By Waqas
The streaming industry is changing rapidly with new services popping up and others disappearing, it’s important to stay…
This is a post from HackRead.com Read the original post: 6 Legal and Free Streaming Services to Consider in 2022

****The streaming industry is changing rapidly with new services popping up and others disappearing, it’s important to stay ahead of the curve. This article provides an overview of the top streaming services to consider in 2022.****

To get the most out of your streaming experience, make sure to have high-speed internet. Do check out Spectrum Deals for consistent and reliable high-speed internet at the most affordable rates. 

It can be hard to keep track of all the changes, so here is a list of the top streaming services to consider in 2022. 

Below are 6 free and legal streaming services you must try. However, if you are not in the United State you may be required to use a VPN to access these services.

**1- Crackle**

Believe it or not, Crackle is a legal and free online movie streaming website and you don’t even have to sign up to watch your favorite movies or TV shows. Owned by Sony Pictures Entertainment Company; you can stream Crackle on your TV or laptop for free.

However, it does show advertisements every now and then during streaming. Consider it watching TV with advertisements but why complain when you don’t have to pay a single dime? However, you do have to use VPN to access and watch content on Crackle if you are out of the United States.

**2- Vudu Movies on Us**

Vudu Movies on Us is also a free online streaming website owned by Walmart. Although the site has paid subscription one can also watch movies and TV shows completely free but with advertisements.

Vudu Movies on Us was launched in October 2016. Later on, the website added a free but ad-supported streaming library to its platform under the label of “Movies On Us,” featuring classic and recent films. However, you do have to use VPN to watch content on Vudu Movies on Us if you are out of the United States.

**3- Tubi Tv**

Tubi TV is also a free online streaming website owned by FOX. Like the above-mentioned sites, Tubi charges viewers neither does it ask for payment card details. Once on Tubi, you can watch movies and TV shows with ad breaks at 12-15 minute intervals.

Currently, Tubi has partnered with entertainment studio giants like MGM, Full Moon Pictures, Paramount, and Lionsgate. However, you do have to use VPN to watch content on Tubi Tv if you are out of the United States.

**4- Veoh**

Launched in 2006; Veoh is an Internet television service based in the United States and offers free online streaming for movies, TV shows, music, cartoons, and much more. You can create an account to watch content but that’s not compulsory. 

Another good news is that Veoh can be accessed without connecting to a VPN (at least not at the time of publishing the article). So enjoy the free and legal streaming website at its best.

**5- Popcornflix**

Popcornflix is a free online movie streaming website owned by Screen Media Ventures. The website is home to a treasure trove of movies, TV shows, and viral videos – All that for free. However, the service is ad-supported, meaning you will have to watch short ads every now and then but nothing major.

It depends on whether you want to sign up on the site but you don’t have to create an account to view the content either. However, you do have to use VPN to watch content on Popcornflix if you are out of the United States.

**6- CONtv**

CONtv is not just a free online movie streaming website but home to a treasure trove of entertainment. It’s an ad-supported service that will show ads every now and then during your favorite movie or TV show but that’s pretty much it.

Since CONtv is known for providing content to the Comic-Con community, you can also experience behind-the-scenes access to Wizard World Comic Cons, along with classic films, television series, and comics. At the time of publishing this article, no VPN was required to access or watch content on CONtv.

**5 Paid Online Movie Streaming Websites****1\. Netflix**

You can find a wide variety of TV movies, shows, documentaries, anime, cartoons, and more on Netflix. As well as documentaries, Netflix provides new series like “Emily in Paris” and “Stranger Things” for young adults.

The user-friendly application makes it easy to use Netflix, which offers high-level functionality. Has excellent video quality, thanks to lots of high-definition videos and great sound. The videos also run consistently and reliably. Which feature is the best?

There are no ads! The more time you spend online, the more you realize how wonderful it is.

**2\. YouTube TV**

There are no hassles with YouTube TV, and it is widely available. The subscription doesn’t include Hulu’s library of original programming, so it’s expensive. It is possible to work with three streams at one time without paying extra. You can also share your account with up to six other individuals (each with their own profile).

