jimmyLi's blog

Hacktivists continue their operations against companies they believe to be responsible for using the “harmful” mineral known as coltan (columbite–tantalite). The latest victims of OpColtan and OpGreenRights are the websites of Fujitsu General Brazil (fujitsugeneral.com.br) and Siemens Switzerland (siemens.ch).  The hackers have published massive amounts of data – including some email addresses, usernames and passwords –, allegedly stolen from these websites. Judging by the files posted on PrivatePaste, it appears that the attackers once again leveraged SQL Injection vulnerabilities to breach the sites and gain access to their databases . “Our attention turns to you, unscrupulously and greedy multinationals. Behind your famous commercial images, fabricated and marked on an false Ethic, the most cruel barbarites are hidden,” the Anons who run the campaign stated. “Coltan, the mineral that you use to produce capacitors of mobile phones, besides being ...

Blizzard.com.ua – a Ukrainian website dedicated to Blizzard games fans – has been breached by hackers operating under the Anonymous and AntiSec banners.   “About time you get you Content Management Systems updated son?!” they wrote next to the data leak sample. This indicates that the attackers leveraged an unpatched security hole in order to gain access to the site’s databases. The paste published on peoplesliberationfront.net contains a link to a 7 megabyte file that stores 19,106 usernames, passwords, email addresses and other user details. According to Cyber War News , besides this file, there are two other databases out there, apparently containing administrator details and information belonging to World of Warcraft players.  Hopefully, this will act as a wakeup call for the site’s administrators and they’ll address the vulnerability, but also notify their users to ensure that their details cannot be misused. Source:...

Have you had to change your login information in a paranoid fever after discovering that a major online service provider has been hacked in the last few weeks? Well, if you have a Yahoo! account, you might have some worrying to do. A hacker group called D33DS Company has apparently dumped 453,492 usernames and passwords obtained in plaintext from a Yahoo! service. Ars Technica is reporting that usernames and passwords allegedly from Yahoo! were posted online by the D33DS Company group. Other sources indicate that the user information was specifically from the Yahoo! Voice service, formally known as Associated Content. Apparently, the hackers were able to obtain the plaintext list of passwords and usernames using a MySQL injection attack. Ars explains the methodology behind the attack thusly: The hacking technique preys on poorly secured web applications that don’t properly scrutinize text entered into search boxes and other user input fields. By injecting powerful ...