By Waqas
The flaw is tracked as CVE-2022-40684 in FortiOS, while its exploit is being sold on a popular Russian hacker forum.
This is a post from HackRead.com Read the original post: Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs

While performing routine monitoring, Cyble’s Global Sensor Intelligence (GIS) discovered a threat actor is distributing unauthorized access to several Fortinet VPNs on a Russian cybercrime forum.

When they evaluated the access, researchers realized that the attacker was trying to add a new public key to the admin user’s account. Further probe revealed that the targeted organizations used outdated FortiOS software.

This indicated the attacker was managing authentication bypass by exploiting a channel or alternate path flaw tracked as **CVE-2022-40684** in FortiOS. This authentication bypass flaw lets an unauthorized/unauthenticated attacker exploits the administrative interface.

**Impacted Products and Firmware Versions**

According to Cyble’s research published on November 24, 2022, multiple **Fortinet** versions are affected by this flaw, including FortiOS, FortiProxy, and FortiSwitchManager. The vulnerability allows an attacker to perform operations on the “administrative interface” through specially created HTTPS or HTTP requests, Cyble’s **advisory** read.

As seen by Hackread.com, another threat actor on the same Russian hacker forum is currently offering the same Fortinet VPN exploit. In a listing published earlier today, the threat actor cited Censys’s search that showed there are over 400,000 exposed devices.

According to Cyble’s researchers, the following are the impacted versions of FortinetOS.

1.  FortiProxy version 7.2.0
2.  FortiSwitchManager version 7.2.0
3.  FortiSwitchManager version 7.0.0
4.  FortiOS version 7.0.0 through 7.0.6
5.  FortiOS version 7.2.0 through 7.2.1
6.  FortiProxy version 7.0.0 through 7.0.6

**Vulnerability Details**

Research revealed that Fortinet software had been targeted since 17 October 2022. The attacker exploits the controlling mechanism of a function to target impacted versions of Fortinet products.

The function evaluates the affected devices’ access to another functionality called REST API. The attacker adds an SSH key to the admin account when exploiting the flaw to access SSH and invade the impacted system as admin.

To further compromise the system, the threat actor will modify the admin user’s SSH key and log in to the infected system. Then they would add new local users and update networking configurations for rerouting traffic. Next, the attacker downloads the system configuration and initiates packet captures for capturing sensitive system information.

**The Dark Web Connection**

According to researchers, there are over a hundred thousand internet-exposed FortiGate firewalls that are under the radar of attackers and vulnerable to the flaw. Given the sheer number of exposed products, the vulnerability was categorized as critical.

Researchers suspect that sensitive system data, configuration information, and network details might be shared over **the Dark Web**. That’s because the attacker can add or update a valid public SSH key to the targeted account on a system and gain full access to that system.

Moreover, the attacker may launch additional attacks against the remaining IT ecosystem of the organization after obtaining information via exploitation of this flaw. They are distributing initial access over the **Dark Web**, which has been used in several high-profile attacks lately.

1.  **Russia Hackers Abusing BRc4 Red Team Penetration Tool**
2.  **34 Russian Hacking Groups Stole 50 Million User Passwords**
3.  **Hackers leak login credentials of vulnerable Fortinet SSL VPNs**
4.  **Hackers Selling US Colleges VPN Credentials on Russian Forums**
5.  **Data of 21M SuperVPN, and GeckoVPN users leaked on Telegram**

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs

By Habiba Rashid
A hacker has leaked 5.3 million Twitter account details on a cybercrime forum while another researcher, Chad Loder, claims there is another Twitter breach involving "perhaps over 100 million accounts."
This is a post from HackRead.com Read the original post: Hacker Leaks 5.3M Twitter Accounts as Claims of Larger Breach Surface

On August 7th, 2022, Hackread.com reported a story detailing a Twitter data breach involving 5.4 million accounts. Now, the very same data has been leaked on a hacker forum which surfaced as an alternative to popular and **now-sized Raidforums**.

The data is currently available for download (Screenshot: Hackread.com)

However, there’s more to it. The end of 2022 does not appear to be on Twitter’s side because it has now become the target of yet another conflict. A Los Angeles-based cyber security researcher revealed on 23rd November that Twitter had experienced a massive breach that allegedly affected millions of users across the US and the EU. 

On his now-suspended Twitter account, Chad Loder **warned** users about the data breach which he stated occurred “no earlier than 2021” and “has not been reported before”. He stated to have seen the stolen data in the alleged breach and had spoken to the potential victims who confirmed that the breach data was “accurate”. 

On his Mastodon page, the researcher said that according to his research, it’s probable that there are tens of millions currently affected accounts, possibly hundreds of millions.

S

However, what is uncertain is whether this breach is the same as the one that previously occurred in July this year which was also confirmed by Twitter, or whether this breach is completely different.

According to Loder, this could not be the same breach until Twitter “**lied**” about the July breach. He also noted that this data was in a “completely different format” and had “differently affected accounts”. 

