Honeytech Blog - Top 10 | Tutorials | Internet Tools | How to | Guides » hacking

Funny as hell Facebook trojan

Honey Singh — Sat, 14 May 2011 04:43:49 +0000

A new trojan in the Facebook valley is “Funny as hell” auto link posters in which a victim posts videos on friends wall stating “I saw this video of you .. It seems like your dancing or something in it?? LOLOL!“. In our previous post we have already aware you about other malicious Facebook apps like Facebook Chat malware, third party Facebook malware, Auto link sharer malware and Justin Bieber malware app.

Here is how it looks

Here victim spreads the links in friends wall

Why it is a trojan/Malware

1.On clicking over video like image it redirects into another link www.snunqstncaaz.co.cc
2.It asks for Facebook authentications and login details.
3.If you allowed this app then you will be victim too.

Similar Posts:

None Found

WordPress blogs targeted by hackers

vivekec007 — Fri, 22 Apr 2011 12:15:03 +0000

As a regular reader of Honeytech Blog you are surprised to see a random and suspicious post published recently (we have deleted it already). For some reasons, this suspicious user with role of contributor got access and able to publish the post without any permission from administrator. The user name is “wordyt” and it is advised to fellow bloggers that if you find such user registered in your wp-admin panel, then delete this user as soon as possible and on priority basis.

WordPress blogs are now targeted by hackers and many bloggers facing this problem and if you have been affected by this user, let us know in comments section with us. Here are the screenshots of the posts publish by this user.

Precautions

Disable registration on your blogs
If you wants to allow the registration then go to General Settings>New User Default Role and make sure you choose the default role to subscriber

Similar Posts:

None Found

Facebook Link Share Malware, See what you’ll look in the future!

Honey Singh — Tue, 19 Apr 2011 09:33:11 +0000

In our previous post we already aware you about malicious Facebook apps like Facebook Chat Spams, third party Facebook spams. The latest Facebook malware in the ground is “auto link share” that automatically publish the links on your friends walls. It will provoke you with message like “See what you’ll look in the future!“> you will go to youin20yearz.info>If you allowed the app, you are the victim.

Why this is not a normal app and we rather call it Spam

Catch 1: Same message is auto posted

The same message is auto updated on my wall by some friends who clicked on the link and allow the applications. “Why you allow such applications?”

Catch 2: You need to fill the survey ?

Similar Posts:

None Found

Profile Spy Infection on Twitter – ESPN Cricinfo was also infected!

Honey Singh — Mon, 04 Apr 2011 13:08:08 +0000

Profile Spy Infection is the new addon in the list of Twitter hijacking apps after auto tweet infection. I noticed this after an infected tweet from @espncricinfo (original/infected tweet is deleted but you can have a look over the captured screenshot).

I was curious to know about Profile Spy so i used one fake account of twitter and try to use this app for measuring the results of the infection. {Yes, i have created one fake account for testing }

Infected tweet from espncricinfo

Catch: Only 53 people visited the @espncricinfo profile having 87,560 followers? Move into the next screenshot of fake account.

Infected tweet from a dummy account @jessy_spurs

Catch: 32 people visited the profile having 14 followers?

Conclusion

So 53 people visited @espncricinfo having 87,560 followers and 32 people visited @jessy_spurs having 14+ followers, its completely a Spam! Move on Guys!

Don’t allow this app with your twitter credentials

In our last post we warn you about Facebook chat infection and Facebook video infection but its seems that Twitter is gaining the lead.

Similar Posts:

Be Aware of New Twitter Infection

Honey Singh — Mon, 04 Apr 2011 11:26:48 +0000

In our last post we warn you about Facebook chat infection and Facebook video infection but Twitter is also touched with new type of auto tweet infection.

Be aware of twitter spam stating “You should probably do this: click verify: http://bit.ly/gg7UGh”
(Please do not click on the link)

Infected Tweets from New Twitter Infection

Infection source and reach

Updated infection rate after 3 hours! More than .19 million tweets?

Infected Countries from Twitter Spam

Precaution: Don’t allow any link that ask for your twitter password

Similar Posts:

Be aware of Third Party Facebook Spams like MakeitBuzz.fr

Honey Singh — Sat, 26 Mar 2011 19:10:26 +0000

Last week my friend disclosed about the naked security of Facebook where Japanese tsunami video exploited by clickjackers. Today i observed similar auto posted spam links in my facebook timeline where some arousing videos are supposed to be clicked by FB friends. With the help of this post I’m warning you about such hackable links which can auto publish the spam links in your public timelines.

