Xakep Magazine

 

MEGANews

Raitap is the winner of the Pentest Award in the category “Breaking Through”

Hack Seedr

Three write-ups – winner of the Pentest Award in the “Breaking Through” category

 

Breaking through the perimeter

Three logic bug studies that received a Pentest Award

Fuck the Logic

Works are winners of the Pentest Award in the Bypass nomination

Fun bypasses

We analyze attacks on Mifare ACS

NFC through the eyes of a hacker

Let’s convert the application to Cython

Hybrid snake

Breaking the InnoSetup installer

Visiting Inna

We train the bloodhound to search for NTLM Relay

BloodHound

Conducting a MITM attack on SSH to obtain credentials

HTB Snoopy

We pass one of the most difficult machines with Hack The Box

HTB PikaTwoo

Exploiting the Neo4j injection

HTB OnlyForYou

Elevate privileges and escape from the Docker container

HTB MonitorsTwo

Let’s reverse the firmware using the example of a D-Link router

Tailoring to order

Hiding IAT from antivirus

Shut up and hide

Choosing a database for your project

Not a cringe, but a base

How I became the author of a book

“Physical attacks using hacker devices”

Assembling the EPS indicator with your own hands

Hacker tester

Who makes this shit up

 

wp-1700444292556

HACKERS DPRK ATTACK RUSSIAN AUTHORITIES

Microsoft said that in 2023, North Korean hack groups hacked several Russian government-linked sites and defense. According to the company, in compromised Russian systems, the attackers were collecting intelligence information

“Recently, several North Korean attackers attacked the Russian government and defense industry.

Probably for intelligence gathering purposes,” writes Clint Watts

Watts, head of the Microsoft Digital Threat Analysis Center.

Microsoft does not disclose details about these attacks and does not write which names but Russian organizations were hacked. However, in the company’s report contains information about when some of these incidents occurred

Comrade

Thus, according to Microsoft, in March of this year the Russian

Russian organization engaged in aerospace research, as well as a number of Russian diplomatic accounts have also been compromised.

“In March 2023, the Ruby Sleet group hacked an aerospace

ky research institute in Russia. Moreover, at the beginning of March the Onyx Sleet (PLUTONIUM) group compromised the device, appropriate to one of the Russian universities, says the document.

okay. —Also that month, the Opal Sleet attackers

(OSMIUM) sent phishing emails to accounts belonging to lying to Russian diplomatic missions.”

It is reported that cyber attacks by the groups Ruby Sleet (aka CERIUM) and Diamond

Sleet (aka ZINC and Lazarus) extends to gun manufacturers in various countries around the world, including Germany and Israel. From November 2022 until January 2023, defense plants in Bra were also hacked.

Brazil, Italy, Norway, Poland, Finland and the Czech Republic.