{"id":30574,"date":"2011-08-01T23:05:07","date_gmt":"2011-08-01T21:05:07","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=30574"},"modified":"2011-08-01T23:06:19","modified_gmt":"2011-08-01T21:06:19","slug":"original-ancyl-website-hacker-speaks-out","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/internet\/30574-original-ancyl-website-hacker-speaks-out.html","title":{"rendered":"Original ANCYL website hacker speaks out"},"content":{"rendered":"<p>The website of the ANC Youth League has been a frequent target of hackers and was defaced twice last week \u2013 once on Sunday, 24 July 2011, following media reports of Julius Malema\u2019s trust fund, and again on Monday during an ANCYL press conference.<\/p>\n<p><a title=\"ANCYL website hacker\" href=\"http:\/\/mybroadband.co.za\/news\/general\/30120-ancyl-website-hacker-tells-all.html\">An individual claiming responsibility<\/a> for the hacks reached out to MyBroadband to set the record straight, explaining that the timing was co-incidental and that they had contacted the website administrators.<\/p>\n<p>Unwembi, the web development and hosting company for the ANCYL website, confirmed that they had received communications from someone claiming to be the hacker.<\/p>\n<p>Floyd Shivambu, spokesperson for the league, told the M&amp;G that the <a title=\"ANCYL website hacked\" href=\"http:\/\/mybroadband.co.za\/news\/internet\/30106-\u201cright-wing-white-people\u201d-behind-ancyl-hack-shivambu.html\">ANCYL website was under attack by right-wing white people<\/a>. \u201cEven the web developer has said such people are doing that,\u201d Shivambu said.<\/p>\n<p>Unwembi disputed this, and the person claiming to be the hacker said that their motivations were borne out of curiosity, not politics.<\/p>\n<p><strong>First!<\/strong><\/p>\n<p>The hacker who posted the Dumb &amp; Dumber image on Monday, 25 July 2011 explained they used a vulnerability left there by a previous hacker.<\/p>\n<div id=\"attachment_29990\" style=\"width: 610px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/mybroadband.co.za\/news\/internet\/29986-ancyl-website-hacking-details.html\/attachment\/ancyl-hacked-26july\" rel=\"attachment wp-att-29990\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-29990\" class=\"size-full wp-image-29990\" title=\"ancyl-hacked-26july\" src=\"http:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2011\/07\/ancyl-hacked-26july.jpg\" alt=\"ANCYL website hacked - 25 July 2011\" width=\"600\" height=\"518\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2011\/07\/ancyl-hacked-26july.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2011\/07\/ancyl-hacked-26july-86x75.jpg 86w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2011\/07\/ancyl-hacked-26july-162x140.jpg 162w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><p id=\"caption-attachment-29990\" class=\"wp-caption-text\">ANCYL website hacked - 25 July 2011<\/p><\/div>\n<p>This hacker, or hacking group which calls themselves the {Blah} {Blah} Protest Group, has now taken responsibility for creating the vulnerability and doing the original hack on the <a title=\"ANCYL website hacked\" href=\"http:\/\/mybroadband.co.za\/news\/internet\/19409-ancyl-website-compromised-with-strange-message.html\">ANCYL website in March 2011 <\/a>. They also claimed responsibility for last week Sunday\u2019s hack and a hack that hadn\u2019t been reported in the media that added a comments section to the website.<\/p>\n<p>\u201cOur Hacks are the ones that look like they are part of the website,\u201d the group said.<\/p>\n<p>According to a {Blah} {Blah} representative, who is also the hacker credited with the first defacement of the ANCYL website, they breached the security of the ANCYL webserver by exploiting a vulnerability in a website that was hosted on the same server.<\/p>\n<p>An attack known as local file inclusion (LFI) was used to get the database password of the vulnerable website, which {Blah} {Blah} said turned out to be the same password needed to access the backend systems which yielded them the database password for the ANCYL server.<\/p>\n<p>With access to the database, the hacker was able to place a false post announcing the resignation of Julius Malema.<\/p>\n<p>The hacker said that Unwembi has since fixed this vulnerability.<\/p>\n<p>Unwembi didn\u2019t comment on whether this was the case by the time of publication, but an independent security expert who wished to remain anonymous confirmed that the site from which the original attack was staged appears to have been moved to a different server.<\/p>\n<p>The security expert also said that the details of the attack sounded legitimate as many sites on shared hosts get hacked due to the fact that a vulnerability in one can expose them all to attack.<\/p>\n<p>The approach detailed by {Blah} {Blah} also sounds plausible and likely, the expert said, adding that the claims can\u2019t be proven without confirmation from Unwembi.<\/p>\n<p><strong>Hactivism 101<\/strong><\/p>\n<p>In a recent post from their Twitter account, the group responded to Shivambu\u2019s allegations that the attacks come from \u201cright-wing white people.\u201d<\/p>\n<p>\u201cFloyd seriously White and Right Wing. Wrong and Wrong again,\u201d the tweet stated. \u201cWe are not promoting a racist agenda we are instead protesting against stupidity.\u201d<\/p>\n<p>Asked about their motivations for the hacks, the {Blah} {Blah} Protest Group said that they really love South Africa and could not sit idly by when someone is blatantly trying to incite violence and racial tension.<\/p>\n<p>\u201cSo we discussed a simple plan to let people see what kind of a person Julius really is.\u201d<\/p>\n<p>The plan involved using slapstick humour to talk about the issues, \u201cHence \u2018Blah Blah\u2019,\u201d the group said.<\/p>\n<p>According to {Blah} {Blah} the ANCYL site is still vulnerable.<\/p>\n<p>\u201cWe will continue to provide relevant thought-provoking humour on the ANCYL website until such time as common sense finds its way back into that organization,\u201d the {Blah} {Blah} Protest Group said.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The hacker claiming responsibility for the original hacks of the ANC Youth League website earlier in 2011 answers the burning questions of &#8220;how&#8221; and &#8220;why&#8221;<\/p>\n","protected":false},"author":15,"featured_media":29922,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[18],"tags":[2628,3024,1565,461,35,3026],"class_list":["post-30574","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet","tag-ancyl","tag-floyd-shivambu","tag-hacker","tag-hacking","tag-headline","tag-unwembi"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/30574"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=30574"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/30574\/revisions"}],"predecessor-version":[{"id":30662,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/30574\/revisions\/30662"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/29922"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=30574"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=30574"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=30574"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}