Cybercriminals have reportedly targeted the Salary accounts of Mumbai Police and managed to withdraw money from their account.
According to NDTV report, cybercriminals have managed to withdraw money from Axis bank accounts of at least 14 Policemen from ATMs in Greece.
It appears hackers in Greece have done this heist by cloning ATM cards of Policemen in Mumbai.
At this time, there is no further information about how much money has been withdrawn and how many policemen have been affected by this heist.
The Mumbai police has formed a team to investigate the hack and bank has been asked to investigate.
An alleged scammer who is responsible for stealing personal data of more than 10,000k people through a spam mail pretending to be from the Bureau of National Health Insurance has been arrested in China.
Surnamed Pan, tricks victims into download and open the attachment that contained a malicious software allowing him to steal the personal data from the affected computers.
According to China Post report, he used few techniques to avoid the antivirus detection and tested his malware numerous time before launching the real attack.
Criminal Investigation Bureau (CIB) said he had stolen "vast amounts of classified financial information from location companies". He then used those details for accessing the online banking accounts and committed credit card fraud.
Arthur Budovsky Belanchuk, the owner of Liberty Reserve, has been arrested in Spain for money laundering.This was revealed by a joint investigation by the Spanish and US police agencies.
Raids were conducted at his home and office's. The investigation had been on since 2011. Also apparently Budobsky's business in Costa Rica was financed by child pornography websites and drug trafficking.
Libirty Reserve's main domain libertyreserve.com is not showing the original site, its pointing to a sinkhole .
Update on 28/05/2013
The site is now showing a "This Domain Has been seized" message from the United States Global Illicit Financial Team.
Also this press release: http://www.justice.gov/usao/nys/pressreleases/May13/LibertyReservePR.php
Raids were conducted at his home and office's. The investigation had been on since 2011. Also apparently Budobsky's business in Costa Rica was financed by child pornography websites and drug trafficking.
Libirty Reserve's main domain libertyreserve.com is not showing the original site, its pointing to a sinkhole .
Update on 28/05/2013
The site is now showing a "This Domain Has been seized" message from the United States Global Illicit Financial Team.
Also this press release: http://www.justice.gov/usao/nys/pressreleases/May13/LibertyReservePR.php
As you can see the domain was transferred on May 24,2013 to point to shadowserver.org's name server - a server used by the US Governments to seize a website that has did an online fraud.
One of the EHN's reader, Jonathan Capistrano who contacted LR about the status of peoples funds was told that they will not be closing down but are taking a break and that LR will be back "new and better" and finally said that funds will stay there , with no reduction or increase in value.
Update: This might just be a response said by the LR team so that people do not panic.Legally since LR is not FDIC approved the US government is not responsible for the money people lost.
Cybercriminals hacked into the Mumbai-based current account of the RPG Group of companies and stole Rs 2.4 crore within 3 hours on May 11, Times of India reported.
The TOI report says money has been transferred to 13 different bank accounts in Chennai, Coimbatore,Tirunelveli, Bangalore,Hyderabad and other places.
The bank blocked those accounts but the gang have already managed to withdraw some funds.
The police has arrested three members of the crew who came to withdraw the money in Coimbatore and Hyderabad.
It appears the Company fell victim when the company officials opened the malware attached mail sent by the gang. The gang then probably harvested the bank login credentials using the malware.
Earlier this year, cyber criminals stole Rs 1 crore in Mulund from the current account of a cosmetics company.
The TOI report says money has been transferred to 13 different bank accounts in Chennai, Coimbatore,Tirunelveli, Bangalore,Hyderabad and other places.
The bank blocked those accounts but the gang have already managed to withdraw some funds.
The police has arrested three members of the crew who came to withdraw the money in Coimbatore and Hyderabad.
It appears the Company fell victim when the company officials opened the malware attached mail sent by the gang. The gang then probably harvested the bank login credentials using the malware.
Earlier this year, cyber criminals stole Rs 1 crore in Mulund from the current account of a cosmetics company.
An unknown hackers with "Unlimited Hack Team(UHT)" defacement signature recently attacked Thai PM website and posted insulting message about the Prime minister Yingluck Shinawatra.
Narongrit Suksarn, aka Window 98se, 29, from Nakhon Si Thammarat, suspected hacker who met the police last week insisted he didn't hack into the PM's site, nor post insulting messages on it. But he admitted he was one of the member of the Unlimited Hack Team.
The Police said they have gathered information and are confident Narongrit and other suspects from the hacking group will be charged.
Technology Crime Suppression Division (TCSD) commander Pol Maj Gen Pisit Paoin said they believed the Narongrit had hacked into PM site three days before the attack but he didn't change anything.
