Feeds

Mass hack takes out govt sites

IIS flaws used to bring down sites on three continents

  • alert
  • submit to reddit

Internet Security Threat Report 2014

A hacking spree last weekend saw military and government Web sites defaced on three continents in what its perpetrators claimed was the largest mass defacement in the history of mankind.

The graffiti artists, known as Pentaguard, took out government Web sites in the United Kingdom, Australia, and the United States and defaced them with the same message. This consisted a profane rant full of hacker in-jokes, bragging and references to beers, sexual desire for female hackers and Ferraris (a copy of which can be seen here.

Staff at Attrition.org, a Web site which tracks defacements, said it was highly unusual for hackers to deface a large number of sites in different nations in different time zones all at the same time. Attrition.org backed up the claims of hackers about the scale of the attack and said it was one of "the largest, most systematic defacements of worldwide government servers on the Web" it had ever seen.

Paul Rogers, a security consultant at MIS Corporate Defence, said that the attack was well planned. He said it was likely a number of people were involved and that the attacks were automated and carried out against sites whose security was found to be lax.

"All the UK sites were running NT and Microsoft IIS [web server] and were hosted by ISPs - which raises the question of who's responsible for the security of hosted sites," said Rogers, who said that all the other sites were running similar configurations using IIS4.

"It's not difficult to retrieve list of government servers and look for weaknesses with them using automated scanners," he added.

US sites targeted included the Republican Caucus for the California Legislature, whose Web site has recently been shutdown because of the Californian power crisis. The Alaskan Office for the Department of Interior Web site was also hit, which points towards an overt political motive for the defacements. This is because Bush nominee Gale Norton, who favours oil prospecting in the Arctic National Wildlife Refuge, is set to be confirmed as the US Secretary of the Interior.

The British defacements consisted of a series of small municipalities as well as city and county governments - including a Web site set up by the UK Government to spread information on mad cow disease.

Australian targets were mostly local authorities with the exception of one attack, which took down a legislative search application for the entire Commonwealth of Australia.

Pentaguard is well known in security circles and even prior to this attack was the largest defacer of government and military Web sites, previous targets included Nasa and government Web sites in China, Kuwait, Georgia, and even Vietnam. A sampler of Pentaguard's work can be seen here. ®

Providing a secure and efficient Helpdesk

More from The Register

next story
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
The 'fun-nification' of computer education – good idea?
Compulsory code schools, luvvies love it, but what about Maths and Physics?
Ex-US Navy fighter pilot MIT prof: Drones beat humans - I should know
'Missy' Cummings on UAVs, smartcars and dying from boredom
Sysadmin with EBOLA? Gartner's issued advice to debug your biz
Start hoarding cleaning supplies, analyst firm says, and assume your team will scatter
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.