#RED! « Independent Cinema Center - #RedHack #Anonymous #Documentary #FULL

Categories: Documentary Date: 16 March, 2013

The movie RED! produced by BSM – Independent Cinema Center, focuses on two subjects that gain globally more and more attraction every year: cyber activism and hacktivism. In the movie, these subjects are principally treated through Anonymous and RedHack. At the same time, the movie examines the relations between hacktivism and politics, ethic and law.

Watch RED! Movie Now for FREE and Support Us!

CLICK HERE TO WATCH!


The movie RED! produced by BSM – Independent Cinema Center, focuses on two subjects that gain globally more and more attraction every year: cyber activism and hacktivism. In the movie, these subjects are principally treated through Anonymous and RedHack. At the same time, the movie examines the relations between hacktivism and politics, ethic and law.
This documentary does not conceal being biased. It approachs cyber activism and hacktivism from a class struggle perspective. Considering the cyber world as a new battlefield, the movie examines how the cyber struggle can be linked to the class struggle.

#MSM -> #FED | Federal Reserve Confirms Security Breach, Calls #Anonymous Hack Claim 'Overstated' - #OpLastResort

A Federal Reserve spokesperson confirmed a temporary security breach of its computers to The Huffington Post on Tuesday morning.

“Information was obtained by exploiting a temporary vulnerability in a website vendor product,” the spokesperson told HuffPost in a phone interview, adding that the problem was “fixed after discovery and is no longer an issue.”

According to the spokesperson, who asked not to be identified by name, the breach “did not affect critical operations.”

The confirmation comes in the wake of a claim by hacker group Anonymous on Sunday that it had stolen sensitive information on 4,000 American bank executives from Federal Reserve computers.

Although the security breach has now been confirmed, the spokesperson called Anonymous’ claim “overstated,” and would not comment on the nature of the data obtained other than to confirm that contact information was taken.

Earlier this week, ZDNet reported that “login information … credentials, IP addresses, and contact information of American bank executives” were listed in a spreadsheet posted to a government site that Anonymous had hacked.

Even if the breach might not have been as serious as publicized by Anonymous, it is the first actual leak of information achieved by the group’s Operation Last Resort. Launched in January, OpLastResort is the Anonymous response to the suicide of Internet activist Aaron Swartz. The group demands “reform of computer crime laws” and investigation of “overzealous prosecutors.”

Federal Reserve computers have been hacked before. In 2010, a Malaysian man was arrested in a credit card scheme after managing to hack into and damage 10 computers associated with a Federal Reserve training system, Bloomberg News reported at the time. However, no data or information was accessed or compromised in that attack, a spokeswoman told Bloomberg.

In 2011, Federal Reserve developers discovered a cross-scripting bug in Adobe ColdFusion software, which is used by some Federal Reserve Bank websites. Such cross-site scripting allows an attacker to gain high-level access privileges to sensitive information by way of injecting malicious client-side scripts.

“Web developers working for the Federal Reserve Bank of Atlanta discovered the cross-site scripting vulnerability as part of an internal development project,” ThreatPost, an Internet security blog, reported at the time.

In December 2011, Adobe released a patch for ColdFusion that fixed weaknesses it said could be exploited in “a cross-site scripting attack.”

In an e-mail to HuffPost, Adobe senior communications manager Wiebke Lips wrote that the company could not comment on the specific breach confirmed Tuesday by the Federal Reserve. According to Lips, a patch released Jan. 15 by Adobe “addressed four vulnerabilities” that had been observed in active attacks against ColdFusion customers.

“These types of attacks are often referred to as ‘zero-days’ because a fix is not available at the time of the attack,” Lips wrote. “As soon as these vulnerabilities were reported to Adobe, we immediately addressed them in the software and provided the fix.”

According to an Adobe security bulletin, the recent patch for ColdFusion fixed loopholes that could have enabled a hacker to “circumvent authentication controls, potentially allowing the attacker to take control of the affected server … could result in information disclosure from a compromised server.”

Although it is unclear whether hackers used the recently patched vulnerabilities as a vector for attack, if a third party gained access to sensitive information through ColdFusion, it would follow that computers belonging to the Federal Reserve may have been compromised because their software was not up-to-date.

