Hackers set off on a rampage

A group of hackers has defaced dozens of Web sites in the past two weeks and published sensitive data culled from the sites in what it says is an effort to increase awareness of online security risks.

The group, which calls itself the Deceptive Duo, is in the midst of a multipart hacking campaign targeting different sectors of government and industry. Initial victims have included the Federal Aviation Administration, the Department of Defence and Sandia National Laboratories.

Each defaced Web page is replaced with a message identifying the group and its goal: "Locate and scan critical cybercomponents of The United States of America for vulnerabilities creating a foreign threat, while remaining undetected...Take necessary measures to ensure that the public is aware of The United States of America's lack of security. Include proof/documentation of infiltrated systems."

Defacements, as archived by security site Zone-h, have included documents apparently pilfered from hacked sites, including a page from a bank database, with customer names and account numbers, and pages from government databases, with usernames and passwords for network access.

Sandia National Laboratories spokesman Chris Miller confirmed that a page maintained by the lab had briefly been defaced. "We have worked with our system administrator to make sure our system is properly configured," he said. "We are confident such a hacking attempt would not go through again."

An FAA representative said the FBI is investigating the defacement of one of the agency's Web pages. That defacement included publicly shared information taken from an FAA database on airport-security screeners.

While the hackers have picked high-profile government targets, they have also chosen more obscure pages, including the site for the city of Hazelhurst and a press release from research firm Gartner.

The Deceptive Duo said in an e-mail interview that it was in the early stage of an extensive campaign to expose holes in online security, initially targeting sites using Microsoft software with known vulnerabilities.

"This is the situation that would most likely take place if targeted by a terrorist," the group wrote. "We are doing this to emulate the situation as real as possible. We plan on exercising Stage 1 for about 3-4 more months. This is a long-term situation for us."

Advertisement

Talkback 1 comments

    it is about time that somethin ...Anonymous -- 05/05/02

    it is about time that something like this is occuring. the world needs to know that we are living in an age where electronic security should be one of the most important things on everyone's list.
    although illeagal, the actions of the duo are justified.
    id like to read some other people's views on this.

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Chris Duckett Get extensions going in Firefox, redux
    Previously on Null Pointer we looked at getting extensions working in Firefox betas, and that was great until the fine folks at Firefox changed their minds.
  • Array How reliable is IP telephony?
    Have you ever heard a weird kind of hissing, crackling or popping noise when calling someone on an IP telephony line? How rare is the phenomenon these days?
  • Array Forget the NBN, 100Mbps is already here
    Telstra and TransACT will shortly begin offering 100Mbps broadband to many customers. By moving early, the companies have not only raised the bar for Australia's broadband services, but thrown down a challenge to a government that now faces increased pressure to deliver the NBN as promised.
  • More blogs »

Tags

Back to top

Featured