Example Spam from MakeitBuzz.fr

Avoid Facebook authentication on third party sites

Similar Posts:

How to enable paid apps in android market of your mobile

Honey Singh — Sun, 29 Aug 2010 14:31:05 +0000

Google restricts the use of paid applications in the android market this is the only reason why users from the different countries (majorly outside US ) and unable to access the top paid apps. Well, there are ways to enable the paid android market even in those countries. Checkout our tutorial on how to enable paid android market in mobiles:

Step 1: Install the Market Enabler App on your android mobile

Step 2: Configure the Market Enabler App on your android mobile

Step 3: Choose any of the markets listed in settings

Step 4: Fake the provider from listed settings

Step 5: Congratulation’s – All Done !

Testing the android market after enabling the paid apps

Now i can buy the paid apps from the android market

Google Checkout – Testing the sample paid apps from the android market

Note: All the steps and process is tested on Samsung Galaxy S GT – I9000

Similar Posts:

How to Root and Un-Root Android mobiles and devices in One Click

Honey Singh — Sat, 28 Aug 2010 21:05:39 +0000

Unlike previous methods, rooting an android mobile is just a matter of clicks. I hope you know that superuser or Rooted android devices perform much faster than at factory settings because it is freed from the limitations of device manufacturers. You can also check the 5 reasons to boot your android mobiles and features like Improved Performance, Options and applications choices.

With the help of this post i’ll demonstrate How to Root and Un-Root Android mobiles and devices in One Click with the help of 3rd party app One Click Lag Fix. (You can also search “One Click Lag Fix” on android market)
Note: This app and process of rooting is tested on Samsung Galaxy S I9000

1. Install the applications as described above

a)Either install the apk file.
b)Search on android market for one click lag fix (better option).

2. Click on Application after a successful install

3. Click on Root Device for rooting your android mobile phone

Screen Shot after root device finished successfully

4. Reboot your phone into recovery console and choose the option of sdcard:update.zip

Note: In order to boot Samsung Galaxy S I9000 into recovery mode i pressed volume up button+Power button+Home button (located at middle). For more details Checkout how to boot the android mobile device into recovery mode

Now, you have successfully rooted your device and have superuser permissions

If you want to move back into un-rooted mode then you need to click on the one click lag fix icon and perform the action in few simple clicks.

Similar Posts:

How To Boot the Android mobile device into Recovery Mode

Honey Singh — Sat, 28 Aug 2010 20:56:33 +0000

Recovery Mode of android mobile is usually used for hacking , testing and development. The most common use of recovery mode is for updating the boot type of the devices. For example you can use recovery mode to actually perform the root and un-root operations. Check how to boot into recovery mode in android devices:

How to boot the Samsung Galaxy S I9000 into Recovery mode

Note: This key process can be used for android devices without camera buttons.

In order to boot Samsung Galaxy S I9000 into recovery mode you should press the volume up button+Power button+Home button (located at middle). So the process should be:
Step 1. Turn your phone off.
Step 2. Hold down “Volume Up keys” +“Home” and press “Power” until the screen light ups.
Step 3. Press the three keys unlit green screen like below appears:

Congratulations, Your phone will now enter into recovery.

For more clarifications you can have a look over this video:

How to Boot the Droid X into Recovery Mode

Step 1. Turn your phone off.
Step 2. Hold down “Home” and press “Power” until the Motorola logo appears.
Step 3. Release ”Power” and continue to hold “Home” until an exclamation appears.
Step 4. Release “Home” and press the “Search” button once.
Congratulations, Your phone will now enter into recovery.

For android devices with volume and camera buttons

You can log into Recovery mode of android mobile or android device by following process:

Step 1. Power off the device
Step 1. Press “Volume Up” and “Camera button” until screen lights up
Step 1. Your phone will now enter into recovery.

Similar Posts:

How to factory format and reinstall the phone firmware in Samsung Galaxy S and other android mobiles

Honey Singh — Mon, 16 Aug 2010 23:56:35 +0000

Before starting factory format and reinstalling the phone firmware in Samsung Galaxy S or other android mobiles, you should know that there are few difference between factory format and factory data reset. Factory format removes all files and settings including the internal memory storage from your phone while reinstalling the phone firmware whereas factory data reset simply removes Google account settings stored in your phone, System and application data and settings, Downloaded applications from the mobile.

Secondly in factory data reset you can have the options to abort the reset but after performing the factory format codes you can only remove the phone battery to save it from format and re-installation of firmware.

