View Single Post
  #1 (permalink)  
Old 26-May-2004, 05:30 AM
kall
kall's Avatar
kall is offline
 Your Friendly Admin Guy
 Karma +/- Power: 109
 Karma: kall has a spectacular aura aboutkall has a spectacular aura aboutkall has a spectacular aura about (231)
  Send a message via MSN to kall
 
 Local Time: 12:48 PM
 Local Date: 12-Oct-2008
 Join Date: Jan 2004
 Age: 29
 Posts: 4,993
 Blog Entries: 6
Default Microsoft press gang attacked by outlaws

PORTUGUESE SPEAKING hackers dubbed the "Outlaw group" have defaced the ultra-secure Microsoft.com's uk press page using a well-known hole that should have been patched months ago.

Red-faced spinsters pulled the hacked page (www.microsoft.com/mspress/uk/) yesterday after the defacers modified the title and introduction of the Microsoft Press section to write "Owned OutLaw Group by Pharoeste e Wolfblack".

Despite the fact that the HQ site is touted as one of the industry's most secure, and it contained press releases extolling the virtues of security patches the INQ understands that the defacement was no great hacking feat. The site easily fell over to an attack tuned onto a well known hole in Microsoft's patchwork quilt.

Basically, the attack involved finding the administration page and performing an SQL injection attack to gain control of the content.

It seems that someone had not visited the Microsoft web-page and upgraded their patches.

Reply With Quote