do you need antivirus for windows 10 or not?

does windows 10 needs antivirus or not?

Is paying for antivirus a waste of money?

if you have questions like this then you will get an answer of your question in this windows 10 security review.

in this, windows 10 security test, I used "8 molecious url" to test web Prevention of Microsoft edge. and in windows defender test, I used "84 malware sample" to check detection.

Microsoft has done a good thing of making sure that every Windows 10 PC has at least some degree of antivirus protection. It's better than nothing, by a long shot. However, it simply ignores lower-risk malware types, rather than letting you choose whether to block them. Its lab test scores, while improved, still aren't the best.

Read More

Passwords For 540,000 Car Tracking Devices Leaked Online

Another day, another news about a data breach, though this is something disconcerting.

Login credentials of more than half a million records belonging to vehicle tracking device company SVR Tracking have leaked online, potentially exposing the personal data and vehicle details of drivers and businesses using its service.

Just two days ago, Viacom was found exposing the keys to its kingdom on an unsecured Amazon S3 server, and this data breach is yet another example of storing sensitive data on a misconfigured cloud server.

The Kromtech Security Center was first to discover a wide-open, public-facing misconfigured Amazon Web Server (AWS) S3 cloud storage bucket containing a cache belonging to SVR that was left publicly accessible for an unknown period.

Stands for Stolen Vehicle Records, the SVR Tracking service allows its customers to track their vehicles in real time by attaching a physical tracking device to vehicles in a discreet location, so their customers can monitor and recover them in case their vehicles are stolen.

The leaked cache contained details of roughly 540,000 SVR accounts, including email addresses and passwords, as well as users' vehicle data, like VIN (vehicle identification number), IMEI numbers of GPS devices.

Since the leaked passwords were stored using SHA-1, a 20-years-old weak cryptographic hash function that was designed by the US National Security Agency (NSA), which can be cracked with ease.

The leaked database also exposed 339 logs that contained photographs and data about vehicle status and maintenance records, along with a document with information on the 427 dealerships that use SVR's tracking services.

Interestingly, the exposed database also contained information where exactly in the car the physical tracking unit was hidden.

According to Kromtech, the total number of devices exposed "could be much larger given the fact that many of the resellers or clients had large numbers of devices for tracking."

Since SVR's car tracking device monitors a vehicle everywhere for the past 120 days, anyone with access to SVR users' login credentials could both track a vehicle in real time and create a detailed log of every location the vehicle has visited using any internet connected device like a desktop, laptop, mobile phone or tablet.

Eventually, the attacker could outright steal the vehicle or even rob a home when they know a car's owner is out.

Kromtech responsible alerted the company of the misconfigured AWS S3 cloud storage bucket, which has since been secured. However, It is unclear whether the publically accessible data was possibly accessed by hackers or not.  

Read More

Autodesk inventor 2018 tutorials for beginners - autodesk inventor user interface

The interface for Autodesk Inventor is similar to many Windows-based applications, and 3D design software packages. The graphics window, the ribbon, the application frame, and the browser are all contained within the main window. These tutorials show you how to navigate the interface so you can begin building your designs.

Read More

APT33: Researchers Expose Iranian Hacking Group Linked to Destructive Malware

Security researchers have recently uncovered a cyber espionage group targeting aerospace, defence and energy organisations in the United States, Saudi Arabia and South Korea.
According to the latest research published Wednesday by US security firm FireEye, an Iranian hacking group that it calls Advanced Persistent Threat 33 (or APT33) has been targeting critical infrastructure, energy and military sectors since at least 2013 as part of a massive cyber-espionage operation to gather intelligence and steal trade secrets.
The security firm also says it has evidence that APT33 works on behalf of Iran's government.

FireEye researchers have spotted cyber attacks aimed by APT33 since at least May 2016 and found that the group has successfully targeted aviation sector—both military and commercial—as well as organisations in the energy sector with a link to petrochemical.

The APT33 victims include a U.S. firm in the aerospace sector, a Saudi Arabian business conglomerate with aviation holdings, and a South Korean company involved in oil refining and petrochemicals.

Most recently, in May 2017, APT33 targeted employees of a Saudi organisation and a South Korean business conglomerate using a malicious file that attempted to entice them with job vacancies for a Saudi Arabian petrochemical company.

"We believe the targeting of the Saudi organisation may have been an attempt to gain insight into regional rivals, while the targeting of South Korean companies may be due to South Korea’s recent partnerships with Iran’s petrochemical industry as well as South Korea’s relationships with Saudi petrochemical companies," the FireEye report reads.

APT33 targets organisations by sending spear phishing emails with malicious HTML links to infect targets' computers with malware. The malware used by the espionage group includes DROPSHOT (dropper), SHAPESHIFT (wiper) and TURNEDUP (custom backdoor, which is the final payload).

 However, in previous research published by Kaspersky, DROPSHOT was tracked by its researchers as StoneDrill, which targeted petroleum company in Europe and believed to be an updated version of Shamoon 2 malware.

"Although we have only directly observed APT33 use DROPSHOT to deliver the TURNEDUP backdoor, we have identified multiple DROPSHOT samples in the wild that drop SHAPESHIFT," the report reads.

The SHAPESHIFT malware can wipe disks, erase volumes and delete files, depending on its configuration.

According to FireEye, APT 33 sent hundreds of spear phishing emails last year from several domains, which masqueraded as Saudi aviation companies and international organisations, including Boeing, Alsalam Aircraft Company and Northrop Grumman Aviation Arabia.

The security firm also believes APT 33 is linked to Nasr Institute, an Iranian government organisation that conducts cyber warfare operations.

In July, researchers at Trend Micro and Israeli firm ClearSky uncovered another Iranian espionage group, dubbed Rocket Kittens, that was also active since 2013 and targeted organisations and individuals, including diplomats and researchers, in Israel, Saudi Arabia, Turkey, the United States, Jordan and Germany.

However, FireEye report does not show any links between both the hacking group. For more technical details about the APT33 operations, you can head on to FireEye's official blog post.

