Cyber World

 Dark Web is a World Wide Web content that exists on dark net ( network that use the internet but require a specific software ). Deep and Dark web are applications of integral internet features to provide privacy and anonymity. Is it safe to use Dark Web? A person with an ordinary knowledge about techy things should never go to Dark web because he will not be able to protect his own identity. Hackers are looking for such people who are noob. After getting into dark web they can steal your identity and use it for their work and it may be an illegal work too. And why you want to browse the dark web,there's no need. You may also get some virus in your device and your all data can be hacked in just few minutes. Difference between Deep Web and Dark Web- The deep web contains internet content you can't find through search engines, while the dark web is a hidden network that requires a special browser to access. Surface Web The portion of world wide web that is readily available to th...

 The government's nodal agency CERT-In has warned against 'Dumpster Diving', which refers to fraudsters searching through a person or an organisation's trash to obtain sensitive or valuable information for malicious activities. It suggested using a shredder to destroy documents, installing security cameras or employing security personnel and disposing electronic devices properly to avoid misuse. What is dumpster diving? Dumpster Diving is a Physical Attack in which a person recovers trash in hopes of finding sensitive information that has been merely discarded in whole rather than being run through a shredder, incinerated, or otherwise destroyed. Technique A cyber attack where the attacker gets their hands on sensitive documents or data you carelessly threw into the trash bin. Solutions to it- ·        Know why someone target dumpsters on your property. ·        Light up the waste collection area. ·  ...

  A keylogger, sometimes called a keystroke logger, is a type of surveillance technology used to monitor and record each keystroke on a specific computer. Consider it as a threat because… Keyloggers are often used as a spyware tool by cybercriminals to steal personally identifiable information (PII), login credentials and sensitive enterprise data. Keylogger tools for windows ·        All in One ·        Elite ·        Spytector Keylogger tools for MacOS ·        sentryPC ·        FlexiSPY ·        REFOG Keylogger Keylogger tool for Linux - Logkeys Types of keyloggers 1.    Hardware Keylogger ·        It is a physical device that is used for capturing keystrokes ·        For hardware keylogger one must hav...

Rootkit is a software program, typically malicious, that provides privileged, root level access to a computer while concealing its presence on that machine. Rootkit tools (popular ones) ·        Purple Fox ·        MoonBounce ·        TDSS Rootkit types ·        Hypervisor rootkit: It takes advantage of the hardware virtualization and is installed between the hardware and the kernel acting as the real hardware. ·        Kernel rootkit: Kernel Rootkits are specifically designed to attack the core of your operating system and change its functioning. ·        Bootloader rootkit: The bootloader rootkit attacks the legit bootloader and replaces it with the hacked one so that attackers could control the system boot. ·        Application rootkit: Application Rootkits re...

Social engineering is the tactic of manipulating, influencing, or deceiving a victim in order to gain control over a computer system, or to steal personal and financial information. It uses psychological manipulation to trick users into making security mistakes or giving away sensitive information . Types of social Engineering attacks ·        Baiting: Attack where a scammer uses a false promise to lure a victim into trap ·        Scareware: Technique that aims to scare the victim into believing that they have a virus on their device ·        Pretexting: Technique that manipulates victim into divulging information ·        Phishing: Technique to trick users into doing something dangerous      Phishing is the most common type of Social Engineering Attacks Concepts of social engineering Social engineering heavily relies on the 5 principles established...

Spyware Spyware is any software that installs itself on your computer and starts covertly monitoring your online behavior without your knowledge or permission. It is a kind of malware that secretly gathers information about a person or organization and relays this data to other parties, Virus A virus is a type of malicious software, or malware, that spreads between computers and causes damage to data and software. Trojan Horse A Trojan Horse is a type of malware that downloads onto a computer disguised as a legitimate program. VPN Most of you might be aware of it, but do not know the correct use of it. Let me explain- VPN (Virtual Private Network), a VPN is a method of connecting a series of computers and devices in a private encrypted network, with each users IP address being replaced by the VPN’s IP address. Users get Internet anonymity, making it difficult for hackers to attack. Ransomware Ransomware is type of malware from crypto virology that threatens to publis...

  What is cyber-crime? ·        Cyber Crime is criminal activity that either targets or uses a computer, a computer network or a networked device. ·        Most cyber-crime is committed by cybercriminals or hackers who want to make money. ·        CYBER-CRIME IN IT ACT 2000 – The Act gives legal validity to electronics contracts, recognition of electronic signatures. Punishment for cybercrime Only authorized person has the right to access to protected system. Penalties: punishment: the imprisonment which may extend to ten years and fine. Who investigate cyber-crime in india? ·        National cyber-crime threat analytics Unit (TAU) ·        National Cybercrime Reporting ·        Platform for Joint Cybercrime Investigation ·        National Cybercrime Foren...