The Federal Reserve spokesperson would not elaborate on its security systems other than to say that measures against attacks were “absolutely” in place.

More

HERE (“Fed Confirms It Was Hacked By Anonymous”)

#MSM - New Accounting System Hack Could Cause 'Mayhem' >:P

Attacks against massive and proprietary enterprise accounting systems, in particular financial software such as SAP and Oracle, have been few and far between. That changed at this week’s Black Hat Abu Dhabi conference where a pair of researchers presented proof-of-concept code that could change the dynamic of the financially motivated attack landscape.

The attack, dubbed Project Mayhem, could enable an attacker to divert funds from a company’s accounting and financial systems without immediate detection. In addition to code, the attacker would be relying on the fact that midsized companies in particular, do not have complete control or visibility into financial processes or individual transactions, and are likely to miss fraud at first glance.

“Getting caught depends on the skills and resources available and whether an audit is performed or not,” wrote Tom Eston and Brett Kimmel of SecureState in a white paper explaining Project Mayhem in detail.

Eston and Kimmel’s presentation at Black Hat focused on Microsoft Dynamics Great Plains software, in particular targeting Dynamics’ SQL database, SQL server, or hijacking an account via a process injection attack. Microsoft Dynamics is used primarily in midsized companies. The duo said their motivation in developing this attack was to help penetration testers efforts in examining the defenses of these systems. SecureState is a consultancy provide security services such as pen-testing.

“If an attacker can control and manipulate the accounting system of the company to commit mass systems fraud, changing or manipulating financial data is just the beginning. As professional penetration testers, we must demonstrate more advanced attacks to show real impact to the business,” said Eston.

The key to the attack is to stealthily modify entries in the accounting system to commit fraud, i.e., transfer funds to an outside account. They began by doing some reconnaissance online to learn the names and structures of the Dynamics GP software’s database tables, as well as other pertinent identifiers in the tables. Knowing this helps an attacker target a particular segment of the database, the paper said.

An attacker could also hijack accounts by targeting GP users, again by doing reconnaissance online in social networks or searches in LinkedIn profiles, and then crafting a spear phishing attack that would convince the target to either visit a site hosting the Project Mayhem malware, or open an attachment infected with the code. The malware is then used to pivot internally to target GP processes.

The proof-of-concept code, developed by SecureState researcher Spencer McIntyre, uses function hooking and library injection to exploit the application’s front end.

“The goal is for the malware to open a channel back to a malicious attacker and allow them to issue commands specific to GP through the Dynamics GUI front end,” the white paper said. “The proof of concept code needs to be injected at run time but well known patching techniques could be employed to have the necessary components loaded automatically at run time.”

The malware hooks in to key locations, the paper said, and intercepts function calls, in particular those to the ODBC32 library; the malware creates function calls that interact with the database, a valid copy of legitimate handles that can inject malicious SQL commands as a legitimate user. Using a backdoor to the attacker’s server, SQL commands can be issued without detection and without the need for a password.

Once inside and manipulating the system, an attacker could manipulate existing vendor records forcing the system to remit payments to the attacker or a mule, rather than a vendor, or create new vendor entries, new manual check entries, increase customer credit limits, modify accounting records, create negative customer balances that force automated refunds, or simply steal credit card data, customer data or private financial records.

Such an attack against a financial system puts money and customer records at risk, but implicates compliance requirements, company reputation and harms customer relationships.

“Even with proper bank reconciliation, funds can be diverted without immediate detection. Fraud attacks like the ones described in our talk and whitepaper could last for months or years. Uncovering a fraud depends on the skills and resources available and whether an audit is performed or not,” said Kimmell.

Parastoo Hackers breached the International Atomic Energy Agency (IAEA) server

IAEA hacked

The International Atomic Energy Agency (IAEA) acknowledged Tuesday that one of its servers had been breached by a group of hackers and leaked contact details for more than 100 nuclear experts on the group’s website.

A hacker group called “Parastoo,” one of the most common Iranian female names, has claimed responsibility for the security breach.

“Israel owns a practical nuclear arsenal, tied to a growing military body and is not a member of internationally respected nuclear biochemical and chemical agreements” Parastoo said in the statement.