How to factory format and reinstall the phone firmware in Samsung Galaxy S and other android mobiles

Step: 1 – Dial this code from your phone *2767*3855#

Step: 2 – Follow the above video

Note:
1. You can perform the factory data reset by dialling *#*#7780#*#* from your android mobiles.
2. All the codes are tested on Samsung Galaxy S GT – I9000.

Similar Posts:

How to update SMSC no in Android [ Tested on Samsung GalaxyS ]

Honey Singh — Sat, 31 Jul 2010 09:57:01 +0000

SMSC stands for Short Message Service Center which is responsible for delivering the message in mobiles. For updating SMSC codes you need to get into the phone information of android and then into prompt for updating the SMSC codes. Follow the few simple steps to update the SMSC codes on Android mobile (tested on Samsung GalaxyS)

Step 1: Dial this code from your phone ##4636##

Step 2: Choose phone information from testing mode

Step 3: Go to text box against SMSC codes

Step 4: Update the new SMSC no or Refresh to get current SMSC no

Similar Posts:

How to Monitor Google Talk Service in Android

Honey Singh — Tue, 27 Jul 2010 21:39:54 +0000

Google Talk Service Monitor in android mobile phones will monitor Google Talk host address & port, your Google JID, your Device ID, GTalk connection status , your connection history,your current GTalk presence (available, idle or invisible) and many other things like GTalk heartbeat status. Now how to Monitor Google Talk Service in Android ? Follow a simple step that i used to test it on Samsung GalaxyS:

Dial this code from your phone ##8255## and observe the available options in GTalk Service Monitor – Part1

Observe the available options in GTalk Service Monitor – Part2

Observe the available options in GTalk Service Monitor – Part3

Observe the available options in GTalk Service Monitor – Part4

Observe the available options in GTalk Service Monitor – Part5

How to send heartbeat to server from GTalk Service Monitor

It will attempts to checks in the Gtalk server with variation in Packet count, Packet Size, Average packet size.
Observe heartbeat in 19/28%/0% formats. The more you send the heart bit the more in the variation of values like Packet count, Packet Size and average packet size.

Note: I only used the code ( *#*#8255#*#* ) without any android apps and all the things are fully tested on Samsung GalaxyS android mobile phone !

Similar Posts:

How to optimize website loading time and performance

Honey Singh — Sat, 04 Jul 2009 03:47:33 +0000

Internet users are quite restless and never wait if your website is too heavy to load in the normal internet connection. Web site optimization is an important phase that decides the productivity of the websites. So never frustrate your users with slow loading time and complicated and confusing navigations.

Recently i optimized this blog after so many tricks and tips like logics to load the header files, javascripts compression , hacking wordpress plugins , compressing and optimizing the custom style sheets. Through this post i would like to convey all the important points that i implemented on the honeytechblog which helps in optimizing its loading times. You can use this free website performance tool for web page speed analysis and compare the loading time of your blogs with honeytechblog.

If your blog is not well optimized then the question is how to optimize the websites?

Their are many ways to enhance the performance of the website like these top 10 way to speed up your website, few of the experimented process apart from 20 easy ways for increasing website traffic are described as follows:

1.I checked for the use of heavy files on the home pages and figure out the objects that sucks the loading time. As a results i came to know that featured content gallery is taking too much time to load for the new users. (You can leave this option in case feature contents are important feature for your blog)

2.I checked for the number of HTTP requests from the home page. I have only single page without any iframe so this option looks fine on my homepage.

3.I checked for all the images and try to avoid the use of too many images on the homepage. This can be done by using following methods:

Use of CSS sprites.
Using images from different hosts or sub domains. For example media.yoursite.com.
Initially their were so many images like logos, social icons, profile images, rss buttons and collectively they consume more than 100KB but after the implementation of CSS Sprites it optimized to only 31KB.

Note: I’ll cover up the CSS Sprites optimization in the up coming posts and you can also check few ways to improve your web performance using CSS-Sprites.

4.Try to avoid too many css calls on the homepage. For example wordpress plugins require large resources which calls useless css and javascripts files on the homepage. Try to avoid wp_head(); ?> on the home page and use alternative methods like i used on honeytechblog. The method is described as follows:

Go to wordpress theme directory located at wp-content/themes/yourtheme and open index.php file
Find the tag get_header(); ?> and replace it with below mention code

if ($_SERVER['REQUEST_URI'] != "/")
{
get_header();
}
else
{
include ("header-home.php");
}
?>

Now the above code require a new header file which doesn’t call the wp_head(); ?> on the home page.

