How To Hack WhatsApp Using SS7 Flaw

Researchers are easily able to hack WhatsApp and Telegram using the known telecom flaw

We continuously receive queries from readers about how to hack WhatsApp. The world’s most popular cross platform messaging App is seen to be ultimate hack by many because it has recently enabled 256-bit encryption.

For ordinary souls this encryption would take days and months to decode a sentence or a complete message. Ditto with another secure messaging service called Telegram. Though Telegram is not as popular as WhatsApp, it has its ardent group of followers who use it for its encryption as well as snooping free service.

Though both of these Apps are end-to-end encrypted both of them suffer from hardware side vulnerability which can be exploited to hack and hijack both WhatsApp and Telegram.

The vulnerability lies in Signalling System 7, or SS7, the technology used by telecom operators, on which the highly secure messaging system and telephone calls rely. SS7 is a set of telephony signalling protocols developed in 1975, which is used to set up and tear down most of the world’s public switched telephone network (PSTN) telephone calls. It also performs number translation, local number portability, prepaid billing, Short Message Service (SMS), and other mass market services.

SS7 is vulnerable to hacking and this has been known since 2008. In 2014, the media reported a protocol vulnerability of SS7 by which both government agencies and non-state actors can track the movements of cell phone users from virtually anywhere in the world with a success rate of approximately 70%. In addition, eavesdropping is possible by using the protocol to forward calls and also facilitate decryption by requesting that each caller’s carrier release a temporary encryption key to unlock the communication after it has been recorded. Researchers created a tool (SnoopSnitch) which can warn when certain SS7 attacks occur against a phone and detect IMSI-catchers.

You can view how researchers managed to hack WhatsApp and Telegram using the SS7 flaw below:

WhatsApp Hack

Telegram Hack

Both the hacks exploit the SS7 vulnerability by tricking the telecom network into believing the attacker’s phone has the same number as the victim’s phone. Once the network has been fooled, anybody, even a newbie can spy on the legitimate WhatsApp and Telegram user by creating a new WhatsApp or Telegram account using the secret code.

Once complete, the attacker now controls the account, including the ability to send and receive messages. Even more horrific is the fact that the hacker can also send messages on behalf of the victim, and read confidential messages intended for the victim without ever having to try to break strong encryption protocols.

See how easily you can hack WhatsApp and Telegram by fooling the network into believing your are the victim.

Source: http://www.techworm.net/2016/06/how-to-hack-whatsapp-using-ss7-flaw.html

Hackers Show How To Hack Anyone’s Facebook Account Just By Knowing Phone Number

Short: By exploiting the SS7 flaw, a hacker can hack someone’s Facebook account just by knowing the associated phone number. This flaw allows a hacker to divert the OTP code to his/her own phone and use it to access the victim’s Facebook account. The security researchers, who have explained the hack in a video, advise the users to avoid adding their phone numbers to the public services.

Facebook hacking is also one of the most commonly searched terms on the internet. However, very often people become a victim of malware while searching for Facebook hacking tools.

As we continue to deploy new safety measures to secure our online accounts, hackers and security researchers continue to find new ways to control Facebook accounts.

Recently, we told you how an Indian security researcher spotted a bug in the Facebook website and got $15,000 bug bounty.

Today, we are going to tell you how hackers can hack any Facebook account just by knowing the associated phone number and exploiting an issue with SS7 network.

For those who don’t know, SS7 network (Signalling System Number 7) is a communication protocol that’s used worldwide by the cellphone carriers.

Using a flaw in SS7, hackers can divert the text messages and calls to their own devices. This hacking technique has been shared as a proof-of-concept video by the security researchers from Positive Technologies.

How To Facebook Account By Knowing Phone Number (Video):

This flaw affects all Facebook users who have associated a phone number with their Facebook accounts.

In the demonstration video, the security researchers show that as the first step of the hack, the attacker needs to click on the “Forgot account?” button on Facebook.com website’s homepage.

When Facebook prompts the hacker to enter an email address or phone number, he/she should enter the correct number associated with the account.

By exploiting the SS7 flaw, the hacker is able to divert the OTP message from Facebook to his/her own computer and use it to login to the victim’s Facebook.

The researchers list some measures that a user can take to secure his/her Facebook account. They advise people to avoid adding their phone numbers to public services and rely on email for recovery purposes.

The users are also advised to use 2-factor authentication methods that don’t use SMS texts for sending OTP.
Source: http://fossbytes.com/facebook-hack-using-phone-number-ss7-flaw/

Your Facebook account's been hijacked. Here's how to recover it and keep it safe

If a crook succeeds in stealing your Facebook account, they can masquerade as you, find out a good deal about you, and get access to your friends.