Within 24 hours of Loder tweeting about this, his Twitter account got suspended due to having “violated the Twitter rules”. 

Chad Loder on Twitter (Screenshots Hackread.com)

What’s likely is that both breaches exploited the same vulnerability which was first **reported** by HackerOne in January. It allowed anyone to enter a phone number or email address to find the Twitter handle associated with it. This is a feature used by Twitter as an internal identifier but can be readily converted to a Twitter ID.

At the time, **Twitter acknowledged the existence** of the vulnerability and stated that it had been patched but did not mention anyone exploiting it. However, it was then reported by Restore Privacy that a hacker had used the vulnerability to put together a dataset consisting of Twitter handles, email addresses, and phone numbers of millions of accounts. The data includes Twitter users in the UK, almost every EU country, and parts of the US. 

Any Twitter account with the “let others find you by phone number” setting enabled in its “discoverability” settings is affected. This option is hidden quite deep in Twitter’s settings and **is turned on by default**.  

Keeping in mind the recent news, it becomes apparent that this data was accessed by more than one bad actor. Reports **confirm** that they were shown a dataset that contained similar information in a different format. 

The datasets could be sold to malicious parties who would use the data for advertising purposes or maliciously target certain accounts such as celebrities. 

1.  **APT Groups Trapping Targets with Clever Twitter Scheme**
2.  **Researcher logs into Trump’s Twitter with password MAGA2020**
3.  **Twitter hacker charged in sim swapping, cryptocurrency scheme**
4.  **Twitter Goes on Tor with New Dark Web Domain to Evade Censorship**
5.  **Mastermind of 2020’s top celebrity Twitter hack sentenced to 3 years**

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Hacker Leaks 5.3M Twitter Accounts as Claims of Larger Breach Surface

By Owais Sultan
In an increasingly technologically-based world, being certain of precisely who you are speaking to or doing business with…
This is a post from HackRead.com Read the original post: What is an Identity Verification Service and How Does it Work?

In an increasingly technologically-based world, being certain of precisely who you are speaking to or doing business with can be tricky. Identity verification is an important step in most online transactions that concern money or sensitive information and services, but it can also be used during recruitment processes as a part of a background check. 

This article will explain what an identity verification service is, why they are useful, and how they work.

**What is an Identity Verification Service?**

An identity verification service is a process by which the information and identity provided by an individual is investigated and found to be true or false. These comprehensive online services are based on the traditional identity verification processes used in banks and other financial institutions when new accounts are opened. 

Technological services are more robust and comprehensive in their verification methods, however. The point of this process is to check and verify that the person applying for an account or service is being honest and upfront about who they are.

**Why Use an Identity Verification Service?**

While you can find arrest history with a universal background check (as well as other crucial information), the ability to complete a background check of any kind requires correct information about an individual.

Using an identity verification service enables you to confirm that you are performing a background check on, or providing a service to, a person who is identifying themselves correctly. This ensures that the information you receive from a check is correct and connected to the person you are dealing with.

There are other reasons to use such a service, however. For example, if you run a business with an online component identity verification at login, it’s important for data protection purposes. 

Identity verification is also an important part of risk management for most businesses and can help you to avoid fines and legal issues, reduce the risk of fraud, and help you to meet regulatory requirements while showing due diligence.

**How Do Identity Verification Services Work?**

Digital identity verification services collect and verify personal data and information, usually at the point of account access or onboarding to a new service, by checking it against reputable sources. There are different approaches to this process:

*   Data-oriented digital verification
*   Traditional, document-based digital identity verification

In most cases, data-based identity verification is sufficient, especially for platforms such as online shopping or online lottery ticket purchases. In these cases, the service provider or business may request information such as your date of birth, full name, or national ID/social security number. 

For financial services, such as banking or personal loan applications, however, digital document-based verification is usually required. In these cases, the institution or business you are dealing with may request copies or pictures of official documents, such as your driver’s license or birth certificate.

Whichever method of identity verification a company or institution undertakes, the process of verification is the same. The documents or data provided will be checked against trusted sources to ensure that all details match perfectly. When there are no issues, this is a very quick process that should take no more than a few minutes.

**What Happens When An Identity Check Fails?**

So, what happens when the identity verification process fails? What are the secondary processes, and what are the repercussions when information is found to be false? There are a number of potential issues that can cause queries or failures in the identity verification process. The most common are:

*   Typos or spelling errors.
*   Out-of-date documentation.
*   Obscured or damaged documentation.
*   Poor image quality regarding documentation.

In most cases, the first reaction of a company will be to query the details that do not match or request that documentation be re-sent. If all is in order, they may proceed to a positive verification, but it is also common for companies to ask for secondary or supporting information or documents in these cases.

If issues cannot be resolved and it is impossible to verify the identity of a person, there are two possibilities. Firstly, and in most cases, services will be denied to the applicant on the basis of failed identity verification.

