WHY ON AVACS IDS BEING HACKED AND WHAT SHOULD DO?

by Guest Tue Sep 30, 2014 8:35 pm

Respected
Administrators

Well, few days ago my sisters SM ID 1257577 Got hacked by one Iranian user. even after Admin gave restoration details ID Got hacked again before we check. as Administrator asked "How ID got hacked and remove reason which gave access to hacker for hack ID" my report is sensitive as below.

Someone send her RAT (Remote Administration Tool-Trojan) via something. RAT is a Trojan tool can hack any android mobile, Windows or any OS (Operating System) very easy beyond of anti-viruses protection. RAT gives hacker full access of infected device and he can use device as in his hand. RAT cannot be detected by any antivirus easily. (Best suggestion reformats Mobile or PC).

I have investigated all reasons behind how SM ID: 1257577 got hacked and i found RAT infection reason is ID UNCONFIRMED BY HACKER. ID can be unconfirmed only By a User’s own mobile number or Administrator. Hacker User had access on device to check SMS for read/delete.

Also i have found other reasons for this!!

Now main thing is how he hacked ID again after restore details received. Answer is BRUTE FORCE ATTACK is a Hackers popular tool to generate and match automatic passwords randomly.

Weak point of AVACS security is after restore ID provided password is with Numbers only (Example: 461577). This password is very easy to hack by Brute force within few hours.
i cannot give whole explanation here because i want anyone will get easy idea for start wrong thing. I would like to suggest some suggestions to Respected Administrators please consider and complete.

ADMINISTRATORS PLEASE CONSIDER ON THESE SUGGESTION

1) Keep Password limits to strong

2) By Avacs Only Numeric passwords shouldn't be available (can keep strong password notification)

3) After restoration ID Admin shouldn't provide Password with just number like 123456. it should be like 12AB!9@A this type of passwords cannot be hacked easily by Brute force.

4) My most Important suggestion for Administrator is Change Option Email ID in profile is Fixed. Means after enter 2 times, (verification) Email ID must be fixed with profile, that means it cannot be editable without Administrators. Just this thing will give more security to Avacs Users!!

Respected Administrator i request you to work on my Last (4th) suggestion. this option will make avacs much stronger about security!!

thanks!!