The police said the suspect will be charged with a violation of Section 5 of the 2007 Computer Act for allegedly sharing the stolen data with the team members, according to Bangkok post report.
It appears the UHT was established by a Cambodian group. The TCSD have requested Cambodian authorities to help in investigating the Cambodian hackers.
We are in the Cyber world , here the robbers don't wear masks, use guns or even threatening bank tellers , they use laptop and internet instead.
An alleged international cyber criminals managed to steal $45 million from thousands of ATM's in matter of hours.
Their first operation started from India, the hackers were able to "infiltrate the system of an unnamed Indian credit-card processing company that handles Visa and MasterCard prepaid debit cards. "
In their first operation, the crews made 4,500 ATM transactions worldwide and stole $5million, according to New York Times report.
In the second operation, the crews made 36,000 transactions worldwide and stole about $40 million in approximately 10 hours. It included $2.4 million stolen by a team of eight people in New York City.
The seven of the eight suspected members of the New York crew have been arrested. The eighth, said to be the ringleader, was found dead on April 27 in the Dominican Republic.
An alleged international cyber criminals managed to steal $45 million from thousands of ATM's in matter of hours.
Their first operation started from India, the hackers were able to "infiltrate the system of an unnamed Indian credit-card processing company that handles Visa and MasterCard prepaid debit cards. "
In their first operation, the crews made 4,500 ATM transactions worldwide and stole $5million, according to New York Times report.
In the second operation, the crews made 36,000 transactions worldwide and stole about $40 million in approximately 10 hours. It included $2.4 million stolen by a team of eight people in New York City.
The seven of the eight suspected members of the New York crew have been arrested. The eighth, said to be the ringleader, was found dead on April 27 in the Dominican Republic.

The China Posts reports that Taiwan police has arrested an individual suspect surnamed Shih on May 1 for hacking into a popular local classic music website.
The police raided the apartment of Shih and seized his computer which is found to be used in his hacking attempts.
The hacker admitted that he hacked into the website's customer database and made unauthorized changes to customer data by exploiting the SQL Injection vulnerability.
Criminal Investigation Bureau (CIB) stated the investigation was launched after it received a report from the web site's operator who said their site had been been hacked in March.
An unknown hacker breached the website of the Prime minister Yingluck Shinawatra's office (opm.go.th/opminter/mainframe.asp) and posted abusive message with the altered photo of her.
"I’m a slutty moron” The offensive comment made by the cybercriminals in the defaced page. “I know that I am the worst Prime Minister ever in Thailand history!!!”.
Although the defacement sign says it was hacked by the hacker group "Unlimited Hack Team", the team denied the involvement in the security breach.
“It might have been done by some teenagers... or maybe it was for political purposes,” the prime minister’s secretary-general, Suranand Vejjajiva is quoted in the NewStraitsTimes' report as saying.
It appears the security breach comes after she filed a defamation case against a cartoonist for allegedly comparing her to a prostitute on his Facebook page.
"I’m a slutty moron” The offensive comment made by the cybercriminals in the defaced page. “I know that I am the worst Prime Minister ever in Thailand history!!!”.
Although the defacement sign says it was hacked by the hacker group "Unlimited Hack Team", the team denied the involvement in the security breach.
| Image credits: manager.co.th |
“It might have been done by some teenagers... or maybe it was for political purposes,” the prime minister’s secretary-general, Suranand Vejjajiva is quoted in the NewStraitsTimes' report as saying.
“Hacking a website is easy... but don’t forget that checking who did it is not hard either,” he told reporters.
It appears the security breach comes after she filed a defamation case against a cartoonist for allegedly comparing her to a prostitute on his Facebook page.

A Software programmer who was employed at the High-voltage power manufacturer company arrested for hacking into the computer network of the company.
According to the FBI report, Michael Meneses, was employed at the victim company as a software programmer and system manager specializing in developing and customizing the software that the company used to run its business operations.
He was one of two employees who were primarily responsible for ensuring that the software that drove the company’s manufacturing business. His responsibilities gave him high-level access to the company’s computer network.
He had voiced displeasure at having been passed over for promotions, tendered his resignation in late December 2011. Then, he allegedly launched cyber attack against the company and steal employee's security credentials. He then used those credentials for accessing the network remotely via VPN. The complaint says the company suffered over $90,000 in damages as a result of Meneses’s intrusions.
If convicted, he will face a statutory maximum sentence of years’ imprisonment, a $250,000 fine, and restitution.
[Spam alert] While everyone horrified by the Boston Marathon bombings, the heartless cyber criminals ready to take advantage of this tragic incident and started to spread spam mails.