In some cases, however, more robust action may be taken. For example, trying to open a bank account under a false name is a legal offense and financial institutions may see fit to hand information over to the authorities. 

1.  Identity Theft Statistics You Need to Know in 2022
2.  Identity Theft – 5 Ways to Secure Your Identity Online
3.  3 Common Cybersecurity Mistakes that Can Lead to Identity Theft
4.  Protect your identity from fraudsters with AI-powered Identity Guard
5.  Man convicted for identity theft & fraud against US Military, veterans

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

What is an Identity Verification Service and How Does it Work?

By Habiba Rashid
The hackers from Black Reward Team are also claiming to have deleted nearly 250 terabytes of data from the website from its servers and computers.
This is a post from HackRead.com Read the original post: Iran’s Fars News Agency website hacked as part of anti-govt protests

On Friday, 25th November, the hacktivist group by the name of Black Reward attacked the database of the Iranian hardline Fars News Agency, claiming to have deleted nearly 250 terabytes of data from the website from its servers and computers.

The hackers also claimed to have obtained the confidential bulletins and directives sent by the news agency to the office of Supreme Leader Ali Khamenei.

For your information, Fars is the Iranian government-backed news agency managed by the Islamic Revolutionary Guard Corps (IRGC).

According to the message posted by the hacker group, the compromised data also includes recorded calls, information on internal portals related to administrative conversations and news folders, image archives, and financial documents of the news agency. 

**English Translation via Google**

“For years, the wage earners of “Fars Sludge Spreading Company” have been thinking that no one is protecting them and they are going to gas for themselves. But false imagination! Spreading lies, spreading rumors, creating cases against the people of Iran, working and writing, has a heavy penalty; especially when the “truth becomes clear”, the curtains fall and the lowly nature of these wage earners is revealed to everyone.”

“Most of the black deeds letters of each and every official employee and unofficial collaborator of Fars Sludge Company are in our possession today with all the details and we give this warning to other ration eaters of the IRGC and Mullahs that dark and difficult days are waiting for them. We will come to you one by one.”

“We also give this good news to our dear compatriots that all the information of the Fars Sludge Company, including the confidential news bulletins that they sent to the leadership and the IRGC, along with faxes, recorded calls, information on internal portals related to administrative conversations and news folders, image archives.”

“Also, the financial documents have all been downloaded, and we have also removed nearly 250 terabytes of data, or in other words, what is and what is not Fars Sludge Spreading Company from the beginning until now, from all the servers and computers belonging to this collection – For woman, life, freedom for #Mehsa\_Amini.”

However, Fars News has denied the extent of the hack as described by the hackers. They described the hackers as only being able to destroy the information and news from Friday and reiterated that other information and databases of the news agency had not been breached. 

This is not all. The hackers also published a video apparently showing a journalist from the agency engaged in an indecent sexual act at the agency’s office. The alleged security camera footage has gone viral on Iranian social media. 

The video was posted from the news agency’s manager Habib Torkashvand’s Twitter account which was hacked by the Black Reward group. It was captioned:

“These are the freeloaders of Fars! At the beginning of every week, after coming to the office, they must check who has been at their desk the day before and jerked off!”

Fars News denied that the footage belonged to them but some of the users on Twitter have identified the person in the video to be one of the economic editors of the website. 

Furthermore, this is not the first time Black Reward has attacked the state or the agencies supporting it. As reported by Hackread.com earlier in October, the group claimed to have hacked the email system of Iran’s Nuclear Power Production and Development company and threatened to release its documents if the government did not halt its clampdown on protestors. They said the total data obtained was 50 GB in size. 

However, after the 24-hour deadline passed and the government’s offensive against the protestors did not stop, Black Reward published a trove of documents from Iran’s nuclear program. 

In the past weeks, the group also hacked the emails of managers and employees of Press TV state channel and the employees of Al-Zahra University in Tehran as well as the Legal Medicine Organisation of the country, urging them to support the protests happening in the country.

In mid-September when anti-regime protests began, Black Reward along with the group called Tepandegan, sent millions of texts inviting people to participate in protest rallies. 

Black Reward group’s hack comes just days after an Iranian hacker group by the name of Moses Staff, posted previously unseen footage of a deadly bombing in Jerusalem on Wednesday morning. The footage was obtained from a surveillance camera used by a major Israeli security organization.

1.  Hackers turn to Signal, Telegram and Dark Web to assist Iranians
2.  Anonymous Hits Iranian State Sites, Hacks Over 300 CCTV Cameras
3.  Iran State-Run TV’s Live Transmission Hacked by Edalate Ali Hackers

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Iran’s Fars News Agency website hacked as part of anti-govt protests

By Habiba Rashid
The 2022 database is said to contain WhatsApp user data from 84 countries with Egypt having the largest chunk of stolen phone numbers.
This is a post from HackRead.com Read the original post: Nearly 500 million WhatsApp User Records Sold Online

In what is becoming a rather common trend, a threat actor is claiming to sell 487 million WhatsApp users’ mobile phone numbers on a popular hacking community forum which surfaced as an alternative to popular and **now-sized Raidforums**.

