By Owais Sultan
The VPN scams discussed in this article may sound harmless to many but in reality, they are happening…
This is a post from HackRead.com Read the original post: Top VPN Scams Revealed – Here’s What to Look Out for in 2022

****The VPN scams discussed in this article may sound harmless to many but in reality, they are happening every day and causing a lot of damage.****

A VPN is a crucial necessity these days but the same goes for online security and privacy. This is because of the increased amount of time that users spend online. The solution to this is a VPN, but even with a private network, there are a few scams that you need to be aware of.

**Lifetime Subscriptions**

One of the VPN scams that you need to be cautious and wary about involves the ones that provide lifetime subscriptions. It takes a significant amount of money to fund and maintain a quality VPN, as money is used for servers, app development and maintenance, security features, and other elements that need constant financial support to keep up to date and effective.

If a company offers a lifetime service for a small fee, you have to question if those services will be effective in the long term. Even if the VPN is legitimate now, if the service goes down in a few years due to a lack of funding, then you are going to be left vulnerable once again.

**Fake And Free VPNs**

Another potential and extremely dangerous scam would be fake VPNs as well as free ones. You have to be suspicious of all the programs and software you find online, especially those that are offered for free. As previously reported, almost every major free VPN service is a glorified data farm.

Some VPNs can be fake ones that don’t protect you at all but keep you vulnerable to suspicious activity, while others that do provide you with a private network may not do so for the stipulated free price tag.

For those new to VPNs, nothing in the world is actually free, and you have to consider what it is you are paying with if not your money. This could be your data or information or in the form of ads which for some people, may be worth the trade-off. These companies need to make money after all.

Source – Opportunites Digitales provides a list of various VPN options which are mostly free but also categorized as reliable, as well as ones that might be suspicious. It is always important to be cautious when downloading programs and giving access to your computers. There have been several incidents in which fake VPNs were used in spreading malware and stealing victims’ personal and crypto data.

You need to be careful with anything that you get online and research for yourself what the most secure and safe VPNs are for your needs.

**Inadequate And Unreliable VPNs**

It isn’t just free software or fake programs that you need to be cautious about. There are plenty of VPNs that you will consider legitimate because of their cost, but some VPNs may not fulfill their commitment to what they offer you. They are not trying to scam you, and still trying to protect your privacy, but just don’t do a good job with it. They may not have the funding needed to give you the security you expect or simply lack the technical capabilities to do so.

These VPNs may still provide you with some of the expected privacy and security, you may see slow speeds, poor privacy protection that is susceptible to data leaks, and malfunctioning features on apps and programs. If you are unsure about a specific VPN program or service, it may be worth avoiding the headache altogether and going somewhere that is more reliable. 

**Fake Websites**

The actual VPN is not the only way that users can get scammed. The websites themselves can end up being a scam too. Fake and malicious VPN sites are common and can mask other legitimate and well-known VPN providers, targeting the customers that expect their products to be legitimate because of the name and the costs associated with the company.

Instead, these fake websites will steal the money that you are charging them expectedly, all while leaving you unprotected. It is important that you are careful browsing and searching for your VPN, ensuring that the address and links are correctly spelled and legitimate before clicking. 

**Fake Reviews**

Another potential scam that you need to be on the lookout for when you are talking about VPNs would be the potential for fake reviews. This is because aside from the popular and major VPNs that are often the most expensive, many are trying to gain users’ attention and confidence to possibly purchase, download, and install their product.

Reviews are used to increase that confidence and build trust with unknown VPN products and services. Be cautious about reviews, especially when all of them seem to be perfect or have nothing to save that is critical. Take the time to look through them to check if they have legitimate feedback and concerns.

According to Mcafee’s Mobile Threat Report for 2020, 50% of threats against Android devices/users caused due to fake reviews and third-party apps. Therefore, searching for a virtual private network to provide you with the necessary security is not as simple as you think it might be. Because of the importance of one, people with malicious intent have made it more difficult than needed to find the right protection. Be cautious in your search and ensure that you can be confident in your VPN provider.

**More VPN Topics on Hackread.com**

1.  Edward Snowden urges users to stop using ExpressVPN
2.  What is a VPN and what does data logging by a VPN means?
3.  Europol takes down VPN service VPNLab used by ransomware operators
4.  India to Collect User Data from VPNs, Data Centers, and Cloud Services
5.  Personal details of 21M SuperVPN, and GeckoVPN users leaked on Telegram

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

Top VPN Scams Revealed – Here’s What to Look Out for in 2022

By Waqas
The latest edition of Patch Tuesday offers fixes for 7 critical flaws, including 5 RCE (remote code execution)…
This is a post from HackRead.com Read the original post: Microsoft Patch Tuesday: Fixes for 0-Day and 74 Other Flaws Released

The latest edition of Patch Tuesday offers fixes for 7 critical flaws, including 5 RCE (remote code execution) bugs and 2 EoP (elevation of privilege) flaws, and 67 other relatively minor flaws.

