Saturday, 20 June 2015

Hack your Girlfriend fb account

We at The Hacker News get a lot of requests via emails and messages from people who want to hack into someone else’s Facebook account or Gmail account or break into somebody’s network.

However, 80 to 90 percent requests we receive every day are from people who want to hack into their girlfriend, boyfriend, wife, or husband’s Facebook account in order to read their private conversations and reveal their secret relationships, if any.
Even though we strongly deny any such requests because accessing someone else’s account without their knowledge or permission is a crime…

...but there are demands from people – those cheated by their love, betrayal of trust, driven by greed or revenge – to break into the Facebook accounts of other people.

So, what about Hiring a Hacker?


As money could buy everything, a service received a lot of popularity earlier this year – even featuredon the front page of the New York Times – claims to connect these needy people to professional hackers for hire around the world.

Hacker’s List, launched in November 2014, received more than 500 hacking jobs in the period of just three months. Anyone can post or bid on a hacking project listed on the website.

There are around 2740 anonymous hacker profiles displayed on the website who are ready to accomplish hacks for you if hired. Prices of hackers range from $28 to $300, and full hacking projects range in prices of $100 to $5000.

Payments are done anonymously — collection of fees when tasks are completed, nobody knows the identity of those involved in doing the work.

Hacker’s List claims to provide "ethical hacking" services and asks users not to "use the service for any illegal purposes," as laid out in its 10-page long terms and conditions section.

However, the activities listed on the site are clearly illegal in some cases, so is it providing a so-called white hat hacking service?

Do You Also want to Hack Facebook Accounts?


Recent research indicates that many of the hacking tasks listed on Hacker’s List are related to breaking into Facebook accounts, hacking Gmail passwords, reading someone else’s chat logs from messaging apps like WhatsApp and Messenger.

In short, most of the requests from people are completely unlawful, very few requests are actually legal, and even most of the already completed projects fall under the category of crime.

The statistics of research conducted by security researchers Jonathan Mayer shows that the majority of users want to hack into somebody’s Facebook accounts, as Facebook is the most common target of users.

Below are the stats:


  • 23% of projects relate to Facebook hacking, often involving a business dispute or jilted romance.
  • 14% of projects relate to Google account hacking, also involving a business dispute or jilted romance.
  • 8% of projects involve students asking for University’s computer systems to be hacked in order to improve their exam grades.
  • 3% of projects involve burying some embarrassing tidbit, essentially an ersatz Right to be Forgotten.


Revealing True Identity of Customers


Mayer has also noticed another interesting fact that it is quite possible for anyone to reveal the true identity of Anonymous clients who are actually asking/hiring hackers for his or her jobs.

Every user registered on “Hacker’s List” website choose anonymous usernames in order to keep their actual identity hidden. However, there are physiological possibilities that most users keep their username same for multiple websites like I do.

Mayer explained that using a simple web page crawler, anyone can collect all the usernames from Hacker’s List Project pages and then can cross-link each of these so-called anonymous usernames with Facebook to find active profiles, possibly revealing their true identity, email addresses, contact details and other personal data.

Personally, I don’t encourage anyone to hack into the accounts of other people, and to avoid getting hacked; you should regularly update your password and keep other security settings tight.

Hack your Email Account

This Simple Trick Requires Only Your Phone Number to Hack your Email Account
We all have been receiving spam phone calls and messages on almost daily basis from scammers who want to pilfer your money and personal information, but a new type of social engineering hack that makes use of just your mobile number to trick you is a little scarier.

Security firm Symantec is warning people about a new password recovery scam that tricks users into handing over their webmail account access to the attackers.

In order to get into your email account, an attacker does not need any coding or technical skills. All an attacker needs your email address in question and your cell phone number.

Since the process to reset the password is almost similar to all mail services, this new password recovery scam affects all popular webmail services including Gmail, Yahoo, and Outlook among others.

Symantec has provided a video explanation of how this new hack attack works. The trick is as simple as it sounds: if you want to reset someone’s email account password, all you actually need is their mobile number.

Here's How the Scam Works:


Send a text from an unknown number to the victim’s phone, asking them to verify their account by replying with the verification code they are about to receive in order to ensure their Google account is secure, but in real the code is a password resets code.
  • Send another text message containing an unlock code to the registered phone.
  • The victim receives the code with a text something like this: "This is Google. There has been unauthorized activity on your account. Please reply with your verification code."
how-to-hack-email-account
  • As soon as victim responds with the verification code, the email address is forfeited, and the attacker can log into victim’s Gmail account without detection.
This social engineering trick sounds so easy and requires almost no technical skills to get into anyone’s email account.

Most of us reply to the unknown phone calls and messages thinking it is from the company, as receiving messages and phone calls from companies is not something uncommon.

Always be Defensive to such Scams


Before watching the video, someone would have never thought of such a method to hack someone’s account.

Of course, the untrained mind could easily fall victim to the text asking for a response. But, as Symantec says, "Legitimate messages from password recovery services will only tell you the verification code and will not ask you to respond in any way."

The workaround is not to fall victim for such kinds of scams and always examine the messages you receive.

Monday, 8 June 2015

Beware! Facebook UnfriendAlert Software Steals Your Account Password


Facebook-hacking-software Today everybody wants to know — Who visited my Facebook profile?, Who unfriended me from the Facebook Friend list?,
Who saw my Facebook posts?, and many other features that isn't provided by Facebook by default.

So most Facebook users try to find out a software and fall victim to one that promises to accomplish their desired task. Hackers make use of
this weakness and often design malicious programs in order to victimize broad audience.

Following I am going to disclose the realities behind one such software designed cleverly to trick Facebook users to make them believe it is
genuine.



UnfriendAlert, a free application that notifies you whenever someone removes you from the Facebook friend list, has been found collecting its users' Facebook credentials.

UnfriendAlert Stealing your Facebook Credentials:

Security researchers at Malwarebytes have warned users of the UnfriendAlert app saying that the notorious app asks users to login with their Facebook credentials to activate unfriends monitoring and alert service for your Facebook profile.

Facebook has provided API OAuth login system for third party applications, where users don't need to provide their Facebook credentials to them. So you should never submit your Facebook password to any third party service or desktop software in any case.

Once you enter your login credentials, UnfriendAlert will send it to the website "yougotunfriended.com" owned by attackers.

Late last month, UnfriendAlert was also classified as potentially unwanted program (PUP) which often displays unwanted advertisements and deceptively installs other malicious software and free apps when visiting some web pages in your Chrome, Firefox, and Internet Explorer, making you fail to block them.

Uninstall UnfriendAlert and Change your Password Now!

So users are recommended to uninstall UnfriendAlert App from your computer, and besides removing this, you are also advised to change your Facebook password as soon as possible. You can do this under "Settings —> Password —> Edit."

Always do some research before installing any third party application as your one single mistake could compromise your online security and privacy in various ways.