Feeds

DoubleClick undergoes security audit after hack attack

Security experts say firm should consider "pulling plug on servers" until flaws are fixed

  • alert
  • submit to reddit

The Essential Guide to IT Transformation

Internet advertising firm DoubleClick has denied reports that the security of its Web servers has been compromised by vulnerabilities which lay unnoticed for the last two years.

French security site Kitetoa.com claims that a flaw with the doubleclick.net Web server, which runs Microsoft's IIS, means hackers had backdoor access to confidential data. DoubleClick denies this but admits it is undergoing a security audit after what it said were unsuccessful attacks by hackers last week.

According to Kitetoa, missconfigured Web servers at DoubleClick allowed the installation of a Trojan horse program on the firm's systems.

A screenshot published by Kitetoa appears to show the Web servers have been tampered with and that a file called eEyehack.exe uploaded onto its servers on April 29 1999. It points to an exploit first described by security consultants eEye Digital Security as the mechanism of the attack.

Network security consultant Paul Rogers, of MIS Corporate Defence, said there is no firm evidence eEye's exploit, which allows Trojans to be uploaded onto servers, was used against DoubleClick. The date of the file was before the publication of the eEye advisory and the size of the file, which might be a Trojan, does not correspond to any well known backdoor program.

Rogers said far firmer evidence that DoubleClick's servers are insecure is provided by another screenshot Kitetoe.com has obtained. This apparently shows username and passwords protecting DoubleClick's Abacus server, its market research division.

"If I was able to obtain this whilst doing an penetration test for one of my clients I'd advise them to pull the plugs on their boxes," said Rogers. "DoubleClick should consider running their services from a different platform whilst damaged host servers are repaired. It might also consider restricting access to services."

A spokeswoman for DoubleClick denied that its servers had been compromised for the last two years but admitted that it was in the process of conducting a full security audit after an attack by hackers last week. She stated that these attacks were unsuccessful.

In a statement on the attacks sent to The Register, DoubleClick said: "Over the last week there have been unsuccessful attempts made to hack into DoubleClick's servers. DoubleClick is now undergoing a comprehensive security audit, including the expertise of external security professionals and engineers, to fully ensure the continued integrity of our servers." ®

External links:
Kitetoa.com

Build a business case: developing custom apps

More from The Register

next story
iPad? More like iFAD: We reveal why Apple fell into IBM's arms
But never fear fanbois, you're still lapping up iPhones, Macs
Amazon says Hachette should lower ebook prices, pay authors more
Oh yeah ... and a 30% cut for Amazon to seal the deal
Philip K Dick 'Nazi alternate reality' story to be made into TV series
Amazon Studios, Ridley Scott firm to produce The Man in the High Castle
Nintend-OH NO! Sorry, Mario – your profits are in another castle
Red-hatted mascot, red-colored logo, red-stained finance books
Sonos AXES support for Apple's iOS4 and 5
Want to use your iThing? You can't - it's too old
Joe Average isn't worth $10 a year to Mark Zuckerberg
The Social Network deflates the PC resurgence with mobile-only usage prediction
Chips are down at Broadcom: Thousands of workers laid off
Cellphone baseband device biz shuttered
Feel free to BONK on the TUBE, says Transport for London
Plus: Almost NOBODY uses pay-by-bonk on buses - Visa
Twitch rich as Google flicks $1bn hitch switch, claims snitch
Gameplay streaming biz and search king refuse to deny fresh gobble rumors
Stick a 4K in them: Super high-res TVs are DONE
4,000 pixels is niche now... Don't say we didn't warn you
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Maximize storage efficiency across the enterprise
The HP StoreOnce backup solution offers highly flexible, centrally managed, and highly efficient data protection for any enterprise.