Microsoft has released its May 2022 Patch Tuesday update. This time, the company has released fixes for 74 new security flaws, including a Windows LSA Spoofing Vulnerability.

According to the Redmond-based tech giant Microsoft, this vulnerability was being actively exploited in the wild. It is worth noting that Microsoft releases patches for its products on every month’s second Tuesday, hence the name Patch Tuesday.

**Which Products Received Patches?**

May’s security update involves patches for several components of the Windows OS such as the Visual Studio platform, the .NET platform, MS Office, Exchange Server, Remote Desktop Client, Windows Hyper-V, Windows Authentication Methods, BitLocker, Windows Point-to-Point Tunneling Protocol, MS Edge, and NTFS. A Beijing-based cybersecurity firm Cyber-Kunlun reported 30 out of the 74 vulnerabilities. 

**Details of the Fixes**

Apart from the abovementioned vulnerability, the latest edition of Patch Tuesday offers fixes for seven critical flaws, including 5 RCE (remote code execution) bugs and 2 EoP (elevation of privilege) flaws, and 67 other relatively minor flaws. Furthermore, the tech giant has fixed issues related to Denial of Service, security feature bypasses, information exposure, and spoofing.

**Critical Flaws Fixed in May 2022 Patch Tuesday**

Here is a detailed analysis of the most ‘important’ and ‘critical’ flaws patched by Microsoft in its latest update.

**CVE-2022-26925**

This is the only actively exploited flaw in this list. It lets threat actors perform a Man-in-the-Middle attack by infusing a method on the LSARPC interface and forcing the domain controller to authenticate the attacker using NTLM.

The flaw was identified in a central component of the Windows Local Security Authority process and impacted Windows 7 to 10 and Windows Server OS 2008 to 2022. Microsoft gave it a CVSS severity score of 8.1, noting that if used in combination with NTLM, the CVSS score will climb to 9.8.

**CVE-2022-26923**

This critical vulnerability inserts crafted data into an original certificate request to exploit certificate issuance and lets the attack obtain a certificate to authenticate a domain controller with elevated privileges and become a domain admin. This flaw was given a CVSS score of 8.8.

**CVE-2022-26937 and CVE-2022-29972**

These vulnerabilities (1 & 2) are noteworthy since the first one is an RCE flaw in the Windows NFS (network file system) and targets methods used in mixed OS environments. In contrast, the second flaw is identified in the Magnitude Simba Amazon Redshift ODBC Driver.

**CVE-2022-22713**

It is given a CVSS score of 5.6 and according to Microsoft, it is a Windows Hyper-V Denial-of-Service issue. Successful exploitation of this vulnerability requires an attacker to win a race condition.

Additionally, several RCE bugs were also patched in this update. These include CVE-2022-22012, CVE-2022-29130 in Windows LDAP, CVE-2022-26927 in Windows Graphics, CVE-2022-29133 in Windows Kernel, CVE-2022-22019 in Remote Procedure Call Runtime, and CVE-2022-30129 in Visual Studio Code.

**More Microsoft Security News**

1.  Attackers exploiting Windows Installer vulnerability despite patching
2.  Attackers bypass Microsoft security patch to drop Formbook malware
3.  Microsoft Patches 85 Flaws, One Allowed FinFisher Spyware Installation
4.  Microsoft warns of Azure vulnerability which exposed users to data theft
5.  Unpatched Microsoft Exchange Servers abused in a new phishing campaign

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Microsoft Patch Tuesday: Fixes for 0-Day and 74 Other Flaws Released

By Waqas
The streaming industry is changing rapidly with new services popping up and others disappearing, it’s important to stay…
This is a post from HackRead.com Read the original post: 6 Legal and Free Streaming Services to Consider in 2022

****The streaming industry is changing rapidly with new services popping up and others disappearing, it’s important to stay ahead of the curve. This article provides an overview of the top streaming services to consider in 2022.****

To get the most out of your streaming experience, make sure to have high-speed internet. Do check out Spectrum Deals for consistent and reliable high-speed internet at the most affordable rates. 

It can be hard to keep track of all the changes, so here is a list of the top streaming services to consider in 2022. 

Below are 6 free and legal streaming services you must try. However, if you are not in the United State you may be required to use a VPN to access these services.

