knowing what your kids are up to when you’re not around? Do you want to ensure they’re not getting into trouble or spending excess time on their phones?

If so, then you need a cell phone tracker app. We have your back covered and have handpicked the 6 best free and paid tools for Android and iOS devices to quench your concerns. Forewarned is forearmed.

**Why Would You Need to Resort to a Cell Phone Tracker App?**

Whether a paid or free parental control app, effective software can help parents stay on guard, prevent, and timely react to the following online and offline dangers:

1.  Sexual predators that target kids online or in the real world
2.  Involvement in cyberbullying, either as victims or perpetrators
3.  Exchanging inappropriate photos or videos with others
4.  Communicating with strangers that try to lure children into meeting in person
5.  Risk of kidnap or trafficking if they spend excess time alone or unsupervised
6.  Access to inappropriate websites
7.  Kids spend excess time on phones and inadequate time doing homework or interacting with the family

The market is riddled with cell phone tracking apps, making picking the right one challenging. This article lists the most prominent and handy solutions for parents.

Did you know around 2100 children go missing in the US daily? Kids are usually easy to find when parents provide relevant information about them. Resorting to the right prevention measures can help parents ensure their kids’ safety. 

**6 Advanced Cell Phone Tracker Apps for Parental Control**

A family tracking app enables parents and guardians to monitor their children when they are not around. Therefore, if you are unsure whether your kids are where they claim to be or are lying, the app can help you know the truth. Here are some of the top-notch tracker apps to help monitor their whereabouts and not only.

**Keep Your Kids Safe with the uMobix Parental Control App**

uMobix is the best parental control app today. It allows real-time tracking of daily progress on their mobile phone or tablet. With this phone monitoring app, users are enabled to capture browser history, see screengrabs, and supervise over 30 apps, including Facebook, WhatsApp, Instagram, TikTok, Telegram, and Snapchat.

This phone tracking app has advanced monitoring features, including a GPS tracker, outgoing, incoming, and missed call records, mic and camera access, text message history, deleted call history, message, and contacts. Also, this monitoring app can capture keystrokes to see what your loved ones are up to.

Additionally, uMobix allows you to remotely pull videos and photos from the target phone and store them on your device. Its advanced GPS tracking feature lets you know the real-time location of the required gadget. Thus, your kid can’t lie about their location anymore if you use this app to track them without knowing.

**How to Use uMobix to Track Your Kid’s Location**

Since uMobix has a demo version, it is possible to use it as a free app to view your child’s phone. The 1-day trial offer allows users to start monitoring for $1. For the extended version, follow these steps to watch your kids with uMobix.

1.  Register by selecting a subscription plan and complete the purchase to receive detailed instructions.
2.  Access the target phone to install uMobix by following the instructions provided in the user account. The process differs for Android and iOS but is straightforward in both cases.
3.  Navigate to your account to receive real-time data about the required phone activity. The GPS location tab can identify your child’s whereabouts anytime.
4.  Cocospy – Multifunctional Parental Control App for Android and iOS

Cocospy is also among the best phone tracking apps. It makes it possible to supervise locations, calls, messages, and app usage. Also, this tracking software enables you to take a sneak peek at the saved contacts. Installing software is straightforward, after which it is possible to track all outgoing and incoming calls, received and sent messages, browser activity, and social media interactions, including iMessages. 

Some social media platforms to monitor Cocospy include Facebook Messenger, Snapchat, Instagram, WhatsApp, Snapchat, and Viber. The app can detect a SIM card change and check the device’s IMEI number.

You may want to know how to supervise a kid’s iPhone with Cocospy. Well, the process is also straightforward. Just sign up with an email ID, then verify your iCloud account. Add the target’s iCloud details and disable two-factor authentication. After that, monitor the device’s activity and location by logging into your Cocospy account.

Cocospy runs in stealth mode, meaning they won’t detect that you’re monitoring them. Also, it manages your kid’s screen time to ensure they spend only a little time on their device. Thus, it allows you to safeguard their health and keep them safe.

