WASPA's website was hit by a malicious attack

Piss poor security there.

We have implemented enhanced security precautions including changing of passwords, updating our firewall and reenabling reCAPTCHA on the login page to ensure any further attempts are negated.”
Click to expand...

enhanced security precautions :ROFL::ROFL::ROFL:


Why did they only update the firewall now? This and other systems should be regularly patched. Still dont see the recaptcha on the login page.

Maybe someone should tell them about wildcard certs :)

Screenshot from 2021-12-21 14-17-09.png
 
Last edited:
We have implemented enhanced security precautions including changing of passwords, updating our firewall and reenabling reCAPTCHA on the login page to ensure any further attempts are negated.”
Click to expand...

:sneaky::X3::ROFL:
 
Poorly hardened WordPress installation, unpatched plugins... do I need to say more? I don't know the attack vector here, but I wouldn't be surprised that they had an outdated Revolution Slider installed which was vulnerable to a database insertion. Hey, don't look at me.

Also, don't pirate your plugins, said in general.
 
Huge spam and sudden enrollment for shyte incoming..............
 
gregmcc said:
But not the accounts page.
Can you logon here with admin?
Click to expand...

Yes, Super Administrators should be able to log in there, unless they have set up user roles and privileges within their WordPress instance, but I know not too many WordPress "developers" does this.

HOWEVER, that is not WordPress being used there. Looks like a separate table sorter. They could still use the same username and password there as they would use in their WordPress instances or perhaps elsewhere. In the case their database is compromised, I am sure the tenant tables will also be exposed, but they could use separate databases.

Entities don't like when other people discuss their best practices. I know this, very well.
 
Are there non-malicious attacks? I suppose there is penetration testing. That latex has to be ISO certified.
 
its still down. tried to visit today and still redirecting... so much for improved security
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X