Moreover, you can catch up on movies and TV shows you may have missed since unlimited cloud DVR storage is available. As a streaming service, YouTube TV offers fewer channels than most others (no streaming service carries all channels). NBA and MLB are also available on the service, which Hulu does not.

YouTube and YouTube Music can be viewed ad-free via YouTube TV, but YouTube Premium is not supported. Original YouTube content is available only for a fee.

**3\. HBO Max**

HBO Max offers the best viewing experience for the audience. HBO Max has long been a television powerhouse, with a varied assortment of blockbuster movies and critically renowned television episodes. All the good stuff is under one roof, including timeless classics like “Harry Potter” and current favorites like “Game of Thrones.”

In addition to offering an extensive library of great movies and shows, HBO Max also stands out for its excellent compatibility and functionality with a wide range of devices. It displays multiple streams simultaneously and is intuitive to use. Isn’t that awesome?

However, most movies use 1080p, and HDR and 4K support are not yet available. The ads also make it more expensive.

**4\. Peacock**

There is a streaming service called Peacock from NBC. For free, users can watch 13,000 hours of programming; for premium subscribers, 20,000 hours; and for premium plus subscribers, no ads. NBC does not offer to stream for its most well-known shows (Friends and Seinfeld), but other shows, such as 30 Rock, The Office, Will, Cheers, Chicago Fire, and Grace can still be watched. Peacock offers free movies despite not offering many original shows.

**5\. Hulu**

For anyone looking for a mix of classic content and new content, Hulu should be their first choice. Live TV is available through Hulu, as well as bundled packages with additional services and channels. The reason Hulu has become so popular is obvious.

As well as shows from ABC, Fox, and FX networks, It’s Always Sunny in Philadelphia, Lost, Castle Rock, and The Handmaid’s Tale are available via the service. The basic package includes advertisements, and the Live TV plan is expensive. If you stream from multiple devices simultaneously, additional fees apply. For a small fee, both Disney+ and ESPN+ can be subscribed.

**Conclusion**

It is important to do some research so you can determine which product offers the best value for your money and your device type, even if you already know about all three options. In order to choose the best option, it is wise to compare at least three options. We hope this article has been helpful to you.

Feel free to add to or ask questions about the streaming services in the comments section below. We will reply as soon as we can. Happy legal streaming!

1.  Streaming site 123movies has been shut down
2.  Why torrenting on Elon Musk’s Starlink is not a good idea?
3.  Fake streaming sites using Star Wars as bait to spread malware
4.  Best legal & free online streaming sites for movies & TV shows 2020
5.  Cyber Security Risks That You Should Be Careful Of While Streaming

6 Legal and Free Streaming Services to Consider in 2022

By Deeba Ahmed
The novel Nerbian RAT (remote access trojan) is currently targeting’ entities in Spain, Italy, and the United Kingdom.…
This is a post from HackRead.com Read the original post: Fake WHO Safety Emails on COVID-19 Dropping Nerbian RAT Across Europe

The novel Nerbian RAT (remote access trojan) is currently targeting’ entities in Spain, Italy, and the United Kingdom.

Proofpoint’s security researchers have warned users of a new RAT dubbed Nerbian written in the Go programming language and targeting entities in the UK, Italy, and Spain.

The malware name is based on its code, which bears references to the name of a fictional place in the novel Don Quixote.

“It is written in operating system (OS) agnostic Go programming language, compiled for 64-bit systems, and leverages several encryption routines to further evade network analysis,” researchers wrote.

The RAT can log keystrokes, launch arbitrary commands, capture screenshots, and exfiltrate data to a remote C2 server. The threat actor behind this campaign is yet unknown.

**How is Nerbian RAT Distributed?**

Nerbian RAT is distributed through a phishing campaign using fake COVID-19 theme emails. The emails are less than 100 in number and are disguised to be sent by the World Health Organization regarding COVID-19 related safety measures.

Furthermore, victims are encouraged to open a macro-laced MS Word document to receive the latest health advice from the organization. Researchers further noted that the campaign has been active since 26 April 2022.

When the macros are enabled, a COVID-19 guide appears, informing the victim about self-isolation steps. However, in the background, the embedded macro commences an infection chain.

