[Sureshkumar]

Being an information security professional, I am giving
everyone a guideline on how to keep discipline while interacting on
the internet so that the security of yourself is maintained.

1. The first and most important thing to keep in mind is to not open any attachments while receiving any mails from unknown people. Even
non-executable files like .Doc files CAN contain macro viruses and
Trojans.

2. In the security world, they say "On the internet , you don't know
if you are talking to a dog!!" The meaning of this saying is that just
don't trust anybody on the internet whom you don't know. Don't chat
with strangers just for fun. Don't click on any links given to you by
someone you don't know. Don't disclose any kind of personal details to
any webpages which you don't trust. There have been cases of people
using fake yahoo login screens to steal passwords.

3. Install antivirus software along with anti-spyware to protect your
Computer system. If possible also install a desktop firewall (eg.
Zonealarm). Always remember to keep updating your virus definitions as
well as operating system for any available patches.

4. Do not accept links or downloads from strangers even if it is
tempting. There have cases where spywares like Trojans, Keyloggers
etc. have been hidden in simple picture files with JPG extensions. You
never really know what is contained inside a file which looks innocuous.

5. Choose good passwords. What is a good password? It is a password
which is at least 6 characters long, not easily guessable, contains
mixture of uppercase and lowercase letters as well as numbers, and
preferably contains special characters like $, * %,!,* etc.
Some example password : &*Ucan't*Crack(&

How hackers hack & crack Yahoo passwords ?

1: Many people use MAGIC PASSWORD STEALER (MPS) Trojan to hack yahoo passwords.

A lot, and I mean a lot of people are infected with Magic PS. Especially with Magic PS 1.5 Second Edition. If you don't know what is Magic PS. Magic PS is a trojan, simply a program that steal your Yahoo! Messenger 5 or 6 user name and password to the sender. Magic PS 1.5 SE no longer show itself in the Message Archive, so checking there won't help.

If the sender is stupid enough, he/she would sent you the file "sender.exe", DO NOT accept it because it is the default name for a MPS created file.

Check your computer for certain files such as these:

regsvr.exe in c:\Winnt or c:\Windows ; depends on version of Windows

MsAgent32.exe in c:\*Win installed folder*\system 32

Perflib-Perfdata in c:\*Win installed folder*\System32

PIF in c:\*Win installed folder*
NTMSJRLN in c:\*Win installed folder*\system32\NtmsData

Sender.exe

MPSmmtask0.exe in c:\Documents settings\*User Name*\Local settings\Temp

The sender.exe (can be any name) file may also contain a text string "UPX-Scrambler RC1.x -> ?OnT?oL". You can see this by using a hex editor, etc.

MPS 1.5 SE hides the (sender/hacker) Yahoo! ID in the sender.exe file, it is scrambled so even with a hex-editor, you still cannot view it. To reveal the (sender/hacker) Y! ID, simply reverse-engineer the sender.exe file.

Solution :: Do not receive any executable files from a unknown person on chat.

2: BY using fake login screens

They ask you to have a look at their picture by sending a link to yahoo fake login screen. It exactly look like mail.yahoo.com page or photos.yahoo.com page.
It will ask you to enter your ID & password to login. If you enter your details those login details directly goes into hackers inbox. So be careful of these kind of attacks.

3: Cracking passwords By using Yahoo Password Cracker

There are many Password crackers out for cracking Yahoo passwords.
If you are using a dictionary based password like ? something, 12345, abcdef, Attitude, etc? It takes hardly 3 hours for a good cracker to crack the password.

Solution : Never use dictionary based passwords. Use a password like this..
Example : (Sec*)Pass+) . This kind of passwords are impossible to crack
I hope this little guide helps you in improving your own security on the net
I wish you all the best

CheersSureshkumar.
[/b]

[sksaruna]

this article really helps me a lot. now... i got a little knowledge to protect my yahoo id. thank you for this article suresh. thank you.


Aruna

[yathish]

thanks a lot dear friend. Nice and worthy information.......... Good job

[sureshrai]

Originally Posted by Sureshkumar

Being an information security professional, I am giving
everyone a guideline on how to keep discipline while interacting on
the internet so that the security of yourself is maintained.