**1- Crackle**

Believe it or not, Crackle is a legal and free online movie streaming website and you don’t even have to sign up to watch your favorite movies or TV shows. Owned by Sony Pictures Entertainment Company; you can stream Crackle on your TV or laptop for free.

However, it does show advertisements every now and then during streaming. Consider it watching TV with advertisements but why complain when you don’t have to pay a single dime? However, you do have to use VPN to access and watch content on Crackle if you are out of the United States.

**2- Vudu Movies on Us**

Vudu Movies on Us is also a free online streaming website owned by Walmart. Although the site has paid subscription one can also watch movies and TV shows completely free but with advertisements.

Vudu Movies on Us was launched in October 2016. Later on, the website added a free but ad-supported streaming library to its platform under the label of “Movies On Us,” featuring classic and recent films. However, you do have to use VPN to watch content on Vudu Movies on Us if you are out of the United States.

**3- Tubi Tv**

Tubi TV is also a free online streaming website owned by FOX. Like the above-mentioned sites, Tubi charges viewers neither does it ask for payment card details. Once on Tubi, you can watch movies and TV shows with ad breaks at 12-15 minute intervals.

Currently, Tubi has partnered with entertainment studio giants like MGM, Full Moon Pictures, Paramount, and Lionsgate. However, you do have to use VPN to watch content on Tubi Tv if you are out of the United States.

**4- Veoh**

Launched in 2006; Veoh is an Internet television service based in the United States and offers free online streaming for movies, TV shows, music, cartoons, and much more. You can create an account to watch content but that’s not compulsory. 

Another good news is that Veoh can be accessed without connecting to a VPN (at least not at the time of publishing the article). So enjoy the free and legal streaming website at its best.

**5- Popcornflix**

Popcornflix is a free online movie streaming website owned by Screen Media Ventures. The website is home to a treasure trove of movies, TV shows, and viral videos – All that for free. However, the service is ad-supported, meaning you will have to watch short ads every now and then but nothing major.

It depends on whether you want to sign up on the site but you don’t have to create an account to view the content either. However, you do have to use VPN to watch content on Popcornflix if you are out of the United States.

**6- CONtv**

CONtv is not just a free online movie streaming website but home to a treasure trove of entertainment. It’s an ad-supported service that will show ads every now and then during your favorite movie or TV show but that’s pretty much it.

Since CONtv is known for providing content to the Comic-Con community, you can also experience behind-the-scenes access to Wizard World Comic Cons, along with classic films, television series, and comics. At the time of publishing this article, no VPN was required to access or watch content on CONtv.

**5 Paid Online Movie Streaming Websites****1\. Netflix**

You can find a wide variety of TV movies, shows, documentaries, anime, cartoons, and more on Netflix. As well as documentaries, Netflix provides new series like “Emily in Paris” and “Stranger Things” for young adults.

The user-friendly application makes it easy to use Netflix, which offers high-level functionality. Has excellent video quality, thanks to lots of high-definition videos and great sound. The videos also run consistently and reliably. Which feature is the best?

There are no ads! The more time you spend online, the more you realize how wonderful it is.

**2\. YouTube TV**

There are no hassles with YouTube TV, and it is widely available. The subscription doesn’t include Hulu’s library of original programming, so it’s expensive. It is possible to work with three streams at one time without paying extra. You can also share your account with up to six other individuals (each with their own profile).

Moreover, you can catch up on movies and TV shows you may have missed since unlimited cloud DVR storage is available. As a streaming service, YouTube TV offers fewer channels than most others (no streaming service carries all channels). NBA and MLB are also available on the service, which Hulu does not.

YouTube and YouTube Music can be viewed ad-free via YouTube TV, but YouTube Premium is not supported. Original YouTube content is available only for a fee.

**3\. HBO Max**

HBO Max offers the best viewing experience for the audience. HBO Max has long been a television powerhouse, with a varied assortment of blockbuster movies and critically renowned television episodes. All the good stuff is under one roof, including timeless classics like “Harry Potter” and current favorites like “Game of Thrones.”

In addition to offering an extensive library of great movies and shows, HBO Max also stands out for its excellent compatibility and functionality with a wide range of devices. It displays multiple streams simultaneously and is intuitive to use. Isn’t that awesome?

However, most movies use 1080p, and HDR and 4K support are not yet available. The ads also make it more expensive.

**4\. Peacock**

There is a streaming service called Peacock from NBC. For free, users can watch 13,000 hours of programming; for premium subscribers, 20,000 hours; and for premium plus subscribers, no ads. NBC does not offer to stream for its most well-known shows (Friends and Seinfeld), but other shows, such as 30 Rock, The Office, Will, Cheers, Chicago Fire, and Grace can still be watched. Peacock offers free movies despite not offering many original shows.