How the use of two header files works:

When users view the home page then it calls the header-home.php and on the other pages it will call the default header files together with your plugins.

Note: After the implementation of this trick my loading time decreased down to more than 300%. (As i used so many plugins and files on the home page but i cut it down to few specific only. I’ll cover up the must have wordpress plugins in the upcoming posts.)

How to create two header files and get them working with your theme

Follow the following process to create two homepage files:

Go to your theme directory located at wp-contents/themes/yourtheme and file the file named header.php
Copy all the contents of the header.php and paste them into a new file named as header-home.php
Now fined the code name wp_head(); ?> into your header-home.php and delete it.
Now your alternate header file is ready to use but this header file is manual and you need to include few important things like meta tags and descriptions generated by “All in one SEO Plugin”. So in next step you need to find the dynamic meta contents.
Open your blog in the browser and then view its source. Just search for codes between and . It generally includes the meta tags like
Now your new header file is ready to test. Now you have options to include this header-home.php file into your theme directory or in root directory of the blog. I choose the option of root directory as its easy to edit it for future uses.
As an backup option upload the header-home.php file into root directory i.e yourblog/header-home.php and also into the theme directory ie wp-contents/theme/header-home.php.
Now you are completely ready to run the blog. Just don’t forget to change the index.php file described in the above mention process.

Note: You will realized that your loading time is enhanced as now their isn’t any useless calls of the plugins which is not required on the home page. For example script generated by cforms , sociable and other plugins. (if you used them only on single pages)

5.Try to avoid excess external scripts.

While checking the page source i found useless script like wp-includes/js/jquery/jquery.js so i removed it using above mention method of two header files.

6.Try to avoid use of multimedia files on the home page. Multimedia files like heavy flash and video require too much bandwidth and loading time. As discussed above i use to have the featured content gallery on the home page but i removed it while going through the optimization process. It requires more than 5 big image as an article image and more than 5 thumbnail images so after the removal it reduced the page from by more than150 Kb.

7.Shift all the media files, css and javascripts into another subdomain. Shifting css files is very simple piece of cake. Follow these steps:

Create a subdomain where you need to put these CSS files. For example i create media.honeytechblog.com
Search for style.css used in your wordpress themes i.e yourblog/wp-contents/themes/yourtheme/style.css
Search for images used in the style.css. Generally these images includes in the same theme folder i.e yourblog/wp-contents/themes/yourtheme/images
Copy the style.css and the images folder and shift then to desired subdomain. For example a)I shift the css files into media.honeytechblog.com/s1/style.css and images b)I shift the images into media.honeytechblog.com/s1/images folder. Note: I shift the files into the s1 as a subfolder to differentiate the versions for future use. It is not necessary but things will be neat for future use.

Note: I try to keep this post short and simple but in case you have any issues then feel free to comments and i’ll try to resolve it. In coming days their will be more posts on the wordpress customizations and optimizations so its better if you subscribed to our official RSS.

Similar Posts:

How-To Collection: Best Of 30 Greatest Tips/Tricks

Sakib Mahmud — Mon, 01 Jun 2009 17:18:36 +0000

In last week we collected most Kick-Ass Greatest TOP Rated Featured List and The Greatest Resource For Entrepreneurs and in this month we are over enthusiast to give something new. We know, thousands of weblogs exist on web just based on “how to/tips and tricks”. Those thousands of websites generating revenue from different types of advertisement — which can be millions of dollar, some are really worthy and some are exclusive and overall helping the web users.

From the top ranked sites, we tried to collect “how to” based best posts, where you can get free tips, tricks of Linux, twitter, adobe illustrator tutorials, CSS productivity, PHP, Design, Windows Tips, Google Adsense Tips, Photography tips, Facebook tips, iPhone 3G solutions, security tips, internet searching, beginners guide, professional presentation tips and tons of new things. Most probably this post will cover up all of your needs — you can search out all of your problems.

We might update new how to, tips and tricks based links. If anything we missed or if any post which you think, it’s so productive — let us know by comments, we appriciate your comments.

Similar Posts:

TeamViewer Brings More Faster Messaging, Presentations In Version 4.1

Sakib Mahmud — Thu, 30 Apr 2009 12:14:39 +0000

When your friend having face any critical problem in his/her PC? What will you do? If you know the solution,you will try your best to give details instructions by phone or by email. But, sometimes it’s really not worked out. If you have one options to fix his/her PC by self instructions. No worries.

