PIRATESSHIELD

123456. qwerty. password. We’ve all done it. Despite constantly being told to mix up our passwords and include everything from capital letters to hieroglyphics (well, not quite) we’re still using predictable patterns that hold the key to our entire online lives.  A research study carried out by Keeper Security has revealed the most common passwords used in 2017. The data, collected from 10 million passwords included in data breaches that happened in 2016, highlighted some interesting facts: Nearly 17% of users are using the password ‘123456’ to safeguard their accounts.  The top 25 passwords of 2016 make up for over 50% of the 10m passwords that were analyzed. 4 of the top 10 passwords are six characters or shorter. These statistics are worrying, and show that the list of most-frequently used passwords is not changing. A six character password can be unscrambled in seconds. The majority of users are not taking the time or effort to protect themselves and secure their passwords...

Watering Hole Attack A watering hole attack is a security exploit in which the attacker seeks to compromise a specific group of end users by infecting websites that members of the group are known to visit. The goal is to infect a targeted user's computer and gain access to the network at the target's place of employmen t. A watering hole attack is a security exploit in which the attacker seeks to compromise a specific group of end users by infecting websites that members of the group are known to visit. The goal is to infect a targeted user's computer and gain access to the network at the target's place of employment. What Happened ?? Cybersecurity researchers have uncovered an espionage campaign that has targeted a national data center of an unnamed central Asian country in order to conduct watering hole attacks. The campaign is believed to be active covertly since fall 2017 but was spotted in March by security researchers from Kaspersky Labs, who have attributed these...

WHAT IS SIEM? Security information and event management (SIEM) is an approach to Cybersecurity management that combines SIM (security information management) and SEM (security event management) functions into one security management system. The term security information event management (SIEM), coined by Mark Nicolett and Amrit Williams of Gartner in 2005 , the product capabilities of gathering, analyzing and presenting information from network and security devices identity and access-management applications vulnerability management and policy-compliance tools operating-system, database and application logs external threat data A key focus is to monitor and help manage user and service privileges, directory services and other[clarification needed] system-configuration changes; as well as providing log auditing and review and incident response. WHY WE NEED? IT environments are growing ever more distributed, complex and difficult to manage, making the role of security information and eve...

The hacking group is reportedly targeting vulnerable installations of Cisco Smart Install Client, a legacy plug-and-play utility designed to help administrators configure and deploy Cisco equipment remotely, which is enabled by default on Cisco IOS and IOS XE switches and runs over TCP port 4786. Cisco is aware of a significant increase in Internet scans attempting to detect devices where, after completing setup, the Smart Install feature remains enabled and without proper security controls. This could leave the involved devices susceptible to misuse of the feature. Customers who have not done so are encouraged to follow the guidance in the Recommendations section of this notice to assess and ensure their network switches are properly protected against abuse of the Smart Install featur e. Several researchers have reported on the use of Smart Install (SMI) protocol messages toward Smart Install clients, also known as integrated branch clients (IBC), allowing an unauthenticated, remote a...

INSTALLATION GUIDE FOR KALI LINUX  (For all linux Distro same installation procedure) Before the Installation Enable Windows Sub-system for Linux feature Change OS mode to Developer . Press (Windows Key) + S and try to search below mentioned option (Turn Windows ...)and click . Now you will see the menu window. Scroll down and check-in the  Windows Sub-system for Linux  and click OK. Then go to Settings > Update & Security > For Developers and chose Developer mode in right side window. Once you have done the mentioned procedures, restart your PC. INSTALLATION - Open the Microsoft Store application (Pre-Installed application of Windows) - Search ' Kali Linux ' - Click ' Get ' - Now click the three dots in the right side and chose Download Now     - Once download completed click ' Launch ' to initiate Kali Linux installation process.   -  Now you will see a terminal like below image. During the installation...

IDS Basics If you aren’t already running network IDS, you should be. There are two types of Network IDS:  Signature Detection & Anomaly Detection In a signature-based IDS, there are rules or patterns of known malicious traffic that it is looking for. Once a match to a signature is found it generates an alert. T hese alerts can turn up issues such as malware, scanning activity, attacks against servers and much more. With anomaly-based IDS, the payload of the traffic is far less important than the activity that generated it. An anomaly-based IDS tool relies on baselines rather than signatures. It will look for unusual activity that deviates from statistical averages of previous activities or activity that has been previously unseen. Perhaps a server is sending out more HTTP activity than usual or a new host has been seen inside your DMZ. Both are typically deployed in the same manner, though one could make the case you could easily (and people have) create an anomaly-based IDS on...

PHISHING ATTACK     Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers. It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message. The recipient is then tricked into clicking a malicious link, which can lead to the installation of malware, the freezing of the system as part of a ransomware attack or the revealing of sensitive informatio n . An attack can have devastating results. For individuals, this includes unauthorized purchases, the stealing of funds, or identify theft. UMBRELLA DROPPER Umbrella Dropper, which is dedicated to most pen-testing, it downloads files on the target system and executes them without a double execution of .exe, only of embed. Features Download executable on target system. Silent execution. Download and execute executable once time. If the exe already had downloaded and running, open only pd...