This chain, according to Proofpoint’s blog post, delivers, the UpdateUAV.exe payload, “a 64-bit executable, written in Golang, 3.5MB in size, and UPX packed,” researchers explained.

This file serves as a Nerbian dropper sent by a remote server. Research reveals that the same author designed the dropper and malware and that the dropper can also deliver different payloads in future campaigns.

Fake WHO email laced with Nerbian RAT (Credit: Proofpoint)

**Nerbian loaded with Anti-Analysis Elements**

Proofpoint researchers noted that this newly identified RAT comprises “multiple anti-analysis” components that come into play at various stages, such as in numerous open-source libraries.

The UpdateUAV.exe dropper uses the open-source anti-V framework, Chacal, to complicate reverse engineering and carry out anti-reversing checks or self-terminate if it detects debuggers or memory analysis programs.

**More COVID Laced Malware Phishing Scams**

1.  Feds seize fraud domain claiming to provide COVID-19 vaccine
2.  Fake COVID-19 test result email drops King Engine ransomware
3.  Hackers are actively targeting WHO amid the Coronavirus pandemic
4.  Fake Coronavirus vaccine, patients’ blood & saliva sold on the dark web
5.  Fake govt COVID-19 contact tracking app spreading Android ransomware

Fake WHO Safety Emails on COVID-19 Dropping Nerbian RAT Across Europe

By Owais Sultan
Cisco CCIE Enterprise Infrastructure certificate, which is the successor of the old CCIE Routing and Switching certification, is…
This is a post from HackRead.com Read the original post: How Much Can CCIE Enterprise Certified Professional Make?

Cisco CCIE Enterprise Infrastructure certificate, which is the successor of the old CCIE Routing and Switching certification, is the most popular CCIE certification.

Cisco Certified Internetwork Expert (CCIE) is an expert level certification offered by Cisco and in the job market, it holds a high demand as it doesn’t only cover the traditional technologies, but also includes numerous evolving topics such as Network Automation and Programmability, Software Designed Networking such as Software-Defined WAN and Software-Defined Access, Cloud Networking and so on.

But passing the exam to get the certification and CCIE number should not be the only thing to look for. The actual goal should be gaining experience and learning as much as possible in Enterprise Networking. With Cisco’s increasing investment in cyber security and cloud networking, CCIE Enterprise Infrastructure certification has already become one of the next big things.

**Salary of a CCIE Enterprise Infrastructure Professional?**

Now, the question is how much one can earn monthly if they pass the Cisco CCIE Enterprise Infrastructure practical/lab exam? The answer involves several factors and criteria.

Before talking about dependencies, you should know some facts about the CCIE certifications. Unlike Cisco’s CCDE certification, Cisco CCIE Certification is known by the recruiters quite well as it has been posted as one of the job requirements for decades.

Currently, there are thousands of CCIE professionals, especially Cisco CCIE Routing and Switching, the new name CCIE Enterprise Infrastructure certificate is around 45000+ people.

**CCIE Enterprise Certified Salary Depends on These Criteria**

*   Country
*   Position
*   Years of experience
*   Whether you work for the same company after having the certificate

When it comes to salary, the country you live in is the most important factor because even if you are CCIE and a technical person (not as a manager or C level) if you work in an undeveloped or developing country, you may not be able to earn more than $2500 on average depending on the company that hires you. However, Cisco itself in a developing country still pays way better than other companies.

If you work in GCC (Dubai, Qatar, Kuwait, etc.) you can get around $8,000 to -$15,000 per month. If you are living in Africa, even if you get a CCIE Enterprise cert, you won’t get more than $5000 as a technical person. (Of course, there are many countries in Africa, but according to Business Insider Africa, on average, salaries of almost all African countries are roughly the same).

Your job position is also very important because as a technical person, you can get probably $2500 in Turkey but as a manager in an IT company let’s say, it can be around $6000. This would be $50000- $20000 in GCC countries

At the engineering level, CCIE salary would be around $6000 to $12000 in Canada, the United States, Australia, Singapore, Europe, and the United Kingdom.

