Feeds

Microsoft hacked in the Balkans

Pro-Linux graffiti artist exploits 'weakest link'

  • alert
  • submit to reddit

Top three mobile application threats

A Microsoft Web site has been defaced in the latest of a string of attacks that have called into question the ability of IT companies to keep their systems secure.

The software giant's Slovenian site, www.microsoft.si, was sprayed with pro-Linux graffiti by a hacker who gained control of the site, which is hosted in the former Yugoslavian country. In a reference to Mark Renton's famous speech at the beginning of the film Trainspotting, the site was changed to feature a tirade that equated choosing Microsoft software to being a moron.

The defacement by Furia.BR, which has now being changed but is still mirrored on Attrition.org, said in part: "Choose Windows. Choose the Millennium. Choose IIS. Choose SQL Server. Choose not to choose. Let Micro$oft do it for you. Choose Windows. Choose 95. Choose IIS. Choose a big NT workstation. Choose VB, IE, ActiveX players and electrical tin openers... Choose a future. Choose Micro$oft.

"But why would I want to do a thing like that? I choose not to be chosen: I choose something else. The reasons? There are too many reasons. And who needs reasons when you've got Linux?"

Matt Tomlinson, business development director at security consultancy MIS, said the graffiti attack was unlikely to have threatened Microsoft's core systems, as an attack earlier this year did, but demonstrated a weak security policy was still in place in Redmond.

"Customer information or any research and development was unlikely to be threatened by this attack. However it is a demonstration of naivety by Microsoft, which has trusted a cut-cost local hosting firm with its security," said Tomlinson, who added the attack likely exploited a badly-configured Microsoft IIS webserver, which was not properly protected behind a firewall.

Tomlinson added there was a growing trend for hackers and graffiti artists to target the remote offices of global companies for attack. Security firm Network Associates' Brazilian site was also recently subject to a similar attack on two of its Brazilian sites, www.nai.com.br and www.mcafee.com.br.

These attacks have in common that they attack servers at local hosting companies, which Tomlinson described as the "weakest links" in the corporate security chain. ®

Related Stories

Hackers, Windows NT and the FBI
How you hack into Microsoft: a step by step guide
MS hacked! Russian mafia swipes WinME source?
Microsoft Hack: Warned of weakness three months earlier

Top three mobile application threats

More from The Register

next story
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Did a date calculation bug just cost hard-up Co-op Bank £110m?
And just when Brit banking org needs £400m to stay afloat
Sorry London, Europe's top tech city is Munich
New 'Atlas of ICT Activity' finds innovation isn't happening at Silicon Roundabout
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
Apple DOMINATES the Valley, rakes in more profit than Google, HP, Intel, Cisco COMBINED
Cook & Co. also pay more taxes than those four worthies PLUS eBay and Oracle
prev story

Whitepapers

Designing a defence for mobile apps
In this whitepaper learn the various considerations for defending mobile applications; from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.