Social Engineering

Pierluigi Paganini June 12, 2016
How to bypass two-factor authentication with a text message

Is Two-factor authentication the solution for any kind of hacks? A text message could be used to take over your Google Account. Following the recent data breaches suffered by IT giants (e.g. MySpace, LinkedIn, Twitter) security experts are inviting users to avoid sharing login credentials on multiple websites and to enable two-factor authentication (2FA) when it […]

Pierluigi Paganini May 14, 2016
VIDEO – RedTeam Hackers Crack Businesses’ Security

A few days ago group of white hat hackers from RedTeam traveled to the Midwest to test the systems of a major power company and breach it with Social Engineering. RedTeam Security is a group of ethical hackers who specialize in offensive security, believing that the best defense is a good offense. We wrote about […]

Pierluigi Paganini May 10, 2016
Hackers Crack Businesses’ Security Using Social Engineering

A group of white hat hackers from RedTeam traveled to the Midwest to test the systems of a major power company and breach it with Social Engineering. RedTeam Security is a group of ethical hackers who specialize in offensive security, believing that the best defense is a good offense. Engaging in social engineering, in addition […]

Pierluigi Paganini February 12, 2016
UK police arrested teenage hacker who allegedly hacked CIA and FBI officials

UK Police and FBI have arrested a teenager suspected to be Cracka, the hacker who hacked the CIA Director John Brennan. The Federal Bureau of Investigation (FBI) and British law enforcement have identified and arrested a teenage hacker alleged member of the hacking crew “Cracka with Attitude.” The Cracka with Attitude is the group of […]

Pierluigi Paganini November 07, 2015
Cracka hackers doxed more than 2,000 Government employees

Cracka hackers who took over the personal email account of CIA Director John Brennan have now doxed more than 2000 Government employees. The young hackers of the crew known as Crackas With Attitude (CWA) announced that they have doxed more than 2,000 Government employees. The hackers are the same that accessed into the AOL email account of the […]

Pierluigi Paganini October 20, 2015
A young hacker violated the CIA Director’s private AOL email

A young hacker violated the CIA Director’s personal email account and leaked sensitive files including a top-secret application for a security clearance. A high-school student claims to have hacked the personal email account of the CIA Director John Brennan. CIA and the US law enforcement agencies are investigating on the case. The teen told the New York […]

Pierluigi Paganini September 29, 2015
The Shopify commerce platform is open to RFD attacks

The researcher David Sopas at WebSegura discovered a Reflected Filename Download vulnerability in the popularmulti-channel commerce platform Shopify. Shopify is a multi-channel commerce platform that helps people sell online, in-store, and everywhere in between. The popular security researchers Davis Sopas at WebSegura has discovered a Reflected Filename Download vulnerability in the Shopify service. Sopas already sent a security report to Shopify explaining […]

Pierluigi Paganini June 12, 2015
Law enforcement dismantled gang behind Operation Triangle Phishing Campaign

A joint international operation led to the dismantling of a criminal gang who is behind the Operation Triangle phishing campaign. A joint effort of Law enforcement from six countries, including Italy, Spain, Poland,Belgium, the U.K., and Georgia, allowed the arrest of 49 suspects fraudsters. Twenty individuals were arrested in Italy, 10 in Spain, 18 in […]

Pierluigi Paganini February 01, 2015
IC3 and FBI warn about Business Email Compromise aka Wire Payment Scam

IC3 and FBI warn about a significant increase of cases related to Business Email Compromise, nearly 2,000 individuals were victims of a wire payment scam. According to an online statement from the Internet Crime Complaint Center (IC3) and the FBI, nearly 2,000 individuals were victims of a wire payment scam that was extended to 45 countries and […]

Pierluigi Paganini January 06, 2015
Wifiphisher – Automated phishing attacks against Wifi networks

A Greek security researcher has developed WiFiPhisher, a Wi-Fi social engineering tool that is designed to steal credentials from users of WPA networks. The Greek security expert George Chatzisofroniou has developed WiFiPhisher, a WiFi social engineering tool that allows an attacker to steal credentials from users of secure WiFi networks. WiFiPhisher is available for download on the software […]