jimmyLi's blog

An estimated 50,000 websites ware compromised so far, due to MailPoet Newsletter plug-in flaw. The security flaw allows attackers to upload PHP files on the server and take control of the website. The flaw was fixed in the version 2.6.7 of the plug-in, so be sure you update it, if using. The Web security firm Sucuri also spotted injection attacks on vulnerable websites, PHP backdoor files being injected into thousand of WordPress websites

Belts A grade: 1). Physical Attack: 2). Skill Attack: 3). Defense: low = 0.6% low = 0.6% low = 0.6% mid = 1.5% mid = 1.5% mid = 1.5% high = 2.1% high = 2.1% high = 2.1% top = 3% top = 3% top = 3% Belts S grade: 1). Physical Attack: 2). Skill Attack: 3). Defense: low = 1% low = 1% low = 1.2% mid = 2.5% mid = 2.5% mid = 3% high = 3.5% high = 3.5% high = 4.2% top = 5% top = 5% top = 6% Info from l2central.info and goha.ru - R, R2, R95, R99 have the same bonus as S Grade Belt

10/03/12 http://dreampic.co.il/  (Hacked and defaced)  09/03/12 http://justice.act.gov.au/  (Justice and Community Safety website hacked and defaced) http://www.policiainformatica.gob.pe/  (Research Division of Tech Crime Down) http://www.brasil.gov.br/  (Brasil Portal Down) http://www.newyorkironworks.com/  (New York Iron Works- NYC’s Famous Police Equipment & Tactical Gear Store hacked and defaced details via pastehtml.com ) http://www.athenscountygovernment.com/  (Athens County Ohio hacked and defaced) http://www.greenbergresearch.com/  (Hacked and data leaked via  pastebin ) http://www.northadams-ma.gov/  (Hacked and data leaked via  pastebin ) 08/03/12 http://www.bm.rs.gov.br/ (Military Brigade Brazil Down 4:05PM GMT) http://www.brigadamilitar.rs.gov.br/  (Military Brigade Brazil Down 4:05PM GMT) 07/03/12 http://www.petroleum.com.ve  (Hacked and Defaced) http://gesac.gov.br/  (DOWN) ...

At the time of writ­ing these web­sites are still defaced, with a black page writ­ten “Turkgu­ven­Ligi” and “ 4 Sept. We TurkGu­ven­ligi declare this day as World Hack­ers Day - Have fun ;) h 4 ck y 0 u”. What do ups​.com, voda​fone​.com, thereg​is​ter​.co​.uk, acer​.com, bet​fair​.com, nation​al​geo​graphic​.com and tele​graph​.co​.uk have in com­mon? They all use Net­Names as their reg­is­trar. It appears that the turk­ish attack­ers man­aged to hack into the DNS panel of Net­Names using an SQL injec­tion and mod­ify the con­fig­u­ra­tion of arbi­trary sites, to use their own DNS (ns 1 ​.yumur​tak​abugu​.com and ns 2 ​.yumur​tak​abugu​.com) and redi­rect those web­sites to a defaced page. In the past, Turkgu​ven​Ligi​.info defaced secu​nia​.com, HSBC Korea and the reg­istry Directi with this method. You can browse the list of their attacks here: http://​www​.zone​-​h​.org/​a​r​c​h​i​v​e​/​n​o​t​i​f​i​e​r​=​t​u​r​k​g​u​v​e​n​l​i...

02/03/2012 http://www.betheloic.org/  (Hacked and defaced details via pastehtml.com ) http://www.charlotteinternationalchurch.org/  (Hacked and defaced) http://www.thecrossfireministries.org/  (Hacked and defaced) Source: http://cylaw.info/?p=420 

29/02/2012 http://www.soslabour.com/  (Down 1:37PM GMT) http://www.paisabuilder.in/  (Online Share trading portal in India Hacked and defaced) Source: http://cylaw.info/?p=420 

28/02/2012 http://kalmarairport.com  (Kalmar Swedish airport hacked more details via  virtualsepo ) http://www.universalmusic.pt/  (Universal music Portugal hacked pastebin.com ) http://www.interpol.int/  (DOWN) http://www.universalmusic.se/  (Hacked more details via  virtualsepo ) Source: http://cylaw.info/?p=420 

27/02/2012 http://latakia-city.gov.sy/  (Hacked and Defaced) http://tartous-city.gov.sy/  (Hacked and defaced) http://stratfor.com/  (Hacked over 5 millions emails leaked via wikileaks  http://wikileaks.org/gifiles/date/2011.html ) Source: http://cylaw.info/?p=420 

26/02/2012 http://portal.damasreef-elec.gov.sy/  (Hacked and Defaced) http://rs.one.un.org/  (United Nations Serbia Hacked page redirects to Facebook details via pastebin.com ) http://afrojack.fr/  (Hacked and defaced) http://ebuddy.us/  (Hacked and defaced) Source: http://cylaw.info/?p=420 

24/02/2012 http://jude.edu.sy/  (Aljazeera University hacked  pastebin ) http://infragard.dayton.oh.us/  (FBI InfraGard hacked and db leaked via  http://pastehtml.com ) http://casareal.es/  (King of Spain official website Down 3:30PM GMT details via  http://pastebin.com ) http://www.geogroup.com/  (Geo Group Prison Industries hacked and defaced pastehtml ) http://www.thegeogroupinc.com/  (The Geo Group Inc. Hacked and Defaced http://zone-h.org/mirror/id/17107967 ) Source: http://cylaw.info/?p=420 

This summary is not available. Please click here to view the post.