**5\. Hulu**

For anyone looking for a mix of classic content and new content, Hulu should be their first choice. Live TV is available through Hulu, as well as bundled packages with additional services and channels. The reason Hulu has become so popular is obvious.

As well as shows from ABC, Fox, and FX networks, It’s Always Sunny in Philadelphia, Lost, Castle Rock, and The Handmaid’s Tale are available via the service. The basic package includes advertisements, and the Live TV plan is expensive. If you stream from multiple devices simultaneously, additional fees apply. For a small fee, both Disney+ and ESPN+ can be subscribed.

**Conclusion**

It is important to do some research so you can determine which product offers the best value for your money and your device type, even if you already know about all three options. In order to choose the best option, it is wise to compare at least three options. We hope this article has been helpful to you.

Feel free to add to or ask questions about the streaming services in the comments section below. We will reply as soon as we can. Happy legal streaming!

1.  Streaming site 123movies has been shut down
2.  Why torrenting on Elon Musk’s Starlink is not a good idea?
3.  Fake streaming sites using Star Wars as bait to spread malware
4.  Best legal & free online streaming sites for movies & TV shows 2020
5.  Cyber Security Risks That You Should Be Careful Of While Streaming

6 Legal and Free Streaming Services to Consider in 2022

By Deeba Ahmed
The novel Nerbian RAT (remote access trojan) is currently targeting’ entities in Spain, Italy, and the United Kingdom.…
This is a post from HackRead.com Read the original post: Fake WHO Safety Emails on COVID-19 Dropping Nerbian RAT Across Europe

The novel Nerbian RAT (remote access trojan) is currently targeting’ entities in Spain, Italy, and the United Kingdom.

Proofpoint’s security researchers have warned users of a new RAT dubbed Nerbian written in the Go programming language and targeting entities in the UK, Italy, and Spain.

The malware name is based on its code, which bears references to the name of a fictional place in the novel Don Quixote.

“It is written in operating system (OS) agnostic Go programming language, compiled for 64-bit systems, and leverages several encryption routines to further evade network analysis,” researchers wrote.

The RAT can log keystrokes, launch arbitrary commands, capture screenshots, and exfiltrate data to a remote C2 server. The threat actor behind this campaign is yet unknown.

**How is Nerbian RAT Distributed?**

Nerbian RAT is distributed through a phishing campaign using fake COVID-19 theme emails. The emails are less than 100 in number and are disguised to be sent by the World Health Organization regarding COVID-19 related safety measures.

Furthermore, victims are encouraged to open a macro-laced MS Word document to receive the latest health advice from the organization. Researchers further noted that the campaign has been active since 26 April 2022.

When the macros are enabled, a COVID-19 guide appears, informing the victim about self-isolation steps. However, in the background, the embedded macro commences an infection chain.

This chain, according to Proofpoint’s blog post, delivers, the UpdateUAV.exe payload, “a 64-bit executable, written in Golang, 3.5MB in size, and UPX packed,” researchers explained.

This file serves as a Nerbian dropper sent by a remote server. Research reveals that the same author designed the dropper and malware and that the dropper can also deliver different payloads in future campaigns.

Fake WHO email laced with Nerbian RAT (Credit: Proofpoint)

**Nerbian loaded with Anti-Analysis Elements**

Proofpoint researchers noted that this newly identified RAT comprises “multiple anti-analysis” components that come into play at various stages, such as in numerous open-source libraries.

The UpdateUAV.exe dropper uses the open-source anti-V framework, Chacal, to complicate reverse engineering and carry out anti-reversing checks or self-terminate if it detects debuggers or memory analysis programs.

**More COVID Laced Malware Phishing Scams**

1.  Feds seize fraud domain claiming to provide COVID-19 vaccine
2.  Fake COVID-19 test result email drops King Engine ransomware
3.  Hackers are actively targeting WHO amid the Coronavirus pandemic
4.  Fake Coronavirus vaccine, patients’ blood & saliva sold on the dark web
5.  Fake govt COVID-19 contact tracking app spreading Android ransomware

Fake WHO Safety Emails on COVID-19 Dropping Nerbian RAT Across Europe

By Owais Sultan
Cisco CCIE Enterprise Infrastructure certificate, which is the successor of the old CCIE Routing and Switching certification, is…
This is a post from HackRead.com Read the original post: How Much Can CCIE Enterprise Certified Professional Make?

Cisco CCIE Enterprise Infrastructure certificate, which is the successor of the old CCIE Routing and Switching certification, is the most popular CCIE certification.