**More Certification and Salary Topics**

1.  Best Cyber Security Certifications 2019
2.  Staying home? Here are 5 best Java learning platforms
3.  Top Certifications for Network Security Administrators in 2021
4.  5 Proven Cyber Security Certifications That Will Skyrocket Your Salary
5.  5 Proven Cyber Security Certifications That Will Boost Your Salary in 2018

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

How Much Can CCIE Enterprise Certified Professional Make?

By Owais Sultan
Attracting traffic is critical to the health of every ecommerce business. However, large traffic numbers don’t necessarily result…
This is a post from HackRead.com Read the original post: How Traffic Analysis Boosts Ecommerce Profits

Attracting traffic is critical to the health of every ecommerce business. However, large traffic numbers don’t necessarily result in sales unto themselves. To boost revenues, you must design pages optimized to convert. Then you need to determine the best ways to attract visits from shoppers who are actually interested in purchasing your products. 

To make sure that you’re attracting the right website visitors, once they’re on your site you need to measure their behavior. In this sense, traffic analysis gives you a peek into the minds of the people visiting your website. 

Aside from measuring straightforward metrics such as conversion rates, traffic analysis also uncovers audience behavior that points to possible product enhancements. Here are a few key ways traffic analysis can boost your profits and help you understand your audience better.

**Track Product Demand**

Most ecommerce businesses face seasonal variations in product demand. Anticipating these fluctuations can help you plan your working capital and cash flow better. Product demand metrics such as most visited pages and on-site product searches will help you understand what your audience is looking for.

While these data points will reveal demand, you must dig deeper into the patterns in these signals. For instance, which channels does most traffic come from, and which products does that audience search for the most? Correlating traffic channels, audience demographics, brand awareness growth and traffic nature (organic and paid) to product demand will give you insights that can reduce costs.

For instance, if the majority of paid traffic is viewing low-value products, you can model the impact this demand has on your business. You can either raise prices to see what happens to demand or discontinue your campaign and focus more on organic traffic.

Meanwhile, correlating the time of the year to product searches will help you understand seasonal variations and brainstorm ways of generating demand during these times. For instance, is your audience searching for product accessories or alternatives that you don’t carry yet? Introducing these products will help you boost sales during lean periods and plan shipping supply chains efficiently.

**Improve SERP Performance**

Organic traffic is the best kind of traffic in ecommerce. Whether you’re generating it from social media posts or rankings on search pages, organic traffic will help you reduce customer acquisition costs and boost audience lifetime values. 

Traffic channel and SEO analysis will give you insights into the best keywords driving traffic to your website, as well as your competitors’ sites. You’ll see which keywords are driving the most traffic, and how your rankings compare to related keywords. These days, competition is high for SERP (Search Engine Results Page) positions, and you must keep an eye on the other companies operating in your category.

For example, are your competitors releasing content that addresses a topic you haven’t thought of? The best way to establish a lasting advantage over your competitors is to create a moat around the most searched keywords and related searches. This way, you’ll manage to stay on top of your customers’ minds no matter what they search for.

Traffic analysis reports also give you insight into upcoming trends in searches that you can take advantage of. You can use paid search analysis tools that break down all the insights you need for you, or you can do more manual work and mine free tools such as Google Trends.

**Identify Selling Opportunities**

Cross and upselling are huge profit drivers in ecommerce. Most cross-sells tend to have low sticker prices, but as sales volumes grow, they make a huge impact. Accessories, complementary products, or even service offers are examples of low-margin cross-sells that leave an outsized impression on your bottom lines.

Upselling is a tactic that smaller ecommerce companies often ignore, but no technique does more to boost average order value. Bundling products or recommending accessories before checkout will boost your revenues significantly.

For instance, if you’re running a pet store, suggesting a dog jacket or toys along with a purchase of a dog bed will add more value to your customer. Pet shampoos and other accessories are high-margin products that will keep your customers returning for more.

You can also launch subscription products on your ecommerce platform and test audience responses by looking at traffic patterns. If you’re witnessing several repeat visits and short checkout times, you have a winner on your hands and should double down on that offering.

**Measure Omnichannel Performance**

Ecommerce companies sell across multiple channels these days. Even if you are a small business, you’re probably selling on your website and social media, at the very least. Channel traffic reports and engagement metrics will help you figure out where you ought to invest your time.

