disLEXia

Tuesday, 22. July 2003

Hackers hit Likud Web site, insert newsflashes of Sharon criticizing sons

Last Update: 20/07/2003 03:50

Hackers hit Likud Web site, slam Sharon's sons

By Yuval Dror , Haaretz Corespondent

Before dawn on Friday hackers entered the Likud's Internet site Likud.org.il, replacing three newsflashes with English ones in which Prime Minister Ariel Sharon criticizes his sons Omri and Gilad for remaining silent during their police interrogation.

The planted newsflashes also had Sharon blasting the Knesset members' moral standards.

For example, the headline of one newsflash says: "Sharon: my two sons Gilad and Omri behave like Uday and Qusay." The text said: "My sons' silence in police investigations signals to

others to do the same. The public must know that the police is not the enemy."

The headline of the second item said: "Sharon: there is a strong link between 15 year olds who cannot read and the example my sons set." The body of the text said: "Young people get the impression that this is how things really work. Why study hard if you can cheat. Why make an effort if you have no one to look up to?"

The third report quoted Sharon as saying, "The Likud suffers from low quality Knesset members ... Likud Knesset members Naomi Blumenthal, Yehiel Hazan, Michael Gorolovsky, Yaakov Edri and my son Omri set a bad example for the citizens. How can we expect people to follow the law while some of us double-vote and some keep silent in police investigations?"

Likud director-general Arik Barmi confirmed the site had been hacked into on the night between Thursday and Friday. "I asked our computer people to shut it down, clean out the inserted messages and put it back on the Internet. At the same time I ordered filing a complaint with the police," he said.

At noon Friday the site went up again without the phony news flashes, but over the weekend was removed again, probably for fear not all of the hackers' access points were traced.

Haaretz Daily Jul 19 2003 2:31PM ET [moreover Computersecurity]
10:31 | permanent link | mail this

Tuesday, 08. July 2003

Web vandalism contest results unclear

Seems the defacement challange was just media-hype:

• "Defacer's Challenge" Provides Argument for Self-Policing [LinuxSecurity.com]
• Crackers sabotage Defacers' Challenge [vnunet Hacking]
• Hacker Contest Mostly About Hype [Wired News]
• Hacker competition fails to bite [BBC News Online]
• Hackers Limit Disruption To Small Internet Sites [moreover Computersecurity]
• Hackers' battle raises just a few hackles [moreover Computersecurity]
• Hacking Competition Gets Hacked [NewsFactor Cybercrime & Security]
• Web Hacking Contest Claims No Big Names [LinuxSecurity.com]
• [defaced-commentary] Web vandalism contest results unclear [isn]

Sunday, 06. July 2003

Internet-Angriff geplant  

Internet-Angriff geplant  

Hacker planen für diesen Sonntag einen Großangriff auf das Internet. Wie der Sprecher des US-Ministeriums für Heimatschutz in Washington, David Wray, mitteilte, kursiert in der Hacker-Szene die Aufforderung, am 6. Juli in kürzester Zeit so viele Webseiten wie möglich lahm zu legen.   Doch die US Behörden zeigen sich gelassen: "Wir sind nicht allzu besorgt", erklärte Wray. "Webseiten-Vandalismus ist zwar ärgerlich, zwingt das Internet aber nicht in die Knie." Trotzdem wurden alle US-Regierungsstellen angewiesen, ihre Abwehrprogramme gegen Hackerattacken auf den neuesten Stand zu bringen.   Ein Warnnetzwerk der amerikanischen Technologieindustrie hatte seine Mitglieder auf die Bedrohung aufmerksam gemacht. "Wir raten den Systemmanagern dringend, ihre Sicherheitsmaßnahmen zu überprüfen", hieß es in der Warnung. [n-tv/CNN]
09:58 | permanent link | mail this

Hacker planen Internet-Attacken

Washington (dpa) - Computer-Hacker wollen an diesem Sonntag möglicherweise tausende Internet-Webseiten lahm legen. Die US-Regierung rief zwar ihre Behörden zu besonderen Sicherheitsmaßnahmen auf, zeigte sich aber insgesamt nicht alarmiert. «Wir sind nicht allzu besorgt», sagte der Sprecher des Ministeriums für Heimatschutz, David Wray, am Mittwoch (Ortszeit) in Washington. «Webseiten-Vandalismus ist zwar ärgerlich, zwingt das Internet aber nicht in die Knie.»

Nach Angaben von Wray kursiert in der Hacker-Szene via Internet die Aufforderung, am Sonntag, den 6. Juli, in kürzester Zeit so viele Webseiten wie möglich lahm zu legen. Danach ist es das Ziel, innerhalb von sechs Stunden mindestens 6000 dieser Seiten zu blockieren. Sicherheitsexperten zufolge sind Internet-Benutzer in den heimischen Stuben, die in der Regel keine Webseiten betreiben, wahrscheinlich nicht direkt betroffen. Regierungsstellen wurden nach Wrays Angaben aber vorsorglich angewiesen, ihre Abwehrprogramme gegen Hackerattacken zu prüfen und auf den neuesten Stand zu bringen. [news.de]
09:52 | permanent link | mail this

Warnungen vor Hack-Wettbewerb am Sonntag

Warnungen vor Hack-Wettbewerb am Sonntag

Diesen Sonntag steht laut dem US-Ministerium für Heimatschutz und der Internet Security Systems (ISS) ein Großangriff auf das Internet bevor: Die Hacker-Szene ruft zum Hack-Wettbewerb (Defacing Challenge) von Webseiten auf.