Cisco Certified Internetwork Expert (CCIE) is an expert level certification offered by Cisco and in the job market, it holds a high demand as it doesn’t only cover the traditional technologies, but also includes numerous evolving topics such as Network Automation and Programmability, Software Designed Networking such as Software-Defined WAN and Software-Defined Access, Cloud Networking and so on.

But passing the exam to get the certification and CCIE number should not be the only thing to look for. The actual goal should be gaining experience and learning as much as possible in Enterprise Networking. With Cisco’s increasing investment in cyber security and cloud networking, CCIE Enterprise Infrastructure certification has already become one of the next big things.

**Salary of a CCIE Enterprise Infrastructure Professional?**

Now, the question is how much one can earn monthly if they pass the Cisco CCIE Enterprise Infrastructure practical/lab exam? The answer involves several factors and criteria.

Before talking about dependencies, you should know some facts about the CCIE certifications. Unlike Cisco’s CCDE certification, Cisco CCIE Certification is known by the recruiters quite well as it has been posted as one of the job requirements for decades.

Currently, there are thousands of CCIE professionals, especially Cisco CCIE Routing and Switching, the new name CCIE Enterprise Infrastructure certificate is around 45000+ people.

**CCIE Enterprise Certified Salary Depends on These Criteria**

*   Country
*   Position
*   Years of experience
*   Whether you work for the same company after having the certificate

When it comes to salary, the country you live in is the most important factor because even if you are CCIE and a technical person (not as a manager or C level) if you work in an undeveloped or developing country, you may not be able to earn more than $2500 on average depending on the company that hires you. However, Cisco itself in a developing country still pays way better than other companies.

If you work in GCC (Dubai, Qatar, Kuwait, etc.) you can get around $8,000 to -$15,000 per month. If you are living in Africa, even if you get a CCIE Enterprise cert, you won’t get more than $5000 as a technical person. (Of course, there are many countries in Africa, but according to Business Insider Africa, on average, salaries of almost all African countries are roughly the same).

Your job position is also very important because as a technical person, you can get probably $2500 in Turkey but as a manager in an IT company let’s say, it can be around $6000. This would be $50000- $20000 in GCC countries

At the engineering level, CCIE salary would be around $6000 to $12000 in Canada, the United States, Australia, Singapore, Europe, and the United Kingdom.

**More Certification and Salary Topics**

1.  Best Cyber Security Certifications 2019
2.  Staying home? Here are 5 best Java learning platforms
3.  Top Certifications for Network Security Administrators in 2021
4.  5 Proven Cyber Security Certifications That Will Skyrocket Your Salary
5.  5 Proven Cyber Security Certifications That Will Boost Your Salary in 2018

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

How Much Can CCIE Enterprise Certified Professional Make?

By Owais Sultan
Attracting traffic is critical to the health of every ecommerce business. However, large traffic numbers don’t necessarily result…
This is a post from HackRead.com Read the original post: How Traffic Analysis Boosts Ecommerce Profits

Attracting traffic is critical to the health of every ecommerce business. However, large traffic numbers don’t necessarily result in sales unto themselves. To boost revenues, you must design pages optimized to convert. Then you need to determine the best ways to attract visits from shoppers who are actually interested in purchasing your products. 

To make sure that you’re attracting the right website visitors, once they’re on your site you need to measure their behavior. In this sense, traffic analysis gives you a peek into the minds of the people visiting your website. 

Aside from measuring straightforward metrics such as conversion rates, traffic analysis also uncovers audience behavior that points to possible product enhancements. Here are a few key ways traffic analysis can boost your profits and help you understand your audience better.

**Track Product Demand**

Most ecommerce businesses face seasonal variations in product demand. Anticipating these fluctuations can help you plan your working capital and cash flow better. Product demand metrics such as most visited pages and on-site product searches will help you understand what your audience is looking for.

While these data points will reveal demand, you must dig deeper into the patterns in these signals. For instance, which channels does most traffic come from, and which products does that audience search for the most? Correlating traffic channels, audience demographics, brand awareness growth and traffic nature (organic and paid) to product demand will give you insights that can reduce costs.

For instance, if the majority of paid traffic is viewing low-value products, you can model the impact this demand has on your business. You can either raise prices to see what happens to demand or discontinue your campaign and focus more on organic traffic.

Meanwhile, correlating the time of the year to product searches will help you understand seasonal variations and brainstorm ways of generating demand during these times. For instance, is your audience searching for product accessories or alternatives that you don’t carry yet? Introducing these products will help you boost sales during lean periods and plan shipping supply chains efficiently.