Read More

Red Alert 2.0: New Android Banking Trojan for Sale on Hacking Forums

The Recent discoveries of dangerous variants of the Android banking Trojan families, including Faketoken, Svpeng, and BankBot, present a significant threat to online users who may have their login credentials and valuable personal data stolen.

Security researchers from SfyLabs have now discovered a new Android banking Trojan that is being rented on many dark websites for $500 per month, SfyLabs' researcher Han Sahin told The Hacker News.

Dubbed Red Alert 2.0, the Android banking malware has been fully written from scratch, unlike other banking trojans, such as BankBot and ExoBot, which were evolved from the leaked source code of older trojans.

The Red Alert banking malware has been distributed via many online hacking forums since last few months, and its creators have continuously been updating the malware to add new functionalities in an effort to make it a dangerous threat to potential victims.

Malware Blocks Incoming Calls from Banks

Like most other Android banking trojans, Red Alert has a large number of capabilities such as stealing login credentials, hijacking SMS messages, displaying an overlay on the top of legitimate apps, contact list harvesting, among others.

Besides this, Red Alert actors have also added an interesting functionality to its malware, like blocking and logging all incoming calls associated with banks and financial associations.

This would potentially allow the Red Alert malware to prevent warnings of a compromised account to be received by the victims from their associated banks.

Malware Uses Twitter As Backup C&C Infrastructure

 

Another most interesting thing about Red Alert 2.0 is that it uses Twitter to prevent losing bots when its command and control server is knocked offline.

"When the bot fails to connect to the hardcoded C2 it will retrieve a new C2 from a Twitter account," SfyLabs researchers said in a blog post. 

"This is something we have seen in the desktop banking malware world before, but the first time we see it happening in an Android banking trojan."

The Red Alert 2.0 is currently targeting victims from more than 60 banks and social media apps across the world and works on Android 6.0 (Marshmallow) and previous versions.

Here's How the Red Alert 2.0 Trojan Works:

Once installed on victim's phone via the third-party app store, the malware waits for the victim to open a banking or social media app, whose interface it can simulate, and once detected, the Trojan immediately overlays the original app with a fake user interface.

 

The fake interface then informs the victim that there is an error while logging the user in and requests the user to re-authenticate his/her account.

As soon as the user enters the credentials into the fake user interface, Red Alert records them and sends them to the attacker-controlled command and control (C&C) server to be used by the attackers to hijack the account.

In case of banking apps, the recorded information is being used by attackers to initiate fraudulent transactions and drain the victim's bank account.

Since Red Alert 2.0 can also intercept SMS text messages received by the infected smartphone, the trojan could work around two-factor authentication techniques that otherwise are designed to throttle such attacks.

Ways to Protect Yourself Against Such Android Banking Trojans

The easiest way to prevent yourself from being a victim of one such mobile banking Trojan is to avoid downloading apps via third-party app stores or links provided in SMS messages or emails.

Just to be on the safer side, go to Settings → Security and make sure "Unknown sources" option is turned off on your Android device that blocks installation of apps from unknown sources.

Most importantly, verify app permissions before installing any app, even from official Google Play Store, and if you find any application asking more than what it is meant for, just do not install it.

It is always a good idea to install an anti-virus app from a reputed vendor that can detect and block such Trojan before it can infect your device.

Also, always keep your system and apps up-to-date.

Read More

how to change width of blogger template 2017

if you want to Modify Blog Widths, For Old and New Blogger Templates then you came to right place, because in this video, I have shown one blogspot trick to change width of body, posts, and sidebar.

Blogger provides several pre-made templates that you can customize -- and this customization includes the width. If you find that you want to customize the overall size of your blog layout, you can do this directly from Blogger's Template Designer. You don't need any HTML or CSS knowledge to do this. When you change the width of the template, the main content section of your blog will automatically re-size in relation to how you set the width of your overall template.


Why increase the width:-

1- You can have bigger images in your blogs.

2- Good result in old browsers like Internet Explorer 6.

3- Sidebar in perfect position.

4- It gives your blog an overall clean look.

Read More

Windows 10 to Give More Control Over App-level Permissions

Microsoft has been gradually changing its privacy settings in Windows 10 with the Fall Creators Update to give its users more controls over their data.

In April, Microsoft addressed some initial privacy concerns in the Windows 10 Creators Update with simplified data collection levels—Security, Basic, Enhanced, and Full—and eventually revealed its data collection practices.

Now, the software giant is making another privacy-related change with the upcoming Windows 10 Fall Creators Update, which is due for release in October 2017, giving you much more control over what apps can do with your device.

Just like apps on your smartphone's app store, apps on Windows Store also require permission to access your computer's critical functionalities like camera, microphone, calendar, contacts, and music, pictures and video libraries.

While Android and iOS allow you to limit an app's permissions to access these sensitive things, these permissions have currently been provided to all apps implicitly in the Fall Creators Update, except for access to location data that needs an explicit user permit.

But that's going to be changed.

For each new app installed on the Windows 10 Fall Creators Update, the operating system will prompt users for access to their device's camera, microphone, contacts, calendar, and images and other information, requiring an explicit opt-in for each app.

"Starting with the Fall Creators Update, we’re extending this experience to other device capabilities for apps you install through the Windows Store," Microsoft wrote in a post detailing the privacy improvements.

"You will be prompted to provide permission before an app can access key device capabilities or information such as your camera, microphone, contacts, and calendar, among others. This way you can choose which apps can access information from specific features on your device."

However, when users install the Fall Creators Update, existing applications on their device will retain their permissions, but new apps installed from the official Windows Store will require their access to be enabled explicitly.

In order to review and manage your existing app permissions, head on to Start → Settings → Privacy. To learn more about Windows app permissions, head on to this link.

Microsoft is set to test these privacy changes with Windows Insiders shortly. The Windows 10 Fall Creators Update will be released on October 17th. 

Read More

methods to create arcs in autocad

if you want to learn how to use arc command in autocad 2018 then you came to the right place because in this video shown how to draw arcs in autocad 2018.

