Indholdsfortegnelse for June 2023 i Hackercool Magazine

Car theft is on the rise, according to AA Insurance Services. Worryingly, thieves are incre asingly using high-tech tools to target weaknesses in the same sensors and computerised systems that were designed to help make our journeys safer and more comfortable. In fact, as the market research company Technavio, noted in 2017, the significant growth of the automotive electronics sector was driven specifically by the need for added driver convenience and concerns about car theft. So, it’s a sobering thought that these same sensors, computers and data aggregation systems are what criminals now use to steal cars. The convenience offered by the keyless entry system (KES), is one such example. KES enables drivers to passively lock, unlock, start and stop the engine by simply carrying the key fob along with…

Hackers don’t send you a malicious EXE and ask you to click on it to get a reverse shell from your system. To make the hacking attack effective, lot of complex processes and steps are employed by them, These steps and processes that are used to infect a target system is called as Infection Chain. Hackers constantly improvise their infection chain to stay above the White Hat guys. In this Issue, we bring you the infection chain of ROKRAT, but first a little background. What is ROKRAT You all know what is a RAT. It is a Remote Administration Tool that is used to monitor computers remotely. ROKRAT was discovered by Cisco Talos Intelligence way back in 201 7. While analyzing a malicious document (maldoc) sent by North Korean hacking…

Hello Hackercoolians, the makers of Kali Linux have released the second release of Kali Linux after they completed their 10 year anniversary. Here is everything new about this release. Hyper_V Image Kali Linux is available in various images for installation. Apart from VMware, VirtualBox and QEMU virtual images, now Kali Linux is available as an installer image for Microsoft Hyper-V. Desktop updates In the latest release of Kali, the makers added a nifty extension for the Xfce file manager, GtkHash. If you are using Xfce, you can easily calculate checksums of files by just right clicking on the fi le and then opening checksums tab. “My hacking involved pretty much exploring computer systems and obtaining access to the source code of telecommunication systems and computer operating systems, because my goal…

In our previous Issue, readers have learnt what is Papercut software, what is the vulnerability exposed in that software and how Threat Actors have been quick to exploit this to deploy their favorite payload. We have shown you how the vulnerability is exploited without Metasploit and a payload is dropped on the target system. In this Issue, we will be showing our readers how to exploit this same vulnerability using Metas-ploit module. But here too, we will be simulating a Real-world Scenario, where a threat actor exploited the vulnerability to gain a foothold on the target system, dumped their password hashes and then installed a RAT (Remote Administration Tool) on the target for persistent access. So let’s start. We will be using the same target Windows 10 system we used…

Threat Actors always search for ways to keep their payloads and malware FUD (Fully undetected). What if there was an engine that can keep your payloads FUD for a long time. In this issue, you are going to learn about one such malware obfuscation engine that is being used by various malware deployers since almost September 2022. Its name is BATCLOAK. Researchers at Trend Micro have recently observed heavily obfuscated BAT files consistently evading detection. They have also noticed that the recent iteration of BATcloak being used to deliver infamous malware families like Amadey, ASyncRAT, DarkCrystal RAT, Pure Miner, Quasar RAT, RedLine stealer, Remcos RAT, Smoke Loader, Venom RAT and Wazone RAT. What makes BAT-Cloak so special and effective. Let’s see. Image source: TrendMicro What is FUD? To the novices,…