“We ask these individuals to sign a petition demanding to open IAEA investigation into activities at (Israel’s Negev Nuclear Research Center located near the southern city of) Dimona,” the group wrote.

IAEA spokeswoman Gill Tudor said the agency “deeply regrets this publication of information stolen from an old server”. She said the server had been shut down “some time ago” and experts had been trying to eliminate any “possible vulnerability” in it even before it was hacked.

She added that the IAEA was doing “everything possible to help ensure that no further information is vulnerable”

#Dropbox blames employee account breach for spam attack

Dropbox said Tuesday one of its employee’s accounts was compromised, leading to a raft of spam last month that irritated users of the cloud-storage service.

A stolen password was used to access the employee’s account, which contained “a project document with user email addresses,” Dropbox engineer Aditya Agarwal wrote on the company’s blog.

[ Also on InfoWorld: 10 file-sharing options: Dropbox, Google Drive, and more | Find out how to block the viruses, worms, and other malware that threaten your business, with hands-on advice from expert contributors in InfoWorld’s “Malware Deep Dive” PDF guide. | Keep up with key security issues with InfoWorld’s Security Adviser blog and Security Central newsletter. ]

“We believe this improper access is what led to the spam,” Agarwal wrote. “We’re sorry about this, and have put additional controls in place to help make sure it doesn’t happen again.”

The company also found that usernames and passwords that had been stolen from other websites were used to access “a small number of Dropbox accounts,” Agarwal wrote. Hackers commonly try username and password combinations from breaches on other web services in hopes people use the same combination, a common security problem.

The spam, written in German, English, and Dutch, advertised gambling websites and seemed to affect only European users. Many of those users wrote on the company’s forum they had used a unique email address solely for Dropbox, leading to suspicions the company had been hacked.

Dropbox brought in an outside security team to investigate, but maintained on July 21 that it had found no intrusion of its internal systems or other compromised accounts.

In light of the breach, Dropbox said it plans in a few weeks to introduce two-factor authentication, such as a system that would send a temporary code to a person’s phone.

Other planned upgrades include a new page that will show logs of user account activity and other “automated mechanisms to help identify suspicious activity,” Agarwal wrote. Users may also be prompted to change their password if it has not been changed in a long time.

@Dropbox confirms it was hacked -Two-Factor Authentication Coming - #Dropbox #Security


When a few hundred Dropbox users began receiving spam emails about online casinos and gambling sites two weeks ago, it seemed like something was up. And indeed there was.

The online file storage service confirmed today that hackers accessed usernames and passwords from third party sites and then used them to get into Dropbox users’ accounts.

“Our investigation found that usernames and passwords recently stolen from other websites were used to sign in to a small number of Dropbox accounts. We’ve contacted these users and have helped them protect their accounts,” In a post on the Dropbox website, Aditya Agarwal, the company’s director of engineering, wrote.
 ”A stolen password was also used to access an employee Dropbox account containing a project document with user email addresses. We believe this improper access is what led to the spam.”

Agarwal said that Dropbox will now offer two-factor authentication for members, giving the option of using two forms of identity before access to an account is granted. He said the company was also adding new automated systems to monitor suspicious activity and a new page allowing members to see all active logins on their account.

He added: “At the same time, we strongly recommend you improve your online safety by setting a unique password for each website you use. Though it’s easy to reuse the same password on different websites, this means if any one site is compromised, all your accounts are at risk.”

Nikjju Mass #SQLi campaign target more than 2 Millions Urls

Nikjju+mass+SQL+injection


Daniel Cid an open source developer and information security professional reported on Sucuri blog that their team tracked a new mass SQL injection campaign that started early this month and till now more than 180,000 URLs have been compromised. Nikjju is a mass SQL injection campaign targeting ASP/ASP.net sites.


At the time of writing Google has identified 361,000 pages infected with that javascript call, but the number is growing really fast.
In this case it adds the following javascript to the compromised sites.
script
One more interesting fact that researchers have noticed that Nikjju.com domain was registered on April 1st 2012 and in 18 days more than 180,000 urls get infected.
This mass Sql Injection also compromise some Government sites also , as listed below :
jnd.xmchengdu.gov.cn
study.dyny.gov.cn
gcjs.kaifeng.gov.cn


Few hours we have also reported that, Google Sent Hacked Notification Messages to Millions of Webmasters of sites doing “weird redirects.”

