Website of Ministry of Agriculture in the United States remaining after 1st stop of the Government

The official website of the United States Department of Agriculture (USDA) http://www.usda.gov/fundinglapse.htm has been turned off until further notice by the Government said United. It is not a kind of cyber-attack, but a measure taken following judgment given by the Government.

At the moment the site displays a message explaining the reason to pick up the site. The message is expressed in the following terms:

Because of the lapse in funding from the federal Government, this site is not available. We sincerely regret the inconvenience. After funding has been restored, please allow some time this website become available.

To see more on the United States Department of the Agriculture Agency Contingency plans, click here.

In American politics, a decision of the Government is a situation in which the Government ceases to provide all but "essential" services In general, federal services which continue despite a judgment include the National Weather Service and its parent agencies, medical services at federal facilities, the postal service, armed forces, air traffic management and corrections (the penal system). A judgment of Government is similar to a lock-out in the private sector.

Effects:

A closure of Federal causes a large number of federal employees to be placed on leave. The military and key employees are not put on leave, but may not be paid as scheduled.

At the time of publishing this article of United States Department of Agriculture (USDA) website has been down.

Blog: Central Tibetan Administration Website Strategically Compromised as Part of Watering Hole Attack

A snippet of code on the Central Tibetan Administration website redirects CN speaking visitors to a Java exploit that drops an APT-related backdoor. For some context, the site claims the administration itself as "...the Central Tibetan Administration (CTA) of His Holiness the Dalai Lama, this is the continuation of the government of independent Tibet." The selection of placement for the malicious code is fairly extraordinary, so let's dive in.

The attack itself is precisely targeted, as an appended, embedded iframe redirects "xizang-zhiye(dot)org" visitors (this is the CN-translated version of the site) to a java exploit that maintains a backdoor payload. The english and Tibetan versions of the website do not maintain this embedded iframe on the Chinese version (please do not visit at this time). At this point in time, it seems that the few systems attacked with this code are located in China and the US, although there could be more. The Java exploit being delivered is the 212kb "YPVo.jar" (edd8b301eeb083e9fdf0ae3a9bdb3cd6), which archives, drops and executes the backdoor as well. That file is a 397 kb win32 executable "aMCBlHPl.exe" (a6d7edc77e745a91b1fc6be985994c6a) detected as "Trojan.Win32.Swisyn.cyxf". Backdoors detected with the Swisyn verdict are frequently a part of APT related toolchains, and this one most certainly is.

The Java exploit appears to attack the older CVE-2012-4681 vulnerability, which is a bit of a surprise, but it was used by the actor distributing the original CVE-2012-4681 0day Gondzz.class and Gondvv.class in August of last year. You can see the 4681 exploit code in the image above along with code setting the jvm SecurityManager to null to disable Java's policy checks and then running the Payload.main method. The Payload.main  method contains some interesting but simple capabilities that enable an attacker to download the payload over https and AES decrypt it using Java's built-in AES crypto libraries, but the package is not configured to use that code in this case. Instead, a couple of lines in its configuration file direct the exploit to drop and execute the jar file's win32 exe resource. The backdoor itself is detected by most of the AV crowd as variants of gaming password stealers, which is flatly incorrect. The related C2 is located at news.worldlinking.com (59.188.239.46).

This threat actor has been quietly operating these sorts of watering hole attacks for at least a couple of years and also the standard spearphishing campaigns against a variety of targets that include Tibetan groups. Our KSN community recorded related events going back to at least a busy late 2011 season. We also show Apple related Java exploits from this server targeting the more recent CVE-2013-2423.

UPDATE 2013.08.13: The CN version of the site at "xizang-zhiye(dot)org" appears to be cleaned up and has not been serving any malicious code that I can find over the past day. The administrators appear to have cleaned everything up on early Tuesday their time/later Monday "western" time and there are no indications of any return since. We will continue to monitor the site for signs of compromise.

Create beginner's Guide to stellar original content for your website

 The phrase "Content is King" has been repeated ad nauseum over the Internet Bill Gates the concept for the first time in 1996 established. It is repeated so often that the set has lost its importance almost. Sure, sites must have content, but how much content on the Web is useful or original? Perhaps to Mr. Gates: "Good content is King." Good content attracts readers, and they are prompted to share it with friends. Fortunately you must be no genius writers that write interesting content. Just follow the below recommendations.

This may seem obvious, but site owners too often fall into the trap of creating content about what they think she should address. You think about it, what their target audience really wants or needs. Think of the typical person who reads your content. What are your pain points? What problems can help you solve? What information can you make, that would make her life easier?

If ever stumped, how to answer these questions, do you you some research. You can do this in a number of ways, including:

Their readers, asking what they want to see more

Sign up for Google trends to see what people are about buzz

Visit Q & A sites like Yahoo answers to see what the people are talking about in particular categories

Visit of relevant online forums, to see which topics are the most popular

Conduct a search with a tool like SEMrush to see what related of keywords most popular

It is important that a running list of blog post ideas. Keep a notebook or mobile phone at hand so that you can record ideas, when strikes lighting and add all these ideas in a text document on your computer. Not too picky about is what you add to the list. Write everything you, even if it is imperfect. Often ideas need some time to the marinate, before they become something that you can use.

Most blog post and article ideas well suited for multiple pieces of content. Have an article about why saturated fat is bad for you? Why not write it from a different angle, such as what sources of saturated fat to avoid, or how to cut saturated fat from your kids diet? You can write also a look at the topic from a seemingly opposite stance on fats, which help you to lose weight. You have a ' list-style ' article about top super foods, select any super food in own separate blog post. When you get an idea for a new topic, you spend some time brainstorming angles.

It is understandable that you want to publish the genius blog post now. But consider the implication not take properly craft a blog post your time: in a hurry, Miss some grammar and spelling mistakes, don't start the spelling checker. You make some good points, that you was not rush had reminded would have. You realize that you could have used better decisions in the word. You forget, a source attribute, contain a link, search for an image or add as many small details that had been polished more your blog post. Yes, but not so fast, moving the Web at a rapid pace, that you have to sacrifice, to maintain the quality of your content.

This is a great way to intensive on a subject without the creation of content that is too long. Erin McNeany never ending journey released, for example, a popular three-part blog series titled, How to sell everything you own. This is a theme that certain categories of persons (travelers) often seek. The series is so popular that it counts still high in the SERPs, although it was released in the year 2010. You think of a huge problem, could you help with your readers and create serial content that would solve the problem.

No blog is an island for itself, so the others in your area to post in your blog feel free to invite. An additional advantage is that the guest bloggers will bring traffic with them, if they are well known enough.

Writing is a skill that can always be strengthened. You invest time in your writing skills with resources like the Purdue OWL and grammar girl's quick and Dirty Tipsto improve. Above all, exercise, exercise, exercise. This is important not only from a technical perspective. The more you write, the more you create your personal voice.

Anyone can create content, but not everyone can create good or even great content. If you can implement these policies into action, then you are on the way to create interesting content that will ultimately appreciate your website visitors.