"Webseiten-Vandalismus ist zwar ärgerlich, zwingt das Internet aber nicht in die Knie", lautete der Kommentar seitens des US-Ministeriums. Dennoch wies man alle US-Regierungsstellen an, ihre Systeme auf neuesten Stand zu bringen. Auch Internet Security Systems (ISS) rät seinen Kunden angesichts der Bedrohung dringend, die Sicherheitsmaßnahmen zu überprüfen und hat Warnlevel (AlertCon) zwei ausgerufen.

Laut ISS geht es im Contest darum, in kürzester Zeit möglichst viele Webseiten zu hacken. Aber auch der Einbruch in Rechner mit eher seltenen Betriebssystemen wie Apple oder Unix AIX (IBM) und HP-UX soll prämiert werden. Wer zuerst 6.000 Webseiten auf seiner Hacking-Liste hat, erhält ein kostenloses Webhosting-Paket. (idg/kiss) [cwopnline]
09:50 | permanent link | mail this

Saturday, 19. April 2003

Defacements in .de

I have done some statistics on Web defacements in the '.de' TLD and if you look at the resulting graph there is a steep increase starting at the end of 2000. I have no idea what that might me - perhaps just zone-h gaining meore publicity so more defacements got reported there.

If you want to you can read als an increase at holiday time into the graph but there is not enough data to proof this.
22:57 | permanent link | mail this

Saturday, 25. January 2003

At least 50 Indian websites hacked by Pakistanis every month

ExpressIndia.com Jan 24 2003 10:05AM ET [moreover Computersecurity]
08:07 | permanent link | mail this

Saturday, 27. April 2002

Midwest Express Web site security

[via Mark Luntzel]

On the morning of Monday April 22, Midwest Express Airlines was informed that customer profile data had been published on the Internet, specifically on the U.S. Space and Naval Warfare Systems Command Web site. The data published contained a handful of user profiles including names and e-mail addresses. This screenshot of data was captured from the Midwest Express test server, not the actual Web site. This test server is used for testing new enhancements to www.midwestexpress.com.

Midwest Express has always taken steps to ensure security. As a result of this situation, a number of additional precautionary measures were taken to ensure that customer data was protected:

• The U.S. Space and Naval Warfare Web site immediately removed the defaced Web page from the Internet.

• A security company was contracted to eliminate any vulnerability to our test server.

• All customer passwords to Web profiles were changed to protect and restrict access to the customer data.

While Midwest Express is confident in the security of its Web site, we are always assessing our Web site for potential vulnerabilities and taking appropriate steps when needed. We assure you that your customer information, purchases and other transactions are secure.

Tom Vick, Senior Vice President and Chief Marketing Officer [Midwest Express via risks-digest Volume 22, Issue 05]
04:41 | permanent link | mail this

Tuesday, 23. October 2001

Web defacement and cyberattacks

GForce Pakistan hackers defaced the U.S. Defense Test and Evaluation Processional Institute Web site www.dtepi.mil as well as enduringfreedom.dtepi.mil and nasa.dtepi.mil http://www.newsbytes.com/news/01/171341.html after which a rival group of Pakistani vigilante hackers (Yiyat) identified the purported culprit and retaliated. http://www.newsbytes.com/news/01/171365.html

[Above text PGN-ed from the URLs. I tried to verify the "processional", but dtepi.mil was apparently off the Net. PGN]

Also, an interesting CNN article on a DoE cyberattack scenario. Best quote:

The important lesson is that Black Ice showed how interdependent are the various infrastructure systems -- including telecommunications, utilities and banking -- and how major might be the combined effects of cyber- and physical attacks, she says.

The infrastructure system providers didn't understand the interdependencies among their systems," Scalingi says. "If you talk to state and local government and local utilities, they'll tell you they have great response plans. The problem is, they write them in isolation. http://www.cnn.com/2001/TECH/ptech/10/21/black.ice.idg/index.html [Dave Stringer-Calvert <dave_sc@csl.sri.com> via risks-digest Volume 21, Issue 71]
00:00 | permanent link | mail this

Wednesday, 13. June 2001

European Commission "Net-security" site invaded by hackers

European 'safer Internet' site hit by hackers, By Joris Evers (IDG) http://www.cnn.com/2001/TECH/internet/06/11/safer.net.hack.idg/index.html

Hackers embarrassed the European Commission last week by identifying and exploiting two security holes on a new commission-sponsored Web site that promotes safer use of the Internet. One of the holes allowed the hackers to get administrator privileges on the server that powers the Safer Internet Exchange site [...] [Declan McCullagh <declan@well.com> via risks-digest Volume 21, Issue 48]
00:00 | permanent link | mail this

Thursday, 08. March 2001

Moon-landing-hoax hoax

Someone hacked a NASA Web site and replaced it with a conspiracy theory about the moon landings being faked.

http://www.zdnet.co.uk/news/2001/9/ns-21426.html [Dave Stringer-Calvert <dave_sc@csl.sri.com> via risks-digest Volume 21, Issue 27]
00:00 | permanent link | mail this

disLEXia, a research project by Maximillian Dornseif