The 2022 database is said to contain WhatsApp user data from 84 countries with Egypt having the largest chunk of stolen phone numbers (45 million), Italy with 35 million, and the US with 32 million. 

The complete list of countries is included in the original report by Cybernews which also contains the exact amount of numbers up for sale. According to the threat actor, they are willing to sell the US dataset for $7000, the UK one for $2500, and the German one for $2000. 

Image: Cyber News

Upon being requested, the threat actor also shared a sample of data with researchers who then confirmed that the numbers included in the sample were in fact **WhatsApp users**. The exact sample contained 1097 UK and 817 US mobile numbers. 

The seller did not reveal their process for obtaining the database and simply said they “used their strategy” to collect the data. Whatever the method used, the damage that can be caused by this leakage should not be taken lightly.

Such data is readily bought by attackers to use for smishing and vishing attacks. It is advised that you cautiously interact with unknown calls, unsolicited calls, and messages. Impersonation and fraud are also common worries associated with mobile number leakage. 

Meta has refused to comment on this for now, while in their **report**, Cybernews speculates that this information could have been obtained by harvesting information at scale, also known as scraping, which violates WhatsApp’s Terms of Service. 

However, Hackread.com can confirm that, at the time of writing, the listing was deleted from the hacker forum. Another listing was published in which another threat actor is claiming to sell details of WhatsApp users.

Image: Hackread.com

It is worth noting that in January 2021, Facebook also **sued a Portuguese company** for developing malicious Chrome extensions allowing data scraping. In October 2021, Meta also sued a Ukrainian man for scraping and selling 178 million users of the social network and selling the data on hacker forums.

This news comes a year after **massive Facebook data leak** made the headlines in which data of 500 million users from 106 countries was scraped and leaked online. In April 2021, a threat actor was selling two scraped LinkedIn databases containing **500 million and 827 million account** details.

In June 2021, in another web scraping related incident, a threat actor was **selling 700 million LinkedIn users accounts**.

1.  Hackers leak scraped data of 87,000 GETTR users
2.  Scraped data of 1.3 million Clubhouse users published online
3.  Database of 176 million Pakistani mobile phone users sold online
4.  Leaky Server Exposing Scraped Data of 150,000 Mastodon Users
5.  Twitter Confirms Data Breach as 5.4M Accounts Sold on Hacker Forum

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Nearly 500 million WhatsApp User Records Sold Online

By Owais Sultan
This article will explain to you how to create ISO files from discs while mentioning 3 top ISO creators which are easy to understand and use;
This is a post from HackRead.com Read the original post: How to Create ISO Files from Discs – 3 Best Ways

An ISO file is a disk image of an optical disc. It is a single file that contains all the data from a CD, DVD, or Blu-ray disc. The data is stored in an uncompressed format. ISO files are used to create exact copies of optical discs. They are also used to distribute large amounts of data over the internet.

It is not difficult to answer this question “how to create ISO files from discs.” Numerous freeware tools help to create an ISO file from a DVD or disc. Using them will help you to back up DVDs, BDs, and CDs to your hard drive.

It is the best strategy to create and save ISO backups for your essential program installation. In addition, unlimited online backup services allow for a near-perfect disk backup plan.

A key feature of ISO images is that they are independent and perfectly demonstrate disk data. As they are the sole files, saving and managing them is easier than copying folders and files directly onto a disk.

Windows do not have a default system to make ISO image files, so you have to download a program/tool that does that. Luckily, numerous free tools are available to create ISO images easily, and some of them are given below;

**How to Create ISO Files from Discs – Best Methods**

**Method 1: DVDFab DVD Copy**

Compatibility: Windows, Mac

This top-list DVD copy software is the most prevailing program to compress any DVD and lossless backup. It restores a DVD to a blank disc while offering six different copy mode options. 

This free ISO creator lets users save their DVDs in ISO image format. It comes with a free trial for 30 days.

**Features **

*   It is the best ISO creator and DVD burner, which supports users to copy a DVD to their hard drive in ISO image format. You can also mount or burn a DVD, ISO file, or folder to any blank disc.
*   A DVD copy is also the best program to compress DVD-9 to DVD-5.
*   Moreover, it can copy DVD-9 to DVD-9, DVD-5 to DVD-5, and DVD-5 to DVD-9.
*   It is a free DVD burner that can read all DVDs without caring about their scratches and copy them in the same original quality.

**Method 2: ISO Workshop**

It is a freeware ISO creation desktop program for Windows computers. It will help you to make, copy, and burn ISO files and perform other operations related to ISO files.

ISO Workshop’s GUI will be attractive to users as it is clear and straightforward. It works best for Windows NT over 7 versions. The EXE file size for installation is lightweight at approximately 4 MB, making it a tool that can be used easily.

