Social Network Security & Backdooring email

1. SocialNetworkingSecurity
&
BackdooringEmail
Presented by
Syarif
!
Seminar & Workshop Nasional Security System
Malang, Juni 5 2011
Universitas Muhammadiyah Malang

2. • http://www.google.com/search?
q=fl3xu5
• http://fl3x.us
Whoami

3. Agenda
• Social Networking ?
• Social Networking :Attacks & Defense
• Backdooring Email
• There is No Privacy anymore :)
• How to protect your self

4. Social Networking ?

5. Facebook Statistics

6. Twitter Statistics

7. Facebook & twitter attack

8. Facebook & twitter attack
• Phishing

9. Facebook & twitter attack
• Session Hijacking
• Firesheep

10. facebook & twitter defense
• Be a paranoid & don’t trust anyone on the internet
• Never put some sensitive information carelessly
• Keep your eyes, Always check the correct url
• Never Subscribe unauthorized applications
• Always remember, wireless is not secure. Keep “safety” browsing :p
• Always using https
• etc

11. Email attack : Backdooring Email ;)
• Why ?
• Email is very important
• as a communication media
• Email is a privacy
• Everything using email
• User account : facebook, twitter, etc
• Passwords
• paypal account
• domain & hosting account

12. Email attack : Backdooring Email ;)
• Motivation ?
• Just for fun :)
• Jealous / Revenge
• Get important data
• Get Final Exam Task & Answer :p
• Spy
• Scamming
• Money reason : paypal, etc
• Domain & hosting take over

13. Email attack : Backdooring Email ;)
• Prelinimary ?
• Social Engineering
• password obtained by hacking other websites ~ one password for all

14. Backdooring Email ?Yes you can ;)
• Using what ?
• Why ?
• most people using it
• easy to use
• could be used to impersonate :p
• high capacity mailbox
• 10 more accounts could be backdoored in one mailbox
• no need to log in the target mailbox
• could be used to backdoor all of mail accounts in some mail server :)

15. Demo

16. thereisnoprivacyanymore

17. someoneiswatchingyou
!

18. How to ProtectYourself ?
• Always Check Last Log in your email
• Never put some sensitive information carelessly
• Be a Paranoid, check the flag messages in your email
• Keep on your eyes to check mail in the inbox, sent, draft , and trash
• Always keep your correct mail setting
• Never use “one password for all” :p
• Changer your mail password regularly
• don’t use a “weak” security question

19. Q & A
• twitter : fl3xu5
• YM : fl3xu5

20. Thank you :)