English Defence League site pulled offline after defacement
'TriCk' shows mad skillz – vows to leak EDL members' details too
The website of the far right English Defence League remained unavailable on Friday following a hack attack on Wednesday.
The defacement (captured here by Zone-h) criticises the EDL for campaigning to kick British-born Muslims out of the country. The hacker TriCk aka Saywhat?, a member of the hacking group TeaMp0isoN, sprayed a rant against the site together with pictures of Arab protesters and greetings to his chums.
For its part, the EDL claims it is not a racist organisation but a protest movement against the "Islamification" of Britain.
The EDL runs on a IIS web server running on Win2003 servers, a fairly standard set-up. It's unclear how the attack was pulled off but an exploit against a basic unpatched vulnerability would be the most likely scenario. It unclear whether any sensitive information – email records, details on donors – was extracted as a result of the hack, though the hacker behind the assault claims he made off with a treasure trove of sensitive data.
TriCk said he had infomarion on the EDL Leadership, donors, customers of EDL Clothing, the forum users and forum staff (includeing names, addresses, phone numbers, emails) that he intends to leak.
Judging by records held by zone-h, TeaMp0isoN is a prolific hacker group that supports the Palestinian cause and often takes part in mass defacements of sites running either Linux or Windows. It's very likely the group's members scan for victims using automated tools before carrying out attacks, which may themselves be at least partially automated. ®
Sponsored: Becoming a Pragmatic Security Leader