**Spyic – Top-Rated Parental Control App for Real-Time Monitoring**

Spyic is a surefire phone location tracking app that can spot your loved one’s whereabouts without their knowledge. It’s a widely used tool providing tracking solutions for iPhones and Android phones. Also, this web application is easy to use from a browser, meaning you don’t have to download anything.

The software has numerous features that make it ideal for location tracking. It’s a hidden family tracking app with a feature-packed online dashboard. For instance, Spyic is there for you to locate a phone’s location without installing an additional app. Access this feature by logging in to your Spyic account via a web browser.

Additionally, Spyic uses unique security protocols to ensure that nobody else can view data about the target device. It shares the target phone’s location coordinates directly with you, and its servers don’t store anything.

Using this app to pin down somebody’s location assures you that they won’t know you’re doing it. Thus, you may monitor their movements, the areas they previously visited, and check-ins. 

**Google Family Link Free Phone Tracker**

As the name suggests, Google Family Link is a family locator that enables you to keep loved ones safer online. Families have unique relationships regarding technology. Therefore, this device and location tracking app provide greater flexibility to allow users to select the right balance for their families. Also, this application helps you create healthy online habits for your family members.

**Find My Kids – Child Locator**

Find My Kids is a location tracker for ensuring child’s safety. It helps you keep in touch with children when they are not nearby or fail to respond to your calls. This GPS phone tracker allows parents to pin down their kids on Google Maps and see their movement history.

Another benefit is the opportunity to find out the apps your children use, including social media platforms and their interactions with them. The time tracking capability helps you know the duration your kids use their devices and the apps they use the most. The family chat feature may make this app unique. It lets you chat with the kids and use funny stickers to enhance the fun. 

This parental control app for free use makes it possible to keep track of your loved ones with minimum expenses, though its functionality is somehow limited compared to tracking apps outlined above. The app is available for Android and iOS users.

**Life360**

The last app on our list is Life360. It’s a well-known app in the US, offering only limited functionality outside the country. Here’s what the app can do for you: 

1.  The app allows you to plan routes and schedules with your family members. 
2.  You can request or send real-time locations. 
3.  You can set up smart notifications for when someone reaches a particular destination or leaves it. You also get alerts if someone’s phone battery is running dry. 

You’ll need Life360 installed on the target iPhone to get it to track the device’s location. You’ll also need permission from the target device, which may or may not be possible.

**Is it Legal to Supervise Your Child’s Device?**

It is legal for parents and guardians to supervise their children’s devices as long as they are minors. Provided the child is under 18 (pay attention that every state has a different age of being an adult), a US parent or guardian can monitor how they use their mobile phone or tablet. That means the parent can use a cell phone tracker to observe their whereabouts and interactions with other people.

The Children’s Online Privacy Protection Act gives parents control over the information that children can access online. This rule protects kids under 13 while considering the internet’s dynamic nature. Also, it applies to online service providers and commercial website operators. When it comes to monitoring an adult person, written consent is required.

**What Should I Look for in a Parental Control App?**

The following tips should help you choose an app to track cell phones.

*   Privacy: You don’t want to expose your loved one’s privacy to the wrong people. Therefore, pick an app that allows for secure and safe parental control.
*   Transparency: The top phone tracking apps are transparent in their operations. They ensure that users know what they can do and how they help them enhance their kids’ safety.
*   Network security: A good tracker app keeps a child safe from illicit content, cyberbullying, and other online crimes.
*   Activities: The primary phone tracker work is to check out the activities the target person does on their device. And this entails all the actions an individual can perform on their device. Therefore, go for an app that can track your phone when lost, monitor social media and online activities, and do everything your kid can do on their phone. Also, it should let you monitor websites and app usage.
*   Friendly interface: An ideal parental control application is easy to use and navigate.
*   Compatibility: Choose an app compatible with the phone required, whether iPhone or Android. Some apps require only the phone number only to track a mobile device.

**Keep Your Kids Safe with the Right Monitoring Software**

Although some make use of a free phone tracker to keep track of loved ones, premium applications are better due to extended functionality and glitch-free operation. That’s because they have more practical features and functionalities. Also, consider customer support, price, and user reviews. Ideally, take your time understanding how the phone tracker app you want to use works to pick one that suits your needs.

