Monday, 21 September 2015

Can an air-gap system be hacked?

The answer to the above question a few years back would have been “no” but today with proliferation of “internet of things” and hearing about cyber-attacks on critical network infrastructure such as oil gas, water, electricity, transportation system the answer is “Yes”, air-gapped systems can also be hacked. In wake of the recent data breach which happened on US Government system wherein 4 billion data records were hacked put a question in my mind if a US government system...

Saturday, 31 January 2015

Is NMAP really the best PORT Scanner ?

 Nmap aka "Network Mapper" is a free and open source tool for network discovery and security auditing. The tool came into existence through the work of Mr.Gordon Lyon, whom we also know as "Fyoodor". I have a huge respect for Mr.Fyoodor for his help to the open source and security community. Everyone in the security community who has something to do with security testing has used this wonderful tool known as "Nmap", but is Nmap the best port scanner available ? Recently,...

Wednesday, 13 August 2014

POS Malware "Back-off"

POS or "Point of Sale", it is a place where a Transaction made by the Consumer is made. The "place" here refers to the point where you swap your credit-card against the machine at a vendor. “Backoff” is a family of POS malware and has been discovered recently. The malware family has been witnessed on at least three separate forensic investigations. Researchers have identified three primary variants to the “Backoff” malware which would include- -goo -MAY -net -LAST These...