A Manager of the Exmo Bitcoin Exchange Has Been Kidnapped In Ukraine

CaptainDork shares a report from BBC: A manager of the Exmo Bitcoin exchange has been kidnapped in Ukraine. According to Russian and Ukrainian media reports Pavel Lerner, 40, was kidnapped while leaving his office in Kiev’s Obolon district on December 26th. The reports said he was dragged into a black Mercedes-Benz by men wearing balaclavas. Police in Kiev confirmed to the BBC that a man had been kidnapped on the day in question, but would not confirm his identity. A spokeswoman said that the matter was currently under investigation, and that more information would be made public later on. Mr Lerner is a prominent Russian blockchain expert and the news of his kidnapping has stunned many in the international cryptocurrency community. Read more of this story at Slashdot.

Excerpt from:
A Manager of the Exmo Bitcoin Exchange Has Been Kidnapped In Ukraine

Powerful backdoor found in software used by >100 banks and energy cos.

(credit: Jeremy Brooks ) For 17 days starting last month, an advanced backdoor that gave attackers complete control over networks lurked in digitally signed software used by hundreds of banks, energy companies, and pharmaceutical manufacturers, researchers warned Tuesday. The backdoor, dubbed ShadowPad, was added to five server- or network-management products sold by NetSarang , a software developer with offices in South Korea and the US. The malicious products were available from July 17 to August 4, when the backdoor was discovered and privately reported by researchers from antivirus provider Kaspersky Lab. Anyone who uses the five NetSarang titles Xmanager Enterprise 5.0, Xmanager 5.0, Xshell 5.0, Xftp 5.0, or Xlpd 5.0, should immediately review posts here and here from NetSarang and Kaspersky Lab respectively. Covert data collection The attack is the latest to manipulate the supply chain of a legitimate product in hopes of infecting the people who rely on it. The NotPetya worm that shut down computers around the world in June used the same tactic after attackers hijacked the update mechanism for tax software that was widely used in Ukraine . Supply-chain attacks that targeted online gamers included one used to spread the PlugX trojan in 2015 and the malware dubbed WinNTi in 2013 . Read 8 remaining paragraphs | Comments

Read the article:
Powerful backdoor found in software used by >100 banks and energy cos.

Germany Says Cyber Threat Greater Than Expected, More Firms Affected

From a Reuters report, shared by a few readers on Twitter: Germany’s BSI federal cyber agency said on Friday that the threat posed to German firms by recent cyber attacks launched via a Ukrainian auditing software was greater than expected, and some German firms had seen production halted for over a week. Analyses by computer experts showed that waves of attacks had been launched via software updates of the M.E.Doc accounting software since April, the BSI said in a statement. Read more of this story at Slashdot.

Read more here:
Germany Says Cyber Threat Greater Than Expected, More Firms Affected

Backdoor built in to widely used tax app seeded last week’s NotPetya outbreak

Enlarge (credit: National Police of Ukraine ) The third-party software updater used to seed last week’s NotPetya worm that shut down computers around the world was compromised more than a month before the outbreak. This is yet another sign the attack was carefully planned and executed. Researchers from antivirus provider Eset, in a blog post published Tuesday , said the malware was spread through a legitimate update module of M.E.Doc, a tax-accounting application that’s widely used in Ukraine. The report echoed findings reported earlier by Microsoft , Kaspersky Lab , Cisco Systems , and Bitdefender . Eset said a “stealthy and cunning backdoor” used to spread the worm probably required access the M.E.Doc source code. What’s more, Eset said the underlying backdoored ZvitPublishedObjects.dll file was first pushed to M.E.Doc users on May 15, six weeks before the NotPetya outbreak. “As our analysis shows, this is a thoroughly well-planned and well-executed operation,” Anton Cherepanov, senior malware researcher for Eset, wrote. “We assume that the attackers had access to the M.E.Doc application source code. They had time to learn the code and incorporate a very stealthy and cunning backdoor. The size of the full M.E.Doc installation is about 1.5GB, and we have no way at this time to verify that there are no other injected backdoors.” Read 6 remaining paragraphs | Comments

Originally posted here:
Backdoor built in to widely used tax app seeded last week’s NotPetya outbreak

American Farmers Are Turning To Ukraine To Hack Into Their Own Tractors: Report

Modern John Deere tractors are outfitted with dozens of sensors and computers, many of which cannot be serviced by owners because of a stupid licensing agreement John Deere forces upon its customers. Since farmers have neither the time nor money to waste on a technician’s visit, some are taking matters into their own… Read more…

See the article here:
American Farmers Are Turning To Ukraine To Hack Into Their Own Tractors: Report

The US Army Finally Gets The World’s Largest Laser Weapon System

It’s been successfully tested on trucks, as well as UAVs and small rockets, according to a video from Lockheed Martin, which is now shipping the first 60kW-class “beam combined” fiber laser for use by the U.S. Army. An anonymous reader quotes the Puget Sound Business Journal: Lockheed successfully developed and tested the 58 kW laser beam earlier this year, setting a world record for this type of laser. The company is now preparing to ship the laser system to the U.S. Army Space and Missile Defense Command/Army Forces Strategic Command in Huntsville, Alabama [according to Robert Afzal, senior fellow for Lockheed’s Laser and Sensor Systems in Bothell]. “We have shown that a powerful directed energy laser is now sufficiently light-weight, low volume and reliable enough to be deployed on tactical vehicles for defensive applications on land, at sea and in the air…” Laser weapons, which complement traditional kinetic weapons in the battlefield, will one day protect against threats such as “swarms of drones” or a flurry of rockets and mortars, Lockheed said. Read more of this story at Slashdot.