Arc command Applies to AutoCAD, AutoCAD Architecture, AutoCAD Civil 3D, AutoCAD Electrical, AutoCAD MEP, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD P&ID, AutoCAD Plant 3D, AutoCAD Structural Detailing, & AutoCAD Utility Design

you can Create arcs by specifying various combinations of center, endpoint, start point, radius, angle, chord length, and direction values.

Arcs are drawn in a counterclockwise direction by default. Hold down the Ctrl key as you drag to draw in a clockwise direction.



"Methods to create arcs in autocad" :-

Draw Arcs by Specifying Three Points:
You can create an arc by specifying three points.


Draw Arcs by Specifying Start, Center, End:
You can create an arc using a start point, center, and a third point that determines the endpoint.

The distance between the start point and the center determines the radius. The endpoint is determined by a line from the center that passes through the third point.


Draw Arcs by Specifying Start, Center, Angle:
You can create an arc using a start point, center, and an included angle.

The distance between the start point and the center determines the radius. The other end of the arc is determined by specifying an included angle that uses the center of the arc as the vertex.

Using different options, you can specify either the start point first or the center point first.

The included angle determines the endpoint of the arc. Use the Start, End, Angle method when you know both endpoints but cannot snap to a center point.


Draw Arcs by Specifying Start, Center, Length:
You can create an arc using a start point, center, and the length of a chord.

The distance between the start point and the center determines the radius. The other end of the arc is determined by specifying the length of a chord between the start point and the endpoint of the arc.

Using different options, you can specify either the start point first or the center point first.

The length of the chord of the arc determines the included angle.


Draw Arcs by Specifying Start, End, Angle:
You can create an arc using a start point, end point, and an included angle.

The included angle between the endpoints of the arc determines the center and the radius of the arc.

Draw Arcs by Specifying Start, End, Direction:
You can create an arc using a start point, end point, and a tangent direction at the start point.

The tangent direction can be specified either by locating a point on the desired tangent line or by entering an angle. You can determine which endpoint controls the tangent by changing the order in which you specify the two endpoints.


Draw Arcs by Specifying Start, End, Radius:
You can create an arc using a start point, end point, and a radius.

The direction of the bulge of the arc is determined by the order in which you specify its endpoints. You can specify the radius either by entering it or by specifying a point at the desired radius distance.

Read More

how to create facebook page for youtube channel

1) What is a Page?
A Page gives your nonprofit a voice and presence on Facebook. Posting to your Page creates an opportunity for new people to discover your organization and can serve as a hub for connecting your community. People who like your Page may see your posts in News Feed when they visit Facebook. People can also like your posts, add comments and share them with their friends.

2) When Should You Use a Facebook Page for Your Nonprofit?
A Facebook Page may be a good option for you if your organization wants to grow its community of supporters and create more connections and interactions with people. Having a Facebook Page connects you to a global network of over a billion people. When people share interests and ideas on Facebook, it helps you find and connect with those who care most about your work. If your organization already has a Page and you’re thinking of creating an additional Page, first consider if Groups, Events or Messenger will fit your needs instead. For many organizations, having a single Facebook Page helps people find and stay up-to-date with them and allows them to have a unified voice and message. For others, particularly those that are decentralized or highly regional, having multiple Pages helps them share tailored content.

3) How Can you Use your Page To Support your Mission?
You can use your Page to:
- Educate your community about your cause and update them on your organization
- Find and connect with new supporters who share your passion
- Engage your community by creating opportunities for people to interact with you and each other
- Inspire people to take action by spreading the word, attending events, volunteering or donating funds

Read More

WireX DDoS Botnet: An Army of Thousands of Hacked Android SmartPhones

Do you believe that just because you have downloaded an app from the official app store, you're safe from malware?

Think twice before believing it.

A team of security researchers from several security firms have uncovered a new, widespread botnet that consists of tens of thousands of hacked Android smartphones.

Dubbed WireX, detected as "Android Clicker," the botnet network primarily includes infected Android devices running one of the hundreds of malicious apps installed from Google Play Store and is designed to conduct massive application layer DDoS attacks.

Researchers from different Internet technology and security companies—which includes Akamai, CloudFlare, Flashpoint, Google, Oracle Dyn, RiskIQ, Team Cymru—spotted a series of cyber attacks earlier this month, and they collaborated to combat it.

Although Android malware campaigns are quite common these days and this newly discovered campaign is also not that much sophisticated, I am quite impressed with the way multiple security firms—where half of them are competitors—came together and shared information to take down a botnet.

WireX botnet was used to launch minor DDoS attacks earlier this month, but after mid-August, the attacks began to escalate.

The "WireX" botnet had already infected over 120,000 Android smartphones at its peak earlier this month, and on 17th August, researchers noticed a massive DDoS attack (primarily HTTP GET requests) originated from more than 70,000 infected mobile devices from over 100 countries.

If your website has been DDoSed, look for the following pattern of User-Agent strings to check if it was WireX botnet:

  

After further investigation, security researchers identified more than 300 malicious apps on Google’s official Play Store, many of which purported to be media, video players, ringtones, or tools for storage managers and app stores, which include the malicious WireX code.

Just like many malicious apps, WireX apps do not act maliciously immediately after the installation in order to evade detection and make their ways to Google Play Store.

Instead, WireX apps wait patiently for commands from its command and control servers located at multiple subdomains of "axclick.store."

Google has identified and already blocked most of 300 WireX apps, which were mostly downloaded by users in Russia, China, and other Asian countries, although the WireX botnet is still active on a small scale.

   

If your device is running a newer version of the Android operating system that includes Google's Play Protect feature, the company will automatically remove WireX apps from your device, if you have one installed.

Play Protect is Google's newly launched security feature that uses machine learning and app usage analysis to remove (uninstall) malicious apps from users Android smartphones to prevent further harm.

Also, it is highly recommended to install apps from reputed and verified developers, even when downloading from Google official Play Store and avoid installing unnecessary apps.

Additionally, you are strongly advised to always keep a good antivirus app on your mobile device that can detect and block malicious apps before they can infect your device, and always keep your device and apps up-to-date.

Android malware continues to evolve with more sophisticated and never-seen-before attack vectors and capabilities with every passing day.