1.  What is a parental control app and what are your options
2.  Croatian Police arrests minor over A1 Telecom ransom demand
3.  9 risky apps that you need to monitor on your kids’ smartphone
4.  Germany bans kids’ smartwatches, asks parents to destroy them
5.  Medical Software Firm exposes vulnerable children’s sensitive data

Top 6 Cell Phone Tracker Apps for Parental Control

By Habiba Rashid
According to claims made by Moses Staff hackers, they hacked a major Israeli security firm to access and leak the footage.
This is a post from HackRead.com Read the original post: Moses Staff Hackers Publish Footage of Jerusalem Explosion

In a dramatic series of events, an Iranian hacker group by the name of Moses Staff published footage of the bombing attack in Jerusalem on its Telegram group. As seen by Hackread.com, Moses Staff claims to have hacked the surveillance cameras belonging to a major Israeli security organization.

Along with the video, there was a Hebrew inscription that said “for a long time we had control over all your activities – step by step, moment by moment.” The video showed the exact moment of the explosion near Jerusalem’s Central Bus Station. Moses Staff also claims that it “formatted the hard drive of the camera.”

Moses Staff on Telegram (Image: Hackread.com)

However, according to the Times of Israel, authorities have denied that any such camera was hacked. They even denied operating security cameras in the area claiming that “the footage was not taken by a camera belonging to the city.”

The bombing resulted in the death of a 16-year-old boy while at least 18 others were injured. However, this is not the first time Moses Staff has initiated action in what appears to be a war between Iran and Israel in the cyber domain.

> An Iranian hacker group calling itself Moses Staff published documentation showing CCTV footage of one of the bombings that happened in Jerusalem Wednesday morning. pic.twitter.com/6ZKjb0fsy9
> 
> — Joe Truzman (@JoeTruzman) November 24, 2022

The group has previously published details of Israeli soldiers, personal documents from Israeli companies, and leaks of hundreds of thousands of Israelis. It even distributed photos about a year ago that were reportedly taken at Defense Minister Benny Gantz’s house. Lastly, they also claim to have high-quality satellite photos of Israel. 

How they proceed from here onwards will only be revealed with time but they have already made their intentions clear with a strongly-worded message on their Telegram:

“We have news, reports, operational maps, and information about your units and forces. We will publish this information to inform the whole world of your crimes.”

1.  Palestinian Engineer Jailed for Hacking Israeli CCTVs & Drones
2.  Israeli Rabbi arrested for hacking CCTV cams at a bathing suit shop
3.  Israeli Security Camera Systems targeted by Pro-Hezbollah Hackers
4.  Israeli News Channels’ Telecast Hacked; replaced with Muslim prayer
5.  Hackers Posed as Women to Con Israeli Officials into Installing Malware  
    

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Moses Staff Hackers Publish Footage of Jerusalem Explosion

By Habiba Rashid
So far, researchers have identified approximately 50 phishing websites, all targeting MSI Afterburner to deliver malware. 
This is a post from HackRead.com Read the original post: Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner

Cyble Research & Intelligence Labs (CRIL) recently uncovered a phishing campaign used by threat actors to deliver cryptocurrency miner softwares using utility software tools.

This particular campaign exploited the well-known MSI Afterburner, used widely by gamers and other high-performance computing users. Due to being one of the better-known graphics card software used to monitor system performance, allow users to modify the hardware settings to enhance the system’s performance and to overclock the best graphics cards on the market.

The threat actors employ various methods to distribute the malware including the use of emails, online advertisements, forums, and other mediums. In the last three months, Cyble has identified approximately 50 phishing websites, all targeting MSI Afterburner to deliver malware. 

One of the phishing websites (Image: Cyble)

The threat actors who created these websites made sure to design sophisticated phishing pages that mimicked the legitimate MSI Afterburner sites to lure users into downloading coin-miner malware that performed the crypto-mining process.

However, fraudulent websites can be spotted by looking at the domain names. Cyble has identified some of the fake domains, such as (MSI-afterburner-download.site), (msi-afterburner.download) and (mslafterburners dot com.) Some are already offline, but more are likely to show up.

