#dod hacking

New Post has been published on http://www.kerrylcacho.com/?p=2350

How To Hack WhatsApp Using SS7 Flaw

By VIJAY PRABHU

Researchers are easily able to hack WhatsApp and Telegram using the known telecom flaw

We continuously receive queries from readers about how to hack WhatsApp. The world’s most popular cross-platform messaging App is seen to be ultimate hack by many because it has recently enabled 256-bit encryption.

For ordinary souls this encryption would take days and months to decode a sentence or a complete message. Ditto with another secure messaging service called Telegram. Though Telegram is not as popular as WhatsApp, it has its ardent group of followers who use it for its encryption as well as snooping free service.

Though both of these Apps are end-to-end encrypted both of them suffer from hardware side vulnerability which can be exploited to hack and hijack both WhatsApp and Telegram.

The vulnerability lies in Signalling System 7, or SS7, the technology used by telecom operators, on which the highly secure messaging system and telephone calls rely. SS7 is a set of telephony signalling protocols developed in 1975, which is used to set up and tear down most of the world’s public switched telephone network (PSTN) telephone calls. It also performs number translation, local number portability, prepaid billing, Short Message Service (SMS), and other mass market services.

SS7 is vulnerable to hacking and this has been known since 2008. In 2014, the media reported a protocol vulnerability of SS7 by which both government agencies and non-state actors can track the movements of cell phone users from virtually anywhere in the world with a success rate of approximately 70%. In addition, eavesdropping is possible by using the protocol to forward calls and also facilitate decryption by requesting that each caller’s carrier release a temporary encryption key to unlock the communication after it has been recorded. Researchers created a tool (SnoopSnitch) which can warn when certain SS7 attacks occur against a phone and detect IMSI-catchers.

You can view how researchers managed to hack WhatsApp and Telegram using the SS7 flaw below :

WhatsApp Hack

Telegram Hack

Both the hacks exploit the SS7 vulnerability by tricking the telecom network into believing the attacker’s phone has the same number as the victim’s phone. Once the network has been fooled, anybody, even a newbie can spy on the legitimate WhatsApp and Telegram user by creating a new WhatsApp or Telegram account using the secret code.

Once complete, the attacker now controls the account, including the ability to send and receive messages. Even more horrific is the fact that the hacker can also send messages on behalf of the victim, and read confidential messages intended for the victim without ever having to try to break strong encryption protocols.

New Post has been published on http://www.kerrylcacho.com/?p=2344

This is how you can join Anonymous hacktivist group

BY VIJAY PRABHU

Want to join the Anonymous hacking collective? Here is how you can do it.

‘Anonymous’ The name says it all. These hackers without faces or identities have been at the forefront of online revolution since 2003 when the group was born as an idea on the image boarding website, 4Chan. The idea was to fight against all the evils of Internet that come in the garb of business.

Anonymous has no central leadership. In fact, there is no hierarchy in the group. Wikipedia describes Anonymous as “an Internet gathering” with “a very loose and decentralized command structure that operates on ideas rather than directives”.

The group which is represented by men and women wearing the esoteric Guy Fawkes mask became known for a series of well-publicized publicity stunts and distributed denial-of-service (DDoS) attacks on government, religious, and corporate websites who they believe to involved in cyber wrong doings.

Be it net neutrality, pedophilia, Ferguson killings, whaling, big game hunting or terrorist attacks, Anonymous has been at the forefront of organizing online movements. Right now it is fighting ISIS for their deadly terrorist attacks on Paris but simultaneous Anonymous is also carrying out several unpublicised operations.

If you want to be a join Anonymous, sorry we have bad news for you. You can’t “join” Anonymous. Not because you’re not wanted or welcome, but because, as a new recruiting video explains, it’s “not an organization. It is not a club, a party or even a movement. There is no charter, no manifest, no membership fees”.

However, you can easily be a part of the Anonymous says the man in Guy Fawkes mask. If you share the common goal of Anonymous — which is change the world for the better — then you’re “in”

The video also explains how to get in touch with other people in Anonymous, and — just as importantly — how to protect your identity and privacy. Tips include using a different browser purely for Anonymous and creating new accounts for an Anonymous pseudonym on Facebook and Twitter.

Remember there is no name, fame or money in joining the Anonymous because everything is behind a veil of mask. You should join if you truly believe in the principle of being the change you want to bring.

New Post has been published on http://www.kerrylcacho.com/?p=1312

Congress Directs the Pentagon to Appoint a Cyber Czar

In the 2014 National Defense Authorization Act passed by House lawmakers last week, Congress required the Defense Department appoint a high level Principal Cyber Advisor with a broad oversight portfolio that includes offensive and defensive cyber missions, resources, personnel, acquisition and technology. A Senate vote on the bill is expected this week.

The new cyber advisor will have “overall supervision” of all Defense cyber operations and will oversee a team that will integrate the cyber expertise of the four services, combatant commands and Defense agencies.

New Post has been published on http://www.kerrylcacho.com/?p=1286

Enhancing Online Anoymity Smart Card

To drive the development of privacy-enhancement like browsing or blogging anonymously you can use these smart cards to help you protect your identity.

http://www.kerrylcacho.com/wp-content/uploads/2013/11/Twitter_Smart_Card.pdf

http://www.kerrylcacho.com/wp-content/uploads/2013/11/Linkedln_Smart_Card.pdf

http://www.kerrylcacho.com/wp-content/uploads/2013/11/Google+_Smart_Card.pdf

http://www.kerrylcacho.com/wp-content/uploads/2013/11/FaceBook_Smart_Card.pdf