Just at the beginning of this week, Google removed over 500 Android apps utilising the rogue SDK—that secretly distribute spyware to users—from its Play Store marketplace.

Last month, we also saw first Android malware with code injecting capabilities making rounds on Google Play Store.

A few days after that, researchers discovered another malicious Android SDK ads library, dubbed "Xavier," found installed on more than 800 different apps that had been downloaded millions of times from Google Play Store. 

Read More

Easy-to-Use Apps Allow Anyone to Create Android Ransomware Within Seconds

"Ransomware" threat is on the rise, and cyber criminals are making millions of dollars by victimizing as many people as they can—with WannaCry, NotPetya and LeakerLocker being the ransomware threats that made headlines recently.

What's BAD? Hacker even started selling ransomware-as-a-service (RaaS) kits in an attempt to spread this creepy threat more easily, so that even a non-tech user can create their own ransomware and distribute the threat to a wider audience.

The WORSE—You could see a massive increase in the number of ransomware campaigns during the next several months—thanks to new Android apps available for anyone to download that let them quickly and easily create Android ransomware with their own devices.

Security researchers at Antivirus firm Symantec have spotted some Android apps available on hacking forums and through advertisements on a social networking messaging service popular in China, which let any wannabe hacker download and use Trojan Development Kits (TDKs).

How to Create Your Own Android Ransomware

With an easy-to-use interface, these apps are no different from any other Android app apart from the fact that it allows users to create their custom mobile malware with little to no programming knowledge.

To create customized ransomware, users can download one such app (for an obvious reason i am not sharing the links), install and open it, where it offers to choose from the following options, which are displayed on the app's on-screen form:

The message that is to be shown on the locked screen of the infected device

• The key to be used to unlock that infected device
• The icon to be used by their malware
• Custom mathematical operations to randomize the code
• Type of animation to be displayed on the infected device

Once all of the information has been filled in, users just require hitting the "Create" button.

If the user hasn't before, the app will prompt him/her to subscribe to the service before proceeding. The app allows the user to start an online chat with its developer where he/she can arrange a one-time payment.

After the payment has been made, the "malware is created and stored in the external storage in ready-to-ship condition," and then the user can continue with the process, making as many as victims as the user can.

"Anyone unlucky enough to be tricked into installing the malware will end up with a locked device held to ransom," Symantec researchers say. 

"The malware created using this automation process follows the typical Lockdroid behavior of locking the device’s screen with a SYSTEM_ALERT_WINDOW and displaying a text field for the victim to enter the unlock code."

The Lockdroid ransomware has the ability to lock the infected device, change the device PIN, and delete all of its user data through a factory reset, and even prevent the user from uninstalling the malware.

Such apps allow anyone interested in hacking and criminal activities to develop a ready-to-use piece of ransomware malware just by using their smartphones without any need to write a single line of code.

"However, these apps are not just useful for aspiring and inexperienced cyber criminals as even hardened malware authors could find these easy-to-use kits an efficient alternative to putting the work in themselves," the researchers say.

So, get ready to expect an increase in mobile ransomware variants in coming months.

How to Protect Your Android Devices from Ransomware Attacks

In order to protect against such threats on mobile devices, you are recommended to:

• Always keep regular backups of your important data.
• Make sure that you run an active anti-virus security suite of tools on your machine.
• Avoid downloading apps from unknown sites and third-party app stores.
• Always pay close attention to the permissions requested by an app, even if it is downloaded from an official app store.
• Do not open any email attachments from unknown sources.
• Finally, browse the Internet safely.

 

Read More

Autodesk inventor 2018 project file setup

A project is a system for organizing and accessing all files that are associated with a particular design job.

You can have any number of projects to manage your work.

Design data in a project typically includes parts, assemblies, standard components that are unique to your company, and libraries of off-the-shelf components such as fasteners, fittings, or electrical components.

Three projects are installed with the Inventor software: Default, samples, and tutorial files.

Determine the type of project that is suitable for your situation, and set it up before you start designing. It is difficult to migrate your files to a project after the design becomes complex.

The Project wizard steps you through the process to create a project. After you create a project, you use the Project editor to set further options. At any time, you can add or delete locations, or change the project name.

Default project:-

When you install Autodesk Inventor, it installs a "Default" project automatically. If you do not create a project or specify a different project when you start working in Inventor, the default project is automatically active. The default project does not define an editable location. However, you can use it to create designs immediately, and save files anywhere without regard to projects and file management. Your files are saved to the default project.

Generally, you use the default project for experimentation only, not actual design work. You cannot delete the Default project.

Project (.ipj) file :-

Projects use a project (.ipj) file to store the paths to folders where your design data are located.

A project (.ipj) file is a text file in .xml format. The Project wizard creates it automatically when you create a project. The file specifies the paths to folders that contain the files in the project. These stored paths assure that links between files work properly. When you open a file in a project, the program searches these paths in the order they appear, for the file and any referenced files.

Before you work on model files, add the locations for folders to the project.

The project shortcut is located in the projects folder.

Settings in projects:-

A project defines the:

The folder where you edit files (Workgroup, or Workspace local to the computer of each designer.)
A number of versions retained when you save a file.
Content Center configuration settings. We recommend that you share the same Content Center Library folder for all projects.
Project type (Single-user, or Autodesk Vault.).

Note: Projects use relative paths rather than absolute paths when the project locations such as the workspace, workgroup, or libraries are in a subfolder of the folder that contains the project file.
Projects cross-file references are stored relative to the project folder locations. You can maintain the references when you move, archive, and restructure the project folders by updating the project file data.

Active project:-

The active project is the project you currently have access to. When you change projects, you change where the program searches for referenced files. It also changes the file access dialog boxes. It is good practice to open files from, and save files to only locations in the active project.

Read More

Beware of Windows/MacOS/Linux Virus Spreading Through Facebook Messenger

If you came across any Facebook message with a video link sent by anyone, even your friend — just don’t click on it.

Security researchers at Kaspersky Lab have spotted an ongoing cross-platform campaign on Facebook Messenger, where users receive a video link that redirects them to a fake website, luring them to install malicious software.

