Feeds

Hacktivists torch C4's Jon Snow's web diary, reveal 'nuke strike' on Syria

Breaking news, literally

The Power of One eBook: Top reasons to choose HP BladeSystem

Syrian hacktivists have chalked up more media-luvvie victims after hacking into and defacing blogs run by British broadcaster Channel 4.

The Syrian Electronic Army, which backs the regime of President Bashar al-Assad, took over an online diary maintained on behalf of veteran newscaster Jon Snow before posting a fictitious story about a tactical nuclear strike against Syria.

Hacktivists posted a screenshot of the administration panel for the WordPress web publishing software used by the Channel 4 blogs, showing off the grab as a trophy while claiming responsibility for the hack. Early indications suggest the compromise was not exploited to spread malware in drive-by downloads.

"The suspicion has to be that Channel 4 was running an old version of WordPress, vulnerable to a security exploit that allowed the hackers to gain access, or that an administrator had his password fished," writes security blogger Graham Cluley. "In the last few days, WordPress has released the latest version of its blogging platform – version 3.6."

Channel 4′s blogs were taken offline in response to the breach and replaced with a message stating "Something’s broken (or we’re making things better)" alongside a picture of characters from The IT Crowd sitcom. A separate section dedicated to Snow on the broadcaster's news website is running normally.

Cluley posted screenshots of the defacement and subsequent holding message by Channel 4 in a blog post here.

The Syrian Electronic Army (SEA) has hacked numerous media organisation over recent months: it successfully targeted Twitter accounts and other social network profiles run by Al-Jazeera, the Associated Press, BBC, Daily Telegraph, Financial Times, The Guardian, Human Rights Watch, America's National Public Radio, Thompson Reuters and more. Over recent weeks the group graduated to attacking into the backend systems of VoIP apps, such as Viber and Tango. The SEA also managed to take over three personal email accounts of White House employees, reportedly prompting the FBI to open an investigation.

This latter attack appears to have prompted a decision by Twitter to suspend the Syrian Electronic Army's official Twitter account, @Official_SEA12. The SEA set up replacement propaganda profiles on Twitter but these too were shut down, much to the apparent frustration of hacktivists who threatened war against Twitter. The SEA is now running a profile called @Official_SEA16, which boasted of the latest attacks against Channel 4.

The spate of attacks against media firms helped push the social network's rollout of two-factor authentication to secure profiles against the types of phishing attack the Syrian hacktivists specialise in. ®

Designing a Defense for Mobile Applications

More from The Register

next story
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.