1. The first and most important thing to keep in mind is to not open any attachments while receiving any mails from unknown people. Even
non-executable files like .Doc files CAN contain macro viruses and
Trojans.

2. In the security world, they say "On the internet , you don't know
if you are talking to a dog!!" The meaning of this saying is that just
don't trust anybody on the internet whom you don't know. Don't chat
with strangers just for fun. Don't click on any links given to you by
someone you don't know. Don't disclose any kind of personal details to
any webpages which you don't trust. There have been cases of people
using fake yahoo login screens to steal passwords.

3. Install antivirus software along with anti-spyware to protect your
Computer system. If possible also install a desktop firewall (eg.
Zonealarm). Always remember to keep updating your virus definitions as
well as operating system for any available patches.

4. Do not accept links or downloads from strangers even if it is
tempting. There have cases where spywares like Trojans, Keyloggers
etc. have been hidden in simple picture files with JPG extensions. You
never really know what is contained inside a file which looks innocuous.

5. Choose good passwords. What is a good password? It is a password
which is at least 6 characters long, not easily guessable, contains
mixture of uppercase and lowercase letters as well as numbers, and
preferably contains special characters like $, * %,!,* etc.
Some example password : &*Ucan't*Crack(&

How hackers hack & crack Yahoo passwords ?

1: Many people use MAGIC PASSWORD STEALER (MPS) Trojan to hack yahoo passwords.

A lot, and I mean a lot of people are infected with Magic PS. Especially with Magic PS 1.5 Second Edition. If you don't know what is Magic PS. Magic PS is a trojan, simply a program that steal your Yahoo! Messenger 5 or 6 user name and password to the sender. Magic PS 1.5 SE no longer show itself in the Message Archive, so checking there won't help.

If the sender is stupid enough, he/she would sent you the file "sender.exe", DO NOT accept it because it is the default name for a MPS created file.

Check your computer for certain files such as these:

regsvr.exe in c:\Winnt or c:\Windows ; depends on version of Windows

MsAgent32.exe in c:\*Win installed folder*\system 32

Perflib-Perfdata in c:\*Win installed folder*\System32

PIF in c:\*Win installed folder*
NTMSJRLN in c:\*Win installed folder*\system32\NtmsData

Sender.exe

MPSmmtask0.exe in c:\Documents settings\*User Name*\Local settings\Temp

The sender.exe (can be any name) file may also contain a text string "UPX-Scrambler RC1.x -> ?OnT?oL". You can see this by using a hex editor, etc.

MPS 1.5 SE hides the (sender/hacker) Yahoo! ID in the sender.exe file, it is scrambled so even with a hex-editor, you still cannot view it. To reveal the (sender/hacker) Y! ID, simply reverse-engineer the sender.exe file.

Solution :: Do not receive any executable files from a unknown person on chat.

2: BY using fake login screens

They ask you to have a look at their picture by sending a link to yahoo fake login screen. It exactly look like mail.yahoo.com page or photos.yahoo.com page.
It will ask you to enter your ID & password to login. If you enter your details those login details directly goes into hackers inbox. So be careful of these kind of attacks.

3: Cracking passwords By using Yahoo Password Cracker

There are many Password crackers out for cracking Yahoo passwords.
If you are using a dictionary based password like ? something, 12345, abcdef, Attitude, etc? It takes hardly 3 hours for a good cracker to crack the password.

Solution : Never use dictionary based passwords. Use a password like this..
Example : (Sec*)Pass+) . This kind of passwords are impossible to crack
I hope this little guide helps you in improving your own security on the net
I wish you all the best

CheersSureshkumar.
[/b]

Thank you very much for valuable information .
thank a lot suresh

[AjayKumar.Kataram]

good post.....

[Spoorthi]

NICE POST

[nani_i]

Nice.............

[johnny]

in real time this doesn't happen.... nice guess... all da best... happy hacker

[msprasanna]

nice post to tester.

[msprasanna]

Regression testing is required for each and every time for STLC?

[suresh_m1729@yahoo.co.in]

Hi,
Thanks for the information...
Really informative!!!

[Thomas80]

Well, it is really good thought, its appreciative. Nice to have you, I also have one anti spy ware software which will help you more.Search And Destroy - Top Anti-Spyware Software 2008 which works very nicely.

Thanks!
Great Day