[TBD]General Internet hacking practices

Incidents

2015

The researcher revealed method to sneak malicious app in the App store

In 2015, the university researchers found that malicious software could slip into the Apple Keychain, delete old passwords, and wait for you to retype them in. When you do, it grabs them. To prove that a hacker could pull off the attack, the research team sneaked a malicious app capable of stealing passwords into Apple's heavily guarded App Store. The malware was disguised as a daily-gag-delivering app called "Joke Everyday."

2014

Apple ICloud hacking which accessed accounts of many celebrities and posted nude pics

In 2014, Apple ICloud accounts were hacked by targeting user names, passwords and security questions.

Home depot hacking that grew into the biggest retail-credit-card breach on record

Hackers got into its systems last April by stealing a password from a vendor, opening a tiny hole that grew into the biggest retail-credit-card breach on record.

Once inside Home Depot’s systems after gaining credentials from the outside vendor, the hackers were able to jump the barriers between a peripheral third-party vendor system and the company’s more secure main computer network by exploiting a vulnerability inMicrosoft Corp.’s Windows operating system, the people briefed on the investigation said.

Microsoft issued a patch after the breach began, and Home Depot installed it, but the fix came too late, the people added. Afforded such access, the hackers were able to move throughout Home Depot’s systems and over to the company’s point-of-sale systems as if they were Home Depot employees with high-level permissions, the people said.

Sony hack

It leads to leakage of personal information about Sony Pictures employees and their families, e-mails between employees, information about executive salaries at the company, copies of then-unreleased Sony films, and other information.

On the network, hackers planted malware. this was a form of "wiper" malware. Generally that refers to malware designed to destroy the data, although in this case they used malware to collect data, too. The malware used Microsoft Windows management and network file sharing features to spread, shut down the network, and reboot computers, reports Ars Technica.

This "wiper" was apparently a variant of the type that a group called DarkSeoul used on South Korean banks last year. The FBI confirmed that the Sony malware found resembled that used in the bank hack.

it had grabbed private files, computer source code files for software, and files that held passwords for Oracle and SQL databases, among other documents. With access to that, the GOP grabbed data on movie production schedules, emails, financial documents and much more and published much of it.

Reference

http://www.ibtimes.com/apple-knew-about-icloud-flaw-6-months-fappening-hit-celebrity-photos-report-claims-1694792

http://www.ibtimes.com/apple-knew-about-icloud-flaw-6-months-fappening-hit-celebrity-photos-report-claims-1694792

http://www.wsj.com/articles/home-depot-hackers-used-password-stolen-from-vendor-1415309282

https://en.wikipedia.org/wiki/Sony_Pictures_Entertainment_hack

http://www.businessinsider.in/How-The-Hackers-Broke-Into-Sony-And-Why-It-Could-Happen-To-Any-Company/articleshow/45581200.cms