Tier3

Tier3 Cyber Alerts
Blog & News

Hackers attack Pakistani Govt’s passport application tracking site

Scanbox framework used to hack Pakistani Govt’s passport application tracking site http://tracking.dgip.gov.pk Experts uncovered a watering hole attack against the Pakistani Govt’s passport application tracking site, hackers used the Scanbox Framework to steal visitors’ data ...
Read More

WhatsApp Hacked – Vulnerable App used for Surveillance

Hackers were able to use the vulnerability and install other malware on phones. After 2 Weeks WhatsApp confirms its 1.5 Billion users need an upgrade. WhatsApp the most popular messenger app, is also owned by ...
Read More

Fileless Malware Attacks -The Growing threat to Pakistani Enterprises

Fileless malware attacks are increasing every day.They can nowadays be seen as the perfect crime of opportunity. The initial vector of these attack can be a seemingly innocuous business email with a link to an ...
Read More

Authorities Issue Alert Warning of Potential for Cyber Attacks

In a latest security alert email sent by PKNIC (registrar of all .PK domains ) to its customers, it is reported that there has been an increase in cyber attacks on Pakistani IT installations in ...
Read More

Worst passwords for 2018?

Even if security experts continue to make awareness campaign, people continue to use bad passwords exposing their data to the risk of hack. Bad habits are hard to die, 123456 is the most used password ...
Read More

How to Protect yourself from bank fraud and cyber crime in Pakistan?

1. Do not give any personal information (name, address, bank details, email or phone number) to organisations or people before verifying their credentials. Always question unsolicited calls, texts or emails requesting your personal or financial ...
Read More

DEBIT / CREDIT CARD FRAUD in Pakistan. A guide on what to do ?

Payment/ bank card fraud involves the compromise of any personal information from credit, debit or store cards. The personal information stolen from a card, or the theft of a card itself, can be used to ...
Read More

Bank Islami denies losing $6 million in country’s ‘biggest cyber attack’

Karachi-based Bank Islami acknowledged on Sunday of suffering a security breach of its payment cards system but denied reports of having lost an alleged $6 million in what local press have called the biggest cyber-attack ...
Read More

Pakistani hackers attack institutions in EU and the US

The Pakistani hacker group is attempting to attack government organizations using the infrastructure it also uses to send spam to malware. According to researchers from Palo Alto Networks Unit 42, the group Gorgon Group is ...
Read More

Afghan diplomats in Pakistan suspicious of targeted “Cyber attacks” by state-backed APT Groups

Afghan diplomats in Pakistan have been warned they are believed to be victims of "government-backed" cyber attacks trying to steal their email passwords.Afghan embassy sources told the BBC two staff members and a generic account received ...
Read More
January 20, 2017

Degree Programs in Cyber security

Degree Programs in Cyber security PAKISTAN   Updated – 2017  Annual directory of M.S. in Cyber security programs. Following list is available for U.S universities only. […]
January 20, 2017

CYBER SECURITY MARKET REPORT

Cybersecurity is the fastest growing tech sector. While all other sectors are driven by reducing Inefficiencies and increasing productivity, cybersecurity spending is driven by cybercrime. The unprecedented cybercriminal activity we are witnessing is initiating so much cyber spending, it’s become nearly impossible for the analysts to accurately track.
January 19, 2017

expopakistan.gov.pk – Xss vulnerability

website : expopakistan.gov.pk Description Expo Pakistan 2015 Home. Vulnerable URL: http://www.expopakistan.gov.pk/mission-admin/login.php?err=<script>ale rt(‘OPENBUGBOUNTY’)</script> Vulnerability type: XSS Vulnerability status: Publicly disclosed Alexa Rank 2132001  
January 19, 2017

bisedgkhan.edu.pk – XSS vulnerability

Website :bisedgkhan.edu.pk Description BISE DG.KHAN Cookies: PHPSESSID=aaaeu2298dhad69191psjpvp01 Other details: Patched: No Vulnerability type: XSS Vulnerability status: Publicly disclosed Alexa Rank:149711 security researcher : KHIZER_JAVED47
January 19, 2017

Critical vulnerability in WordPress, Drupal and Joomla – 13000+ Pakistani Websites Affected

Total number of users affected is estimated at 9 million, a critical vulnerability discovered (CVE-2016-10033), which allows to initiate a remote code execution without passing authentication.
January 19, 2017

Shadow Brokers sell another batch of NSA tools

The software package called Equation Group Windows Warez include exploits for vulnerabilities in Windows and tools to bypass anti-virus protection. Programs are distributed into several categories..
August 24, 2016

India : submarine data leaked

The Australian reported that the leaked data includes descriptions of what frequencies the submarines use to gather intelligence, where a crew can speak safely to avoid detection, and specifications of the torpedo launch system. "I understand there has been a case of hacking," Indian Defence Minister Manohar Parrikar told reporters. "We will find out what has happened."
August 22, 2016

SECONDDATE : NSA in Pakistan using malware

A Memorable SECONDDATE (NSA Malware Pakistan) The United States’ clandestine National Security Agency (NSA) allegedly spied on top civil-military leadership in Pakistan using malware. The file appears […]