Taleban – who can't hack – get hacked • The Register

Taleban – who can't hack – get hacked

'God Bless America' or cunning spoof?

By John Leyden • Get more from this author

Posted in Business, 23rd October 2001 11:05 GMT

Tune into our application security webcast, click here

Updated A Web site associated with the Taleban has been hacked by 'American patriot' defacers, or so it appeared.

Talibanonline.com, which is registered in Kabul, Afghanistan, though hosted in the United States, now carries a message mourning the loss of life on September 11 and threatening death to the enemies of America.

The message, which has been recorded by Alldas.de reads, reads: "PROJECT AFGANISTAND!!! KNOCK THEM OUT! Hacked by MaxMouse."

"YOU WILL PAY FOR THIS YOU STUPID FOOLS!!!!!!!!!!!!!!!!! GOD BLESS THE UNITED STATES OF AMERICA!"

Mark Read, professional services consultant at MIS Corporate Defence, said the site appears to be behind a firewall with only port 80 on the server visible, which he suggested pointed to an exploit of an unpatched vulnerability on its IIS 5 Web server. ®

Updated

Readers have written in to report that Talibanonline.com was only registered on September 15, four days after the World Trade Centre atrocity, suggesting that the hack may in fact be a hoax.