Monday, July 5, 2010

Yet another text scam  

CONGRATS! UR SIM #. HAD WON (P780,000) THRU ELECTRONIC RAFFLE DRAW:handog pasasalamat MR.NOYNOY C AQUINO.to claim your prize,pls call me now!! I'm atty.(ROLANDO ANDAYA) BSP info.Dep.per-DTI#3920 series of 2010.

- from 09079032579

Monday, June 14, 2010

Metasploit 101  

Metasploit 101 from PaulDotCom

Enjoy!

Wednesday, May 12, 2010

Philippine Securities and Exchange Commission website got defaced!  


Source: www.sec.gov.ph

Saturday, April 10, 2010

Is this your email password?  

The most common account password especially for email is "123456". How did I know? Two years ago, it ranks as top # 1 on whatsmypass.com's list of "Top 500 Worst Passwords of all Time" but people never learned as they still favor on using simple and easily-guessed passwords. And how do free email service providers respond on this? Let's take yahoo and gmail as examples.

I register a new yahoo account using "123456" as the password. It then displays as a "weak" password but still able to register the account (?). Definitely, Yahoo fails on this part.



How about the password "password"?



Good thing it is not accepted.

Another test account using "123456" as the password displays the strength as a "weak" one. Gmail does not accept weak or too short passwords as registration will fail. Same applies to the password "password".





Using simple passwords is not a new phenomenon. Thus experts’ advice not to use most common or easily-guessed passwords nor re-use it on other online accounts as it is vulnerable to hacking. Choose complex passwords. You may also check StaySafeOnline.org's article on Choosing Safe Passwords.

Monday, March 22, 2010

Mannyvillar.com.ph got hacked  

After an alleged rumor circulated via text messages early this month that AFP will carry out poll automation cheating dubbed as "Project Fullmoon" in favor to Senator Manny Villar with the assistance of a certain Korean hacker Martin Leebiong, the mockery towards the senator does not ends there.

Recently, the blog section of Senator Manny Villar's website (www.mannyvillar.com.ph) just got hacked. A blog post entry dated Mar 19, 2010 fictitiously coming from Kris Aquino, bash his campaign tactics and urge readers to vote her brother Noynoy Aquino instead.

Here is the complete message of the hacker before the post was taken down:

"Omigosh kalerky to the max. Imagine, may I gamit pa mga kids sa commercial to make sipsip to the poor. Pano naman kaming mga riichhh! Wala ba candidate na magpapakatotoo “For the rich, because I am rich!” Dapat ganun devah! Love it! So many eklat and whatnot. Why pa magpakahirap sa business kung mas mataas kita sa government di ba? Like I said to Boy regarding sa interview nila, “Taas ng TF, Amiiinin!”. Hay naku, vote for my brother Noynoy na lang, manang mana sa kanya si josh, ang cute di baah! Basta, for my hair magthank you na lang ako sa mga baklush sa pinoyhacking.com. Sila rin nagtina ng buhok ni MannyVillar ever! Greet ko na rin mga tga pinoygreyhat.org, makers ng gown ko, hay naku ang aarte nyo, pwede na kayo maging National Artist! Thanks din sa mga members ng ph****, ang official Kris Aquino fan club! Hug! Kisses!! muah muah muah! At sa mga samu’t saring pinoy hacker group, mga kumare asan na kayo!? Text text nyo naman me at makapag lamierda tayo! Love it!"


Monday, March 8, 2010

Suspicious website of the day --> e-games.com.ph  

From Google SERP:



Update:
(3/8/2010): Warning sign has been removed on SERP.

Suspicious website of the day --> o2jam.com.ph  

From Google SERP:

Wednesday, February 10, 2010

Suspicious website of the day --> computerworld.com.ph  

From Google SERP:

Monday, January 11, 2010

TESDA Website defaced  

The Technical Education and Skills Development Authority (TESDA) was the 5th victim of the continuous government website vandalism after its home page defaced by a hacker, leaving a message of sympathy to a certain "Kimay" addressed to abusive police officers and a picture of a man showing a nasty dirty finger.



This defacement follows the attack on other agencies like Department of Health (DOH), Department of Social Welfare and Development (DSWD), National Disaster Coordinating Council (NDCC), and Department of Labor and Employment (DOLE).

