Android Malware Exploiting Google Cloud Messaging Service

Researchers have discovered a number of malicious Android apps are using Google’s Cloud Messaging (GCM) service and leveraging it as a command and control server to carry out attacks. A post on Securelist today by Kaspersky Lab’s Roman Unuchek, breaks down five Trojans that have been spotted checking in with GCM after launching. Trojan-SMS.AndroidOS.FakeInst.a Trojan-SMS.AndroidOS.Agent.ao […]

Continue Reading

Hackers Acquire Google Certificate, Could Hijack Gmail Accounts

Hackers have obtained a digital certificate good for any Google website from a Dutch certificate provider. Criminals could use the certificate to conduct “man-in-the-middle” attacks targeting users of Gmail, Google’s search engine or any other service. Attackers could poison DNS, present their site with the fake cert and bingo, they have the user’s credentials. Man-in-the-middle […]

Continue Reading

Goolag – GUI Tool for Google Hacking

cDc (Cult of the Dead Cow) recently released a GUI driven tool for Google Hacking called Goolag. Google Dorks have been around for several years. If one searches the Web, one will find multiple collections of dorks, and also some applications – standalone and Web-based – offering certain “scanning” possibilities. Nevertheless, gS is different from […]

Continue Reading

Google Hack Honeypot

“Google Hack” Honeypot Project Google Hack Honeypot is written in PHP and assists the development of web based honeypots designed to lure search engine hackers. Currently available for special google hacking search queries for AimBuddyList, .mdb, passlist.txt, passwd.txt, phpsysinfo, phpbbinstall_r2l, phpshel, php_ping, etc. Current version :- GHH v1.2 Last Update :- Apr 07 2007 Homepage […]

Continue Reading