If the email address and/or password on your account has changed--and you didn't change it, your account has been hacked. Other possible symptoms that should worry you include new "friends" that you never approved, and status updates and messages allegedly going out from "you" even though you didn't send them.

The following instructions assume that you're accessing Facebook from a full, desktop-oriented browser rather than a mobile browser or app.

First, try to change your Facebook password:

1. Click the little white triangle near the upper-right corner or the Facebook webpage and select Settings.
2. This brings you to the Settings page's General tab. Click Password.
3. Enter your current password in the Current field.
4. Type a strong password in the New and 'Re-type new' fields. This should be a password you've never used before. I strongly suggest you use a password manager.

When you click Save Changes, Facebook may reject your current password. If it does, whoever hacked your account has already changed it.

Go to Facebook's Report Compromised Account page, click the My Account in Compromised button, and follow the wizard.

But if Facebook accepts the old password (and the new one, of course), you can sigh with relief. You've recovered your account. Facebook will ask if you want it to log off of other devices; take them up on that offer.

Once you've got your Facebook account pages, take some steps to make sure this never happens again:

Back on the Settings page, click the Security tab on the left, then click Login Approvals (also known as 2-step verification). Check Require a security code to access my account from unknown browsers. If you haven't given Facebook your cell number, you'll have to enter it here.

Once you've setup Login Approvals, enable Login Alerts. That way, Facebook will notify you via email if your account is accessed by a browser, app, or device that has never accessed your account before. If you didn't do the logging in, you'll know you have a problem.

Hacker Reveals How to Hack Any Facebook Account

Hacking Facebook account is one of the major queries of the Internet user today. It's hard to find — how to hack Facebook account, but an Indian hacker just did it.

A security researcher discovered a 'simple vulnerability' in the social network that allowed him to easily hack into any Facebook account, view message conversations, post anything, view payment card details and do whatever the real account holder can.

Facebook bounty hunter Anand Prakash from India recently discovered a Password Reset Vulnerability, a simple yet critical vulnerability that could have given an attacker endless opportunities to brute force a 6-digit code and reset any account's password.

Here's How the Flaw Works

The vulnerability actually resides in the way Facebook's beta domains handle 'Forgot Password' requests.

Facebook lets users change their account password through Password Reset procedure by confirming their Facebook account with a 6-digit code received via email or text message.

To ensure the genuinity of the user, Facebook allows the account holder to try up to a dozen codes before the account confirmation code is blocked due to the brute force protection that limits a large number of attempts.

However, Prakash discovered that the social media giant had not implemented rate-limiting in its password reset process on the beta sites, beta.facebook.com and mbasic.beta.facebook.com, according to a blog post published by Prakash.

Prakash tried to brute force the 6-digit code on the Facebook beta pages in the 'Forgot Password' window and discovered that there is no limit set by Facebook on the number of attempts for beta pages.

Video Demonstration

Prakash has also provided a proof-of-concept (POC) video demonstration that shows the attack in work. You can watch the video given below that will walk you through the entire procedure:

Here's the culprit:

As Prakash explained, the vulnerable POST request in the beta pages is:

lsd=AVoywo13&n=XXXXX

Brute forcing the 'n' successfully allowed Prakash to launch a brute force attack into any Facebook account by setting a new password, taking complete control of any account.

Prakash (@sehacure) discovered the vulnerability in February and reported it to Facebook on February 22. The social network fixed the issue the next day and had paid him $15,000 as a reward considering the severity and impact of the vulnerability.

How To Hack WhatsApp Account

You have observed that you cannot have your whatsapp consideration signed in two gadgets. period is given to only one MAC deal with. If the MAC (Media Accessibility Control) deal with of the product looking for access changes then whatsapp requests you to again confirm your consideration

How to Crack Whatsapp Account
All factors you need is to get connect to the sufferer cellphone to get the sufferers cellphone “MAC deal with along with the confirming massage” which is obtained to confirm your system.