22/02/2012 http://www.crespo.gov.ar/  (Hacked and defaced via  pastebin.com ) http://www.farapayeh.ir/  (Hacked and defaced) http://www.cee-slp.org.mx/  (Defaced) http://www.presidencia.gov.ar/  (President of Argentina Official website Down 10:00PM GMT) Source: http://cylaw.info/?p=420 

21/02/2012 http://lacpca.com/   (Los Angeles Police Canine Association Hacked more details via  pastebin ) http://www.policia.es/  (Official Spanish Police website DOWN 10:04PM GMT) http://ministryofjustice.gr/  (Defaced again full story  http://cylaw.info/?p=778 ) Source: http://cylaw.info/?p=420 

20/02/2012 http://www.houstoncounty.org  (Houston County Hacked and defaced) http://gaj.panjin.gov.cn/  (Chinese Police website hacked http://pastebin.com/5UWvT5SR ) Source: http://cylaw.info/?p=420 

19/02/2012 http://www.ictsc.bh  (Bahrain Council hacked and data leaked via  pastebin.com ) http://www.meritas.bh/  (Hacked  http://www.meritas.bh/index.php?page=newsDetail&id=3 ) http://www.interpol.int/  (Down 8:16PM GMT) http://www.academiadecine.com/  (Down 8:22PM GMT) Source: http://cylaw.info/?p=420 

18/02/2012 http://www.mauriziopaniz.it  (Maurizio Paniz Italian politician official site defaced ) http://www.springfieldmo.gov/  (Missouri Hacked and db leaked to public Police warrants, Court Summons and Police reports via  pastehtml.com ) Source: http://cylaw.info/?p=420 

17/02/2012 http://ftc.gov/  (Federal Trade Commission Hacked and db, login details leaked vis  http://pastebin.com ) http://business.ftc.gov/  (hacked and defaced mirror  http://zone-h.org/mirror/id/16983974 ) http://ncpw.gov/  (Hacked and defaced) http://consumer.gov/  (Hacked and Defaced) http://www.minocp.gov.gr  (Ministry of Citizen Protection DOWN 12:02PM GMT) http://www.yptp.gr/  (Ministry of Citizen Protection DOWN 12:02PM GMT) http://www.astynomia.gr/  (Hellenic Police DOWN again 12:04PM GMT) http://www.policia.es/  (National Police Corps of Spain DOWN 5:20PM GMT) http://www.foropolicia.es/  (Spanish Police forum Down 6:02pm GMT) http://www.enel.it/  (Italy’s largest power company DOWN 6:18PM GMT) http://www.jurisprudencia.gob.sv/  (DOWN 6:50PM GMT) http://www.ugtrioja.org  (Hacked and defaced) Source: http://cylaw.info/?p=420 

16/02/2012 http://www.astynomia.gr/  (DOWN 6:00PM GMT) http://asamblea.gob.sv/  (Legislative Assembly DOWN 9:55PM GMT) http://www.presidencia.gob.sv/  (El Salvador president DOWN 10:15PM GMT) Source: http://cylaw.info/?p=420 

15/02/2012 http://tam.com.br/  (DOWN 2:00 PM GMT) http://voegol.com.br/  (DOWN 2:05PM GMT) http://www.endesa.cl/  (Largest electric utility company in Chile DOWN 9:10PM GMT) http://hidroaysen.cl/  (hydroelectric power plants in Chile’ DOWN 9:18PM GMT) http://mail.govir.ir/  (DOWN 9:20PM GMT) http://www.parliament.gr/  (DOWN 9:24PM GMT) http://www.hellenicparliament.gr/  (DOWN 9:24PM GMT) Source: http://cylaw.info/?p=420 

14/02/2012 http://www.timewarner.com/ http://www.lands.gov.zw/ http://www.zimche.gov.zw/ http://www.moha.gov.zw/ http://less-lethal.com/  (Chemicals, Tear gas company Hacked more details via  pastebin.com ) http://handcuffsusa.com/  (Chemicals, Tear gas company Hacked more details via  pastebin.com ) http://sur-tec.com/  (Chemicals, Tear gas company Hacked more details via  pastebin.com ) http://pennarms.com/ http://www.combinedsystems.com/  (Chemicals, Tear gas company Hacked mirror via  zone-h.org  more details via  pastebin.com ) http://www.housing.gov.bh/  (Ministry Of housing Down 7:41AM GMT) http://www.mof.gov.bh/  (Ministry Of finance Down 7:47AM GMT) http://www.bdi.eu/  (The Voice of German Industry DOWN 1:05PM GMT) http://www.markenverband.de/  (Markenverband Portal Down 1:31PM GMT) http://ega.gov.bh/  (Bahrain Electronic government Down 1:32PM GMT) http://www.dei....