#Anonymous hacks #Vatican again

Summary: The hacktivist group Anonymous has taken down the Vatican’s website for a second time. The attack is part of the organization’s recent declaration of war against religion.

Anonymous has hacked the Vatican for a second time. The website for the Catholic Church, vatican.va, is currently down. Unlike the first hack, which appeared to be a typical Distributed Denial of Service (DDoS) attack, this one is more than just taking down the website. The main target of the new strike is Vatican Radio, and today’s attack is possible because of a backdoor Anonymous created for itself the first time around.

Once again, Anonymous’ Italian members are the ones behind this particular siege. A Pastebin post details what Anonymous wants from the Vatican. It is written entirely in Italian, the only exception being the group’s signature:

We are Anonymous
We are Legion
We don’t forgive
We don’t forget
Expect Us!

In short, the message says the Vatican’s systems are less secure than the Church may think. While everyone was focused on the site being down, Anonymous decided to penetrate the systems further than just your average DDoS attack, which typically overloads a website with requests.

In the first attack on March 7, Anonymous said it is not personally attacking Christians, just the Vatican itself. The group explained it has a problem with the Catholic Church’s teachings on birth control and abortion. Anonymous is also not happy with the way the Vatican handles widespread sexual abuse scandals. Last but not least, it accused the Church of harboring Nazi war criminals and condemned the institution for allowing its representatives to molest children.

In August 2011, Anonymous attempted to attack the Vatican, but failed. Instead, the group targeted the website of the 2011 World Youth Day, the massive Catholic youth festival that was underway in Madrid, Spain. The website was up and down all day on the first day of the festival: August 18.

#GitHub #hacked with Ruby on Rails public key vulnerability

GitHub+hacked+with+Ruby+on+Rails+public+key+vulnerability
Github, the service that many professional programmers use to store their work and collaborate on coding, was hacked over the weekend. A young Russian developer Egor Homakov exploited a gaping vulnerability in GitHub that allowed him (or anyone else with basic hacker know-how) to gain administrator access to projects such as Ruby on Rails, Linux, and millions of others.
When Github saw what happened, they suspended Homakov’s account, which created a firestorm of protest. A blog post entitled, Github, You Have Let Us All Down . Github has succumbed to a public key vulnerability in Ruby on Rails allowing a user administrator access to the popular Rails Git. Homakov’s actions were relatively simple - he merely uploaded his public key to the repository so Git thought he was an approved administrator of that project. This would not only entitle Homakov to commit files but he could effectively wipe the entire project and its history clean.
“The root cause of the vulnerability was a failure to properly check incoming form parameters, a problem known as the mass-assignment vulnerability,” GitHub co-founder Tom Preston-Werner wrote in a blog post.

“Two days ago he responsibly disclosed a security vulnerability to us and we worked with him to fix it in a timely fashion. Today, he found and exploited the public key form update vulnerability without responsible disclosure,” Preston-Werner said, explaining that this had meant Homakov had broken GitHub’s terms and conditions.
Github is used by a number of high-profile projects including the Linux kernel. Homakev’s actions were to exploit a well known weakness of Ruby on Rails and questions might be asked as to why Github’s administrators did not block such an attack sooner.
Moving forward, GitHub has apologized for obfuscating the how white hat hackers should disclose security vulnerabilities and set up a new help page that clearly lists how to report issues.

#Anonymous geek-topia: Hackers change Hungarian constitution

(AFP Photo / Valery Hache)

In Hungary, IT workers retire at 32 and get pensions equal to 150 per cent of their salaries. That’s according to Anonymous’ version of the Hungarian Constitution, which they posted after hacking the website of the Constitutional Court.

­“Ideals and rulers of tyranny, or dictators represent but short periods of history. The people have the right to eliminate tyranny or rebel against it,” said the “new constitution” written by the Anonymous hacker group.

The hackers have made their own adjustments to basic Hungarian law. Thus, according to the group’s version of the constitution, IT workers not only get to retire early on a luxurious pension, but are also exempted from paying tax.

The text of Anonymous’ “ideal” constitution was swiftly removed from the court’s website.