Its “extraction feature” will help you to extract the ISO content quickly. When you choose an ISO file from your system, it will automatically upload its content. It is best to convert multiple disk images to the ISO file format. It supports PDI, DMG, GI, B5I, ISO, CDI, MDF, IMG, BIN, NRG, and B6i formats. 

Upload the disk file and pull out the content to the required place to backup files. Tap on the top-right button to burn the ISO file. 

**Method 3: ISODisk**

ISODisk is freeware ISO-creating software. It supports making virtual CD/DVD drivers for over 20 drives. It also helps to make and mount an ISO image. Moreover, it offers direct access to ISO image files. 

It can automatically create an ISO image from CD/DVD-ROM. You can easily access the contents of a folder with Windows Explorer after making it a virtual disk.

This standalone program does not require any installation of additional software. Its simple functionality makes it best for beginners. There is a well-managed functions tab with its user guide.

The home dashboard puts all functions within reach. So it is fast to mount or create ISO files from CD-ROMs within 2-3 clicks. Besides being beginner-friendly, it offers advanced functions to the experts. But you cannot use it to compress or encode ISO files. 

The software installation will require you to have; windows computer, 64 MB memory, and 10 MD storage space.

Here is how to create ISO from DVD using DVD Copy software;

**How to use DVDFab DVD Copy?**

*   Install DVDFab 12, and select the required Copy option. Insert the DVD which you want to back up. You can also navigate it using the “Add button.” 

*   You can use the “Drag and Drop” if your required file is ISO. 
*   After choosing the copy mode, select the required output DVD size. It is also possible to set the volume label and other copy choices. 

*   At last, choose the final directory and click “Start Button” to start the DVD copy process. 

**FAQ****Can I mine the ISO file from the disc?**

Third-party software helps to create an ISO file from the physical disc. There are multiple ISO creators in the market. However, you must be very picky as most contain the virus. So we will recommend a DVD copy, ISO workshop, and ISO disk. A DVD copy is greater than others as it can work on any device and offer multiple other features than creating ISO files. 

**How much time is required to create an ISO image file?**

It is very easy to create an ISO image file using any third-party software; however, it may take 50-60 minutes. The time may vary according to the disc size and your device performance. 

**Conclusion**

All ISO creator tools mentioned in the list are freeware. They will never charge you if you use them for making disk backups, copying disks, or sharing them on any platform. However, you must ensure you downloaded them from a trustworthy or official website to avoid viruses. 

1.  Stellar Converter for OST for OST to PST Conversion
2.  The new Wondershare PDFelement with added features
3.  6 Best Ways to Make a Collaborative PowerPoint Presentation
4.  5 PDF Tricks You Should Know To Improve Document Productivity
5.  Google software shows how to remove watermarks from Stock photos

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

How to Create ISO Files from Discs – 3 Best Ways

By Owais Sultan
A parental control app is an effective software that can help parents stay on guard, prevent, and react timely to online and offline dangers.
This is a post from HackRead.com Read the original post: Top 6 Cell Phone Tracker Apps for Parental Control

Do you have difficulty knowing what your kids are up to when you’re not around? Do you want to ensure they’re not getting into trouble or spending excess time on their phones?

If so, then you need a cell phone tracker app. We have your back covered and have handpicked the 6 best free and paid tools for Android and iOS devices to quench your concerns. Forewarned is forearmed.

**Why Would You Need to Resort to a Cell Phone Tracker App?**

Whether a paid or free parental control app, effective software can help parents stay on guard, prevent, and timely react to the following online and offline dangers:

1.  Sexual predators that target kids online or in the real world
2.  Involvement in cyberbullying, either as victims or perpetrators
3.  Exchanging inappropriate photos or videos with others
4.  Communicating with strangers that try to lure children into meeting in person
5.  Risk of kidnap or trafficking if they spend excess time alone or unsupervised
6.  Access to inappropriate websites
7.  Kids spend excess time on phones and inadequate time doing homework or interacting with the family

The market is riddled with cell phone tracking apps, making picking the right one challenging. This article lists the most prominent and handy solutions for parents.

Did you know around 2100 children go missing in the US daily? Kids are usually easy to find when parents provide relevant information about them. Resorting to the right prevention measures can help parents ensure their kids’ safety. 

**6 Advanced Cell Phone Tracker Apps for Parental Control**

A family tracking app enables parents and guardians to monitor their children when they are not around. Therefore, if you are unsure whether your kids are where they claim to be or are lying, the app can help you know the truth. Here are some of the top-notch tracker apps to help monitor their whereabouts and not only.

**Keep Your Kids Safe with the uMobix Parental Control App**

uMobix is the best parental control app today. It allows real-time tracking of daily progress on their mobile phone or tablet. With this phone monitoring app, users are enabled to capture browser history, see screengrabs, and supervise over 30 apps, including Facebook, WhatsApp, Instagram, TikTok, Telegram, and Snapchat.

This phone tracking app has advanced monitoring features, including a GPS tracker, outgoing, incoming, and missed call records, mic and camera access, text message history, deleted call history, message, and contacts. Also, this monitoring app can capture keystrokes to see what your loved ones are up to.