Read More:
The US Army Finally Gets The World’s Largest Laser Weapon System

Some hacked e-mails, documents from Putin advisor confirmed as genuine

Enlarge Recently a cache of 2,337 e-mails from the office of a high-ranking advisor to Russian president Vladimir Putin was dumped on the Internet after purportedly being obtained by a Ukrainian hacking group calling itself CyberHunta . The cache shows that the Putin government communicated with separatist forces in Eastern Ukraine, receiving lists of casualties and expense reports while even apparently approving government members of the self-proclaimed Donetsk People’s Republic. And if one particular document is to be believed, the Putin government was formulating plans to destabilize the Ukrainian government as early as next month in order to force an end to the standoff over the region, known as Donbass. Based on reporting by the Associated Press’s Howard Amos and analysis by the Atlantic Council’s Digital Forensic Research Lab , at least some of the e-mails—dumped in a 1-gigabyte Outlook .PST mailbox file—are genuine. Amos showed e-mails in the cache to a Russian journalist, Svetlana Babaeva, who identified e-mails she had sent to Surkov’s office. E-mail addresses and phone numbers in some of the e-mails were also confirmed. And among the documents in the trove of e-mails is a scan of Surkov’s passport (above), as well as those of his wife and children. A Kremlin spokesperson denied the legitimacy of the e-mails, saying that Surkov did not have an e-mail address. However, the account appears to have been used by Surkov’s assistants, and the dump contains e-mails with reports from Surkov’s assistants. The breach, if ultimately proven genuine, would appear to be the first major publicized hack of a Russian political figure. And in that instance, perhaps this could be a response to the hacking of US political figures attributed to Russia. Read 6 remaining paragraphs | Comments

Read More:
Some hacked e-mails, documents from Putin advisor confirmed as genuine

Tie your shoes the Ukrainian way

The “Ukrainian lacing” method puts a pair of loops in both sets of top eyelets, cross-laces to the bottom, and anchors the laces with a pair of hidden knots, so that you can slip your foot into a “tied” shoe, then tighten it and tie a perfect bow with no loose ends. Read the rest

More here:
Tie your shoes the Ukrainian way

How American Students Can Get a University Degree For Free In Germany

HughPickens.com writes: BBC reports that Germany has abandoned tuition fees altogether for German and international students alike and more than 4, 600 US students are fully enrolled at Germany universities, an increase of 20% over three years. “When I found out that just like Germans I’m studying for free, it was sort of mind blowing, ” says Katherine Burlingame who decided to get her Master’s degree at a university in the East German town of Cottbus. “I realized how easy the admission process was and how there was no tuition fee. This was a wow moment for me.” When Katherine came to Germany in 2012 she spoke two words of German: ‘hallo’ and ‘danke’. She arrived in an East German town which had, since the 1950s, taught the majority of its residents Russian rather than English. “At first I was just doing hand gestures and a lot of people had compassion because they saw that I was trying and that I cared.” She did not need German, however, in her Master’s program, which was filled with students from 50 different countries but taught entirely in English. In fact, German universities have drastically increased all-English classes to more than 1, 150 programs across many fields. So how can Germany afford to educate foreign students for free? Think about it this way: it’s a global game of collecting talent. All of these students are the trading cards, and the collectors are countries. If a country collects more talent, they’ll have an influx of new ideas, new businesses and a better economy. For a society with a demographic problem — a growing retired population and fewer young people entering college and the workforce — qualified immigration is seen as a resolution to the problem as research shows that 50% of foreign students stay in Germany. “Keeping international students who have studied in the country is the ideal way of immigration, ” says Sebastian Fohrbeck.”They have the needed certificates, they don’t have a language problem at the end of their stay and they know the culture.” Read more of this story at Slashdot.

Visit site:
How American Students Can Get a University Degree For Free In Germany

UK Spy Agency Certifies Master’s Degrees In Cyber Security

An anonymous reader writes Intelligence agency GCHQ has just accredited six UK universities to teach Master’s degrees in online security that meet the intelligence agency’s “stringent criteria.” From the press release: “The certification of six Master’s degrees in Cyber Security was announced by Rt.Hon Francis Maude, Minister for the Cabinet Office, when he visited GCHQ today. This marks another significant step in the development of the UK’s knowledge, skills and capability in all fields of Cyber Security as part of the National Cyber Security Programme. The National Cyber Security Strategy recognises education as key to the development of Cyber Security skills and, earlier in the year, UK universities were invited to submit their Cyber Security Master’s degrees for certification against GCHQ’s stringent criteria for a broad foundation in Cyber Security.” Read more of this story at Slashdot.

More here:
UK Spy Agency Certifies Master’s Degrees In Cyber Security