jimmyLi's blog

European Central Bank released on 24 July 2014 an announcement about the hack: Email addresses and contact data stolen from public ECB website Theft was from database that is separate from any internal system No market sensitive data compromised "The theft came to light after an anonymous email was sent to the ECB seeking financial compensation for the data. While most of the data were encrypted, parts of the database included email addresses, some street addresses and phone numbers that were not encrypted. The database also contains data on downloads from the ECB website in encrypted form." Source: ecb

The National Aeronautics and Space Administration (NASA) is warning employees that their personal details might have been compromised after a laptop was stolen from a staffer’s locked car. The stolen device contains records of personally identifiable information for numerous employees, contractors and “others.” The laptop is password protected, but because there’s no disk encryption system set in place, the chances for the information stored on it to be misused are fairly high. “The Administrator is extremely concerned about this incident and has directed that all IT security issues be given the highest priority. NASA is taking immediate steps to prevent future occurrences of PII data loss,” reads the notice sent by Richard J. Keegan Jr., associate deputy administrator, to employees. More at softpedia by @EduardKovacs  

Hacktivists continue their operations against companies they believe to be responsible for using the “harmful” mineral known as coltan (columbite–tantalite). The latest victims of OpColtan and OpGreenRights are the websites of Fujitsu General Brazil (fujitsugeneral.com.br) and Siemens Switzerland (siemens.ch).  The hackers have published massive amounts of data – including some email addresses, usernames and passwords –, allegedly stolen from these websites. Judging by the files posted on PrivatePaste, it appears that the attackers once again leveraged SQL Injection vulnerabilities to breach the sites and gain access to their databases . “Our attention turns to you, unscrupulously and greedy multinationals. Behind your famous commercial images, fabricated and marked on an false Ethic, the most cruel barbarites are hidden,” the Anons who run the campaign stated. “Coltan, the mineral that you use to produce capacitors of mobile phones, besides being ...

Skype, the online phone service long favored by political dissidents, criminals and others eager to communicate beyond the reach of governments, has expanded its cooperation with law enforcement authorities to make online chats and other user information available to police, said industry and government officials familiar with the changes. Surveillance of the audio and video feeds remains impractical — even when courts issue warrants, say industry officials with direct knowledge of the matter. But that barrier could eventually vanish as Skype becomes one of the world’s most popular forms of telecommunication. The changes to online chats, which are written messages conveyed almost instantaneously between users, result in part from technical upgrades to Skype that were instituted to address outages and other stability issues since Microsoft bought the company last year. Officials of the United States and other countries have long pushed to expand their access to newe...

AAPT has confirmed that it has been breached, following claims by Anonymous Australian that it broke into an ISP and stole 40GB of data that it plans to leak.  AAPT has confirmed that it has been breached, following claims by an Australian sect of Anonymous that it has broken into and stolen 40GB of data from the major Australian internet service provider (ISP). Anonymous Australia was meant to release a sample of stolen data last night in order to prove that it was able to infiltrate the target's systems. However, the effort required to strip out personally identifiable information from the data, as well as some logistical issues, prevented the group from releasing it. AAPT CEO David Yuile said that last night, at 9.30pm AEST, Melbourne IT alerted AAPT that there had been a breach of security and unauthorised access to AAPT's business customer data on its servers. Early this morning, an unverified member of Anonymous Australia hinted that AAPT was the ...

****************************************************************** ***Monday Mail Mayhem - 1.7GB leaked from the Bureau of Justice*** ****************************************************************** _____ / _ ____ ____ ____ ___.__. _____ ____ __ __ ______ / /_ / / _ / < | |/ / _ | | / ___/ #AntiSec / | | ( ) | ___ | Y Y ( ) | /___ #Anonymous ____|__ /___| /____/|___| / ____|__|_| /____/|____//____ > #Unit12 / / // / / You should have expected us... ################################################################## Greetings world, We are Anonymous. Today we are releaseing 1.7GB of data that u...

Hackers from Malicious Security, or MalSec, have managed to breach the systems of the Arizona State Legislature (azleg.gov), leaking more than 300 record sets from a table called “standing transactions.” The data consists of bill numbers, descriptions, document names, document types, FTP URLs, HTTP URLs, session IDs and other information. While this may not exactly look like sensitive data, the hackers also leaked a couple of user names, IDs, and their associated passwords (in clear text.) According to the message posted by the hackers, this breach is a form of protest against the US government.  “[Expletive] u, and [expletive] ur gov! We still are Anonymous! We do not forgive. We do not forget! U should have expected us!” they wrote next to the data dump. MalSec is a relatively new group on the hacking scene, but they’ve already caused a stir with their operations. Source: @EduardKovacs | softpedia

A notification posted by British web hosting company eUKhost in the announcements section of its site on April 28 alerted customers of a data breach that targeted the firm’s billing systems. “In the past 24 hours we have been made aware that there has been a compromise of our billing system. Although the method of the compromise remains unclear, we can confirm that an administrator level login was compromised and an IP address added to an allow list to allow a successful login,” Managing Director John Strong wrote . “We have not noticed an increase in compromised accounts of clients and our initial research does seem to suggest the perpetrator wasn’t out to cause damage to our customers, but until we better understand the nature of this problem, we can not take anything for granted.” As a result of the incident, the organization moved its billing system to another, more secure, server. Strong told The Register that their investigation led them to believe that t...