The payload of malware is delivered bundled with legitimate MSI Afterburner installers and after installation, it starts the process of hijacking the victim’s computer, collecting sensitive information such as computer name, username, GPU, CPU, and other details from the system. The technical details are explained in Cyble’s analysis report. 

Infection chain

Crypto mining requires dedicated hardware like GPUs because it is a power and resource-intensive activity. By hijacking the processing power of the victim’s machine, the threat actors can mine cryptocurrencies without their consent. This severely decreases the victim’s overall system performance and drains their system resources, significantly affecting the productivity of the victim user or organization. 

There are quite a few measures that users can take to ensure that their device does not become a victim of such a phishing campaign. It is advised that you check your system performance and CPU usage periodically, avoid downloading pirated software from Warez/Torrent and rely on official websites only.

Moreover, turn on the automatic software update feature on your devices, use reputed antivirus, refrain from opening untrusted links and email attachments and monitor endpoints and servers for unexpected spikes in CPU and RAM utilization that could reveal potential malware infection. 

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner

By Owais Sultan
One of the best things about LinkedIn is that it allows you to download a CSV file with…
This is a post from HackRead.com Read the original post: How to use Linked Helper 2 as a LinkedIn Data Export Tool

One of the best things about LinkedIn is that it allows you to download a CSV file with your first-degree connections information. This file, however, lacks the email and phone numbers of the profile.

However, provided your first-degree connection has provided this information on your LinkedIn, it can easily be obtained by Linked Helper 2. It is important to note that getting the phone numbers and emails of your second and third degree is impossible because LinkedIn does not grant you access to such information.

You can use Linked Helper 2 to export your first-degree connections on LinkedIn to a downloadable CSV file. In addition, Linked Helper 2 also gives you a chance to create a targeted mailing list. In this article, we will guide you step by step on how you can use Linked Helper as a LinkedIn data export tool.

We are going to walk you through the following steps;

*   Creation of a new campaign
*   Profile collection
*   Adjusting action configurations
*   Starting the Campaign
*   Downloading the CSV file

Let us dive in!

**1 Generate a new campaign using a template with preset commands**

To create a new campaign, open the Campaign menu and click the Create new command. A pop window will appear, requiring you to name your Campaign. The next step is selecting the type of Campaign you want. At this stage, pick **people** as the campaign type. After that, select the needed template, i.e., **Visit and Extract profiles.** Wrap up by clicking the **Create** button.

Here, the Campaign generated only has a single action. However, if more steps are needed, you can configure the Workflow and add more actions.

**2 Profile collection into your created Campaign**

Near the Campaign queue, locate and click the **Collect** button. You will then be prompted to provide the source of your profiles. Since we want to collect first-degree connection profiles, we will use **the My network page** as the source.

After collecting the profiles, you can also review them to check for errors.

**3 Fine-tune action configurations**

You can adjust action settings under the General tab. Here you can configure the action’s name and suspend the start of the action. After a profile has been processed through an activity, Linked Helper 2 can automatically remove or assign tags associated with the profile.

On the **Tags tab** under the action, enter a tag name and confirm it by pressing enter on your personal computer. Now proceed to the Display settings Tab, select Bunch, and fine-tune its size and the time between bunches.

**4 Start the Campaign**

Start the Campaign can quickly be done by clicking the **Start campaign** button on the left menu. You can also launch the Campaign by clicking the **Start** button at the topmost section of your screen.

As soon as the campaign launches, the Campaign’s status will change, and Linked Helper will display when the subsequent step is carried out. Linked Helper uses a green frame to highlight the Campaign being performed.

**5 Download CSV profiles**

Visited profiles are stored under the **Successful** sub-list by Linked Helper. To access them click the **Successful** command or **Campaign**, then **Workflow.** 

To download these profiles, first, click **the Select all** button to select all the profiles. Finish up by clicking **Download.** Remember to choose your delimiter, preferably Google Sheets or MS Excel.