Get mac deal with on your android operating system cellphone.
Finding MAC deal with on an Android Phones
On your cell phone's desltop, simply just click selection, then go to establishing.
Click on about cellphone.
Click on the position.
And then perspective your Wi-Fi MAC deal with.
As soon the concept is obtained Force the MAC deal with as well as Verifying rule to your server or e-mail it your ID. That financial institutions on your persuade.
Cheat your cell phone's MAC deal with to the Victims deal with and set up whatsapp and after that kind the confirm rule.
And now its done. You get complete connect to the victim’s whatsapp ID. So now you can keep spying/watching your victim’s motions.
That indicates you and the sufferer is using the same ID from different gadgets.
Whatsapp hack to use it by not using your number
This hack performs by unfaithful the Whatsapp Confirmation Web servers by delivering a spoofed demand for an authorisation rule predicted for a different cellphone.
Install Whatsapp on your system. Whatsapp now reveals a reverse where it delivers a verification concept to its servers.
Block the concept support – it can be obstructed by modifying the concept center variety or switching the cellphone into Aircraft technique.
Whatsapp now gives a alternative technique of verification – Choose confirm through SMS and complete your current e-mail deal with. Once you just click to deliver the SMS media terminate to abort the contact for authorisation to the Whatsapp server.
Now you have to do sms Spoofing.
Examine your outbox and duplicate the concept information into the spoofer program and deliver the spoofed verification.
You will now get information predicted for the spoofed variety on your cellular phone and you can connect with individuals under the spoofed variety.

Note:- This information has been distributed to make attention among individuals regarding the “Ways to Crack Whatsapp” so that you can secure yourself from getting compromised. In no way do we enhance misusing of the facts.
Now that you know How to Crack Whatsapp consideration, you are excellent to secure yours.
Share with your buddies if u think its usefull.

Here's the Facebook Hacking Tool that Can Really Hack Accounts, But...

Yes, you heard me right.

A newly discovered Facebook hacking tool actually has the capability to hack Facebook account, but YOURS, and not the one you desires to hack.

How to Hack Facebook account? How to Hack my Girlfriends Facebook account? My boyfriend is cheating on me, How do I hack his Facebook Account?

These are the queries that most of the Internet users search on Google.


But Beware! If you come across any Facebook hacking tool that promises you to help you hack your friends Facebook accounts, you may end up downloading a hacking tool that could hack you, instead of them.

Facebook Hacking Tool that Can Really Hack, But Your Accounts

Dubbed Remtasu, the tool is marketing itself as a Facebook hacking tool but actually is a Windows-based Trojan that has accelerated globally over the past year, and has now capability to disguise itself as an app for accessing people's Facebook account credentials.

The tool contains a Keylogger that can capture all your keystrokes and store them in a file that is subsequently sent to the attacker's server.

The malicious Facebook hacking tool is exploiting "the constant desire of a lot of users to take control of accounts from this well-known social network," according to a Monday blog post by IT security company ESET.

How Remtasu Works:

The malicious tool is delivered via direct download websites.

Once a user visits one of these websites, the dangerous Win32/Remtasu.Y malware automatically gets downloaded and executed on victim's machine and hide itself among other files.


Remtasu has capability to:

• Open and obtain information from the clipboard.
• Capture keystrokes.
• Store all the data in a file which is subsequently sent to an FTP server.

The worst part is yet to come:

The malware remains on the infected computer even when the victim reboots their system or attempts to find the malware threat in the list of active processes.

"In this case, the malware replicates itself, saving the copy in a folder that it also creates within the system32 folder," reads the post. "The new InstallDir folder remains hidden inside the system files, making it difficult for users to access."

Most affected parts of the world include Colombia, Turkey, Thailand and elsewhere. In past, Remtasu was distributed through malicious files attached to phishing emails purporting to be from legitimate government or businesses organisations.

WhatsApp is Now Free For Lifetime

Good News for WhatsApp users!

The widely popular messaging service is going completely free. And you'll be able to use WhatsApp without paying a penny.

Old WhatsApp users might not be aware of this, but WhatsApp introduced the subscription fees for its service a few years ago, forcing new users to pay an annual 99 cents (~$1) subscription fee after the first year.

However, WhatsApp announced Monday that the Facebook-owned company is dropping its annual subscription fee to make its service free to all users.

While announcing the plan today, WhatsApp's founder Jan Koum stated that the annual subscription fee was still a barrier to some users.

As we have grown, we have found that this approach has not worked well," WhatsApp admitted in a company blog post today. "Many WhatsApp users do not have a debit or credit card number, and they worried they'd lose access to their friends and family after their first year.

What will be WhatsApp's New Business Model?

WhatsApp categorically said the company won't be replacing the subscription fee with third-party advertisements like intrusive banner and interstitials, which nowadays is a common practice used to make free applications profitable.

Instead, the company said it will explore ways businesses can use WhatsApp to connect with individuals, and will introduce new ways for users to communicate with businesses and organisations that will pay the company to target relevant communications with customers.

For example:

• A bank could use WhatsApp paid account to communicate with its customers about recent transactions and necessary fraud warnings.
• An airline could use WhatsApp paid account to contact its passengers about a delayed schedule or cancelled flight.

It is the same approach WhatsApp parent company Facebook is using with its own Messenger application, which in last month started allowing its users to book an Uber cab directly through the Messenger app.