Government website logins for sale?
A hacker claims to have Western government website logins for sale.
Hackers have compromised various European and US government websites, placing login details for sale online, a security company has claimed.
Dozens of .mil, .gov and .edu sites were hacked, at least according to the seller, and they were most likely due to SQL injection vulnerabilities, Imperva researchers said.
Purported access to such sites was being sold for as little as $55 (34) and up to $499.
Personally identifiable information was also on sale for $20 per 1,000 records.
Imperva did not give too many details on what specific sites were hacked, but the official website of the Italian Government appeared to have been compromised, with the hacker offering full site administration control.
On one occasion, the hacker was seen trying to prove he could access the administrator interface for a major university.
"The victims' vulnerabilities were probably obtained by SQL injection vulnerability automatic scanner and exploited in automatic manner, as the hacker published his methods in a post in some hacker forum," said Noa Bar Yosef, senior security strategist at Imperva.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Government sites have been increasingly under threat from hackers or angered web denizens, especially since the emergence of widespread hacktivism.'
Just earlier this month, hackers took down Ireland's opposition party Fine Gael's website.
The hackers left a message claiming to be from Anonymous, but some contested whether a member of the group was really responsible.
Forum comments on Anonymous related websites noted how the message did not include the typical mark of the hacker group, which reads: "We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us."
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Google is scrapping its dark web report featureNews Google said while the dark web report feature offered “general information”, the tool didn’t provide “helpful next steps” for users potentially impacted by a breach.
-
AI means you're probably going to need bigger developer teamsAnalysis Software developers may be forgiven for worrying about their jobs in 2025, but the end result of AI adoption will probably be larger teams, not an onslaught of job cuts.
-
‘Hugely significant’: Experts welcome UK government plans to back down in Apple encryption battle – but it’s not quite over yetNews Tulsi Gabbard, US director of national intelligence, has confirmed the UK plans to back down on plans that would see Apple forced to create a "back door" for authorities.
-
‘A huge national security risk’: Thousands of government laptops, tablets, and phones are missing and nowhere to be foundNews A freedom of information disclosure shows more than 2,000 government-issued phones, tablets, and laptops have been lost or stolen, prompting huge cybersecurity concerns.
-
The UK cybersecurity sector is worth over £13 billion, but experts say there’s huge untapped potential if it can overcome these hurdlesAnalysis A new report released by the DSIT revealed the UK’s cybersecurity sector generated £13.2 billion over the last year
-
"Thinly spread": Questions raised over UK government’s latest cyber funding schemeThe funding will go towards bolstering cyber skills, though some industry experts have questioned the size of the price tag
-
Threat of cyber attacks to national security compared to that of chemical weaponsNews The UK government has raised the threat level posed by cyber attacks, deeming it greater on average than an event such as the Salisbury poisoning
-
2022 Public Sector Identity Index ReportWhitepaper UK Report
-
UK and Japan strike digital partnership to collaborate on IoT security, semiconductorsNews The two countries are also set to align their approaches to digital regulation to make it easier for companies to operate in each nation
-
Defra's legacy software problem 'threatens' UK gov cyber security until 2030News The department spends over two-thirds of its digital budget on maintaining the risky applications, with no plan in place for a fix within the decade