Monitor your competitors’ traffic channels as well, but don’t be in a rush to mimic them. Consider audience traits before following a trend. For example, if a competitor is generating a ton of traffic from TikTok, but is selling to a different demographic from yours, establishing a presence on that platform might not be the best choice.

Traffic analysis gives you insights beyond mere numbers. You must drill deep and figure out ancillary audience traits and correlate them to the channels from which you’re generating traffic and orders.

You won’t always receive a one-to-one match between channels and audience qualities, but you never know what advantage you’ll discover.

**More Sales from Better Analysis**

Ecommerce business owners often fail to drill deeply into their traffic patterns. To gain an advantage, you must correlate traffic data with other datasets to draw conclusions that will impact your business. Not only will your sales increase, but you’ll also create impactful experiences for your customers.

How Traffic Analysis Boosts Ecommerce Profits

By Waqas
In total, the database contains 10GB worth of data from companies like SuperVPN, GeckoVPN, and ChatVPN which is…
This is a post from HackRead.com Read the original post: Personal details of 21M SuperVPN, GeckoVPN users leaked on Telegram

**In total, the database contains 10GB worth of data from companies like SuperVPN, GeckoVPN, and ChatVPN** **which is now available for free download on several different Telegram groups.**

On May 7th, 2022, a database containing the personal details and login credentials of 21 million users was leaked in a Telegram group, Hackread.com has learned. What’s noteworthy is that the dump also exposed the data of VPN users including popular VPNs like SuperVPN, GeckoVPN, and ChatVPN.

The database was previously put up for sale on the Dark Web last year, but currently, it is available on Telegram for free.

**Database Exposed 10GB of Data**

According to researchers at VPNMentor, the leaked records comprised 10GB of data and exposed 21 million unique records. The information included the following:

*   Full names
*   Usernames
*   Country names
*   Billing details
*   Email addresses
*   Randomly generated password strings
*   Premium status and validity period

Further probe indicated that the leaked passwords were random, hashed, or salted without collision, therefore each was different and much more difficult to crack. A majority of the email IDs, about 99.5%, were Gmail accounts. But, researchers at vpnMentor believe that the dumped data is only a subset of the full dump.

Screenshot shows a post on Telegram group (left) - Screenshot of the leaked data (right)

**Possible Dangers**

The primary reason people choose to use VPNs is to ensure anonymity and privacy. This is why exposing the data of VPN users has far-reaching consequences since it is considered more valuable. In this case, the people who got their data exposed in the breach might become victims of blackmail, phishing scams, or identity theft since their full names and emails are leaked.

They may also launch targeted scams because of the exposure of personally identifiable information like country name, billing details, usernames, etc. After cracking the passwords, threat actors can easily hijack their accounts and exploit their premium status.

If the data lands in the hands of a tyrannical government, where VPN use is banned, this leak can lead to the arrest and detention of VPN users. If you want to stay protected from getting exploited by hackers/scammers, change your VPN account password and use a mix of upper-lower-case letters, symbols, numbers, etc., for optimum account security.

**More VPN News**

1.  Almost Every Major Free VPN Service is a Glorified Data Farm
2.  7 VPN firms with a no-logs policy end up exposing 1.2 TB of user data
3.  UFO VPN leaks database again; gets taken over & destroyed by hackers
4.  Sensitive data of 900 Pulse Secure VPN servers leaked on a hacker forum
5.  India to Collect User Data from VPNs, Data Centers, & Cloud Service Providers

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Personal details of 21M SuperVPN, GeckoVPN users leaked on Telegram

By Deeba Ahmed
The NFT market’s claim to fame is undoubtedly the Bored Apes Yacht Club yet someone is offering endless…
This is a post from HackRead.com Read the original post: This AI Can Generate Unique and Free Bored Ape NFTs

The NFT market’s claim to fame is undoubtedly the Bored Apes Yacht Club yet someone is offering endless free versions of these rare collectibles, thanks to Artificial Intelligence (AI).

Yannic Kilcher, a machine learning expert has developed an AI that generates an infinite number of unique apes for free. The Bored Apes is a collection of around 10000 Bored Apes NFTs, which merely comprise different variations of ape images. Still, it has become the face of NFTs, which are extremely expensive and, to be honest, quite funny.

