Hackers have compromised various European and US government websites, placing login details for sale online, a security company has claimed.
Dozens of .mil, .gov and .edu sites were hacked, at least according to the seller, and they were most likely due to SQL injection vulnerabilities, Imperva researchers said.
Purported access to such sites was being sold for as little as $55 (34) and up to $499.
Personally identifiable information was also on sale for $20 per 1,000 records.
Imperva did not give too many details on what specific sites were hacked, but the official website of the Italian Government appeared to have been compromised, with the hacker offering full site administration control.
On one occasion, the hacker was seen trying to prove he could access the administrator interface for a major university.
"The victims' vulnerabilities were probably obtained by SQL injection vulnerability automatic scanner and exploited in automatic manner, as the hacker published his methods in a post in some hacker forum," said Noa Bar Yosef, senior security strategist at Imperva.
Government sites have been increasingly under threat from hackers or angered web denizens, especially since the emergence of widespread hacktivism.'
Just earlier this month, hackers took down Ireland's opposition party Fine Gael's website.
The hackers left a message claiming to be from Anonymous, but some contested whether a member of the group was really responsible.
Forum comments on Anonymous related websites noted how the message did not include the typical mark of the hacker group, which reads: "We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us."
-
OpenAI is closing in on its biggest acquisition to dateNews OpenAI is reportedly closing in on a $3 billion deal to acquire AI startup Windsurf.
-
More than a third of UK tech leaders admit they’ve cut staff in favor of AINews UK tech leaders worry they’ve opened themselves up to huge skills gaps with AI-related cuts.
-
The UK cybersecurity sector is worth over £13 billion, but experts say there’s huge untapped potential if it can overcome these hurdlesAnalysis A new report released by the DSIT revealed the UK’s cybersecurity sector generated £13.2 billion over the last year
-
"Thinly spread": Questions raised over UK government’s latest cyber funding schemeThe funding will go towards bolstering cyber skills, though some industry experts have questioned the size of the price tag
-
Threat of cyber attacks to national security compared to that of chemical weaponsNews The UK government has raised the threat level posed by cyber attacks, deeming it greater on average than an event such as the Salisbury poisoning
-
2022 Public Sector Identity Index ReportWhitepaper UK Report
-
UK and Japan strike digital partnership to collaborate on IoT security, semiconductorsNews The two countries are also set to align their approaches to digital regulation to make it easier for companies to operate in each nation
-
Defra's legacy software problem 'threatens' UK gov cyber security until 2030News The department spends over two-thirds of its digital budget on maintaining the risky applications, with no plan in place for a fix within the decade
-
Netherlands urges citizens to prepare survival kits in case hackers target critical infrastructureNews The latest campaign from the national coordinator for security echoes the growing concern in the UK government over serious cyber attacks
-
35 cyber startups join largest UK government-backed acceleratorNews The startups will benefit from business masterclasses, mentoring and engineering support, and technical product development support