  What is Phishing? ‘Phishing’ is when criminals use emails, text messages or phone calls to trick their victims. AIM – To make you visit a website, which may download a virus onto your computer, or steal bank details or other personal information. 5 most common type of phishing attack ·        Email Phishing – Most phishing attacks are sent by emails. ·        Spear Phishing ·        Whaling – Whaling attacks are more targeted, taking aim at senior executives. ·        Smishing and Vishing ·        Angler Phishing Why do cybercriminals create email phishing scams? The answer is simple. Email is often an organization’s weakest security link. Once the security breach has begun, email hackers have access to all sort of information – from personal data to sensitive corporate documents. If you receive a phishing emai...

  what is dirty cow vulnerability? Dirty COW was a vulnerability in the Linux kernel. It allowed processes to write read-only files. This exploit made use of a race condition that lived inside the kernel functions which handle the copy-on-write (COW) feature of memory mappings. CVE number of dirty cow- CVE-2016-5195 ·        About CVE-2016-5195 – A race condition was found in the way the Linux kernel’s memory subsystem handles the copy-on-write breakage of private read-only memory mappings. ·        An attacker would first require access to a shell on the device before they could use this exploit. What does this vulnerability do? This vulnerability allows the user to bypass the normal file system protections and write to files that are owned by the system. Consequences ·        Opens up many avenues for attack, ·        which results in the unpr...

Android users are advised to download apps only from official app stores in order to avoid ‘Daam’ virus, which hacks call records and gains camera access. As per CERT-In, users shouldn’t browse un-trusted websites or follow un-trusted links and must install updated antivirus software. Exercise caution towards shortened URL’s and numbers that don’t look like genuine/regular mobile numbers, it added. Malware – ‘daam’ virus The Daam virus represents a new breed of malware specifically targeting Android devices. Its advanced capabilities allow it to infiltrate your smartphone’s operating system, granting unauthorized access to your personal data and compromising your privacy. If the device is at risk ·        Unusual battery drain ·        Unexpected data usage ·        Unfamiliar apps or pop-ups ·        Unusual device behaviour conclusion Remember, your...

Software Piracy ·        The use and or distribution of copyrighted computer software in violation of the copyright laws or applicable licence restrictions. ·        Software piracy can be done by copying, downloading, sharing, selling or installing multiple copies of software onto personal or work computers. Most pirated softwares ·        Microsoft Office ·        Adobe Photoshop ·        Windows ·        Adobe Premiere ·        Final Cut Pro Types of software policy ·        Soft Lifting: Means sharing a program with someone who is not authorised by the licence agreement to use it. ·        Hard Disk Loading: This form of piracy involves loading an unauthorized copy of software onto a computer be...

  What is ChatGPT? ·        ChatGPT is an AI-based trained model which interacts in a conversational way. The dialogue format makes it possible for ChatGPT to answer follow up questions, admit its mistakes, challenge incorrect premises, and reject inappropriate requests. ·        The "Chat" in the name is a reference to it being a chatbot, and the "GPT" stands for  generative pre-trained transformer . Family of ChatGPT Its parent company is OpenAI. ChatGPT is a sibling model to InstructGPT. Research Today’s research release of ChatGPT is the latest step in OpenAI’s iterative deployment of increasingly safe and useful AI systems. Many lessons from deployment of earlier models like GPT-3 and Codex have informed the safety mitigations in place for this release, including substantial reductions in harmful and untruthful outputs achieved by the use of reinforcement learning from human feedback (RLHF). Fe...

  What is Nullcon? Nullcon came into existence in 2010 and is managed and marketed by  Payatu Technologies Pvt Ltd . With the advent of cutting-edge technologies, security is crucial as technology brings a myriad of threats along. What Nullcon do? ·        Nullcon is an extensive platform for the exchange of information about zero-day vulnerabilities, latest attack vectors, and other cyber threats. ·        A section of conference – Desi Jugaad – is dedicated to hackers/researchers who come up with innovative solutions for real life challenges and are interested in taking new initiatives in cyber security What Nullcon have? ·        Research driven technical talks ·        CXO track ·        Hands-on training sessions ·        Keynotes from renowned security researchers ·  ...

  Packet Sniffing is the process of collecting and logging packets of information that are sent between network nodes. These packets of data can then be gathered, stored and analysed in order to better understand exactly what data is being sent across a given network. Packet sniffing Attack A Packet Sniffing attack is a network created threat where a malicious entity captures network packets intending to intercept or steal data traffic that may have been left unencrypted. Methods used for packet sniffing attack ·        TCP Session Hijacking ·        DNS poisoning ·        JavaScript Card Sniffing attacks ·        Address Resolution Protocol (ARP) Sniffing ·        DHCP Attack Avoiding packet sniffing ·       Use a VPN Service ·       Avoid unreliable public wi-fi ...