Hackers spied on US oil companies: Report

Three major US oil companies came under cyber attacks that may have come from hackers in China, the Christian Science Monitor newspaper reported Monday.

Sensitive bid data on oil discoveries by Marathon Oil, ExxonMobil, and ConocoPhillips were the target of the attack, the newspaper said citing documents and sources familiar with the investigation.

The attacks occurred in 2008, but their extent only became clear later after the FBI alerted the firms.

At least one attack was traced back to a computer in China, but it was unclear the extent of China’s involvement.

E-mail passwords, e-mails and other information were among the stolen data.

Internet giant Google earlier this month said it had been the victim of cyber attacks and said as a result it would review its operations in China.

China has rejected any involvement in such attacks.

“Accusations that the Chinese government participated in cyber attacks, either in an explicit or inexplicit way, is groundless and aims to denigrate China. We firmly opposed to that,” a spokesman of the Ministry of Industry and Information Technology was quoted as saying by the Xinhua news agency earlier Monday.

Popularity: 15% [?]

Chinese Human Rights Sites Hit by DDoS Attack

Five Web sites run by Chinese human rights activists were attacked by hackers over the weekend, as a separate row continued between Google and China over political cyberattacks.

The Web site of Chinese Human Rights Defenders, an advocacy group, was hit by a distributed denial of service (DDoS) attack that lasted 16 hours starting Saturday afternoon, the group said in an e-mailed statement on Monday. A DDoS attack involves the attacker ordering a legion of compromised computers all to visit a certain Web site at once, overwhelming its server with requests for communication and leaving the site inaccessible to normal visitors. The group said it could not confirm the origin of the attackers but called the Chinese government the most likely suspect.

Google this month said it had been hit by cyberattacks from China partly aimed at accessing the Gmail accounts of human rights activists. The company cited the attacks, which also resulted in the theft of Google intellectual property, as one reason it plans to stop censoring its Chinese search engine, even if that means closing down its China offices.

The latest hacking attack also targeted another Chinese rights group named Civil Rights and Livelihood Watch; two news sites run by Chinese activists, Canyu and New Century News; and the Independent Chinese Pen Center, which posts essays by dissident writers, according to the e-mailed statement. Public records show the Web sites all share two neighboring IP (Internet Protocol) addresses, suggesting the sites were all affected by the DDoS attack.

The bandwidth consumed by the attack hit 2GB per second at its peak, the statement said, citing the Internet service provider for the Web sites.

The targeted IP addresses belong to The Planet, a server hosting provider based in Texas. No one at The Planet was immediately available to comment.

Hackers also placed malware on two of the Web sites before the attack, but that is now being removed, the statement said. The group that sent out the statement has often been hit by cyberattacks, sometimes leaving its Web site down for days, it said.

An advocacy group for foreign journalists in China last week said the Gmail accounts of at least two reporters there had been recently hijacked.

Popularity: 23% [?]

No breach in computer security system: PMO

The Prime Minister’s Office (PMO) has said there was “no breach” in the security systems of its computers or those in other central government departments.

Asked about a media report that hackers from China have targeted computers in the Prime Minister’s Office (PMO), an official in the PMO denied the report.

“Attempts have always been there to hack our computers, but we have our security systems in place,” a PMO official told IANS.

“There has been no breach on our security system, we are absolutely safe,” PMO media adviser Harish Khare told IANS.

According to a Headlines Today TV channel report, hackers from China had targeted computers in the PMO around Dec 15 last year and “investigators are still coming to terms with the depth of the damage”.

It said the hackers had aimed at the “cream of India’s national security set-up: National Security Advisor M.K. Narayanan, Cabinet Secretary KM Chandrashekhar, PM’s Special Envoy Shyam Saran and Deputy National Security Advisor Shekhar Dutt. The four and up to 26 others were squarely in the crosshairs of the hacking attempt”.

“The hacking spyware itself was embedded in a PDF document. And the Trojan Horse was programmed to carry out an array of functions, including downloading files, accessing emails and passwords and also accessing the desktop from a remote location,” it said.

Popularity: 9% [?]

Microsoft admits Explorer used in Google China hack

Microsoft has admitted that its Internet Explorer was a weak link in the recent attacks on Google’s systems that originated in China.

The firm said in a blog post on Thursday that a vulnerability in the browser could allow hackers to remotely run programs on infected machines.

Following the attack, Google threatened to end its operations in China.

Microsoft has released preliminary guidance to mitigate the problem and is working on a formal software update.

So far, Microsoft “has not seen widespread customer impact, rather only targeted and limited attacks exploiting Internet Explorer 6″.

“Based upon our investigations, we have determined that Internet Explorer was one of the vectors used in targeted and sophisticated attacks against Google and possibly other corporate networks,” said Microsoft’s director of security response Mike Reavey in the post.

‘Unfortunate’

Security firm McAfee told news agency AFP that the attacks on Google, which targeted Chinese human rights activists worldwide, showed a level of sophistication above that of typical, isolated cyber criminal efforts.

McAfee’s vice-president of threat research Dmitri Alperovitch told AFP that although the firm had “no proof that the Chinese are behind this particular attack, I think there are indications though that a nation-state is behind it”.

The recent spate of attacks was alleged to have hit more than 30 companies including Google and Adobe, but security firms have since said that such invasions are routine.

Mr Reavey echoed this in the post.

“Unfortunately cyber crime and cyber attacks are daily occurrences in the online world. Obviously, it is unfortunate that our product is being used in the pursuit of criminal activity. We will continue to work with Google, industry leaders and the appropriate authorities to investigate this situation.”

Popularity: 7% [?]

370 words cannot be used as Twitter password

370 words cannot be used as Twitter password: To protect the users’ data, Twitter has banned 370 words it considers “too obvious” to be used as passwords.

Words like “123456″, “password”, “Porsche”, “Ferrari”, etc cannot be used as passwords because Twitter thinks they are too easy to guess.

A few science fiction words are also a part of the banned word list of the website.

So, beware, Twitter and Facebook users. Hackers are already eying your account in this New Year.

Popularity: 7% [?]