BreachExchange mailing list archives

Islamic hackers post hundreds of Israeli email addresses and passwords


From: security curmudgeon <jericho () attrition org>
Date: Fri, 6 Jul 2012 22:33:40 -0500 (CDT)



---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.haaretz.com/news/diplomacy-defense/islamic-hackers-post-hundreds-of-israeli-email-addresses-and-passwords-1.448142

By Oded Yaron
Haaretz Daily
July 02, 2012

Islamic hackers on Sunday revealed hundreds of Israeli email addresses and 
their passwords on the website of Anonymous Arab. According to Avnet 
Security Systems, most of the addresses and passwords listed are active 
accounts.

Roni Bachar, the manager of the cyber-attack department at Avnet, said in 
a statement, "There was apparently penetration of an Israeli site which 
cannot be determined at this stage, a site that requires identification by 
email address and a password, as is usual at forum, content and commercial 
sites.

"It isn't clear yet which site or forum it is, but going over the list 
shows that most of the people appearing on it are connected to the fields 
of cosmetics, hairdressing and alternative therapies."

Bachar added that he doesn't believe that Facebook itself was hacked, 
"since the attack revealed only a small number of addresses, about 300, 
and passwords were determined through estimates and guesses of the brute 
force type."

[...]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.


Current thread: