WireX DDoS Botnet: An Army of Thousands of Hacked Android SmartPhones

Do you believe that just because you have downloaded an app from the official app store, you're safe from malware?

Think twice before believing it.

A team of security researchers from several security firms have uncovered a new, widespread botnet that consists of tens of thousands of hacked Android smartphones.

Dubbed WireX, detected as "Android Clicker," the botnet network primarily includes infected Android devices running one of the hundreds of malicious apps installed from Google Play Store and is designed to conduct massive application layer DDoS attacks.

Researchers from different Internet technology and security companies—which includes Akamai, CloudFlare, Flashpoint, Google, Oracle Dyn, RiskIQ, Team Cymru—spotted a series of cyber attacks earlier this month, and they collaborated to combat it.

Although Android malware campaigns are quite common these days and this newly discovered campaign is also not that much sophisticated, I am quite impressed with the way multiple security firms—where half of them are competitors—came together and shared information to take down a botnet.

WireX botnet was used to launch minor DDoS attacks earlier this month, but after mid-August, the attacks began to escalate.

The "WireX" botnet had already infected over 120,000 Android smartphones at its peak earlier this month, and on 17th August, researchers noticed a massive DDoS attack (primarily HTTP GET requests) originated from more than 70,000 infected mobile devices from over 100 countries.

If your website has been DDoSed, look for the following pattern of User-Agent strings to check if it was WireX botnet:

  

After further investigation, security researchers identified more than 300 malicious apps on Google’s official Play Store, many of which purported to be media, video players, ringtones, or tools for storage managers and app stores, which include the malicious WireX code.

Just like many malicious apps, WireX apps do not act maliciously immediately after the installation in order to evade detection and make their ways to Google Play Store.

Instead, WireX apps wait patiently for commands from its command and control servers located at multiple subdomains of "axclick.store."

Google has identified and already blocked most of 300 WireX apps, which were mostly downloaded by users in Russia, China, and other Asian countries, although the WireX botnet is still active on a small scale.

   

If your device is running a newer version of the Android operating system that includes Google's Play Protect feature, the company will automatically remove WireX apps from your device, if you have one installed.

Play Protect is Google's newly launched security feature that uses machine learning and app usage analysis to remove (uninstall) malicious apps from users Android smartphones to prevent further harm.

Also, it is highly recommended to install apps from reputed and verified developers, even when downloading from Google official Play Store and avoid installing unnecessary apps.

Additionally, you are strongly advised to always keep a good antivirus app on your mobile device that can detect and block malicious apps before they can infect your device, and always keep your device and apps up-to-date.

Android malware continues to evolve with more sophisticated and never-seen-before attack vectors and capabilities with every passing day.

Just at the beginning of this week, Google removed over 500 Android apps utilising the rogue SDK—that secretly distribute spyware to users—from its Play Store marketplace.

Last month, we also saw first Android malware with code injecting capabilities making rounds on Google Play Store.

A few days after that, researchers discovered another malicious Android SDK ads library, dubbed "Xavier," found installed on more than 800 different apps that had been downloaded millions of times from Google Play Store. 

Read More

Easy-to-Use Apps Allow Anyone to Create Android Ransomware Within Seconds

"Ransomware" threat is on the rise, and cyber criminals are making millions of dollars by victimizing as many people as they can—with WannaCry, NotPetya and LeakerLocker being the ransomware threats that made headlines recently.

What's BAD? Hacker even started selling ransomware-as-a-service (RaaS) kits in an attempt to spread this creepy threat more easily, so that even a non-tech user can create their own ransomware and distribute the threat to a wider audience.

The WORSE—You could see a massive increase in the number of ransomware campaigns during the next several months—thanks to new Android apps available for anyone to download that let them quickly and easily create Android ransomware with their own devices.

Security researchers at Antivirus firm Symantec have spotted some Android apps available on hacking forums and through advertisements on a social networking messaging service popular in China, which let any wannabe hacker download and use Trojan Development Kits (TDKs).

How to Create Your Own Android Ransomware

With an easy-to-use interface, these apps are no different from any other Android app apart from the fact that it allows users to create their custom mobile malware with little to no programming knowledge.

To create customized ransomware, users can download one such app (for an obvious reason i am not sharing the links), install and open it, where it offers to choose from the following options, which are displayed on the app's on-screen form:

The message that is to be shown on the locked screen of the infected device

• The key to be used to unlock that infected device
• The icon to be used by their malware
• Custom mathematical operations to randomize the code
• Type of animation to be displayed on the infected device

Once all of the information has been filled in, users just require hitting the "Create" button.

If the user hasn't before, the app will prompt him/her to subscribe to the service before proceeding. The app allows the user to start an online chat with its developer where he/she can arrange a one-time payment.

After the payment has been made, the "malware is created and stored in the external storage in ready-to-ship condition," and then the user can continue with the process, making as many as victims as the user can.

"Anyone unlucky enough to be tricked into installing the malware will end up with a locked device held to ransom," Symantec researchers say. 

"The malware created using this automation process follows the typical Lockdroid behavior of locking the device’s screen with a SYSTEM_ALERT_WINDOW and displaying a text field for the victim to enter the unlock code."

The Lockdroid ransomware has the ability to lock the infected device, change the device PIN, and delete all of its user data through a factory reset, and even prevent the user from uninstalling the malware.

Such apps allow anyone interested in hacking and criminal activities to develop a ready-to-use piece of ransomware malware just by using their smartphones without any need to write a single line of code.

"However, these apps are not just useful for aspiring and inexperienced cyber criminals as even hardened malware authors could find these easy-to-use kits an efficient alternative to putting the work in themselves," the researchers say.

So, get ready to expect an increase in mobile ransomware variants in coming months.

How to Protect Your Android Devices from Ransomware Attacks

In order to protect against such threats on mobile devices, you are recommended to:

• Always keep regular backups of your important data.
• Make sure that you run an active anti-virus security suite of tools on your machine.
• Avoid downloading apps from unknown sites and third-party app stores.
• Always pay close attention to the permissions requested by an app, even if it is downloaded from an official app store.
• Do not open any email attachments from unknown sources.
• Finally, browse the Internet safely.

 

Read More

Autodesk inventor 2018 project file setup

A project is a system for organizing and accessing all files that are associated with a particular design job.

You can have any number of projects to manage your work.

Design data in a project typically includes parts, assemblies, standard components that are unique to your company, and libraries of off-the-shelf components such as fasteners, fittings, or electrical components.

Three projects are installed with the Inventor software: Default, samples, and tutorial files.

Determine the type of project that is suitable for your situation, and set it up before you start designing. It is difficult to migrate your files to a project after the design becomes complex.

The Project wizard steps you through the process to create a project. After you create a project, you use the Project editor to set further options. At any time, you can add or delete locations, or change the project name.

Default project:-

When you install Autodesk Inventor, it installs a "Default" project automatically. If you do not create a project or specify a different project when you start working in Inventor, the default project is automatically active. The default project does not define an editable location. However, you can use it to create designs immediately, and save files anywhere without regard to projects and file management. Your files are saved to the default project.

Generally, you use the default project for experimentation only, not actual design work. You cannot delete the Default project.

Project (.ipj) file :-

Projects use a project (.ipj) file to store the paths to folders where your design data are located.

A project (.ipj) file is a text file in .xml format. The Project wizard creates it automatically when you create a project. The file specifies the paths to folders that contain the files in the project. These stored paths assure that links between files work properly. When you open a file in a project, the program searches these paths in the order they appear, for the file and any referenced files.

Before you work on model files, add the locations for folders to the project.

The project shortcut is located in the projects folder.

Settings in projects:-

A project defines the:

The folder where you edit files (Workgroup, or Workspace local to the computer of each designer.)
A number of versions retained when you save a file.
Content Center configuration settings. We recommend that you share the same Content Center Library folder for all projects.
Project type (Single-user, or Autodesk Vault.).

Note: Projects use relative paths rather than absolute paths when the project locations such as the workspace, workgroup, or libraries are in a subfolder of the folder that contains the project file.
Projects cross-file references are stored relative to the project folder locations. You can maintain the references when you move, archive, and restructure the project folders by updating the project file data.

Active project:-

The active project is the project you currently have access to. When you change projects, you change where the program searches for referenced files. It also changes the file access dialog boxes. It is good practice to open files from, and save files to only locations in the active project.

Read More

Beware of Windows/MacOS/Linux Virus Spreading Through Facebook Messenger

If you came across any Facebook message with a video link sent by anyone, even your friend — just don’t click on it.

Security researchers at Kaspersky Lab have spotted an ongoing cross-platform campaign on Facebook Messenger, where users receive a video link that redirects them to a fake website, luring them to install malicious software.

Although it is still unclear how the malware spreads, researchers believe spammers are using compromised accounts, hijacked browsers, or clickjacking techniques to spread the malicious link.

The attackers make use of social engineering to trick users into clicking the video link, which purports to be from one of their Facebook friends, with the message that reads "< your friend name > Video" followed by a bit.ly link, as shown.

Here's How this Cross-Platform Malware Works:

The URL redirects victims to a Google doc that displays a dynamically generated video thumbnail, like a playable movie, based on the sender's images, which if clicked, further redirects users to another customised landing page depending upon their browser and operating system.

For example, Mozilla Firefox users on Windows are redirected to a website displaying a fake Flash Player Update notice, and then offered a Windows executable, which is flagged as adware software.

  

Google Chrome users are redirected to a website that masquerades as YouTube with similar YouTube logo, which displays a fake error message popup, tricking victims into downloading a malicious Chrome extension from the Google Web Store.

  

The extension actually is a downloader that downloads a file of attacker's choice to the victim's computer.

"At the time of writing, the file which should have been downloaded was not available," David Jacoby, a chief security researcher from Kaspersky Lab, writes in a blog post published today.

"One interesting finding is that the Chrome Extension has log files from the developers displaying usernames. It is unclear if this is related to the campaign, but it is still an amusing piece of information."

Users of Apple Mac OS X Safari ends up on a web page similar to when using Firefox, but it was customised for MacOS users with a fake update for Flash Media Player, which if clicked, downloads an OSX executable .dmg file, which is also adware.

Same in case of Linux, user redirects to another landing page designed for Linux users.

The attackers behind the campaign are not actually infecting users of all platform with any banking Trojan or exploit kits, but with adware to make a lot of money by generating revenue from ads.

Spam campaigns on Facebook are quite common. A few years ago, researchers found cyber criminals using boobytrapped .JPG image files to hide their malware in order to infect Facebook users with variants of the Locky ransomware, which encrypts all files on the infected PC until a ransom is paid.

To keep yourself safe, you are advised not to get curious to look at images or video links sent by anyone, even your friend, without verifying it with them, and always keep your antivirus software up-to-date.  

Read More

New Snowden Doc Exposes How NSA's Facility in Australia Aids Drone Strikes

The new documents leaked by former NSA contractor Edward Snowden has exposed a United States secretive facility located near a remote town in Australia's Northern Territory for covertly monitoring wireless communications and aiding US military missions.

The leaked documents have come from the massive trove of classified material stolen by Snowden from the US National Security Agency (NSA) in 2013 that exposed the extent of the US government's global surveillance programs.

The newly released classified documents, obtained by The Intercept, contained references to a secretive facility, which was codenamed "Rainfall," but is officially known as the Joint Defence Facility Pine Gap.

The documents reveal that the Joint Defence Facility Pine Gap, located outside Alice Springs, deployed cutting-edge satellite technology for detailed geolocation intelligence that helps the US military locate targets for special forces and drone strikes.

The use of unmanned air vehicles, generally known as drones, by the U.S. military has previously been blamed for hundreds of civilian deaths in countries like Pakistan, Afghanistan, Yemen, Syria, and Somalia.

As outlined in a secret intelligence document, Pine Gap's aim is to "support the national security of both the U.S. and Australia. The [facility] contributes to verifying arms control and disarmament agreements and monitoring military developments."

However, in reality, Pine Gap has a far broader mission with powerful capabilities than the Australian or U.S. government has ever publicly acknowledged.

Pine Gap finds Targets for U.S. Drone Strikes

The satellites used by the Pine Gap are described as being "geosynchronous"—likely positioned high in orbit at over 20,000 miles above the earth's surface—which are equipped with powerful surveillance technology to monitor wireless communications on the ground, like those sent and received by mobile phones, radios, and satellite uplinks.

According to the leaked documents, these satellites collect "strategic and tactical military, scientific, political, and economic communications signals," and also keep eyes on any missile or weapon tests in targeted countries, steal intel from foreign military data systems, and provide surveillance support to United States forces.

One of the secret NSA documents analysed by the Australian Broadcasting Corporation (ABC) suggests that the facility's role is not only to collect signals, but also to analyse them, as it "detects, collects, records, processes, analyses and reports" on almost everything—from surface-to-air missiles to anti-aircraft artillery and fighter aircraft.

One mission even pilfered communications from the former Soviet Union, China, East Asia, South Asia, the Middle East, Eastern Europe, and territories in the Atlantic Ocean.

In 2013, the Sydney Morning Herald reported that Pine Gap played a major role in controversial U.S. drone strikes, which had also resulted in the deaths of hundreds of innocent civilians.

Trump Administration Doubled the Drone Strikes

Richard Tanter, the University of Melbourne’s professor who has previously studied Pine Gap, told the publication that "Pine Gap will be contributing hugely in real-time to those operations, as well as in preparation for them."

"So whether or not the Australian government thinks that an attack on North Korea is either justified or a wise and sensible move, we will be part of that. We'll be culpable in terms of the consequences," Tanter asserted.

Under Trump administration, drone strikes and special operations raids have doubled, while simultaneously loosening battlefield rules to prevent civilian deaths in such air attacks.

However, David Rosenberg, who worked inside Pine Gap as a team leader of weapon signals analysis for at least 18 years until 2008, confirms the facility's geolocation capability, claiming that preventing civilian casualties is a high priority.

"One thing I can certainly tell you the governments of Australia, and the United States would, of course, want to minimise all civilian casualties," Rosenberg says. "Pine Gap does help to provide limitation of civilian casualties by providing accurate intelligence."

It is not at all surprising to see Australia working closely with its U.S. counterparts to help conduct global surveillance since it is a key member of the "Five Eyes" alliance—alongside the US, UK, New Zealand and Canada—all openly shares secret intelligence reports.  

Read More

how to make google adsense account for youtube 2017

how to enable monetization on youtube 2017 - enable adsense on youtube

YouTube is a valid revenue stream for many businesses, though the incoming revenue may be small with a smaller audience. It’s possible to monetize YouTube videos without AdSense, but the linked Google properties do give you the added benefit of keeping everything in one control panel. AdSense can be a powerful tool, particularly for those who are experienced in using it. Linking your AdSense and YouTube accounts is a simple process, though it may take some time for Google to process the application.

One of the easiest ways to monetize YouTube videos is to enable the monetization option for your YouTube account and link your channel with your Google AdSense Account.

Google AdSense is a Google program that helps publishers make money from their content. As a YouTube creator, you can join the publisher program to start making money from your videos.

- YouTube Monetization with AdSense:

Once you have associated your YouTube channel with an AdSense account, you will have the option to submit your videos for monetization.

Your video will be approved for monetization if it passes YouTube monetization requirements. General criteria of meeting such requirements include provisions that your videos to be advertiser-friendly, and that you own the rights to the content to use it commercially.

In this tutorial, I will walk you through steps that you need to complete to monetize YouTube videos and start making money from your videos.

YouTube Monetization Update: YouTube has introduced some changes to its Partner program limiting only channel over 10k views to enable ads on their videos. For new YouTube channels, you will need to fulfill the minimum threshold of 10,000 lifetime views to apply for the YouTube partner program and enable monetization.

- how to make money with youtube monetization and adsense:

1. enable monetization on youtube
2. create adsense account for youtube and add youtube account to google adsense
3. enable monetization on youtube for videos and select ad formats
4. wait for getting reviewed.

Read More

Android Trojan Now Targets Non-Banking Apps that Require Card Payments

The infamous mobile banking trojan that recently added ransomware features to steal sensitive data and lock user files at the same time has now been modified to steal credentials from Uber and other booking apps as well.

Security researchers at Kaspersky Lab have discovered a new variant of the Android banking Trojan called Faketoken that now has capabilities to detect and record an infected device's calls and display overlays on top of taxi booking apps to steal banking information.

Dubbed Faketoken.q, the new variant of mobile banking trojan is being distributed using bulk SMS messages as their attack vector, prompting users to download an image file that actually downloads the malware.

Malware Spy On Telephonic Conversations

Once downloaded, the malware installs the necessary modules and the main payload, which hides its shortcut icon and begins monitoring everything—from every calls to launched apps—that happens on the infected Android device.

When calls are made to or received from certain phone numbers on the victim's device, the malware begins to record those conversations and sends the recordings to the attacker's server.

Moreover, Faketoken.q also checks which apps the smartphone owner is using and when detects the launch of an app whose interface it can simulate, the Trojan immediately overlays the app with a fake user interface.

Malware Exploits Overlay Feature to Steal Credit Card Details

 

 In order to achieve this, the Trojan uses the same standard Android feature that is being employed by a whole bunch of legitimate apps, such as Facebook Messenger, window managers, and other apps, to show screen overlays on top of all other apps.

The fake user interface prompts victims to enter his or her payment card data, including the bank’s verification code, which can later be used by attackers to initiate fraudulent transactions.

Faketoken.q is capable of overlaying a large number of mobile banking apps as well as miscellaneous applications, such as:

• Android Pay
• Google Play Store
• Apps for paying traffic tickets
• Apps for booking flights and hotel rooms
• Apps for booking taxis

Since fraudsters require an SMS code sent by the bank to authorise a transaction, the malware steals incoming SMS message codes and forward them to the attackers command-and-control (C&C) server for a successful attack.

According to the researchers, Faketoken.q has been designed to target Russian-speaking users, as it uses the Russian language on the user interface.

Ways to Protect Against Such Android Banking Trojans

The easiest way to prevent yourself being a victim of such mobile banking Trojans is to avoid downloading apps via links provided in messages or emails, or any third-party app store.

You can also go to Settings → Security and make sure "Unknown sources" option is turned off in order to block installation of apps from unknown sources.

Most importantly, verify app permissions before installing apps, even if it is downloaded from official Google Play. If you find any app asking more than what it is meant for, just do not install it.

It's always a good idea to install an antivirus app from a reputed vendor that can detect and block such malware before it can infect your device, and always keep your system and apps up-to-date. 

Read More

circle command in autocad

if you want to learn how to use circle command in autocad then you came to right place because In this Autocad 2018 circle command tutorial we are going to learn and start drawing circles in AutoCAD. Time has come to move forward and learn more, I believe it is the right time to learn and see how to use AutoCAD to draw circles.

The CIRCLE command is an important and a frequently used command, you can judge by its location and its size.

Drawing a circle in AutoCAD is one of the most fundamentals while learning how to use the software. In AutoCAD there are many ways to draw circles, and all these ways depend on your inputs and the feature you want your future circle to have.

there are six different types of circle in autocad to draw.

1) autocad circle radius: first select the center radius circle drawing option. Then select the center of the circle and then put the numerical value of circle radius and press enter button.

2) Center, Diameter: first select the center radius circle drawing option. Then select the center of the circle and then put the numerical value of circle diameter and press enter button.

3) 2 Point: This option is used if want to draw a circle that passing through any two points.

4) 3 Point: This option is used if want to draw a circle that passing through or toughing any three points.

5) autocad circle tan tan radius / autocad circle ttr: When there is needed to draw a circle at which two already drawn lines are tangent and also needed the value of circle radius, then we use this option. After selecting this option first we select the first line and then select second line. After that put the value of circle radius by using numerical buttons on keyboard and at the end press enter button.

6) Tan, Tan, Tan: When there is needed to draw a circle at which three already drawn lines are tangent, then we use this option. After selecting this option first we select the first, second and third line respectively which you want to make tangent on circle. Just after selecting the third line required circle will appear.

Read More

how to connect sata hard drive to motherboard

how to connect sata hard drive to motherboard

When you are running out of hard drive space, you can either delete something or add some more space. While an external USB hard drive is an easy plug and play option, it’s not really ideal – they take up disk space, possibly an extra power socket, use up a valuable USB port, and are generally slower than internal drives. Let’s take a look today at the more difficult option of adding a second internal drive.

Now would be a great time to familiarize yourself with the basics of your computer. so this video guide will show you how to connect sata hard drive to motherboard. actually, i bought "Seagate 2TB Firecuda (Solid State Hybrid) SATA 6GB/s 64MB Cache 3.5" Internal Bare Drive ST2000DX002" and i wanted to insert this hard drive in my pc, so i thought why dont i make video to install a new hard drive. to install hard disk drive you have to take care of following steps:

1: Identify If You Can Add Another Internal Drive Or Not

Not all computers are built equal, unfortunately. If you have a laptop, or an all-in-one machine where the system internals are hidden behind the monitor – then your only option is to go with a USB drive. If you have a slim desktop then read on, as there is a chance you will have enough room for a second drive. If you have a mid to full size tower, then you should be able to easily add a second drive.

2: Open The case

Before going any further, unplug the power from the case and all peripherals.

Most tower cases can have their sides removed with just two screws. You need to remove the side which doesn’t have the motherboard on it, so look at the back of the system, find the USB/mouse ports, and remove the OPPOSITE side.

3: Get Rid Of Any Static Electricity In Your Body

When touching the insides of a computer, technicians use a grounded wrist-band to reduce the risk of shocking any delicate components with the static electricity stored in the human body. For our purposes, touching a radiator will suffice.

4: Find The Hard Drive & Connectors For It

The insides of all computers are quite similar. The hard drive is a fairly sizeable chunk of metal.

You should find it sitting in a metal cage of some sort. Check now to see if you have room to fit another one in there. A tower case will normally have space for up to 3 or 4 drives, but a smaller desktop system may have only been designed to take one drive, in which case you’re out of luck and will need to consider either upgrading the one already there, or using a external USB drive instead.

5: Identify If You Have A SATA Or IDE Drive

If yours is with a wide ribbon cable – it’s a very old connection type called IDE. Ideally, yours will be SATA. If you do find yourself with an IDE drive, you’re not completely out of luck but I’m afraid it’s out of the scope of this guide. IDE drives are becoming increasingly harder to buy, and it’s a good indication your computer is really getting old.

Some hard drives can take either kind of cable, but the SATA type are easier to plug in. If you have a spare power cable but it isn’t SATA, you can still get a second drive but you’ll need to make sure it can accept a MOLEX type power cable, or you can get a MOLEX to SATA adapter.

Next, follow the SATA data cable (not the power one) to the motherboard, and have a look at where it is plugged in. Different motherboards have different numbers of SATA ports, and older machines may even only have one. Obviously, if you can only find one SATA port, then you can only plug in one SATA drive drive. If you can see some spare sockets, then congratulations – you can now buy a second drive!

6: install hard disk drive

Sliding the drive into the cage is the hardest part as sometimes it can be blocked by a large video card or other cables. Identify the cables before you actually go ahead, noting which sides face up (SATA data and power cables all have a little notch on one end which means that inserting it the wrong way around is virtually impossible).

Once seated in the drive cage, use the screws that came with the drive to secure it – you will need to align the holes on the drive with the holes in the cage or tray. Next, find the spare power cables and the SATA cable, and plug those in.

Read More

Autodesk inventor file types

File types and templates in Inventor:-

You can open existing files, or start new files using templates. To see the templates, click the Application menu and then click on "New". In the New File dialog box, templates with predefined units are available in the file types for your application. Tabs in the dialog box contain the different standards.

Note: Before you open a file or start a new file, create or activate a project file to set the file location.
A template can contain property information, such as part and project data, and drawing views. You can see information stored in a file by viewing its properties.

Templates storage folders
Templates are stored in the following folders in the English or Metric subfolders.

Windows 7 and Windows 8®: C:\Users\Public\Documents\Autodesk\Inventor(version number)\Templates
Subfolders in the Templates folder display as tabs in the Open New File dialog box.

You can create and save custom templates in the Templates folder.

1. inventor Part (.ipt) Files definition:

you might be wondering, what does ipt stand for in inventor?

When you open a part file, you are in the part environment. Part commands manipulate sketches, features, and bodies that combine to make parts. You can insert a single body part into assemblies, and constrain them in positions they occupy when the assembly is manufactured. You can extract multiple part files from a multi-body part.

Most parts start with a sketch. A sketch is the profile of a feature and any geometry (such as a sweep path or axis of rotation) required to create the feature.

A part model is a collection of features. If necessary, solid bodies in a multi-body part file can share features. Sketch constraints control geometric relationships such as parallel and perpendicular. Dimensions control the size. Collectively this method is called Parametric modeling. You can adjust the constraints or dimensional parameters that control the size and shape of a model, and automatically see the effect of your modifications.

The following image shows a single body part (upper half of the image), and a multi-body part (lower half of the image). Notice the different part icons in each image.

2. what is the file extension of an inventor Assembly Files?

you might be wondering, what does the file extension .iam mean?

in Autodesk Inventor, you place components that act as a single functional unit into an assembly document.Assembly constraints define the relative position these components occupy with respect to each other. An example is the axis of a shaft aligning with a hole in a different component.

When you create or open an assembly file, you are in the assembly environment. Assembly commands manipulate whole subassemblies and assemblies. You can group parts that function together as a single unit and then insert the subassembly into another assembly.

You can insert parts into an assembly or use sketch and part commands to create parts in the context of an assembly. During these operations, all other components in the assembly are visible.

To complete a model, you can create assembly features that affect multiple components, such as holes that pass through multiple parts. Assembly features often describe specific manufacturing processes such as post-machining.

3. Presentation (.ipn) Files

Presentation files are a multi-purpose file type. Use a presentation file to:

Create an exploded view of an assembly to use in a drawing file.
Create an animation which shows the step by step assembly order. The animation can contain view changes and the visibility state of components at each step in the assembly process. You can save the animation to a .wmv or .avi file format.

4. Drawing (.idw, .dwg) Files

After you create a model, you can create a drawing to document your design. In a drawing, you place views of a model on one or more drawing sheets. Then you add dimensions and other drawing annotations to document the model.

A drawing that documents an assembly can contain an automated parts list and item balloons in addition to the required views.

Read More

Dark Web Users Suspect "Dream Market" Has Also Been Backdoored by Feds

By now you might be aware of the took down of two of the largest online dark websites—AlphaBay and Hansa—in what's being called the largest-ever international operation against the dark web's black market conducted by the FBI, DEA (Drug Enforcement Agency) and Dutch National Police.

But the interesting aspect of the takedown was that the federal authorities shut down AlphaBay, but took control of the Hansa market and kept it running for at least a month in an effort to monitor the activities of its visitors.

The visitors of Hansa market also included a massive flood of Alphabay refugees, as the seizer of AlphaBay Market forced their visitors to join the Hansa market for illegal trading and purchasing.

However, not just Hansa, after AlphaBay's shutdown, many of its users also joined another website known as Dream Market, which is believed to be the second-largest dark web marketplace, ahead of Hansa.

After the shutdown of both AlphaBay and Hansa, Dream Market has emerged as the leading player, but now some Reddit users on several "r/Dream_Market" threads have expressed concerns about the Dream Market, which has been in business since 2013.

One Reddit user said that Dream Market has been compromised in a similar manner as Hansa and is already under police control.

"I got contacted by an ex-Hansa staff member telling me that the operation is apparently bigger than we currently assume, that 'there will be a bloodbath, a purge' and that 'any vendor on HANSA should immediately seize his operation, lawyer up and hide his trails'," the Reddit user post read.

Possibly the Real IP of Dream Market "Mistakenly" Exposed

 

 

Another Redditor claimed to have discovered a non-encrypted IP address in Dream Market’s source code, saying that police might have taken over control of the dark market as well and are now actively monitoring its visitors.

"We found a clear address IP on the javascript source code of the market. The police must know it from a long time. GO AWAY FROM HERE RIGHT NOW !!!," the Redditor wrote along with a piece of Site's Source Code.

After exploring a bit, I found that the clearnet IP address 194.9.94.82 mentioned in the JavaScript file (lchudifyeqm4ldjj.onion/market.js) is owned by "Loopia AB," a Swedish hosting company.

 

This JavaScript file has not been added or altered recently, as according to some moderators, the file has been there from at least past 9 months, and the code itself doesn’t indicate any signs of hijack or interception.

However, here's the big blunder — Exposure of the possible real IP address of the server, which is supposed to be hidden behind the Tor Onion Router, is one of the biggest mistakes Dream Market operators might have made that could have already given an opportunity to law enforcement agencies to raid the hosting company and take control of the servers.

While the claims that Dream Market is under police control are yet to be verified, vendors who joined Dream Market may still be compromised by law enforcement.

Meanwhile, some anonymous users on Reddit are also encouraging dark web users to visit Dream Market, saying "CALM DOWN! DREAM IS WORKING FINE!"

Benefitted from the shutdown of its rivals, Dream Market had 57,000 listings for drugs and 4,000 listings for opioids on Thursday. 

Read More

how to create your own blog website for free 2017

Having a blog is a great thing because you can share anything you want (…and if you are wise you can also earn a decent income from your blog).

Here in this video, I have shown about how to make blogger account with blogspot.

There are many blogging platforms which offer users the ability to create free blogs. If you are looking for a simple free blog, my suggestion would be to start blogging with WordPress.com or BlogSpot.com. in this video i have talked about blogspot.

BlogSpot allows you to create a free blog, but it does have limitations.

However, for a beginner it is a great way to learn how to create a blog and begin the blogging process.

This post is dedicated to the “beginners” who are new to blogging and would like to get started by learning the basics involved in the process.


Before I begin the complete tutorial, there are a couple of things you should know:
Firstly, BlogSpot is a blogging platform powered by Google. 

It offers you an opportunity to start a blog. BlogSpot, and it is product of google.
in this sense, it is a Google-centric blogging platform.

To create your free BlogSpot blog site, head over to https://www.blogger.com/about/ and login using your Google account. If you don’t have a Google (gmail) account, you can create one for free.

For a first time user, you will see an option to use the identity from your Google Plus profile, or you can use your limited BlogSpot profile. I recommend using your Google Plus profile.

Once you are logged in, then follow steps as shown in video to make your own free blog website on blogger.

Read More

Tor Launches Bug Bounty Program — Get Paid for Hacking!

With the growing number of cyber attacks and breaches, a significant number of companies and organisations have started Bug Bounty programs for encouraging hackers, bug hunters and researchers to find and responsibly report bugs in their services and get rewarded.

Following major companies and organisations, the non-profit group behind Tor Project – the largest online anonymity network that allows people to hide their real identity online – has finally launched a "Bug Bounty Program."

The Tor Project announced on Thursday that it joined hands with HackerOne to start a public bug bounty program to encourage hackers and security researchers to find and privately report vulnerabilities that could compromise the anonymity network.

HackerOne is a bug bounty startup that operates bug bounty programs for companies including Yahoo, Twitter, Slack, Dropbox, Uber, General Motors – and even the United States Department of Defense for Hack the Pentagon initiative.

Bug bounty programs are cash rewards gave by companies or organisations to white hat hackers and researchers who hunt for serious security vulnerabilities in their website or products and then responsibly disclose them.

The Tor Project announced its intention to launch a public bug bounty program in late December 2015 during a talk by the Tor Project at Chaos Communication Congress (CCC) held in Hamburg, Germany. However, it launched the invite-only bounty program last year.

The highest payout for the flaws has been kept $4,000 — bug hunters can earn between $2,000 and $4,000 for High severity vulnerabilities, between $500 and $2,000 for Medium severity vulnerabilities, and a minimum of $100 for Low severity bugs.

Moreover, less severe issues will be rewarded with a t-shirt, stickers and a mention in Tor's hall of fame.

"Tor users around the globe, including human rights defenders, activists, lawyers, and researchers, rely on the safety and security of our software to be anonymous online," Tor browser developer Georg Koppen said in a blog post. "Help us protect them and keep them safe from surveillance, tracking, and attacks."

The Tor Project is a non-profit organisation behind the Tor anonymizing network that allows any online user to browse the Internet without the fear of being tracked.

The Project first announced its plan to launch the bug bounty program weeks after it accused the FBI of paying the researchers of Carnegie Mellon University (CMU) at least $1 Million to help them Unmask Tor users and reveal their IP addresses, though FBI denies the claims. 

Read More

WikiLeaks Reveals CIA Teams Up With Tech to Collect Ideas For Malware Development

As part of its ongoing Vault 7 leaks, the whistleblower organisation WikiLeaks today revealed about a CIA contractor responsible for analysing advanced malware and hacking techniques being used in the wild by cyber criminals.

According to the documents leaked by WikiLeaks, Raytheon Blackbird Technologies, the Central Intelligence Agency (CIA) contractor, submitted nearly five such reports to CIA as part of UMBRAGE Component Library (UCL) project between November 2014 and September 2015.

These reports contain brief analysis about proof-of-concept ideas and malware attack vectors — publically presented by security researchers and secretly developed by cyber espionage hacking groups.

Reports submitted by Raytheon were allegedly helping CIA's Remote Development Branch (RDB) to collect ideas for developing their own advanced malware projects.

It was also revealed in previous Vault 7 leaks that CIA's UMBRAGE malware development teams also borrow codes from publicly available malware samples to built its own spyware tools.

Here's the list and brief information of each report:

Report 1 — Raytheon analysts detailed a variant of the HTTPBrowser Remote Access Tool (RAT), which was probably developed in 2015.

The RAT, which is designed to capture keystrokes from the targeted systems, was being used by a Chinese cyber espionage APT group called 'Emissary Panda.'

Report 2 — This document details a variant of the NfLog Remote Access Tool (RAT), also known as IsSpace, which was being used by Samurai Panda, Identified as another Chinese hacking group.

Equipped with Adobe Flash zero-day exploit CVE-2015-5122 (leaked in Hacking Team dump) and UAC bypass technique, this malware was also able to sniff or enumerate proxy credentials to bypass Windows Firewall.

Report 3 — This report contains details about "Regin" -- a very sophisticated malware sample that has been spotted in operation since 2013 and majorly designed for surveillance and data collection.

Regin is a cyber espionage tool, which is said to be more sophisticated than both Stuxnet and Duqu and is believed to be developed by the US intelligence agency NSA.

The malware uses a modular approach that allowed an operator to enable a customised spying. Regin's design makes the malware highly suited for persistent, long-term mass surveillance operations against targets.

Report 4 — It details a suspected Russian State-sponsored malware sample called "HammerToss," which was discovered in early 2015 and suspected of being operational since late 2014.

What makes HammerToss interesting is its architecture, which leverages Twitter accounts, GitHub accounts, compromised websites, and Cloud-storage to orchestrate command-and-control functions to execute the commands on the targeted systems.

Report 5 — This document details the self-code injection and API hooking methods of information stealing Trojan called "Gamker."

Gamker uses simple decryption, then drops a copy of itself using a random filename and injects itself into a different process. The trojan also exhibits other typical trojan behaviours.

Previous Vault 7 CIA Leaks

Last week, WikiLeaks revealed CIAs Highrise Project that allowed the spying agency to stealthy collect and forwards stolen data from compromised smartphones to its server through SMS messages.

Since March, the whistle-blowing group has published 17 batches of "Vault 7" series, which includes the latest and last week leaks, along with the following batches:

• BothanSpy and Gyrfalcon — two alleged CIA implants that allowed the spying agency to intercept and exfiltrate SSH credentials from targeted Windows and Linux operating systems using different attack vectors.
• OutlawCountry – An alleged CIA project that allowed it to hack and remotely spy on computers running the Linux operating systems.
• ELSA – the alleged CIA malware that tracks geo-location of targeted PCs and laptops running the Microsoft Windows operating system.
• Brutal Kangaroo – A tool suite for Microsoft Windows used by the agency to targets closed networks or air-gapped computers within an organisation or enterprise without requiring any direct access.
• Cherry Blossom – An agency's framework, basically a remotely controllable firmware-based implant, used for monitoring the Internet activity of the targeted systems by exploiting vulnerabilities in Wi-Fi devices.
• Pandemic – A CIA's project that allowed the agency to turn Windows file servers into covert attack machines that can silently infect other computers of interest inside a targeted network.
• Athena – A CIA's spyware framework that has been designed to take full control over the infected Windows PCs remotely, and works against every version of Microsoft's Windows operating systems, from Windows XP to Windows 10.
• AfterMidnight and Assassin – Two alleged CIA malware frameworks for the Microsoft Windows platform that has been designed to monitor and report back actions on the infected remote host computer and execute malicious actions.
• Archimedes – Man-in-the-middle (MitM) attack tool allegedly created by the CIA to target computers inside a Local Area Network (LAN).
• Scribbles – A piece of software allegedly designed to embed 'web beacons' into confidential documents, allowing the spying agency to track insiders and whistleblowers.
• Grasshopper – Framework that allowed the spying agency to easily create custom malware for breaking into Microsoft's Windows and bypassing antivirus protection.
• Marble – Source code of a secret anti-forensic framework, basically an obfuscator or a packer used by the CIA to hide the actual source of its malware.
• Dark Matter – Hacking exploits the agency designed to target iPhones and Macs.
• Weeping Angel – Spying tool used by the agency to infiltrate smart TV's, transforming them into covert microphones.
• Year Zero – Alleged CIA hacking exploits for popular hardware and software.

  

Read More

Over 70,000 Memcached Servers Still Vulnerable to Remote Hacking

Nothing in this world is fully secure, from our borders to cyberspace. I know vulnerabilities are bad, but the worst part comes in when people just don't care to apply patches on time.

Late last year, Cisco's Talos intelligence and research group discovered three critical remote code execution (RCE) vulnerabilities in Memcached that exposed major websites including Facebook, Twitter, YouTube, Reddit, to hackers.

Memcached is a popular open-source and easily deployable distributed caching system that allows objects to be stored in memory.

The Memcached application has been designed to speed up dynamic web applications (for example php-based websites) by reducing stress on the database that helps administrators to increase performance and scale web applications.

It's been almost eight months since the Memcached developers have released patches for three critical RCE vulnerabilities (CVE-2016-8704, CVE-2016-8705 and CVE-2016-8706) but tens of thousands of servers running Memcached application are still vulnerable, allowing attackers to steal sensitive data remotely.

Researchers at Talos conducted Internet scans on two different occasions, one in late February and another in July, to find out how many servers are still running the vulnerable version of the Memcached application.

And the results are surprising...

Results from February Scan:

• Total servers exposed on the Internet — 107,786
• Servers still vulnerable — 85,121
• Servers still vulnerable but require authentication — 23,707

And the top 5 countries with most vulnerable servers are the United States, followed by China, United Kingdom, France and Germany.

Results from July Scan:

• Total servers exposed on the Internet — 106,001
• servers still vulnerable — 73,403
• Servers still vulnerable but require authentication — 18,012

After comparing results from both the Internet scans, researchers learned that only 2,958 servers found vulnerable in February scan had been patched before July scan, while the remaining are still left vulnerable to the remote hack.

Data Breach & Ransom Threats

This ignorance by organisations to apply patches on time is concerning, as Talos researchers warned that these vulnerable Memcached installations could be an easy target of ransomware attacks similar to the one that hit MongoDB databases in late December.

Although unlike MongoDB, Memcached is not a database, it "can still contain sensitive information and disruption in the service availability would certainly lead to further disruptions on dependent services."

The flaws in Memcached could allow hackers to replace cached content with their malicious one to deface the website, serve phishing pages, ransom threats, and malicious links to hijack victim's machine, placing hundreds of millions of online users at risk.

"With the recent spate of worm attacks leveraging vulnerabilities this should be a red flag for administrators around the world," the researchers concluded.

"If left unaddressed the vulnerabilities could be leveraged to impact organisations globally and affect business severely. It is highly recommended that these systems be patched immediately to help mitigate the risk to organisations."

Customers and organisations are advised to apply the patch as soon as possible even to Memcached deployments in "trusted" environments, as attackers with existing access could target vulnerable servers to move laterally within those networks.  

Read More

Critical RCE Vulnerability Found in Cisco WebEx Extensions, Again — Patch Now!

A highly critical vulnerability has been discovered in the Cisco Systems’ WebEx browser extension for Chrome and Firefox, for the second time in this year, which could allow attackers to remotely execute malicious code on a victim's computer.

Cisco WebEx is a popular communication tool for online events, including meetings, webinars and video conferences that help users connect and collaborate with colleagues around the world. The extension has roughly 20 million active users.

Discovered by Tavis Ormandy of Google Project Zero and Cris Neckar of Divergent Security, the remote code execution flaw (CVE-2017-6753) is due to a designing defect in the WebEx browser extension.

To exploit the vulnerability, all an attacker need to do is trick victims into visiting a web page containing specially crafted malicious code through the browser with affected extension installed.

Successful exploitation of this vulnerability could result in the attacker executing arbitrary code with the privileges of the affected browser and gaining control of the affected system.

"I see several problems with the way sanitization works, and have produced a remote code execution exploit to demonstrate them," Ormandy said. "This extension has over 20M [million] active Chrome users alone, FireFox and other browsers are likely to be affected as well."

Cisco has already patched the vulnerability and released “Cisco WebEx Extension 1.0.12” update for Chrome and Firefox browsers that address this issue, though "there are no workarounds that address this vulnerability."

"This vulnerability affects the browser extensions for Cisco WebEx Meetings Server, Cisco WebEx Centers (Meeting Center, Event Center, Training Center, and Support Center), and Cisco WebEx Meetings when they are running on Microsoft Windows," Cisco confirmed in an advisory released today.

Download Cisco WebEx Extension 1.0.12

• Chrome Extensions
• Firefox Extension

In general, users are always recommended to run all software as a non-privileged user in an effort to diminish the effects of a successful attack.

Fortunately, Apple's Safari, Microsoft's Internet Explorer and Microsoft's Edge are not affected by this vulnerability.

Cisco WebEx Productivity Tools, Cisco WebEx browser extensions for Mac or Linux, and Cisco WebEx on Microsoft Edge or Internet Explorer are not affected by the vulnerability, the company confirmed.

The remote code execution vulnerability in Cisco WebEx extension has been discovered second time in this year.

Ormandy alerted the networking giant to an RCE flaw in the WebEx browser extension earlier this year as well, which even led to Google and Mozilla temporarily removing the add-on from their stores. 

Read More

Windows 10 Will Now Let You Reset Forgotten Password Directly From the Lock Screen

Microsoft is making every effort to make its Windows 10 Fall Creators Update bigger than ever before by beefing up its security practices and hardening it against hackers and cyber attacks in its next release.

Microsoft is finally adding one of the much-requested features to Windows 10: Pin and Password recovery option directly from the lock screen.

Yes, the next big update of Windows 10, among other features, will allow you to recover your forgotten pin and password, allowing you to reset your Windows password directly from the lock screen.

In Windows 10 Fall Creators Update, you will see "Reset password" or "I forgot my PIN" options on the login screen along with the sign-in box, mspoweruser confirmed.

Once you click on the option, Windows 10 will take you to the OOBE where Cortana will help you reset your password, after you successfully verify your identity using either your secondary email, your phone number, or Microsoft Authenticator.

  

A verification code will be sent to the option you chose, and once you entered and verified your identity, you will be able to reset the password and regain access to your computer directly from the login screen.

The tech giant is currently testing this new feature in its Windows 10 Insiders build 16237, making it much easier for them to recover their Microsoft Accounts.

You can use this option if you have either activated the Windows Hello authentication system or have a PIN to secure your account.

With the launch of Windows 10 Creator Update (also known as RedStone 3), which is expected to release sometime between September and October 2017, the company has already planned to:

• Remove the 30-year-old SMB v1 file sharing protocol.
• Build AI-powered antivirus software.
• Build its EMET anti-exploit tool into the kernel of the operating system.
• Support three different flavours of the Linux OS – Ubuntu, Fedora, and SUSE – directly through their Windows Store.
• Add new anti-ransomware feature, called Controlled Folder Access, as part of its Windows Defender.

Besides this new upgrade, Windows 10 Fall Update also includes improvements to Acrylic Material translucency effects, Task Manager, Mixed Reality headset and much more.  

Read More

direct distance entry method in Autocad

if you want to learn "how to draw a line using Direct distance entry in autocad 2018 with an example" then you came to right place because here you will find "AutoCAD line command tutorial with example".

there are basically 4 methods to draw line in autocad and i have already shown three methods in previous tutorial, and i this video i have shown one method to "draw draw line in autocad 2018".
which is:

1) Direct distance entry in autocad : In the direct distance entry method, you draw a line by entering its distance and angle values. You use the Dynamic Input mode in this method. so you can also use this method to draw a line with angle in autocad.

A simplified method of entering coordinates when the distance and direction from the last point are known is called Direct Distance Entry. In a nutshell, Direct Distance Entry eliminates the need for most keyboard entry of coordinates. Direct Distance Entry can be used anytime a command prompts for a point.

Introduction

Direct distance entry is one of those AutoCAD features that is often overlooked. This is rather unfortunate because it can be extremely useful and an amazing time-saver. Basically, direct distance entry enables you to draw an object, such as a line, by pointing in a particular direction with the cursor and entering a distance at the command line.

Direct Distance Entry (Command Modifier) Applies to AutoCAD, AutoCAD Architecture, AutoCAD Civil 3D, AutoCAD Electrical, AutoCAD MEP, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD P&ID, AutoCAD Plant 3D, AutoCAD Structural Detailing 2016, & AutoCAD Utility Design.

Note: The direct distance entry method is not available while you are using temporary override keys for Ortho, object snap tracking, or polar tracking.

• Overview of line command of autocad which i have explained in previous tutorial of autocad 2018

Command/Shortcut: LINE / L
Location: Draw - Line

Specify first point: Specify a point

Specify next point: Move the cursor in the desired direction and follow steps as shown in video.

i have drawn hexagon in autocad for just example.

Read More