Although it is still unclear how the malware spreads, researchers believe spammers are using compromised accounts, hijacked browsers, or clickjacking techniques to spread the malicious link.

The attackers make use of social engineering to trick users into clicking the video link, which purports to be from one of their Facebook friends, with the message that reads "< your friend name > Video" followed by a bit.ly link, as shown.

Here's How this Cross-Platform Malware Works:

The URL redirects victims to a Google doc that displays a dynamically generated video thumbnail, like a playable movie, based on the sender's images, which if clicked, further redirects users to another customised landing page depending upon their browser and operating system.

For example, Mozilla Firefox users on Windows are redirected to a website displaying a fake Flash Player Update notice, and then offered a Windows executable, which is flagged as adware software.

  

Google Chrome users are redirected to a website that masquerades as YouTube with similar YouTube logo, which displays a fake error message popup, tricking victims into downloading a malicious Chrome extension from the Google Web Store.

  

The extension actually is a downloader that downloads a file of attacker's choice to the victim's computer.

"At the time of writing, the file which should have been downloaded was not available," David Jacoby, a chief security researcher from Kaspersky Lab, writes in a blog post published today.

"One interesting finding is that the Chrome Extension has log files from the developers displaying usernames. It is unclear if this is related to the campaign, but it is still an amusing piece of information."

Users of Apple Mac OS X Safari ends up on a web page similar to when using Firefox, but it was customised for MacOS users with a fake update for Flash Media Player, which if clicked, downloads an OSX executable .dmg file, which is also adware.

Same in case of Linux, user redirects to another landing page designed for Linux users.

The attackers behind the campaign are not actually infecting users of all platform with any banking Trojan or exploit kits, but with adware to make a lot of money by generating revenue from ads.

Spam campaigns on Facebook are quite common. A few years ago, researchers found cyber criminals using boobytrapped .JPG image files to hide their malware in order to infect Facebook users with variants of the Locky ransomware, which encrypts all files on the infected PC until a ransom is paid.

To keep yourself safe, you are advised not to get curious to look at images or video links sent by anyone, even your friend, without verifying it with them, and always keep your antivirus software up-to-date.  

Read More

New Snowden Doc Exposes How NSA's Facility in Australia Aids Drone Strikes

The new documents leaked by former NSA contractor Edward Snowden has exposed a United States secretive facility located near a remote town in Australia's Northern Territory for covertly monitoring wireless communications and aiding US military missions.

The leaked documents have come from the massive trove of classified material stolen by Snowden from the US National Security Agency (NSA) in 2013 that exposed the extent of the US government's global surveillance programs.

The newly released classified documents, obtained by The Intercept, contained references to a secretive facility, which was codenamed "Rainfall," but is officially known as the Joint Defence Facility Pine Gap.

The documents reveal that the Joint Defence Facility Pine Gap, located outside Alice Springs, deployed cutting-edge satellite technology for detailed geolocation intelligence that helps the US military locate targets for special forces and drone strikes.

The use of unmanned air vehicles, generally known as drones, by the U.S. military has previously been blamed for hundreds of civilian deaths in countries like Pakistan, Afghanistan, Yemen, Syria, and Somalia.

As outlined in a secret intelligence document, Pine Gap's aim is to "support the national security of both the U.S. and Australia. The [facility] contributes to verifying arms control and disarmament agreements and monitoring military developments."

However, in reality, Pine Gap has a far broader mission with powerful capabilities than the Australian or U.S. government has ever publicly acknowledged.

Pine Gap finds Targets for U.S. Drone Strikes

The satellites used by the Pine Gap are described as being "geosynchronous"—likely positioned high in orbit at over 20,000 miles above the earth's surface—which are equipped with powerful surveillance technology to monitor wireless communications on the ground, like those sent and received by mobile phones, radios, and satellite uplinks.

According to the leaked documents, these satellites collect "strategic and tactical military, scientific, political, and economic communications signals," and also keep eyes on any missile or weapon tests in targeted countries, steal intel from foreign military data systems, and provide surveillance support to United States forces.

One of the secret NSA documents analysed by the Australian Broadcasting Corporation (ABC) suggests that the facility's role is not only to collect signals, but also to analyse them, as it "detects, collects, records, processes, analyses and reports" on almost everything—from surface-to-air missiles to anti-aircraft artillery and fighter aircraft.

One mission even pilfered communications from the former Soviet Union, China, East Asia, South Asia, the Middle East, Eastern Europe, and territories in the Atlantic Ocean.

In 2013, the Sydney Morning Herald reported that Pine Gap played a major role in controversial U.S. drone strikes, which had also resulted in the deaths of hundreds of innocent civilians.

Trump Administration Doubled the Drone Strikes

Richard Tanter, the University of Melbourne’s professor who has previously studied Pine Gap, told the publication that "Pine Gap will be contributing hugely in real-time to those operations, as well as in preparation for them."

"So whether or not the Australian government thinks that an attack on North Korea is either justified or a wise and sensible move, we will be part of that. We'll be culpable in terms of the consequences," Tanter asserted.

Under Trump administration, drone strikes and special operations raids have doubled, while simultaneously loosening battlefield rules to prevent civilian deaths in such air attacks.

However, David Rosenberg, who worked inside Pine Gap as a team leader of weapon signals analysis for at least 18 years until 2008, confirms the facility's geolocation capability, claiming that preventing civilian casualties is a high priority.

"One thing I can certainly tell you the governments of Australia, and the United States would, of course, want to minimise all civilian casualties," Rosenberg says. "Pine Gap does help to provide limitation of civilian casualties by providing accurate intelligence."

It is not at all surprising to see Australia working closely with its U.S. counterparts to help conduct global surveillance since it is a key member of the "Five Eyes" alliance—alongside the US, UK, New Zealand and Canada—all openly shares secret intelligence reports.  

Read More

how to make google adsense account for youtube 2017

how to enable monetization on youtube 2017 - enable adsense on youtube

YouTube is a valid revenue stream for many businesses, though the incoming revenue may be small with a smaller audience. It’s possible to monetize YouTube videos without AdSense, but the linked Google properties do give you the added benefit of keeping everything in one control panel. AdSense can be a powerful tool, particularly for those who are experienced in using it. Linking your AdSense and YouTube accounts is a simple process, though it may take some time for Google to process the application.