Additionally, uMobix allows you to remotely pull videos and photos from the target phone and store them on your device. Its advanced GPS tracking feature lets you know the real-time location of the required gadget. Thus, your kid can’t lie about their location anymore if you use this app to track them without knowing.

**How to Use uMobix to Track Your Kid’s Location**

Since uMobix has a demo version, it is possible to use it as a free app to view your child’s phone. The 1-day trial offer allows users to start monitoring for $1. For the extended version, follow these steps to watch your kids with uMobix.

1.  Register by selecting a subscription plan and complete the purchase to receive detailed instructions.
2.  Access the target phone to install uMobix by following the instructions provided in the user account. The process differs for Android and iOS but is straightforward in both cases.
3.  Navigate to your account to receive real-time data about the required phone activity. The GPS location tab can identify your child’s whereabouts anytime.
4.  Cocospy – Multifunctional Parental Control App for Android and iOS

Cocospy is also among the best phone tracking apps. It makes it possible to supervise locations, calls, messages, and app usage. Also, this tracking software enables you to take a sneak peek at the saved contacts. Installing software is straightforward, after which it is possible to track all outgoing and incoming calls, received and sent messages, browser activity, and social media interactions, including iMessages. 

Some social media platforms to monitor Cocospy include Facebook Messenger, Snapchat, Instagram, WhatsApp, Snapchat, and Viber. The app can detect a SIM card change and check the device’s IMEI number.

You may want to know how to supervise a kid’s iPhone with Cocospy. Well, the process is also straightforward. Just sign up with an email ID, then verify your iCloud account. Add the target’s iCloud details and disable two-factor authentication. After that, monitor the device’s activity and location by logging into your Cocospy account.

Cocospy runs in stealth mode, meaning they won’t detect that you’re monitoring them. Also, it manages your kid’s screen time to ensure they spend only a little time on their device. Thus, it allows you to safeguard their health and keep them safe.

**Spyic – Top-Rated Parental Control App for Real-Time Monitoring**

Spyic is a surefire phone location tracking app that can spot your loved one’s whereabouts without their knowledge. It’s a widely used tool providing tracking solutions for iPhones and Android phones. Also, this web application is easy to use from a browser, meaning you don’t have to download anything.

The software has numerous features that make it ideal for location tracking. It’s a hidden family tracking app with a feature-packed online dashboard. For instance, Spyic is there for you to locate a phone’s location without installing an additional app. Access this feature by logging in to your Spyic account via a web browser.

Additionally, Spyic uses unique security protocols to ensure that nobody else can view data about the target device. It shares the target phone’s location coordinates directly with you, and its servers don’t store anything.

Using this app to pin down somebody’s location assures you that they won’t know you’re doing it. Thus, you may monitor their movements, the areas they previously visited, and check-ins. 

**Google Family Link Free Phone Tracker**

As the name suggests, Google Family Link is a family locator that enables you to keep loved ones safer online. Families have unique relationships regarding technology. Therefore, this device and location tracking app provide greater flexibility to allow users to select the right balance for their families. Also, this application helps you create healthy online habits for your family members.

**Find My Kids – Child Locator**

Find My Kids is a location tracker for ensuring child’s safety. It helps you keep in touch with children when they are not nearby or fail to respond to your calls. This GPS phone tracker allows parents to pin down their kids on Google Maps and see their movement history.

Another benefit is the opportunity to find out the apps your children use, including social media platforms and their interactions with them. The time tracking capability helps you know the duration your kids use their devices and the apps they use the most. The family chat feature may make this app unique. It lets you chat with the kids and use funny stickers to enhance the fun. 

This parental control app for free use makes it possible to keep track of your loved ones with minimum expenses, though its functionality is somehow limited compared to tracking apps outlined above. The app is available for Android and iOS users.

**Life360**

The last app on our list is Life360. It’s a well-known app in the US, offering only limited functionality outside the country. Here’s what the app can do for you: 

1.  The app allows you to plan routes and schedules with your family members. 
2.  You can request or send real-time locations. 
3.  You can set up smart notifications for when someone reaches a particular destination or leaves it. You also get alerts if someone’s phone battery is running dry. 

You’ll need Life360 installed on the target iPhone to get it to track the device’s location. You’ll also need permission from the target device, which may or may not be possible.

**Is it Legal to Supervise Your Child’s Device?**

It is legal for parents and guardians to supervise their children’s devices as long as they are minors. Provided the child is under 18 (pay attention that every state has a different age of being an adult), a US parent or guardian can monitor how they use their mobile phone or tablet. That means the parent can use a cell phone tracker to observe their whereabouts and interactions with other people.

The Children’s Online Privacy Protection Act gives parents control over the information that children can access online. This rule protects kids under 13 while considering the internet’s dynamic nature. Also, it applies to online service providers and commercial website operators. When it comes to monitoring an adult person, written consent is required.

