Security

New variant on MPACK hacking

Tuesday, August 26th, 2008

I thought these villains had been quiet for too long and then, last night, I happened to notice a support ticket in our queue from a customer claiming that we had hijacked his site, or the server it was on. The ticket had already been pushed up the line to one of our senior techs [...]

Joomla! 1.5.* Vulnerability

Thursday, August 14th, 2008

Project: Joomla!
SubProject: com_user
Severity: Critical
Versions: 1.5.5 and all previous 1.5 releases
Exploit type: Password Reset Forgery
Reported Date: 2008-August-12
Fixed Date: 2008-August-12
Description
A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user (lowest id). Typically, this is an administrator [...]

DNS Vulnerability - Cache Poisoning

Saturday, July 19th, 2008

Recently a new DNS vulnerability has been discovered (Read the story here) which allows a malicious hacker to poison a DNS cache. The ability to poison a cache allows someone to redirect traffic (web, ftp, email, etc) away from intended sites to a hacker’s own site(s), which may host virii, trojans, bot-inserters, etc, so it [...]

Another hacker attack

Friday, October 19th, 2007

I seem to be writing more and more about hackers getting into sites, and just today I got this from one of our UK suppliers …
We are writing to inform you that we have recently discovered evidence of a network intrusion involving a ###### server. We have reason to believe that the intruder [...]

Continuing MPack hack attacks

Tuesday, October 2nd, 2007

And so it goes on …
The Register reports today that the Chinese Internet Security Response Team web site (www.cisrt.org) is the latest high-profile site to fall foul of the hackers.
Read the full story here
Tagged as:chinese internet hackers internet security security response teamShare This

‘Professional’ hackers at large

Thursday, September 20th, 2007

A bunch of hackers using a commercial hacking program (MPack) are on the loose, and causing some considerable concerns amongst web-site owners and hosting companies.
They are accessing multiple web sites to add a single line of code directly to the main index pages, which closes down the browser window and brings up a pop-up [...]