Monat: Mai 2017

NSA Windows Exploit hits users

Am Von In Ransomware, Security

[Update 13.05.17, 12:26]

After registering „iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com“ the spread of the ransomware has stopped.

(Whois http://whois.domaintools.com/iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com)

What a hit by MalwareTech O_o

„Earlier today, a massive ransomware campaign hit computer systems of hundreds of private companies and public organizations across the globe […]“ – TheHackerNews
http://thehackernews.com/2017/05/wannacry-ransomware-unlock.html

Stay safe!

https://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/

Website „aachener-nachrichten.de“ leaks information to decrypt all articles of paywall

Am Von In Paywall, Security

The websites of the „Aachener Zeitung GmbH“ are offering a mixture of free and payed articles hidden by paywall at http://www.aachener-zeitung.de/zva/pc/. The websites use AESUtil and CryptoJS to hide articles.

The provider leaks sensitive data like password, IV and salt which are used for encryption and can be used to decrypt the articles with

 decrypt = aesUtil.decrypt(salt, iv, passPhrase, cipherText);


This issue does not leak any personal data of (registered) users.

Update @ https://github.com/ol3k/azweb_decrypt