**What Should I Look for in a Parental Control App?**

The following tips should help you choose an app to track cell phones.

*   Privacy: You don’t want to expose your loved one’s privacy to the wrong people. Therefore, pick an app that allows for secure and safe parental control.
*   Transparency: The top phone tracking apps are transparent in their operations. They ensure that users know what they can do and how they help them enhance their kids’ safety.
*   Network security: A good tracker app keeps a child safe from illicit content, cyberbullying, and other online crimes.
*   Activities: The primary phone tracker work is to check out the activities the target person does on their device. And this entails all the actions an individual can perform on their device. Therefore, go for an app that can track your phone when lost, monitor social media and online activities, and do everything your kid can do on their phone. Also, it should let you monitor websites and app usage.
*   Friendly interface: An ideal parental control application is easy to use and navigate.
*   Compatibility: Choose an app compatible with the phone required, whether iPhone or Android. Some apps require only the phone number only to track a mobile device.

**Keep Your Kids Safe with the Right Monitoring Software**

Although some make use of a free phone tracker to keep track of loved ones, premium applications are better due to extended functionality and glitch-free operation. That’s because they have more practical features and functionalities. Also, consider customer support, price, and user reviews. Ideally, take your time understanding how the phone tracker app you want to use works to pick one that suits your needs.

1.  What is a parental control app and what are your options
2.  Croatian Police arrests minor over A1 Telecom ransom demand
3.  9 risky apps that you need to monitor on your kids’ smartphone
4.  Germany bans kids’ smartwatches, asks parents to destroy them
5.  Medical Software Firm exposes vulnerable children’s sensitive data

Top 6 Cell Phone Tracker Apps for Parental Control

By Habiba Rashid
According to claims made by Moses Staff hackers, they hacked a major Israeli security firm to access and leak the footage.
This is a post from HackRead.com Read the original post: Moses Staff Hackers Publish Footage of Jerusalem Explosion

In a dramatic series of events, an Iranian hacker group by the name of Moses Staff published footage of the bombing attack in Jerusalem on its Telegram group. As seen by Hackread.com, Moses Staff claims to have hacked the surveillance cameras belonging to a major Israeli security organization.

Along with the video, there was a Hebrew inscription that said “for a long time we had control over all your activities – step by step, moment by moment.” The video showed the exact moment of the explosion near Jerusalem’s Central Bus Station. Moses Staff also claims that it “formatted the hard drive of the camera.”

Moses Staff on Telegram (Image: Hackread.com)

However, according to the Times of Israel, authorities have denied that any such camera was hacked. They even denied operating security cameras in the area claiming that “the footage was not taken by a camera belonging to the city.”

The bombing resulted in the death of a 16-year-old boy while at least 18 others were injured. However, this is not the first time Moses Staff has initiated action in what appears to be a war between Iran and Israel in the cyber domain.

> An Iranian hacker group calling itself Moses Staff published documentation showing CCTV footage of one of the bombings that happened in Jerusalem Wednesday morning. pic.twitter.com/6ZKjb0fsy9
> 
> — Joe Truzman (@JoeTruzman) November 24, 2022

The group has previously published details of Israeli soldiers, personal documents from Israeli companies, and leaks of hundreds of thousands of Israelis. It even distributed photos about a year ago that were reportedly taken at Defense Minister Benny Gantz’s house. Lastly, they also claim to have high-quality satellite photos of Israel. 

How they proceed from here onwards will only be revealed with time but they have already made their intentions clear with a strongly-worded message on their Telegram:

“We have news, reports, operational maps, and information about your units and forces. We will publish this information to inform the whole world of your crimes.”

1.  Palestinian Engineer Jailed for Hacking Israeli CCTVs & Drones
2.  Israeli Rabbi arrested for hacking CCTV cams at a bathing suit shop
3.  Israeli Security Camera Systems targeted by Pro-Hezbollah Hackers
4.  Israeli News Channels’ Telecast Hacked; replaced with Muslim prayer
5.  Hackers Posed as Women to Con Israeli Officials into Installing Malware  
    

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Moses Staff Hackers Publish Footage of Jerusalem Explosion

By Habiba Rashid
So far, researchers have identified approximately 50 phishing websites, all targeting MSI Afterburner to deliver malware. 
This is a post from HackRead.com Read the original post: Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner

Cyble Research & Intelligence Labs (CRIL) recently uncovered a phishing campaign used by threat actors to deliver cryptocurrency miner softwares using utility software tools.

This particular campaign exploited the well-known MSI Afterburner, used widely by gamers and other high-performance computing users. Due to being one of the better-known graphics card software used to monitor system performance, allow users to modify the hardware settings to enhance the system’s performance and to overclock the best graphics cards on the market.

The threat actors employ various methods to distribute the malware including the use of emails, online advertisements, forums, and other mediums. In the last three months, Cyble has identified approximately 50 phishing websites, all targeting MSI Afterburner to deliver malware. 