One of the easiest ways to monetize YouTube videos is to enable the monetization option for your YouTube account and link your channel with your Google AdSense Account.

Google AdSense is a Google program that helps publishers make money from their content. As a YouTube creator, you can join the publisher program to start making money from your videos.

- YouTube Monetization with AdSense:

Once you have associated your YouTube channel with an AdSense account, you will have the option to submit your videos for monetization.

Your video will be approved for monetization if it passes YouTube monetization requirements. General criteria of meeting such requirements include provisions that your videos to be advertiser-friendly, and that you own the rights to the content to use it commercially.

In this tutorial, I will walk you through steps that you need to complete to monetize YouTube videos and start making money from your videos.

YouTube Monetization Update: YouTube has introduced some changes to its Partner program limiting only channel over 10k views to enable ads on their videos. For new YouTube channels, you will need to fulfill the minimum threshold of 10,000 lifetime views to apply for the YouTube partner program and enable monetization.

- how to make money with youtube monetization and adsense:

1. enable monetization on youtube
2. create adsense account for youtube and add youtube account to google adsense
3. enable monetization on youtube for videos and select ad formats
4. wait for getting reviewed.

Read More

Android Trojan Now Targets Non-Banking Apps that Require Card Payments

The infamous mobile banking trojan that recently added ransomware features to steal sensitive data and lock user files at the same time has now been modified to steal credentials from Uber and other booking apps as well.

Security researchers at Kaspersky Lab have discovered a new variant of the Android banking Trojan called Faketoken that now has capabilities to detect and record an infected device's calls and display overlays on top of taxi booking apps to steal banking information.

Dubbed Faketoken.q, the new variant of mobile banking trojan is being distributed using bulk SMS messages as their attack vector, prompting users to download an image file that actually downloads the malware.

Malware Spy On Telephonic Conversations

Once downloaded, the malware installs the necessary modules and the main payload, which hides its shortcut icon and begins monitoring everything—from every calls to launched apps—that happens on the infected Android device.

When calls are made to or received from certain phone numbers on the victim's device, the malware begins to record those conversations and sends the recordings to the attacker's server.

Moreover, Faketoken.q also checks which apps the smartphone owner is using and when detects the launch of an app whose interface it can simulate, the Trojan immediately overlays the app with a fake user interface.

Malware Exploits Overlay Feature to Steal Credit Card Details

 

 In order to achieve this, the Trojan uses the same standard Android feature that is being employed by a whole bunch of legitimate apps, such as Facebook Messenger, window managers, and other apps, to show screen overlays on top of all other apps.

The fake user interface prompts victims to enter his or her payment card data, including the bank’s verification code, which can later be used by attackers to initiate fraudulent transactions.

Faketoken.q is capable of overlaying a large number of mobile banking apps as well as miscellaneous applications, such as:

• Android Pay
• Google Play Store
• Apps for paying traffic tickets
• Apps for booking flights and hotel rooms
• Apps for booking taxis

Since fraudsters require an SMS code sent by the bank to authorise a transaction, the malware steals incoming SMS message codes and forward them to the attackers command-and-control (C&C) server for a successful attack.

According to the researchers, Faketoken.q has been designed to target Russian-speaking users, as it uses the Russian language on the user interface.

Ways to Protect Against Such Android Banking Trojans

The easiest way to prevent yourself being a victim of such mobile banking Trojans is to avoid downloading apps via links provided in messages or emails, or any third-party app store.

You can also go to Settings → Security and make sure "Unknown sources" option is turned off in order to block installation of apps from unknown sources.

Most importantly, verify app permissions before installing apps, even if it is downloaded from official Google Play. If you find any app asking more than what it is meant for, just do not install it.

It's always a good idea to install an antivirus app from a reputed vendor that can detect and block such malware before it can infect your device, and always keep your system and apps up-to-date. 

Read More

circle command in autocad

if you want to learn how to use circle command in autocad then you came to right place because In this Autocad 2018 circle command tutorial we are going to learn and start drawing circles in AutoCAD. Time has come to move forward and learn more, I believe it is the right time to learn and see how to use AutoCAD to draw circles.

The CIRCLE command is an important and a frequently used command, you can judge by its location and its size.

Drawing a circle in AutoCAD is one of the most fundamentals while learning how to use the software. In AutoCAD there are many ways to draw circles, and all these ways depend on your inputs and the feature you want your future circle to have.

there are six different types of circle in autocad to draw.

1) autocad circle radius: first select the center radius circle drawing option. Then select the center of the circle and then put the numerical value of circle radius and press enter button.

2) Center, Diameter: first select the center radius circle drawing option. Then select the center of the circle and then put the numerical value of circle diameter and press enter button.

3) 2 Point: This option is used if want to draw a circle that passing through any two points.

4) 3 Point: This option is used if want to draw a circle that passing through or toughing any three points.

5) autocad circle tan tan radius / autocad circle ttr: When there is needed to draw a circle at which two already drawn lines are tangent and also needed the value of circle radius, then we use this option. After selecting this option first we select the first line and then select second line. After that put the value of circle radius by using numerical buttons on keyboard and at the end press enter button.

6) Tan, Tan, Tan: When there is needed to draw a circle at which three already drawn lines are tangent, then we use this option. After selecting this option first we select the first, second and third line respectively which you want to make tangent on circle. Just after selecting the third line required circle will appear.

Read More

how to connect sata hard drive to motherboard

how to connect sata hard drive to motherboard

When you are running out of hard drive space, you can either delete something or add some more space. While an external USB hard drive is an easy plug and play option, it’s not really ideal – they take up disk space, possibly an extra power socket, use up a valuable USB port, and are generally slower than internal drives. Let’s take a look today at the more difficult option of adding a second internal drive.