**Improve SERP Performance**

Organic traffic is the best kind of traffic in ecommerce. Whether you’re generating it from social media posts or rankings on search pages, organic traffic will help you reduce customer acquisition costs and boost audience lifetime values. 

Traffic channel and SEO analysis will give you insights into the best keywords driving traffic to your website, as well as your competitors’ sites. You’ll see which keywords are driving the most traffic, and how your rankings compare to related keywords. These days, competition is high for SERP (Search Engine Results Page) positions, and you must keep an eye on the other companies operating in your category.

For example, are your competitors releasing content that addresses a topic you haven’t thought of? The best way to establish a lasting advantage over your competitors is to create a moat around the most searched keywords and related searches. This way, you’ll manage to stay on top of your customers’ minds no matter what they search for.

Traffic analysis reports also give you insight into upcoming trends in searches that you can take advantage of. You can use paid search analysis tools that break down all the insights you need for you, or you can do more manual work and mine free tools such as Google Trends.

**Identify Selling Opportunities**

Cross and upselling are huge profit drivers in ecommerce. Most cross-sells tend to have low sticker prices, but as sales volumes grow, they make a huge impact. Accessories, complementary products, or even service offers are examples of low-margin cross-sells that leave an outsized impression on your bottom lines.

Upselling is a tactic that smaller ecommerce companies often ignore, but no technique does more to boost average order value. Bundling products or recommending accessories before checkout will boost your revenues significantly.

For instance, if you’re running a pet store, suggesting a dog jacket or toys along with a purchase of a dog bed will add more value to your customer. Pet shampoos and other accessories are high-margin products that will keep your customers returning for more.

You can also launch subscription products on your ecommerce platform and test audience responses by looking at traffic patterns. If you’re witnessing several repeat visits and short checkout times, you have a winner on your hands and should double down on that offering.

**Measure Omnichannel Performance**

Ecommerce companies sell across multiple channels these days. Even if you are a small business, you’re probably selling on your website and social media, at the very least. Channel traffic reports and engagement metrics will help you figure out where you ought to invest your time.

Monitor your competitors’ traffic channels as well, but don’t be in a rush to mimic them. Consider audience traits before following a trend. For example, if a competitor is generating a ton of traffic from TikTok, but is selling to a different demographic from yours, establishing a presence on that platform might not be the best choice.

Traffic analysis gives you insights beyond mere numbers. You must drill deep and figure out ancillary audience traits and correlate them to the channels from which you’re generating traffic and orders.

You won’t always receive a one-to-one match between channels and audience qualities, but you never know what advantage you’ll discover.

**More Sales from Better Analysis**

Ecommerce business owners often fail to drill deeply into their traffic patterns. To gain an advantage, you must correlate traffic data with other datasets to draw conclusions that will impact your business. Not only will your sales increase, but you’ll also create impactful experiences for your customers.

How Traffic Analysis Boosts Ecommerce Profits

By Waqas
In total, the database contains 10GB worth of data from companies like SuperVPN, GeckoVPN, and ChatVPN which is…
This is a post from HackRead.com Read the original post: Personal details of 21M SuperVPN, GeckoVPN users leaked on Telegram

**In total, the database contains 10GB worth of data from companies like SuperVPN, GeckoVPN, and ChatVPN** **which is now available for free download on several different Telegram groups.**

On May 7th, 2022, a database containing the personal details and login credentials of 21 million users was leaked in a Telegram group, Hackread.com has learned. What’s noteworthy is that the dump also exposed the data of VPN users including popular VPNs like SuperVPN, GeckoVPN, and ChatVPN.

The database was previously put up for sale on the Dark Web last year, but currently, it is available on Telegram for free.

**Database Exposed 10GB of Data**

According to researchers at VPNMentor, the leaked records comprised 10GB of data and exposed 21 million unique records. The information included the following:

*   Full names
*   Usernames
*   Country names
*   Billing details
*   Email addresses
*   Randomly generated password strings
*   Premium status and validity period

Further probe indicated that the leaked passwords were random, hashed, or salted without collision, therefore each was different and much more difficult to crack. A majority of the email IDs, about 99.5%, were Gmail accounts. But, researchers at vpnMentor believe that the dumped data is only a subset of the full dump.

Screenshot shows a post on Telegram group (left) - Screenshot of the leaked data (right)

**Possible Dangers**

The primary reason people choose to use VPNs is to ensure anonymity and privacy. This is why exposing the data of VPN users has far-reaching consequences since it is considered more valuable. In this case, the people who got their data exposed in the breach might become victims of blackmail, phishing scams, or identity theft since their full names and emails are leaked.

They may also launch targeted scams because of the exposure of personally identifiable information like country name, billing details, usernames, etc. After cracking the passwords, threat actors can easily hijack their accounts and exploit their premium status.