Teamviewer brings such types of software which gives you access to enter your friends computer through the internet connect and available for free download. You can control your friends PC from your PC. Even, you can use your friends — all applications such as, office 2007, browsers, install applications, remove applications, open any applications — just you will the admin. More recently their improves the connection speeds of performance. Now it has more faster connection and on title bar it enabled “quick-sharing button” by clicking that button you can communicate/ contact or instantly connect with your friends PC and a new window will open up in front of you. If you like, you can share your files with super speed, no matter the data size can be Giga but you needs faster internet connection and it may take several times to transfer such big files.

File Transfer from TeamViewer

However, the messaging system totally changed and now supporting conferencing with more then two users and you can send direct messages to your contact list and even when they are offline mode. Now, it’s free for personal purpose see details in press.

Note: I personally use the TeamViewer for handling the projects within my tea. It increases my efficiency by 10 times and helps me in training the new trainees. It also helps me in demonstrating the projects requirements , transferring the necessary files and even working remotely on different applications.

My ratings: 8.5/10

Similar Posts:

Honeytech Blog - Top 10 | Tutorials | Internet Tools | How to | Guides » hacking

Funny as hell Facebook trojan

Here is how it looks

Here victim spreads the links in friends wall

Why it is a trojan/Malware

WordPress blogs targeted by hackers

Precautions

Facebook Link Share Malware, See what you’ll look in the future!

Why this is not a normal app and we rather call it Spam

Catch 1: Same message is auto posted

Catch 2: You need to fill the survey ?

Profile Spy Infection on Twitter – ESPN Cricinfo was also infected!

Infected tweet from espncricinfo

Infected tweet from a dummy account @jessy_spurs

Conclusion

Don’t allow this app with your twitter credentials

Be Aware of New Twitter Infection

Infected Tweets from New Twitter Infection

Infection source and reach

Updated infection rate after 3 hours! More than .19 million tweets?

Infected Countries from Twitter Spam

Precaution: Don’t allow any link that ask for your twitter password

Be aware of Third Party Facebook Spams like MakeitBuzz.fr

Example Spam from MakeitBuzz.fr

Avoid Facebook authentication on third party sites

How to enable paid apps in android market of your mobile

Step 1: Install the Market Enabler App on your android mobile

Step 2: Configure the Market Enabler App on your android mobile

Step 3: Choose any of the markets listed in settings

Step 4: Fake the provider from listed settings

Step 5: Congratulation’s – All Done !

Testing the android market after enabling the paid apps

Now i can buy the paid apps from the android market

Google Checkout – Testing the sample paid apps from the android market

Note: All the steps and process is tested on Samsung Galaxy S GT – I9000

How to Root and Un-Root Android mobiles and devices in One Click

1. Install the applications as described above

2. Click on Application after a successful install

3. Click on Root Device for rooting your android mobile phone

Screen Shot after root device finished successfully

4. Reboot your phone into recovery console and choose the option of sdcard:update.zip

Now, you have successfully rooted your device and have superuser permissions

How To Boot the Android mobile device into Recovery Mode

How to boot the Samsung Galaxy S I9000 into Recovery mode

How to Boot the Droid X into Recovery Mode

For android devices with volume and camera buttons

How to factory format and reinstall the phone firmware in Samsung Galaxy S and other android mobiles

How to factory format and reinstall the phone firmware in Samsung Galaxy S and other android mobiles

How to update SMSC no in Android [ Tested on Samsung GalaxyS ]

Step 1: Dial this code from your phone *#*#4636#*#*

Step 2: Choose phone information from testing mode

Step 3: Go to text box against SMSC codes

Step 4: Update the new SMSC no or Refresh to get current SMSC no

How to Monitor Google Talk Service in Android

Dial this code from your phone *#*#8255#*#* and observe the available options in GTalk Service Monitor – Part1

Observe the available options in GTalk Service Monitor – Part2

Observe the available options in GTalk Service Monitor – Part3

Observe the available options in GTalk Service Monitor – Part4

Observe the available options in GTalk Service Monitor – Part5

How to send heartbeat to server from GTalk Service Monitor

How to optimize website loading time and performance

How-To Collection: Best Of 30 Greatest Tips/Tricks

TeamViewer Brings More Faster Messaging, Presentations In Version 4.1

File Transfer from TeamViewer

Step 1: Dial this code from your phone ##4636##

Dial this code from your phone ##8255## and observe the available options in GTalk Service Monitor – Part1