Tuesday, December 15, 2009

DOT PH (.ph) belongs to Top Ten Most Risky Domains  

Philippines dot ph (.ph) domain was recently listed this year by the virus company McAfee as one of the Top Ten Most Risky Domains using its SiteAdvisor and TrustedSource technologies. As summarized on below reports, dot ph (.ph) ranked 6th (overall worldwide risk) and ranked 4th (by country) with 2,272 risky domains.

http://us.mcafee.com/en-us/local/docs/Mapping_Mal_Web.pdf
http://us.mcafee.com/en-us/local/docs/Mapping_Mal_Web_Summary.pdf

Friday, December 4, 2009

Suspicious website of the day --> pinoyfreetxt.com  

Tuesday, November 3, 2009

Computerworld.com.ph website tagged as 'Harmful'  

Computerworld.com.ph website has been tagged as 'harmful' in Google SERP.


Update:
(11/5/2009): Computerworld.com.ph is unlisted in Google SERP as a 'suspicious' site.

Wednesday, October 21, 2009

Twitter's New Feature to Block Spammers  

Twitter introduces a new feature to block spammers. This can be done by clicking the 'Report [profile name] for Spam' button under Actions section of a profile's sidebar. With this, suspicious profile will be blocked on following or replying you.

This feature has not been applied automatically so that it will not be abused by twitterers who will intentionally report profiles as spam for those they don't like. Besides, reported spam profiles will be scrutinized manually by Twitter's Trust and Safety team for authentication.

Thursday, October 15, 2009

Tech-a-byte on Twitter  

Keep updated, follow me on twitter.

Upcoming Events...  

Windows 7 Community Launch Party
WHEN: OCTOBER 22, 2009
TIME: 7pm - 10pm
WHERE: 16th Floor Conference Rooms, Microsoft Philippines, 6750 Ayala Ave, Makati

Source: http://msforums.ph/forums/t/53441.aspx

PinoyGreyHat Gathering 2009:The Beginning
WHEN: DECEMBER 12, 2009
TIME: 4pm - 12mn
WHERE: BayView Hotel, 1118 Roxas Blvd. cor. U.N. Ave., Manila

Source: http://www.pinoygreyhat.org/xml/events/

Wednesday, October 14, 2009

Stay Safe While Online  

I stumbled on this site (StaySafeOnline.org) and it has lot of tips on how to stay safe while online. Protecting oneself while surfing the Internet does not need any technical knowledge. Just learning and applying the basic security practices can make a big difference in keeping oneself safe from Internet threats.

Sunday, September 27, 2009

Another Google Prank?  

Hey, what's wrong with Google? Just visited the site and I'm shocked. Looked at the spelling?!?



I quickly check the image and it's a prank. Today, is Google's 11th Birthday (double letter 'l' represents number '11').

Hahaha, nice done Goooooooogle!

Tuesday, September 22, 2009

Yahoo! Mail Increases Email Attachment Size Limit to 100 MB  

Yes, you heard it right. Users are now able to attach up to 100MB of files to their email using Drop.io’s new Attach Large Files application, one of the newly-added apps to Yahoo! Mail a couple of weeks ago.

And so here's a video tutorial.

Wednesday, August 5, 2009

Corazon Aquino's Death used to Spread Malware  

While thousands of people lined up the streets in Manila to witness the funeral procession of former Philippine President Corazon C. Aquino, millions of Filipinos here in the country and in other parts of the world are deeply relying on television and mostly on the Internet in keeping them up-to-date on the latest news on the last farewell of the "Icon of Democracy". That is why cybercriminals are taking advantage by exploiting the news from Cory Aquino's death up to her funeral day by poisoning search engine results that leads to malicious links and redirect users to malware distribution sites. These Blackhat SEO attacks are not new as these were used even on the deaths of famous people like Michael Jackson and Farrah Fawcett. Here are some additional search queries or words that I used to locate suspicious websites similar to what Trend Micro Labs has found:


"corazon aquino funeral"
"corazon aquino burial"
"cory aquino funeral"
"cory aquino burial"


Security experts advise users to exercise extreme caution in searching for related news and information. Keep antivirus up-to-date and not to click or try to visit unknown websites even if the links are posted in emails, tweets, live streams and social networking sites.

Thursday, July 30, 2009

Datablitz.com.ph listed as a 'Suspicious' Site  


Google currently listed Datablitz.com.ph - the books, games and software distributor - as a 'Suspicious' site that may harm its visitors' computer. According to the Safebrowsing Diagnostic Page report, the malicious software is hosted on 1 domain, davtraff.com.


On the other hand, the Unmaskparasites report indicates two catalog index pages of Datablitz suspected to have malicious content. Website Administrators should constantly check the site and ask Google for a Malware review if listed as a suspicious site to avoid panic on its visitors.

Update:
(8/17/2009): Datablitz.com.ph is now unlisted in Google SERP as a 'suspicious' site.