Now would be a great time to familiarize yourself with the basics of your computer. so this video guide will show you how to connect sata hard drive to motherboard. actually, i bought "Seagate 2TB Firecuda (Solid State Hybrid) SATA 6GB/s 64MB Cache 3.5" Internal Bare Drive ST2000DX002" and i wanted to insert this hard drive in my pc, so i thought why dont i make video to install a new hard drive. to install hard disk drive you have to take care of following steps:

1: Identify If You Can Add Another Internal Drive Or Not

Not all computers are built equal, unfortunately. If you have a laptop, or an all-in-one machine where the system internals are hidden behind the monitor – then your only option is to go with a USB drive. If you have a slim desktop then read on, as there is a chance you will have enough room for a second drive. If you have a mid to full size tower, then you should be able to easily add a second drive.

2: Open The case

Before going any further, unplug the power from the case and all peripherals.

Most tower cases can have their sides removed with just two screws. You need to remove the side which doesn’t have the motherboard on it, so look at the back of the system, find the USB/mouse ports, and remove the OPPOSITE side.

3: Get Rid Of Any Static Electricity In Your Body

When touching the insides of a computer, technicians use a grounded wrist-band to reduce the risk of shocking any delicate components with the static electricity stored in the human body. For our purposes, touching a radiator will suffice.

4: Find The Hard Drive & Connectors For It

The insides of all computers are quite similar. The hard drive is a fairly sizeable chunk of metal.

You should find it sitting in a metal cage of some sort. Check now to see if you have room to fit another one in there. A tower case will normally have space for up to 3 or 4 drives, but a smaller desktop system may have only been designed to take one drive, in which case you’re out of luck and will need to consider either upgrading the one already there, or using a external USB drive instead.

5: Identify If You Have A SATA Or IDE Drive

If yours is with a wide ribbon cable – it’s a very old connection type called IDE. Ideally, yours will be SATA. If you do find yourself with an IDE drive, you’re not completely out of luck but I’m afraid it’s out of the scope of this guide. IDE drives are becoming increasingly harder to buy, and it’s a good indication your computer is really getting old.

Some hard drives can take either kind of cable, but the SATA type are easier to plug in. If you have a spare power cable but it isn’t SATA, you can still get a second drive but you’ll need to make sure it can accept a MOLEX type power cable, or you can get a MOLEX to SATA adapter.

Next, follow the SATA data cable (not the power one) to the motherboard, and have a look at where it is plugged in. Different motherboards have different numbers of SATA ports, and older machines may even only have one. Obviously, if you can only find one SATA port, then you can only plug in one SATA drive drive. If you can see some spare sockets, then congratulations – you can now buy a second drive!

6: install hard disk drive

Sliding the drive into the cage is the hardest part as sometimes it can be blocked by a large video card or other cables. Identify the cables before you actually go ahead, noting which sides face up (SATA data and power cables all have a little notch on one end which means that inserting it the wrong way around is virtually impossible).

Once seated in the drive cage, use the screws that came with the drive to secure it – you will need to align the holes on the drive with the holes in the cage or tray. Next, find the spare power cables and the SATA cable, and plug those in.

Read More

Autodesk inventor file types

File types and templates in Inventor:-

You can open existing files, or start new files using templates. To see the templates, click the Application menu and then click on "New". In the New File dialog box, templates with predefined units are available in the file types for your application. Tabs in the dialog box contain the different standards.

Note: Before you open a file or start a new file, create or activate a project file to set the file location.
A template can contain property information, such as part and project data, and drawing views. You can see information stored in a file by viewing its properties.

Templates storage folders
Templates are stored in the following folders in the English or Metric subfolders.

Windows 7 and Windows 8®: C:\Users\Public\Documents\Autodesk\Inventor(version number)\Templates
Subfolders in the Templates folder display as tabs in the Open New File dialog box.

You can create and save custom templates in the Templates folder.

1. inventor Part (.ipt) Files definition:

you might be wondering, what does ipt stand for in inventor?

When you open a part file, you are in the part environment. Part commands manipulate sketches, features, and bodies that combine to make parts. You can insert a single body part into assemblies, and constrain them in positions they occupy when the assembly is manufactured. You can extract multiple part files from a multi-body part.

Most parts start with a sketch. A sketch is the profile of a feature and any geometry (such as a sweep path or axis of rotation) required to create the feature.

A part model is a collection of features. If necessary, solid bodies in a multi-body part file can share features. Sketch constraints control geometric relationships such as parallel and perpendicular. Dimensions control the size. Collectively this method is called Parametric modeling. You can adjust the constraints or dimensional parameters that control the size and shape of a model, and automatically see the effect of your modifications.

The following image shows a single body part (upper half of the image), and a multi-body part (lower half of the image). Notice the different part icons in each image.

2. what is the file extension of an inventor Assembly Files?

you might be wondering, what does the file extension .iam mean?

in Autodesk Inventor, you place components that act as a single functional unit into an assembly document.Assembly constraints define the relative position these components occupy with respect to each other. An example is the axis of a shaft aligning with a hole in a different component.

When you create or open an assembly file, you are in the assembly environment. Assembly commands manipulate whole subassemblies and assemblies. You can group parts that function together as a single unit and then insert the subassembly into another assembly.

You can insert parts into an assembly or use sketch and part commands to create parts in the context of an assembly. During these operations, all other components in the assembly are visible.

To complete a model, you can create assembly features that affect multiple components, such as holes that pass through multiple parts. Assembly features often describe specific manufacturing processes such as post-machining.

3. Presentation (.ipn) Files

Presentation files are a multi-purpose file type. Use a presentation file to:

Create an exploded view of an assembly to use in a drawing file.
Create an animation which shows the step by step assembly order. The animation can contain view changes and the visibility state of components at each step in the assembly process. You can save the animation to a .wmv or .avi file format.

4. Drawing (.idw, .dwg) Files

After you create a model, you can create a drawing to document your design. In a drawing, you place views of a model on one or more drawing sheets. Then you add dimensions and other drawing annotations to document the model.

A drawing that documents an assembly can contain an automated parts list and item balloons in addition to the required views.

Read More

Dark Web Users Suspect "Dream Market" Has Also Been Backdoored by Feds

By now you might be aware of the took down of two of the largest online dark websites—AlphaBay and Hansa—in what's being called the largest-ever international operation against the dark web's black market conducted by the FBI, DEA (Drug Enforcement Agency) and Dutch National Police.