A massive 40 gigabytes worth of files have been stolen by Anonymous hackers operating under the AntiSec banner from the internal networks of Lake County Sheriff's Office (LCSO.org) in Florida.  ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ _ _ __ .__ __| || |_______ _____/ |_|__| ______ ____ ____ #Antisec \ __ /\__ \ / \ __\ |/ ___// __ \_/ ___\ #DeathToSnitches | || | / __ \| | \ | | |\___ \\ ___/\ \___ #Anonymous /_ ~~ _\(____ /___| /__| |__/____ >\___ >\___ > #Cutthroat |_||_| \/ \/ \/ \/ \/ #LulzKnightz ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ HaiL To The Fallen | AntiSec Cutthroat Cummittee LOVE TO LULZSEC / ANTISEC FALLEN FRIENDS THOSE WHO TRULY BELIEVED WE COULD MAKE A DIFFERENCE LOVE TO THOSE BUSTE...

. /$$                 /$$            /$$$$$$                    .| $$                | $$           /$$__  $$                    .| $$       /$$   /$$| $$ /$$$$$$$$| $$  \__/  /$$$$$$   /$$$$$$$ .| $$      | $$  | $$| $$|____ /$$/|  $$$$$$  /$$__  $$ /$$_____/ .| $$      | $$  | $$| $$   /$$$$/  \____  $$| $$$$$$$$| $$      .| $$    ...

LulzSec returns as LulzSecReborn, and they hacked and leaked data from MilitarySingles.com - pastebin.com/JRY3cA5T The website http://www.militarysingles.com/ was recently closed day ago or so, so we dumped email db There are emails such as @us.army.mil ; @carney.navy.mil ; @greatlakes.cnet.navy.mil ; @microsoft.com ; etc.. In response to a query by the Office of Inadequate Security, ESingles, the parent company of MilitarySingles.com, said that there is “ no actual evidence that MilitarySingles.com was hacked and it is possible that the Tweet from Operation Digiturk is simply a false claim. ”. LulzSecReborn hack the site and added his deface page here , (as shown in above page) and replied “ Stupid Administrator: ‘There is no evidence MilitarySingles is hacked’. Well guess what? ”  Source: thehackernews.com

NASA subdomain Air Traffic Conflict Resolutions was hacked by Black_J3StEr and s3rver.exe. http://pastebin.com/nNesVgMC Target : http://airtrafficconflictresolutions.arc.nasa.gov   Login's :   aces:7F3BDD458660D5F210A2C84A077F57BC35C30E7C root:93D39C4BA64748FD2879D8318E3DD677CFAE8D5B aces:463714894F190561266EDBC877054AA87CE844F0 download:EEF5658178E95F518EB0A192ED4B96E615B27EA2 mosaic:3755C52D6FED783387AD3AC23FD98F8F9B8B0747 root:3755C52D6FED783387AD3AC23FD98F8F9B8B0747 ups:3755C52D6FED783387AD3AC23FD98F8F9B8B0747   database management system users [89]: [*] 'mosaic'@'mandalay.arc.nasa.gov' [*] 'root'@'localhost' [*] 'root'@'mandalay.arc.nasa.gov' [*] 'ups'@'mandalay.arc.nasa.gov'     [*] aac_comment_list [*] aac_database_master_list [*] ctas_ZAB_TFAS [*] ctas_ZDV_TFAS [*] ctas_ZFW_DFW [*] ctas_ZID_SDF [*] ctas_ZKC_TFAS [*] informat...

Hackerii romani au descoperit o vulnerabilitate in site-ul Politiei Romane din Braila , si au exploatat-o, extragand date despre personal: Vulnerable page: br.politiaromana.ro/trafic.php?act=sesizare_view&id=7 admin page: br.politiaromana.ro/admin             br.politiaromana.ro/phpmyadmin Host IP: 213.177.4.4 Web Server: Apache/1.3.34 (Debian) PHP/4.4.4-8+etch4 Powered-by: PHP/4.4.4-8+etch4 Keyword Found: data Injection type is Integer DB Server: MySQL Current DB: _br MySQL error based injection method can be used! Data Base Found: information_schema Data Base Found: ?br Data Base Found: _br Data Base Found: test Count(table_name) of information_schema.tables Where table_schema=0x5F6272 is 8 Can not get all tables by group_concat! Count(table_name) of information_schema.tables Where table_schema=0x5F6272 is 8 Table found: bul_presa Table found: comunicate Table found: note_presa ...

National Institute of Research for Optoelectronics Hacked Hello dear internets, long time no see It’s been 2 days since we are trying to win a battle on the stormy seas of the internet, and we finally managed to win the battle. This time, our vessel breached National Institute of Research for Optoelectronics (INOE), along with other important subdomains, and dumped some very interesting docs. Now it’s time to take a look at them toghether and see what the fuck is wrong with this country (or at least with a part of it). It was a fucking long hack session but we hope it worth the effort. We got a 2.8 GB pack of data (1.810 files in 297 folders). Here is a “teaser” of waht u will find in the pack, among other docs and some software shit:   Here are the download links for this pack: Download part 1: http://bit.ly/z8k1r5 Download part 2: http://bit.ly/zhKyUc Download part 3: http://bit.ly/wsTTqR Download part 4: http://bit.ly/wuU1Y7 Download part 5: ...