**Details of the Process**

Kilcher uploaded a video on YouTube to explain the process of ape generation using Artificial Intelligence (AI). According to the video, the AI uses the Generative Adversarial Network (GAN) technique, and the procedure involves using two neural networks.

One of these networks is used to generate an image, and the other differentiates the image from an actual image to determine which is fake. Over time, the generator can create images that could easily pass as authentic. In the end, the generator can produce pretty convincing fake apes.

Kilcher scraped the Bored Ape Yacht Club collection in his YouTube video, trained Nvidia’s StyleGAN2 neural network on the dataset, and created near-perfect and fungible bored apes.

> “The quality of my system is not very good, there are often visible artifacts.”
> 
> Yannic Kilcher

Yannic Kilcher on YouTube

According to TNW, the app can generate apes based on user-provided images. It harnesses OpenAI Clip of the same model that powers the DALL-E 2 image generator. The generated images appear starkly similar to the actual NFT collection. Kilcher noted that a particular ape could be generated once only with this AI. You will get a different, unique ape as you refresh the page.

**More NFT News on Hackread.com**

1.  Official website of Banksy hacked for fake NFT scam
2.  Hackers Hijacked Official Ferrari Subdomain to Host NFT Scam
3.  OpenSea vulnerability allowed crypto theft with malicious NFTs
4.  Hot wallet hack: Hackers steal $18.7m from Animoca’s Lympo NTF platform

This AI Can Generate Unique and Free Bored Ape NFTs

By Waqas
Hackers targeted Russian television channels’ program names right before Vladimir Putin’s speech on Victory Day to commemorate the…
This is a post from HackRead.com Read the original post: Russian TV Schedules Hacked on Victory Day to Show Anti-War Messages

Hackers targeted Russian television channels’ program names right before Vladimir Putin’s speech on Victory Day to commemorate the defeat of Nazi Germany by the Soviet Union in WWII.

Victory Day event is celebrated to commemorate the defeat of Nazi Germany by the Soviet Union in WWII. However, this time a surprise was in store for Russians watching the Victory Day coverage. Someone hacked various Russian channels’ Victory Day coverage schedule and posted anti-war and pro-Ukrainian messages.  

**Anti-War Message Appears Ahead of Putin’s Address to Nation**

As people were waiting to hear the address of Russian President Vladimir Putin on Monday morning, local television channels’ schedule was suddenly altered to display this message:

>  “The blood of thousands of Ukrainians and hundreds of murdered children is on your hands. TV and the authorities are lying. No to war.”

BBC Monitoring’s senior digital journalist Francis Scarr also tweeted about this incident, explaining that the online Russian TV schedule page got hacked. Every program’s name was changed to the same message.

**Which channels were Affected?**

The anti-war call appeared when Russians were waiting to watch the annual Victory Day military parade on Red Square, followed by an address by Putin. The hacking affected online viewers of channels transmitted by MTS mobile operators, Rostelecom, NTV Plus, and Wink, while the incident impacted Russians across the country.

As per BBC, all major Russian channels, including NTV-Plus, Rossiya, and Channel One, were affected, while The Washington Post claims that the same message appeared on other platforms, including Yandex and Ru Tube. Furthermore, the hack also impacted children’s TV channels and the Russian defense ministry’s station, Zvezda.

> This morning the online Russian TV schedule page was hacked
> 
> The name of every programme was changed to "On your hands is the blood of thousands of Ukrainians and their hundreds of murdered children. TV and the authorities are lying. No to war" pic.twitter.com/P2uCNz8cqa
> 
> — Francis Scarr (@francis\_scarr) May 9, 2022

**How did the Hacking happen?**

According to Reuters, it isn’t currently clear how the messages appeared on the live page. However, this isn’t the first time Russian television channels have been hacked. In March 2022, as reported by Hackread.com, the Anonymous hacktivist collective hacked into Russian state television to broadcast gruesome war footage from Ukraine.

“A cyberattack was carried out on Russian TV broadcasting channels, because of which subscribers could have extremist inscriptions in the broadcast grid. Now our IT specialists are promptly eliminating the consequences of a hack so that subscribers can receive services and watch TV programs and movies as quickly as possible,” MTS representative in Siberia stated.

