Feeds

Toshiba gets hacked down under

Internet vandals targeting IT sites have a pop at Linux servers

  • alert
  • submit to reddit

Security for virtualized datacentres

Toshiba Australian Web site has become the latest high profile victim of Internet vandals.

The site, toshiba.com.au, was defaced by a cracker called BL4F who replaced its content with a series of greetings and profane abuse at various members of the digital underground.

In part the message, which can be seen in full on defacement site Alldas here, said: "Toshiba Australia / New Zealand got owned, okai, over and out, this is BL4F."

Unusually in these cases the site is running Apache 1.3.9 on Red Hat Linux, not a preferred target for crackers, particularly those who target IT industry sites. However an inspection of the site reveals that its protection is inadequate.

Paul Rogers, a network security analyst at MIS Corporate Defence, said the site either has "a misconfigured firewall or there isn't one", a conclusion he was able to draw because a number of ports were open that should be closed if proper security procedures were in place.

"Toshiba's web servers have a weak security level and there are several avenues that could have been exploited," said Rogers.

"On a publicly facing server who can't just run the installation CD and expect it to be secure when you put it on the Internet. Whether you're using NT or Unix, you need to make modifications and go through a hardening procedure to make sure your system is secure as possible."

Toshiba admitted the attack to The Melbourne Age and told the paper it was "taking further steps to prevent this occurrence in the future." ®

Related stories

Intel hacker talks to The Reg
New York Times Web site sm0ked
Hacker defaces Intel's Web site
Microsoft hacked again
Microsoft hacker fired
Gateway web server flaws exposed
Mass hack takes out govt sites

Secure remote control for conventional and virtual desktops

More from The Register

next story
NASTY SSL 3.0 vuln to be revealed soon – sources (Update: It's POODLE)
So nasty no one's even whispering until patch is out
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
Forget passwords, let's use SELFIES, says Obama's cyber tsar
Michael Daniel wants to kill passwords dead
FBI boss: We don't want a backdoor, we want the front door to phones
Claims it's what the Founding Fathers would have wanted – catching killers and pedos
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.