Numerous South African websites hacked

Why so many being hacked? Is it poor security by these websites? And so many Government sites? :eek:

And then there is the push to go "cloud computing". Quite scary.
 
Would be nice to have a follow up article on what you must do to protect your website.
 
McT said:
Why so many being hacked?
Click to expand...
Presumably some 0-day exploit was discovered & then they just hit all the sites exhibiting that vulnerability.

@Staff writer: Where these mostly sites hosted by a selected group of ISPs or no pattern?

McT said:
And so many Government sites? :eek:
Click to expand...
They give tenders to the applicant who exhibits the least amount of competence & highest cost.:sick:
 
Would be good to know whether they were Windows or Linux servers, Apache or IIS, etc.
 
Perhaps these web sites have an outdated CMS like an old version of Wordpress, Joomla, Drupal?

Or, the host's have an outdated version Cpanel/PhpMyAdmin, WHM, Apache and thus leading to the exploits?

I have a feeling this is simply a problem of webmasters/webhosts not updating their network/scripts to the latest available version. Either that or they all got brute forced because of weak passwords(probably the cause!)

Let's hope everything calms down before I get angry.
 
uchoose said:
Would be nice to have a follow up article on what you must do to protect your website.
Click to expand...

A bit dated : http://www.infosecwriters.com/text_resources/pdf/Securing_a_Web_Site_EEvans.pdf

But it will give you a general idea.

And do keep everything up to date.

A proper DMZ (or separate network segment) for your web/ftp/etc servers so, in the event of these being hacked, your internal network still remains secure.

Putting a web server inside your network is asking for trouble, unless you know what you're doing.
 
Im sure it must have been a new exploit found, and then they hit all the sites with the same vulnerability.
 
By the looks of things a large percent of the sites were hosted on the same servers. In one of the cases the hacker was Dr.SiLnT HilL and the server they hacked supremecenter114.com

Here are some of the sites and this was a linux server

pokerchannel.co.za
policeforms.co.za
oneservcreditprovider.co.za
oneservnetwerk.co.za
pamflets.co.za
www.perfectbraai.co.za
pamphletsandflyers.co.za
plasmatvrental.co.za
policereports.co.za
nitroprop.co.za
newsbrief.co.za
newleaflifeskills.co.za
newleaflifeschools.co.za
motoringchannel.co.za
moneychannel.co.za
minechannel.co.za
mywordismybond.co.za
marketingchannel.co.za
logisticschannel.co.za
lcdtvrental.co.za
lcdrental.co.za
lb.24percent.co.za
kidschannel.co.za
jobtube.co.za
jeffreysbayholiday.co.za
 
I see the Vodacom website was also hacked - it is still as bad as it was...
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X