But the interesting aspect of the takedown was that the federal authorities shut down AlphaBay, but took control of the Hansa market and kept it running for at least a month in an effort to monitor the activities of its visitors.

The visitors of Hansa market also included a massive flood of Alphabay refugees, as the seizer of AlphaBay Market forced their visitors to join the Hansa market for illegal trading and purchasing.

However, not just Hansa, after AlphaBay's shutdown, many of its users also joined another website known as Dream Market, which is believed to be the second-largest dark web marketplace, ahead of Hansa.

After the shutdown of both AlphaBay and Hansa, Dream Market has emerged as the leading player, but now some Reddit users on several "r/Dream_Market" threads have expressed concerns about the Dream Market, which has been in business since 2013.

One Reddit user said that Dream Market has been compromised in a similar manner as Hansa and is already under police control.

"I got contacted by an ex-Hansa staff member telling me that the operation is apparently bigger than we currently assume, that 'there will be a bloodbath, a purge' and that 'any vendor on HANSA should immediately seize his operation, lawyer up and hide his trails'," the Reddit user post read.

Possibly the Real IP of Dream Market "Mistakenly" Exposed

 

 

Another Redditor claimed to have discovered a non-encrypted IP address in Dream Market’s source code, saying that police might have taken over control of the dark market as well and are now actively monitoring its visitors.

"We found a clear address IP on the javascript source code of the market. The police must know it from a long time. GO AWAY FROM HERE RIGHT NOW !!!," the Redditor wrote along with a piece of Site's Source Code.

After exploring a bit, I found that the clearnet IP address 194.9.94.82 mentioned in the JavaScript file (lchudifyeqm4ldjj.onion/market.js) is owned by "Loopia AB," a Swedish hosting company.

 

This JavaScript file has not been added or altered recently, as according to some moderators, the file has been there from at least past 9 months, and the code itself doesn’t indicate any signs of hijack or interception.

However, here's the big blunder — Exposure of the possible real IP address of the server, which is supposed to be hidden behind the Tor Onion Router, is one of the biggest mistakes Dream Market operators might have made that could have already given an opportunity to law enforcement agencies to raid the hosting company and take control of the servers.

While the claims that Dream Market is under police control are yet to be verified, vendors who joined Dream Market may still be compromised by law enforcement.

Meanwhile, some anonymous users on Reddit are also encouraging dark web users to visit Dream Market, saying "CALM DOWN! DREAM IS WORKING FINE!"

Benefitted from the shutdown of its rivals, Dream Market had 57,000 listings for drugs and 4,000 listings for opioids on Thursday. 

Read More

how to create your own blog website for free 2017

Having a blog is a great thing because you can share anything you want (…and if you are wise you can also earn a decent income from your blog).

Here in this video, I have shown about how to make blogger account with blogspot.

There are many blogging platforms which offer users the ability to create free blogs. If you are looking for a simple free blog, my suggestion would be to start blogging with WordPress.com or BlogSpot.com. in this video i have talked about blogspot.

BlogSpot allows you to create a free blog, but it does have limitations.

However, for a beginner it is a great way to learn how to create a blog and begin the blogging process.

This post is dedicated to the “beginners” who are new to blogging and would like to get started by learning the basics involved in the process.


Before I begin the complete tutorial, there are a couple of things you should know:
Firstly, BlogSpot is a blogging platform powered by Google. 

It offers you an opportunity to start a blog. BlogSpot, and it is product of google.
in this sense, it is a Google-centric blogging platform.

To create your free BlogSpot blog site, head over to https://www.blogger.com/about/ and login using your Google account. If you don’t have a Google (gmail) account, you can create one for free.

For a first time user, you will see an option to use the identity from your Google Plus profile, or you can use your limited BlogSpot profile. I recommend using your Google Plus profile.

Once you are logged in, then follow steps as shown in video to make your own free blog website on blogger.

Read More

Tor Launches Bug Bounty Program — Get Paid for Hacking!

With the growing number of cyber attacks and breaches, a significant number of companies and organisations have started Bug Bounty programs for encouraging hackers, bug hunters and researchers to find and responsibly report bugs in their services and get rewarded.

Following major companies and organisations, the non-profit group behind Tor Project – the largest online anonymity network that allows people to hide their real identity online – has finally launched a "Bug Bounty Program."

The Tor Project announced on Thursday that it joined hands with HackerOne to start a public bug bounty program to encourage hackers and security researchers to find and privately report vulnerabilities that could compromise the anonymity network.

HackerOne is a bug bounty startup that operates bug bounty programs for companies including Yahoo, Twitter, Slack, Dropbox, Uber, General Motors – and even the United States Department of Defense for Hack the Pentagon initiative.

Bug bounty programs are cash rewards gave by companies or organisations to white hat hackers and researchers who hunt for serious security vulnerabilities in their website or products and then responsibly disclose them.

The Tor Project announced its intention to launch a public bug bounty program in late December 2015 during a talk by the Tor Project at Chaos Communication Congress (CCC) held in Hamburg, Germany. However, it launched the invite-only bounty program last year.

The highest payout for the flaws has been kept $4,000 — bug hunters can earn between $2,000 and $4,000 for High severity vulnerabilities, between $500 and $2,000 for Medium severity vulnerabilities, and a minimum of $100 for Low severity bugs.

Moreover, less severe issues will be rewarded with a t-shirt, stickers and a mention in Tor's hall of fame.

"Tor users around the globe, including human rights defenders, activists, lawyers, and researchers, rely on the safety and security of our software to be anonymous online," Tor browser developer Georg Koppen said in a blog post. "Help us protect them and keep them safe from surveillance, tracking, and attacks."

The Tor Project is a non-profit organisation behind the Tor anonymizing network that allows any online user to browse the Internet without the fear of being tracked.

The Project first announced its plan to launch the bug bounty program weeks after it accused the FBI of paying the researchers of Carnegie Mellon University (CMU) at least $1 Million to help them Unmask Tor users and reveal their IP addresses, though FBI denies the claims. 

Read More