Microsoft Windows and Apple Mac OS X needs to enhance their upcoming computers, as hackers have allegedly found a way to steal information in an easier and faster way.
Not too long ago, there was a bug that was feared by both Apple and Android users. Now, it seems like scaring major tech giants is slowly becoming a trend. Recently, Microsoft Windows and Apple Mac OS X users received a memo about a small hacking hardware that can snatch passwords even when the computer is locked.
According to PC World, somewhere out there, there is a USB flash disk that can steal login information from locked Microsoft Windows and Apple Mac OS X computers in less than 30 seconds. This USB is only worth $50, but it can work wonders for those who wish to steal private information.
The news of the hack came from a principal security engineer at R5 industries, Rob Fuller. Fuller was able to determine that his Microsoft Windows devices were hacked and it also succeeded in hacking his Apple Mac OS X. He is currently teaming up with other tech experts to find out whether this hack can be applicable to anyone or it is just his units that are vulnerable.
The hack works as fast as 20 seconds. All its users need to do is plug a flash-sized minicomputer into a locked computer that's unattended. As soon as the USB device has been plugged to the locked Microsoft Windows and Apple Mac OS X the USB will acquire the computer's username and password, Engadget reports.
Aside from Fuller's full-time security engineer gig, he is also quite popular in the world of hackers as Mubix. Rob Fuller shared his knowledge on which USB mounted computer can perform the hack to which he happily disclosed Hak5 Turtle and USB Armory. Both USB devices run on a Linux operating system and each of them is capable of mimicking a USB Ethernet device as well.
There are two types of pilfered authentication hashes that are used to obtain unauthorized access on a locked Microsoft Windows and Apple Mac OS X computer. For older versions, the NTLMv1 will be downgraded to NLTM so it can decipher the old computer's password while the NLTMv2 hash will be used on newer versions. It sounds easy, but it requires some pretty nifty hacking work.
Hacking apps and USB minicomputers or not, leaving computer units unattended is not a wise decision. Hopefully, Microsoft Windows and Apple Mac OS X can come up with a better system that fights all types of hacks that their devices could be subjected to.