Auditor-General's website hacked

[ike]

was looking for a document on www.agsa.co.za and found it's been hacked.
question is:
do these hackers, in this case "Ashiyane Digital Security Team," have a program that automatically detects websites with lax security, or how do they decide who to hack?

 

[gregmcc]

lolz! Its still defaced!

They either target specific sites (unlikely) or have scripts running that look for easy to target exploits (php exploits, sql injections etc)

 

[ike]

ha! thanks.

 

[thesones]

haha, I guess they couldn't find a fix, the site is down.

 

[thesones]

btw how was it defaced, do u have a screenshot?

 

[gregmcc]

lol. shocking - still down! Maybe I should offer them my services

Don't have a copy of the defacement but it was simple replacement of the index file with a link loading a remote jpg and a few words about the hackers.