If the data lands in the hands of a tyrannical government, where VPN use is banned, this leak can lead to the arrest and detention of VPN users. If you want to stay protected from getting exploited by hackers/scammers, change your VPN account password and use a mix of upper-lower-case letters, symbols, numbers, etc., for optimum account security.

**More VPN News**

1.  Almost Every Major Free VPN Service is a Glorified Data Farm
2.  7 VPN firms with a no-logs policy end up exposing 1.2 TB of user data
3.  UFO VPN leaks database again; gets taken over & destroyed by hackers
4.  Sensitive data of 900 Pulse Secure VPN servers leaked on a hacker forum
5.  India to Collect User Data from VPNs, Data Centers, & Cloud Service Providers

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Personal details of 21M SuperVPN, GeckoVPN users leaked on Telegram

By Deeba Ahmed
The NFT market’s claim to fame is undoubtedly the Bored Apes Yacht Club yet someone is offering endless…
This is a post from HackRead.com Read the original post: This AI Can Generate Unique and Free Bored Ape NFTs

The NFT market’s claim to fame is undoubtedly the Bored Apes Yacht Club yet someone is offering endless free versions of these rare collectibles, thanks to Artificial Intelligence (AI).

Yannic Kilcher, a machine learning expert has developed an AI that generates an infinite number of unique apes for free. The Bored Apes is a collection of around 10000 Bored Apes NFTs, which merely comprise different variations of ape images. Still, it has become the face of NFTs, which are extremely expensive and, to be honest, quite funny.

**Details of the Process**

Kilcher uploaded a video on YouTube to explain the process of ape generation using Artificial Intelligence (AI). According to the video, the AI uses the Generative Adversarial Network (GAN) technique, and the procedure involves using two neural networks.

One of these networks is used to generate an image, and the other differentiates the image from an actual image to determine which is fake. Over time, the generator can create images that could easily pass as authentic. In the end, the generator can produce pretty convincing fake apes.

Kilcher scraped the Bored Ape Yacht Club collection in his YouTube video, trained Nvidia’s StyleGAN2 neural network on the dataset, and created near-perfect and fungible bored apes.

> “The quality of my system is not very good, there are often visible artifacts.”
> 
> Yannic Kilcher

Yannic Kilcher on YouTube

According to TNW, the app can generate apes based on user-provided images. It harnesses OpenAI Clip of the same model that powers the DALL-E 2 image generator. The generated images appear starkly similar to the actual NFT collection. Kilcher noted that a particular ape could be generated once only with this AI. You will get a different, unique ape as you refresh the page.

**More NFT News on Hackread.com**

1.  Official website of Banksy hacked for fake NFT scam
2.  Hackers Hijacked Official Ferrari Subdomain to Host NFT Scam
3.  OpenSea vulnerability allowed crypto theft with malicious NFTs
4.  Hot wallet hack: Hackers steal $18.7m from Animoca’s Lympo NTF platform

This AI Can Generate Unique and Free Bored Ape NFTs

By Waqas
Hackers targeted Russian television channels’ program names right before Vladimir Putin’s speech on Victory Day to commemorate the…
This is a post from HackRead.com Read the original post: Russian TV Schedules Hacked on Victory Day to Show Anti-War Messages

Hackers targeted Russian television channels’ program names right before Vladimir Putin’s speech on Victory Day to commemorate the defeat of Nazi Germany by the Soviet Union in WWII.

Victory Day event is celebrated to commemorate the defeat of Nazi Germany by the Soviet Union in WWII. However, this time a surprise was in store for Russians watching the Victory Day coverage. Someone hacked various Russian channels’ Victory Day coverage schedule and posted anti-war and pro-Ukrainian messages.  

**Anti-War Message Appears Ahead of Putin’s Address to Nation**

As people were waiting to hear the address of Russian President Vladimir Putin on Monday morning, local television channels’ schedule was suddenly altered to display this message:

>  “The blood of thousands of Ukrainians and hundreds of murdered children is on your hands. TV and the authorities are lying. No to war.”

BBC Monitoring’s senior digital journalist Francis Scarr also tweeted about this incident, explaining that the online Russian TV schedule page got hacked. Every program’s name was changed to the same message.

**Which channels were Affected?**

The anti-war call appeared when Russians were waiting to watch the annual Victory Day military parade on Red Square, followed by an address by Putin. The hacking affected online viewers of channels transmitted by MTS mobile operators, Rostelecom, NTV Plus, and Wink, while the incident impacted Russians across the country.

