Every day we hear about attacks on small and large companies and organizations. Hackers never rest. They constantly find new methods to compromise their victims' systems. Every day, they develop new tools to carry out attacks.
Here are 5 of the most advanced hacking of 2019, used in complex coordinated attacks:
1. Legion
To Legion is an open-source tool of a framework called Sparta. It is a semi-automatic network penetration framework. It includes many tools together and can be used by hackers to carry out attacks on entire networks or on individual computers.
Legion can automatically identify and scan for vulnerabilities in systems using various open-source tools, such as nmap and nikto. It has about 100 automated scripts. Its functions are accessible through a graphical user interface. In addition to the various functions it has built-in, Legion can also obtain other functions from third parties, as well as interact with other scripts and tools.
It has the ability to automatically detect if there are available vulnerabilities on a specific computer or network and can bypass many malware detection systems.
2. King Phisher
King Phisher is a tool that allows the simulation of real phishing attacks. Attacks can be planned in advance and targeted at a large number of systems in real time. The tool has many features.
It can customize the sent emails by embedding images to create a sense of greater legitimacy.
Hackers can make phishing emails appear completely legitimate. Credentials are obtained automatically, and there is also the ability to locate users' positions to acquire even more information.
3. WiFi-Pumpkin
This tool is used to divert data traffic from wireless clients. WiFi-Pumpkin essentially mimics existing networks, creating fake copies. Then, connected users receive special network packets, which disconnect them from legitimate networks and automatically redirect them to the “hacked” networks.
And this tool has many features.
WiFi-Pumpkin can be used together with other tools to carry out espionage campaigns. It can easily be extended by using plugins and external scripts.
4. Trape
It is an advanced research and analysis tool that allows hackers to monitor and execute social engineering attacks even in real time. Trape helps organizations and researchers in identifying criminals, but it can also be used by the hackers themselves.
It can be used to carry out phishing and hooking attacks, with the aim of obtaining users' credentials.
5. Ghost Tunnel
Ghost Tunnel is a backdoor in script form. It is an advanced tool that allows criminals to attack devices in isolated environments. This is achieved through network probe requests, when the tool is within range of the victim. The connection is made without the regular Wi-Fi protocol. This allows hackers to send payloads to the victim.
The Ghost Tunnel does not require a Wi-Fi connection to the attacker’s network. After carrying out the attack, the tool can successfully bypass firewalls and can attack isolated networks. The Ghost Tunnel can attack almost any device that contains a Wi‑Fi card. If the hackers use code injection techniques, they can spread any vulnerability to the systems.