1.  How to Use Excel to Scrape a Website
2.  Penetration Testing Azure: The User-Friendly Guide
3.  How to configure cPanel and WHM Panel on your VPS
4.  6 Best Ways to Make a Collaborative PowerPoint Presentation
5.  MySQL Performance Tuning: Top 5 Tips for Blazing Fast Queries

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

How to use Linked Helper 2 as a LinkedIn Data Export Tool

By Habiba Rashid
The DDoS attack took place moments after the European Parliament voted to declare the Russian government a state sponsor of terrorism.
This is a post from HackRead.com Read the original post: Killnet Hits European Parliament Website with DDoS Attack

Staying true to its reputation of being known for relying majorly on DDoS attacks, the pro-Kremlin hacking group Killnet has struck again and this time, their target was the European Parliament website.

This DDoS attack took place after the governing body voted to declare the Russian government a state sponsor of terrorism. 

The distributed denial-of-service attack or DDoS attack took place on Wednesday afternoon European time and the website stayed down for a few hours before becoming operational again. 

It is worth noting that the DDoS attack came just days after Killnet claimed responsibility for targeting government sites in the United Kingdom and vowed to target more in the coming days.

Killnet members quickly claimed the credit for the attack shortly after and posted screenshots showing the European Parliament website was unavailable in 23 countries on Telegram. Furthermore, the text accompanying the images included a homophobic remark toward the legislative body. 

“Strap-on shelling of the server part of the official website of the European Parliament!” the group posted to its Telegram channel.

Screenshot shared by Killnet in its Telegram group.

The attacks against the European Parliament came hours after the agency adopted a resolution officially identifying Russia as a state sponsor of terrorism. It was adopted by the member states with 494 votes in favor, 58 against, and 44 abstentions.

Members of the European Parliament “highlight that the deliberate attacks and atrocities committed by Russian forces and their proxies against civilians in Ukraine, the destruction of civilian infrastructure and other serious violations of international and humanitarian law amount to acts of terror and constitute war crimes,” the declaration stated. “In light of this, they recognize Russia as a state sponsor of terrorism and as a state that ‘uses means of terrorism.’”

Since the Russo-Ukraine war began in February, Killnet has launched 76 attacks against countries supporting Ukraine. 

1.  Anti-Russian OldGremlin Gang Launches Linux Malware
2.  34 Russian Hacking Groups Stole 50 Million User Passwords
3.  New DDoS Malware ‘Chaos’ Hits Linux and Windows Devices
4.  RapperBot malware targets gaming servers with DDoS attacks
5.  DDoS App Meant to Hit Russia Infected Phones of Ukrainian Activists

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Killnet Hits European Parliament Website with DDoS Attack

By Deeba Ahmed
Around one hundred people have been arrested by the Metropolitan Police in the United Kingdom’s biggest-ever fraud operation.…
This is a post from HackRead.com Read the original post: Police Seize iSpoof domains as UK’s largest bank call scam is disrupted

Around one hundred people have been arrested by the Metropolitan Police in the United Kingdom’s biggest-ever fraud operation. The Scotland Yard has also shut down iSpoof domains which served as a spoofing hub for scammers.

Reportedly, through that website, scammers stole tens of millions of pounds from British citizens through fake bank phone calls. The police stated that the website was used to defraud 200,000 Brits, and at least £50 million was stolen.

In June 2021, the Scotland Yard, European law enforcement agencies, and the FBI initiated an international investigation dubbed Operation Elaborate.

Authorities now plan to contact around 70,000 victims in Briton for the investigation. These individuals fell victim to the UK’s biggest scam campaign. An extensive probe revealed that scammers paid a subscription fee to iSpoof.cc and iSpoof.me for using its technology and phone victims impersonating staff members of reputed banks like Halifax, Barclays, and NatWest.

The fraudsters tricked people into giving their bank account credentials or transferring funds. Until August, they had made 10 million fake calls through iSpoof, and around 3.5 million calls were made in the UK, out of which 350,000 calls lasted over a minute.

Authorities in the USA and Ukraine helped Scotland Yard take down this website. As per the authorities, during the campaign, scammers sometimes contacted around twenty people every minute of the day using fake identities created through iSpoof.