Anonymous has wide experience of launching such IT attacks. They have succeeded in taking down the websites of large security companies, law-enforcement organizations or government agencies, including the White House, the CIA, FBI, Department of Justice, Universal Music Group, RIAA and Motion Picture Association of America.

On February 29 Interpol arrested 25 members of the group in Europe and South America. Not surprisingly, the group downed Interpol’s main website in response.

#Anonymous Hacked Into #Monsanto Database In Retaliation For Lawsuits Against Organic Farmers - #NWO #GMO

In its latest strike on the biotech conglomerate Monsanto, hacking group Anonymous published an outdated database of the company’s information and emails, CNET reports.

“Your continued attack on the worlds [sic] food supply, as well as the health of those who eat it, has earned you our full attention,” wrote Anonymous, under the banner ‘AntiSec’. “Your crimes against humanity are too many to name on one page,” it added.

Anonymous says its onslaught was brought on by Monsanto’s lawsuits against 9,000 organic dairy farmers who stated on their labels that they didn’t use growth hormones.

The hackers went on to say that although they knew releasing old data was not going to harm Monsanto, they would continue to attack the company and “expose” its “bulls**t”, ending with the threat: “Expect Us”.

Anonymous’ battle with Monsanto began in July 2011 when the suit against the farmers was filed. Anonymous hacked into the company’s website and released data on about 2,500 individuals associated with the agriculture industry. About 10 percent of this information was related to current or former Monsanto employees.

Monsanto was one of seven companies that supplied the U.S. military with Agent Orange during the Vietnam War. It also used to make bovine growth hormones. Now it focuses on making genetically engineered seeds and pesticides, according to the International Business Times. But even this has gotten it into trouble with the law.

6GB NASA Database Leaked, Hackers Notify Agency

NASA subdomain contains XSS vulnerability

Enlarge picture
Members of two hacker collectives, Team r00tw0rm and Team inj3ct0r, identified an SQL injection vulnerability on one of the subdomains owned by NASA and hosted on the domain nasa.gov. By leveraging the security hole, the hackers obtained a 6 gigabyte database, but refused to disclose the name of the flawed subdomain to give the agency time to patch it up.

A sample of the database reveals information such as usernames, email addresses, names, IDs, login dates, passwords, and other data.

“Complete Database is in GB’s, well we aren’t leaking it. We may keep all parts in our private home! Yet only little bit dump or few columns data is released just to inform NASA that being National Aeronautics and Space Administration you must also keep your servers up to date!” the hackers said.

They claim they informed NASA a few days ago, but since the organization failed to respond, they leaked part of the database to attract the agency’s attention.

NASA domains and subdomains have been found to be vulnerable on numerous occasions in the past several days. Members of TeamHav0k also found a subdomain that can easily be exploited by hackers.

They identified a cross-site scripting (XSS) vulnerability and made a screenshot to prove their findings.

“Well here’s another XSS in NASA…. I was surprised at how easy it was just a simple check of the src of the page they only filtered out stuff like < / > and i think the = as well,” a TeamHav0k representative said.

Last week the Kennedy Space Center was found to contain a similar weakness, but after being contacted, the site’s administrators promised to look into it.

A few years ago the veterans of the hacking scene proved their skills by hacking into NASA. Now, the organization has so many sites and they’re so full of security holes that it’s hard for even a novice hacker to resist the temptation.

US Census Bureau Hacked by R00tw0rm and Inj3ct0r - #Anti-Sec @_TeaMp0isoN @Anonymous

The hackers show their support for AntiSec Enlarge picture - The hackers show their support for AntiSec

The official website of the US Census Bureau (census.gov), the government organization that gathers demographic and economic data, was hacked by members of r00tw0rm and inj3ct0r, the hackers obtaining what they call a “secret zip file.”

A Pastebin file reveals a sample of the data they obtained from the agency’s servers, including table names and columns.

According to the hackers, this hack was performed to attract the attention of the site’s administrators and determine them to patch up the security holes, but also to show their support for AntiSec.

The same hacker collectives managed to gain access to a NASA subdomain, obtaining 6 gigabytes worth of information. They took the time to notify the Space Administration of the vulnerability and leaked only part of the database to prove that they possess the data.

www.combinedsystems.com hacked by #antisec #anonymous #OpBahrain #solidarity #Bahrain

combinedsystems-defaced-and-rmd-by-anonymous-on-anniversary-of-bahrain-uprising

Combined Systems a U.S.-based firm that supports military forces and law enforcement agencies around the world has become the latest victim to anonymous hackers who have left the website in a very bad state.