**Ukraine’s Response**

Ahead of Vladimir Putin’s address, Ukrainian president Volodymyr Zelensky released a video to commemorate the Victory Day with this statement:

“We won then. We will win now, too! And Khreshchatyk will see the parade of victory – the victory of Ukraine. Glory to Ukraine!”

**More Anonymous Hacks for OpRussia**

*   Confirmed: Anonymous Hacks Central Bank of Russia; Leaks 28GB of Data
*   Anonymous & its affiliates hacked 90% of Russian misconfigured databases
*   Anonymous NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data
*   Anonymous hacked Russian TV and streaming services with Ukraine war footage
*   Anonymous sent 7 million texts to Russians plus hacked 400 of their security cams

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Russian TV Schedules Hacked on Victory Day to Show Anti-War Messages

By Deeba Ahmed
After the hijacking, hackers hosted the Mint Your Ferrari NFT scam on the luxury automaker’s official website. Italian…
This is a post from HackRead.com Read the original post: Hackers Hijacked Official Ferrari Subdomain to Host NFT Scam

**After the hijacking, hackers hosted the Mint Your Ferrari NFT scam on the luxury automaker’s official website.**

Italian luxury automobile manufacturer Ferrari’s official website was hacked to promote a fake NFT collection. Interestingly, the company recently announced launching its official NFT collection, and hackers probably took advantage of this news. The fake NFT collection was presented as the official one to trap potential buyers.

**Details of the NFT Scam**

White hat hacker Sam Curry claims that attackers hijacked the subdomain ‘forms.ferrari.com’ of the company’s official website and hosted an NFT scam titled Mint Your Ferrari. The ethical hacker and bug bounty hunter also posted a screenshot of the hijacked website on Twitter.

Image credit: Sam Curry

Reportedly, the attackers lured visitors to purchase NFT tokens, claiming that it was Ferrari’s official 4458-horsepower NFT series that the company launched on the Ethereum network.

In December 2021, Screen Rant reported that the Ferrari collection would be launched in collaboration with a tech firm named Velas. Scammers marketed the fake NFT collection as akin to owning a Ferrari on the digital space and an instant gateway to the larger Ferrari metaverse.

**More NFT Scam News**

1.  Official website of Banksy hacked for fake NFT scam
2.  Phishing scam: NFTs Worth $1.7M Stolen from OpenSea Users
3.  Hot wallet hack: Hackers steal $18.7m from Animoca’s Lympo NTF platform

**How Attackers Hijacked the Subdomain?**

Further probe revealed that scammers exploited a flaw in the Adobe Experience Manager on the official website of Ferrari to hijack its subdomain and host the encrypted NFT scam content.

“After looking a bit deeper… it seems this was an Adobe Experience Manager exploit. You can still find the remnants of the unhacked site by dorking around a bit,” Curry explained.

Scammers seem to have failed to rake in a high amount from the victims. It is reported that the hacked site also prompted users to connect their MetaMask wallet to the site. Since Ferrari recently announced its plan to debut its official Metaverse, the scam seemed legit to unsuspecting users.

However, scammers made about $800, as noted by Twitter user Rebcesp who claimed the NFT scam’s Ethereum wallet received $884. The loss was minuscule since the fraud was quickly discovered, and the subdomain was shut down.

At the time of publishing this article, the compromised subdomain displayed the error code: HTTP 403 error code. It seems like just one person got scammed who sent 0.3ETH or roughly $800. The funds were transferred to Tornado Cash by the scammer.

Hackers Hijacked Official Ferrari Subdomain to Host NFT Scam

By Waqas
The Anonymous affiliated Network Battalion aka NB65 group has allegedly targeted a Russian payment processing platform Qiwi and…
This is a post from HackRead.com Read the original post: Anonymous NB65 Claims Hack on Russian Payment Processor Qiwi

The Anonymous affiliated Network Battalion aka NB65 group has allegedly targeted a Russian payment processing platform Qiwi and leaked 7 million payment card data as proof of hack.