One of the phishing websites (Image: Cyble)

The threat actors who created these websites made sure to design sophisticated phishing pages that mimicked the legitimate MSI Afterburner sites to lure users into downloading coin-miner malware that performed the crypto-mining process.

However, fraudulent websites can be spotted by looking at the domain names. Cyble has identified some of the fake domains, such as (MSI-afterburner-download.site), (msi-afterburner.download) and (mslafterburners dot com.) Some are already offline, but more are likely to show up.

The payload of malware is delivered bundled with legitimate MSI Afterburner installers and after installation, it starts the process of hijacking the victim’s computer, collecting sensitive information such as computer name, username, GPU, CPU, and other details from the system. The technical details are explained in Cyble’s analysis report. 

Infection chain

Crypto mining requires dedicated hardware like GPUs because it is a power and resource-intensive activity. By hijacking the processing power of the victim’s machine, the threat actors can mine cryptocurrencies without their consent. This severely decreases the victim’s overall system performance and drains their system resources, significantly affecting the productivity of the victim user or organization. 

There are quite a few measures that users can take to ensure that their device does not become a victim of such a phishing campaign. It is advised that you check your system performance and CPU usage periodically, avoid downloading pirated software from Warez/Torrent and rely on official websites only.

Moreover, turn on the automatic software update feature on your devices, use reputed antivirus, refrain from opening untrusted links and email attachments and monitor endpoints and servers for unexpected spikes in CPU and RAM utilization that could reveal potential malware infection. 

I am a cyber security writer and one of my favourite games is Minecraft. I also really like obscure cat memes and during my free time, if I'm not found hanging around in Discord voice channels with my friends, I'm probably cycling and taking pictures of random cats on the street.

Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner

By Owais Sultan
One of the best things about LinkedIn is that it allows you to download a CSV file with…
This is a post from HackRead.com Read the original post: How to use Linked Helper 2 as a LinkedIn Data Export Tool

One of the best things about LinkedIn is that it allows you to download a CSV file with your first-degree connections information. This file, however, lacks the email and phone numbers of the profile.

However, provided your first-degree connection has provided this information on your LinkedIn, it can easily be obtained by Linked Helper 2. It is important to note that getting the phone numbers and emails of your second and third degree is impossible because LinkedIn does not grant you access to such information.

You can use Linked Helper 2 to export your first-degree connections on LinkedIn to a downloadable CSV file. In addition, Linked Helper 2 also gives you a chance to create a targeted mailing list. In this article, we will guide you step by step on how you can use Linked Helper as a LinkedIn data export tool.

We are going to walk you through the following steps;

*   Creation of a new campaign
*   Profile collection
*   Adjusting action configurations
*   Starting the Campaign
*   Downloading the CSV file

Let us dive in!

**1 Generate a new campaign using a template with preset commands**

To create a new campaign, open the Campaign menu and click the Create new command. A pop window will appear, requiring you to name your Campaign. The next step is selecting the type of Campaign you want. At this stage, pick **people** as the campaign type. After that, select the needed template, i.e., **Visit and Extract profiles.** Wrap up by clicking the **Create** button.

Here, the Campaign generated only has a single action. However, if more steps are needed, you can configure the Workflow and add more actions.

**2 Profile collection into your created Campaign**

Near the Campaign queue, locate and click the **Collect** button. You will then be prompted to provide the source of your profiles. Since we want to collect first-degree connection profiles, we will use **the My network page** as the source.

After collecting the profiles, you can also review them to check for errors.

**3 Fine-tune action configurations**

You can adjust action settings under the General tab. Here you can configure the action’s name and suspend the start of the action. After a profile has been processed through an activity, Linked Helper 2 can automatically remove or assign tags associated with the profile.

On the **Tags tab** under the action, enter a tag name and confirm it by pressing enter on your personal computer. Now proceed to the Display settings Tab, select Bunch, and fine-tune its size and the time between bunches.

**4 Start the Campaign**

Start the Campaign can quickly be done by clicking the **Start campaign** button on the left menu. You can also launch the Campaign by clicking the **Start** button at the topmost section of your screen.

As soon as the campaign launches, the Campaign’s status will change, and Linked Helper will display when the subsequent step is carried out. Linked Helper uses a green frame to highlight the Campaign being performed.

**5 Download CSV profiles**

Visited profiles are stored under the **Successful** sub-list by Linked Helper. To access them click the **Successful** command or **Campaign**, then **Workflow.** 

To download these profiles, first, click **the Select all** button to select all the profiles. Finish up by clicking **Download.** Remember to choose your delimiter, preferably Google Sheets or MS Excel.

1.  How to Use Excel to Scrape a Website
2.  Penetration Testing Azure: The User-Friendly Guide
3.  How to configure cPanel and WHM Panel on your VPS
4.  6 Best Ways to Make a Collaborative PowerPoint Presentation
5.  MySQL Performance Tuning: Top 5 Tips for Blazing Fast Queries

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

Source

HackRead