As per BBC, all major Russian channels, including NTV-Plus, Rossiya, and Channel One, were affected, while The Washington Post claims that the same message appeared on other platforms, including Yandex and Ru Tube. Furthermore, the hack also impacted children’s TV channels and the Russian defense ministry’s station, Zvezda.

> This morning the online Russian TV schedule page was hacked
> 
> The name of every programme was changed to "On your hands is the blood of thousands of Ukrainians and their hundreds of murdered children. TV and the authorities are lying. No to war" pic.twitter.com/P2uCNz8cqa
> 
> — Francis Scarr (@francis\_scarr) May 9, 2022

**How did the Hacking happen?**

According to Reuters, it isn’t currently clear how the messages appeared on the live page. However, this isn’t the first time Russian television channels have been hacked. In March 2022, as reported by Hackread.com, the Anonymous hacktivist collective hacked into Russian state television to broadcast gruesome war footage from Ukraine.

“A cyberattack was carried out on Russian TV broadcasting channels, because of which subscribers could have extremist inscriptions in the broadcast grid. Now our IT specialists are promptly eliminating the consequences of a hack so that subscribers can receive services and watch TV programs and movies as quickly as possible,” MTS representative in Siberia stated.

**Ukraine’s Response**

Ahead of Vladimir Putin’s address, Ukrainian president Volodymyr Zelensky released a video to commemorate the Victory Day with this statement:

“We won then. We will win now, too! And Khreshchatyk will see the parade of victory – the victory of Ukraine. Glory to Ukraine!”

**More Anonymous Hacks for OpRussia**

*   Confirmed: Anonymous Hacks Central Bank of Russia; Leaks 28GB of Data
*   Anonymous & its affiliates hacked 90% of Russian misconfigured databases
*   Anonymous NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data
*   Anonymous hacked Russian TV and streaming services with Ukraine war footage
*   Anonymous sent 7 million texts to Russians plus hacked 400 of their security cams

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Russian TV Schedules Hacked on Victory Day to Show Anti-War Messages

By Deeba Ahmed
After the hijacking, hackers hosted the Mint Your Ferrari NFT scam on the luxury automaker’s official website. Italian…
This is a post from HackRead.com Read the original post: Hackers Hijacked Official Ferrari Subdomain to Host NFT Scam

**After the hijacking, hackers hosted the Mint Your Ferrari NFT scam on the luxury automaker’s official website.**

Italian luxury automobile manufacturer Ferrari’s official website was hacked to promote a fake NFT collection. Interestingly, the company recently announced launching its official NFT collection, and hackers probably took advantage of this news. The fake NFT collection was presented as the official one to trap potential buyers.

**Details of the NFT Scam**

White hat hacker Sam Curry claims that attackers hijacked the subdomain ‘forms.ferrari.com’ of the company’s official website and hosted an NFT scam titled Mint Your Ferrari. The ethical hacker and bug bounty hunter also posted a screenshot of the hijacked website on Twitter.

Image credit: Sam Curry

Reportedly, the attackers lured visitors to purchase NFT tokens, claiming that it was Ferrari’s official 4458-horsepower NFT series that the company launched on the Ethereum network.

In December 2021, Screen Rant reported that the Ferrari collection would be launched in collaboration with a tech firm named Velas. Scammers marketed the fake NFT collection as akin to owning a Ferrari on the digital space and an instant gateway to the larger Ferrari metaverse.

**More NFT Scam News**

1.  Official website of Banksy hacked for fake NFT scam
2.  Phishing scam: NFTs Worth $1.7M Stolen from OpenSea Users
3.  Hot wallet hack: Hackers steal $18.7m from Animoca’s Lympo NTF platform

**How Attackers Hijacked the Subdomain?**

Further probe revealed that scammers exploited a flaw in the Adobe Experience Manager on the official website of Ferrari to hijack its subdomain and host the encrypted NFT scam content.

“After looking a bit deeper… it seems this was an Adobe Experience Manager exploit. You can still find the remnants of the unhacked site by dorking around a bit,” Curry explained.

Scammers seem to have failed to rake in a high amount from the victims. It is reported that the hacked site also prompted users to connect their MetaMask wallet to the site. Since Ferrari recently announced its plan to debut its official Metaverse, the scam seemed legit to unsuspecting users.

However, scammers made about $800, as noted by Twitter user Rebcesp who claimed the NFT scam’s Ethereum wallet received $884. The loss was minuscule since the fraud was quickly discovered, and the subdomain was shut down.

At the time of publishing this article, the compromised subdomain displayed the error code: HTTP 403 error code. It seems like just one person got scammed who sent 0.3ETH or roughly $800. The funds were transferred to Tornado Cash by the scammer.