On May 1st, 2022, NB65, one of the Anonymous affiliate hacktivist groups published a tweet in which it claimed to have gained access to Qiwi’s databases. For your information, QIWI plc is a Russian giant that provides payment and financial services in Russia and Commonwealth of Independent States (CIS) countries.

It is worth noting that NB65 is the same group that had hacked Russian state-run television and radio broadcaster VGTRK aka All-Russia State Television and Radio Broadcasting Company in April 2022 and leaked 786GB worth of data online.

As for the attack on Qiwi, NB65 also tweeted that it managed to extract 10.5TB of data comprising 30 million payment records and filtered 12.5 million credit cards of Qiwi customers. The group also posted a statement revealing that the attack was aimed at disrupting the Russian financial system.

> “Qiwi, in your last press release, you clearly stated that the sanctions against the Russian financial system did not affect your business in any way. Well, it will definitely affect your business.”
> 
> NB65 – Anonymous

NB65 also stated that they encrypted the platform’s networks with a ransomware kit. Furthermore, the group threatened to release one million records every day after the 3-day contract period expires, and the platform fails to reach out to them.

Tweets sent out by NB65 (Image: Hackread.com)

As seen by Hackread.com, on May 5th, 2022, NB65 tweeted two download links and claimed that they contain “7 million card numbers along with the full table of payment records.” Although one of the links was expired, here is what the functional download link contained:

Alleged payment card data with expiry date stolen from Qiwi (Image: Hackread.com)

**Qiwi Denies Hacking Claim**

In a statement to TASS Russian News Agency, Qiwi denied the claim that NB65 hacked the platform. The company also said that its payment services are functioning normally, and customer data is also safe.

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Anonymous NB65 Claims Hack on Russian Payment Processor Qiwi

By Deeba Ahmed
The malware Raspberry Robin is distributed via external drives and uses Microsoft Standard installer to execute malicious commands.…
This is a post from HackRead.com Read the original post: USB-based Wormable Raspberry Robin Malware Targeting Windows Installer

The malware Raspberry Robin is distributed via external drives and uses Microsoft Standard installer to execute malicious commands.

Red Canary’s Detection Engineering team has discovered a new worm-like Windows malware being distributed via removable USB drives. The malware was detected in several customer networks, mainly in the manufacturing and technology sectors.

**About Raspberry Robin**

Red Canary intelligence analysts attributed the malware to the Raspberry Robin cluster, noting that the worm leverages “Windows Installer” to access QNAP-linked domains and download a malicious DLL.

Raspberry Robin’s activity was first documented in September 2021. The operator’s objective is unclear, and researchers are also clueless about when and how the external drives get infected. They suspect that this infection occurs offline.

**Attack Chain Details**

> Raspberry Robin’s attack chain starts with connecting an infected external/USB drive to a Windows device. Researchers noted that adversaries use msiexec.exe to deliver malware while “Raspberry Robin uses msiexec.exe to attempt external network communication to a malicious domain for C2 purposes.
> 
> Lauren Podber and Stef Rand  
> Red Canary

The external drive is equipped with the worm payload that appears as a .LNK shortcut file in a legit folder. The worm creates a new process using cmd.exe to read/execute the malicious file on the USB drive.

According to Red Canary’s blog post, once this is done, the worm launches explorer.exe and msiexec.exe. The latter is used to establish network communication with a rogue domain and for downloading/installing the DLL library file.

Raspberry Robin event outline (Red Canary)

This DLL file is loaded and executed using legitimate Windows utilities like rundll32.exe, fodhelper.exe, and odbcconf.exe to bypass the UAC (User Account Control). Researchers also detected an outbound C2 contact involving regsvr32.exe, dllhost.exe, and rundll32.exe processes to IP addresses linked with Tor nodes.

Regarding why the worm installs a malicious DLL, the researchers were unclear. They hypothesized that it could be done to maintain persistence on the infected machine.

**More Windows Malware News**

1.  Beware of Fake Windows 11 Update Delivering Malware
2.  LodaRAT Windows malware now hunting Android devices
3.  New malware tool can steal files from air-gapped PCs using USBs
4.  PyMICROPSIA Windows malware steals browsing data, records audio
5.  Fake Windows website dropped Redline malware as Windows 11 upgrade

Source

HackRead