Forgot your password?
Close
typodupeerror

Submission + - Notorious Crime Gang Targets Internet Routers Using Tomato Firmware (arstechnica.com)

Submitted by Anonymous Coward
An anonymous reader writes: Internet routers running the Tomato alternative firmware are under active attack by a self-propagating exploit that searches for devices using default credentials. When credentials are found, the exploit then makes the routers part of a botnet that’s used in a host of online attacks, researchers said on Tuesday. The Muhstik botnet came to light about two years ago when it started unleashed a string of exploits that attacked Linux servers and Internet-of-things devices. It opportunistically exploited a host of vulnerabilities, including the so-called critical Drupalgeddon2 vulnerability disclosed in early 2018 in the Drupal content management system. Muhstik has also been caught using vulnerabilities in routers that use Gigabit Passive Optical Network (GPON) or DD-WRT software. The botnet has also exploited previously patched vulnerabilities in other server applications, including the Webdav, WebLogic, Webuzo, and WordPress.

On Tuesday, researchers from Palo Alto Networks said they recently detected Muhstik targeting Internet routers running Tomato, an open-source package that serves as an alternative to firmware that ships by default with routers running Broadcom chips. The ability to work with virtual private networks and provide advanced quality of service control make Tomato popular with end users and in some cases router sellers. The exploits use already infected devices to scan the Internet for Tomato routers and, when found, to check if they use the default username and password of “admin:admin” or “root:admin” for remote administration. The exploit causes Tomato routers that haven’t been locked down with a strong password to join an IRC server that’s used to control the botnet. The infection also causes the routers to scan the Internet for servers or devices running WordPress, Webuzo, or WebLogic packages that are vulnerable.
Security

No One's Bidding on The Shadow Brokers' Stolen NSA Hacking Tools (vice.com) 51

Posted by EditorDavid from the mocking-the-auction dept.
That group auctioning the NSA's hacking tools is "very upset" no one's bidding on them. An anonymous Slashdot reader quotes Motherboard: "TheShadowBrokers" authored another bizarre rant expressing their annoyance at the seeming lack of interest in ponying up bitcoins to release their full set of stolen files. "Peoples is having interest in free files ... But people is no interest in #EQGRP_Auction," the mysterious hacker group complained in a ranting post on Medium, which seems to be purposely written in Borat-style broken English. "TheShadowBrokers is thinking this is information communication problem."

The message also blindly lashes out at hackers, foreign intelligence services, and basically anyone else who hasn't bid on the files... At the time of this writing, TheShadowBrokers have only received bids for a total of 1.76 bitcoins -- or about $1,082 -- far below the group's asking price of $1 million.
At least five transactions came from a prankster who was trying to Rickroll the group with bitcoin addresses containing the words "Never Gonna Give You Up."

Submission + - Google Plans Major Play In Wireless Partnering With Sprint And T-Mobile (hothardware.com)

Submitted by MojoKid
MojoKid writes: Is Google trying to win the wireless wars? There's a new report suggesting Google is partnering with select wireless carriers to sell its own branded wireless voice and data plans directly to consumers. According to sources and the "three people with knowledge of the plans," Google will tap into networks belonging to Sprint and T-Mobile for its new service, buying wholesale access to mobile voice and data in order to make itself a virtual network operator. That might sound disappointing on the surface. Had Google struck a deal with Verizon and AT&T, or even just Verizon, the deal could potentially have more critical mass, with great coverage backed by a company like Google and its services. The former might be a winning combination but at least this is a start. The project will be known as "Nova," which is reportedly being led by Google's Nick Fox, a longtime executive with the company. Apparently Fox has been overseeing this for some time now, and it seems likely a launch will take place this year.

Submission + - IRS warns of downtime risk as Congress makes cuts 1

Submitted by dcblogs
dcblogs writes: Successive budget cuts by Congress are forcing the Internal Revenue Service to delay system modernization and improve its ability to prevent fraud. In telling of the problems ahead, IRS Commissioner John Koskinen almost sounded desperate in a recent memo to employees. The IRS is heavily dependent on technology, and the impact of the budget reduction to IT this year was put at $200 million. It will mean delays in replacing "aging IT systems" and "increasing the risk of downtime," Koskinen said. A new system to protect against ID theft will be delayed, and other IT cost-efficiency efforts curbed.The budget cuts have been so deep IRS employees are being warned of a possible shutdown for two days before this fiscal year ends in October. It would be a forced furlough for agency workers. The IRS employed 84,189 last year, down from 86,400 in 2013. When attrition is considered, the IRS says it lost between 16,000 and 17,000 employees since 2010. The agency has also been hit with a hiring freeze, and appears to be hiring very few people in IT compared to other agencies.

Submission + - Microsoft reveals Windows 10 will be a free upgrade (mashable.com)

Submitted by mpicpp
mpicpp writes: Microsoft just took another big step toward the release of Windows 10 and revealed it will be free for many current Windows users.

The company unveiled the Windows 10 consumer preview on Wednesday, showcasing some of the new features in the latest version of the operating system that powers the vast majority of the world's desktop PCs. The developer preview has been available since Microsoft first announced Windows 10 in the fall, but it was buggy, limited in scope and very light on new features.

Importantly, Windows 10 will be free for existing Windows users running versions of Windows back to Windows 7. That includes Windows 7, 8, 8.1 and Windows Phone. Microsoft specified it would only be free for the first year, indicating Windows would be software that users subscribe to, rather than buy outright.

Microsoft Corporate Vice President of the Operating Systems Group Joe Belfiore showed off some of the new features in Windows 10. While Microsoft had already announced it would bring back the much-missed Start Menu, Belfiore revealed it would also have a full-screen mode that includes more of the Windows 8 Start screen. He said Windows machines would go back and forth between to two menus in a way that wouldn't confuse people.

Belfiore also showed a new notification center for Windows, which puts a user's notifications in an Action Center menu that can appear along the right side, similar to how notifications work in Apple OS X.

Microsoft Executive Vice President of Operating Systems Terry Myerson revealed that 1.7 million people had downloaded the Windows 10 developer preview, giving Microsoft over 800,000 individual piece of feedback.

Myerson explained that Windows 10 has several main intents: the give users a mobility of experience from device to device, instill a sense of trust in users, and provide the most natural ways to interact with devices.

Slashdot Top Deals

Computers don't actually think. You just think they think. (We think.)

Close