Earlier Today i received two mails with subject related to Explosions at Boston Marathon. The mail had nothing other than a link to external page [IP_address/boston.html]
When i tried to visit the "85.198.81.**/boston.html" page, the page with title "Hot News::Videos of Explosions at the Boston Marathon 2013" displayed some legitimate youtube videos .
But, in background, the page load an iframe to a malicious page where the java exploit is being hosted. Anyway, i am not able to download the .jar file because it is unavailable when i try to download.
It seems like the same link is being used in the spam mail received by Kaspersky Lab. Kaspersky analyzed and found that malware tries to connect to several IP addresses in Ukraine, Argentina and Taiwan.
Earlier Today i received two mails with subject related to Explosions at Boston Marathon. The mail had nothing other than a link to external page [IP_address/boston.html]
When i tried to visit the "85.198.81.**/boston.html" page, the page with title "Hot News::Videos of Explosions at the Boston Marathon 2013" displayed some legitimate youtube videos .
But, in background, the page load an iframe to a malicious page where the java exploit is being hosted. Anyway, i am not able to download the .jar file because it is unavailable when i try to download.
It seems like the same link is being used in the spam mail received by Kaspersky Lab. Kaspersky analyzed and found that malware tries to connect to several IP addresses in Ukraine, Argentina and Taiwan.

Slovenian Police performed 12 house searches and arrested five cyber criminals who are believed to be responsible for the malware attacks that steals money from companies bank accounts.
It all started last year when the Slovenian national Computer Emergency Response Team(SI-CERT) started receive reports regarding a malware attacks.
The victims received emails pretending to be coming from a local bank and state tax authority with a Trojan horse attached.
The malware installs the Remote Administration tool that steals victim's e-banking credentials and send it to the cyber criminals.
"With stolen credentials and in the case where the victim did not remove the smart card containing the bank-issued certificate from the reader after use, the doors to the company's bank accounts were left open to the criminal gang." SI-CERT's report reads.
The attackers cleverly planned their attacks to happen on Fridays or the day before national holidays, so that the companies wouldn't immediately notice the theft.
According to the report, the criminal group used 25 money mules to transfer around 2 million Euros.
After hacking 84 Russian websites, the hacker SiR Abdou come with more hacked sites. Yesterday, he defaced 42 website and today he hacked 50 more websites. This comes to a total of 176 Russian websites within three days.
The hacker claims this penetration is to support the prisoners on hunger strike since months in Israeli jails for up their appeal to the whole world and deliver their message.
" Freedom for Prisoners of Palestinians on hunger strike in Israeli jails. God willing, up call to the world to support the prisoners in the battle of the intestines empty waging against the Israeli jailer." The defacement message reads.
Few hacked sites:
maxi-beauty.ru
pinup-parfum.ru
kazankosmetika.ru
детсад6-туймазы.рф
coral-dar.ru
holisticvision.ru
roart.ru
The full list of hacked sites can be found here:
1.pastebin.com/dGQj56E5
2.pastebin.com/nwcQc9Fg
The hacker claims this penetration is to support the prisoners on hunger strike since months in Israeli jails for up their appeal to the whole world and deliver their message.
" Freedom for Prisoners of Palestinians on hunger strike in Israeli jails. God willing, up call to the world to support the prisoners in the battle of the intestines empty waging against the Israeli jailer." The defacement message reads.
![]() |
| Defaced page |
Few hacked sites:
maxi-beauty.ru
pinup-parfum.ru
kazankosmetika.ru
детсад6-туймазы.рф
coral-dar.ru
holisticvision.ru
roart.ru
The full list of hacked sites can be found here:
1.pastebin.com/dGQj56E5
2.pastebin.com/nwcQc9Fg
The Dubai Police have arrested a cyber crime gang who were able to transfer more than 2 Million dollars(Dh7 million) from Dubai Exchange companies' accounts.
The police said that a gang of Asians and Africans work with hackers to hack into websites and systems of companies in Dubai to transfer the money.
The police have found cheques worth more than Dh6 billion with the gang after their arrest.
The police take action after they received complaints about a scam and transfer of $2 million from a company's account. “This was done through hacking the e-mails of this company by someone outside the UAE,”GulfNews quoted Colonel Salem Khalifa Al Rumaithi, deputy director of the General Department of Criminal and Investigation for research.
A hacker with twitter handle @LIberoamericaMu affiliated to Anonymous hacktivist has hacked into the La Rioja's Ministry of Education and defaced the main page of the site.