Seized iSpoof website (Image credit: Hackread.com)

The amount stolen from the victims is yet unknown, but authorities claim it is close to £50m. One of the victims suffered a loss of £3m, and another lost £10,000. Scammers earned around £3.2m within 20 months, investigators estimated.

For your information, the iSpoof website was set up in December 2020 to allow users to disguise their phone numbers and pretend to be a caller from a reputed organization, mainly a tax office or bank. Scammers paid the subscription fee in bitcoin.

The website had around 59,000 users who paid subscriptions worth £150 and £5,000. The service was taken offline this week, and more than 100 suspects have been arrested, most of whom were residing in London. 40% of the victims were in the USA and 35% in Britain.

A British citizen and resident of east London, Teejai Fletcher, is suspected to be the mastermind of this scam campaign. The 34-year-old suspect was charged with fraud, participating in activities of an organized criminal group, and supplying/making articles used in fraud. The suspect is in police custody and will be presented before the court in two weeks.

1.  Indian call center seized over Amazon hacking scam
2.  World’s Largest Private Torrent Site Filelist.ro Seized
3.  WT1SHOP Cybercrime Market Seized by US and Portugal
4.  179 Dark Web vendors arrested, 500kg worth of drugs seized
5.  Domain, server of DoubleVPN used by ransomware gangs seized

Police Seize iSpoof domains as UK’s largest bank call scam is disrupted

By Deeba Ahmed
Researchers believe that the attack is ongoing, in which hackers are using malicious versions of SoftVPN, SecureVPN, and OpenVPN software.
This is a post from HackRead.com Read the original post: Bahamut Using Fake VPN Apps to Steal Android User Credentials

Bahamut is a notorious cyber-mercenary group that has been active since 2016 and is currently targeting Android devices with fake VPN apps and injecting malware to steal user credentials. The malware-laden apps were first discovered by Slovakian cybersecurity firm ESET’s Lukáš Štefanko.

**Beware of Bahamut**

ESET researchers discovered a new attack spree from the infamous cybercrime group Bahamut. The group launched malware attacks through fake Android VPN applications. Research revealed that hackers use malicious versions of SoftVPN, SecureVPN, and OpenVPN software.

In this highly targeted campaign, hackers aim to extract sensitive data from infected devices. The campaign was started on January 22. The fake VPN apps are distributed through a bogus SecureVPN website. In previous campaigns from Bahamut, the prime targets were located in the Middle East and South Asia.

**8 Variants of Spyware Apps Detected**

Researchers have identified 8 different variants of the infected apps. These contain trojanized versions of genuine VPN apps such as OpenVPN. Bahamut is offering these fake VPN apps as a service for hire.

Malicious website spreading SecureVPN and the permission it asks for upon installation (Image: ESET)

According to ESET’s blog post, attacks are launched via spear phishing messages and fake apps. Researchers believe that this campaign is still active.

Reportedly, the targets are carefully selected because the app requires the victim to enter an activation key to enable the features using a distribution vector. The activation key is designed to establish contact with the attacker-controlled server and prevents the malware from accidentally triggering after it is launched on a non-targeted device.

**How does the Attack Works?**

According to Štefanko, the fake app requests an activation key before the VPN and spyware feature is enabled. The key and URL are sent to the targeted users. After the app is activated, the hackers get remote control of the spyware and can infiltrate/harvest confidential user data.

Furthermore, hackers can spy on almost everything stored on the device, including call logs, SMS messages, device location, WhatsApp data and other encryption app data, Telegram and Signal data, etc. The victim remains unaware of the data harvesting.

“The data exfiltration is done via the keylogging functionality of the malware, which misuses accessibility services,” Štefanko said.

It is worth noting that the malicious software linked with the service and the malware-infected app wasn’t promoted on Google Play. Moreover, researchers are clueless about the initial distribution vector, but they believe it is through social media, SMS, or email.

1.  Edward Snowden urges users to stop using ExpressVPN
2.  Popular free Android VPN apps on Play Store contain malware
3.  38% of Android VPN Apps on Play Store Plagued with Malware
4.  Top 10 Android Educational Apps That Collect Most User Data
5.  Hackers Selling US Colleges VPN Credentials on Russian Forums

Source

HackRead