The attack which has actually seen two sites defaced and wiped but both show the same defacement. The attacks come on the anniversary of the bahrain uprising. and feature the below message as well as the video “the forth world war” which goes for well over an hour, the attack was announced via the popular @ twitter account.

twitter-anonymousirc-bahrain-uprising-annivers

Other information form the leak is pretty much all the servers data which si now deleted and that contains lots and lots of different user accounts for different parts of the site.

      _  _                   __   __
   __| || |__ _____    _____/  |_|__| ______ ____   ____
   \   __   / \__  \  /    \   __\  |/  ___// __ \_/ ___\       #anonymous
    |  ||  |   / __ \|   |  \  | |  |\___ \\  ___/\  \___       #antisec
   /_  ~~  _\ (____  /___|  /__| |__/____ \ \___ \ \___  |      #solidarity
     |_||_|        \/     \/             \/     \/     \/       

################################################################################

COMBINEDSYSTEMS DEFACED AND RM'D BY ANONYMOUS ON ANNIVERSARY OF BAHRAIN UPRISING

So you war profiteering all crazy, selling mad chemical weapons to militaries
and cop shops around the world, thinking you will get away unscathed by the
rising tides of insurrection? Think again, assholes. Combined Systems, lay down
your arms: you just lost the game. In the past we have marched on your offices
in Jamestown, Pennsylvania: now it is time to march on your websites. All your
"less than lethal" arms were simply no match for our 9000 cocks and mad black
hat technique. We came, we saw, we rooted and rm'd your website. Umad?

From the streets of Oakland to Tahrir Square, to Palestine, Greece, Bahrain and
Syria, your sinister instruments of torture and brutality have been used by the
vile swine enforcers of the rich ruling classes to repress our revolutionary
movements. You shot and gassed protesters, running them off public parks in the
US. Several dozen died because of your tear gas used in Egypt. You wave the
Israeli flag outside of your offices, while just two months ago your tear gas
cannisters fired by the IDF killed a man in the West Bank. Did you think we
forgot? Why did you not expect us?

In addition to dumping name, address, phone and password information for dozens
of CSI employees and clients, our tag team of mayhem went the extra mile by
dumping email for some of the pigs ordering anti-protester gear off their shitty
website. We also hit sur-tec.com, some shitty CCTV surveillance company owned by
former FBI director Clarence M. Kelley (their password was 'government'). Do you
think they will appreciate the irony of being owned due to buying "security"
products from a compromised website? How long do you think we had your website
backdoored, capturing all incoming customers registrations and orders? 42? If
you ever get your website back up, do you think you will be anything more than a
shadow of your former self? Will your clients ever trust you again?

Unfortunately, some random paypal phisher also hacked and abused the server.
This noob was reported to the sysadmins by google, forcing us to move forward
with our plans ahead of schedule. To the system administrators and web
developers who aided and abetted CombinedSystems.com, we got something for your
asses too (and it's more than getting pounded with 9000 dildos at maximum
vibration speed): if you so much as lift a finger to support CSI in rebuilding
their websites, we will post all your mail on you and all your clients (aka The
Lolcaust). Any other brave whitehats want to step up to CSI's defense?

To our hacker allies, our fellow occupiers, our militant comrades all around the
world, the time for talk is over: it's time to hack and smash, beat and shag.
Each and every #FuckFBIFriday we will make war on the infrastructure of the
military prison industrial non-organic complex, targeting all war profiteers,
corporate executives, white hats, snitches and pigs. We're coming to loot,
plunder, and make all their base belong to us. 

You really think you can crush the spirit of the Arab Spring, the Occupation
Movement, and Anonymous with tear gas and subpoenas?! Mothafucka, our mad skills
iz bulletproof. Now let's bust out that hacklog! <3

video in the defacement.


defaced sites:

http://www.combinedsystems.com/

http://handcuffsusa.com/

mirror: http://www.zone-h.org/mirror/id/16969108

Original: http://pastebin.com/DaauwSzQ

Top