The hacker defaced the front page of educacionlarioja.gov.ar and posted a simple message : " Hacked By Libero . I Love Revolution !"
The hacker recently hacked and defaced the Government websites of PUERTO MADRYN (madryn.gov.ar)
A Hacker group claiming to be part of Al-Qaeda has breached the Washington State Community College (WSCC.edu) and defaced it.
According to The News center report, hackers replaced the front page of the website with an image of Osama bin Laden around 4 p.m..
In the image the hacker posted "Hacked by Al-Qaeda Hacker Team&TKL"
When a student tried to log in to his student account, he saw the defacement page instead. Immediately , he informed the newsroom about the breach.
At the time of press time, the site has been restored by the administrator. The security breach is being investigated by Ohio State Highway Patrol.
Indian actress Sameera Reddy has became a victim of cyber crime. An unknown hacker has spent ₹ 5 Lakhs on her credit card.
According to NDTV report, the hacker used the credit card across different locations around the world.
After spending the money , the hacker surprisingly called Sameera Reddy and informed her about the theft. The thief had apparently decided to call her up because he was a big fan of the actress.
“I was dubbing when I got a call. It was from an unknown number and the person on the other side told me he was part of a hackers’ team. I could not believe what he was saying,” Sameera Reddy said.
"I had my card with me but the bank authority asked me to pay up the dues. I kept arguing with them for two months. Finally, the matter has been settled," Sameera added.
Crazy hacker..! what do you think?!
The Philippines Bureau of Immigration(BI) has announced the arrest of 17 Chinese Cyber Criminals wanted for Online Fraud and Cyber Crimes in China.
Immigration Commissioner Ricardo David Jr. said that the suspects , 15 of which are women, have been arrested in Makati City as part of an operation conducted by elements of the BI fugitive search unit.
The alleged CyberCriminals were identified as Cai Hong Ji, Mei Li, Huan Huan Yu, Si Meng Liu, Jiang Yang, Wenjie Yan, Ruicen Yuan, Zhi Ying He, Ning Zahang, Qian Shi, Liu Jan Wen, Chen Yan Ling, Peng Yuan Yuan, Ling Min Zhang, Zhou Xiao Yun, Chen Qing E, and Guo Yan.
According to BI report, the arrest come after the Chinese embassy request the BI to help them in capturing cyber criminals who fled to Philippines to evade arrest by Chinese authorities.
“All of them could not present their passports and travel documents, thus we will deport them for being undocumented and overstaying aliens,” the BI chief said.
Three alleged cyber criminals from Russia, Romania and Latvia charged for spreading a computer virus called "Gazi" to more than a million computers worldwide and steal tens of millions of dollars.
Nikita Kuzmin, 25, Deniss Calovskis, 27, and Mihai Ionut Paunescu, 28, are accused of creating "one of the most financially destructive computer viruses in history."
Gozi virus was spread largely via PDF file attached with spam emails. Once user open the attachment, the malware infects the victim system.
The malware steals user names, passwords, and other security information

Earlier Today, we reported that more than 1000 Indian sites hacked by Bangladesh Grey hat hackers. The Bangladesh Cyber Army claims to have defaced around 3,000 Indian websites as a form of protest against the country’s Border Security Force (BSF).
"After exactly one year, Bangladesh Cyber Army is back once again with their attacks on Indian Cyber Space." The hacker said in an email sent to EHN.
"This attacks was inflicting owing to the reason of 7th January, being the day, when a 13 year old Bangladeshi girl was brutally murdered by BSF just 2 years back."
The full list of hacked sites can be found here : http://pastebin.com/EX47khec
" The website of Paisacontrol which is a supporting website of Indian Stock Exchange has also gone down! Bigger attacks will be coming! " The hackers give a warning.
The hackers uploaded a video on youtube with the title"2nd Bangladesh vs India War"

In a suspected Cyber attack against the Japan, Foreign hackers might have compromised more than 3000 confidential data from the country's Ministry of Agriculture,Forestry and Fishery by infecting the ministry's system with a malware.
Investigators from the governemnt revealed that malware used in the suspected cyber-attack to be HTran, a connection bouncer program believed to have been developed by a Chinese hacker group around 2003, The report from The Daily Yomiuri says.
HTran is often used in cyber-attacks to steal information, as it can send data secretly.
"The programme was also used to steal data from the Finance Ministry, as HTran data transmissions were discovered to have taken place from October 2010 to November 2011" The report says.
Initially, the ministry did not inform the police, despite the fact that the intrusion fell under the Unauthorized Access Prohibition Law. However, now, the police have launched their own investigation to determine what information has been compromised.















