Information Security News mailing list archives

[defaced-commentary] 3 Microsoft Web sites defaced bringing total to 15


From: InfoSec News <isn () c4i org>
Date: Thu, 21 Jun 2001 20:03:23 -0500 (CDT)

---------- Forwarded message ----------
Date: Thu, 21 Jun 2001 08:59:49 -0400
From: McIntyre <mcintyre () forced attrition org>
To: defaced-commentary () attrition org
Subject: [defaced-commentary] 3 Microsoft Web sites defaced bringing total
    to 15


Over the past 3 days, three Microsoft Web sites have been defaced (four if 
you include the MSN Mobile site we commented on late last night). This 
makes the 15th time a Microsoft Web site has been defaced including the 
corporation's global sites in Brazil, Slovenia, New Zealand, Mexico, UK, 
Saudi Arabia and South Africa as well as six servers from their corporate 
headquarters.

Around 8pm ET on June 19th, the Microsoft South Africa "interface" server 
was defaced by the group BlackSun:
http://defaced.alldas.de/mirror/2001/06/19/www.interface.microsoft.co.za/

This morning, June 21st, around 1:15am and 3:20am respectively, two 
Microsoft RTE servers were defaced by the group Prime Suspectz:
http://defaced.alldas.de/mirror/2001/06/21/redsand.rte.microsoft.com/
http://defaced.alldas.de/mirror/2001/06/21/arulk.rte.microsoft.com/



The full list of past Microsoft targets have included:

msrconf.microsoft.com (a supposed retired MS server and the first recorded 
defacement of a Microsoft server) on October 24, 1999
http://www.attrition.org/mirror/attrition/1999/10/24/msrconf.microsoft.com/CMT/

Microsoft Brazil by IZ corp defaced June 3, 2000
http://defaced.alldas.de/mirror/2000/06/03/www.microsoft.com.br/

The Microsoft Events Server by someone unknown on November 7, 2000
http://www.attrition.org/mirror/attrition/2000/11/07/events.microsoft.com

Microsoft Slovenia (defaced twice) the first time by Furia.BR on December 
14, 2000 and the second time by BoLoDoRiO 3 days later
http://defaced.alldas.de/mirror/2000/12/14/www.microsoft.si/
http://www.attrition.org/mirror/attrition/2000/12/17/www.microsoft.si

Microsoft New Zealand was  defaced by Prime Suspectz on January, 23rd of 
this year:
http://defaced.alldas.de/mirror/2001/01/23/www.microsoft.co.nz/

Microsoft UK, Microsoft Saudi Arabia and Microsoft Mexico were all defaced 
on May 3rd, 2001 by Prime Suspectz:

http://defaced.alldas.de/mirror/2001/05/03/www.microsoft.co.uk/
http://www.attrition.org/mirror/attrition/2001/05/03/www.microsoft.com.sa/
http://www.attrition.org/mirror/attrition/2001/05/03/www.microsoft.com.mx/

Microsoft's STREAMER server was defaced by Prime Suspectz on May 7th, 2001:
http://www.attrition.org/mirror/attrition/2001/05/07/streamer.microsoft.com/

Microsoft Rom?nia was defaced by Pentaguard on May 17th, 2001:
http://defaced.alldas.de/mirror/2001/05/18/www.microsoft.ro/

The MSN Mobile "feeds" server was defaced by Prime Suspectz on June 21st, 2001:
http://defaced.alldas.de/mirror/2001/06/21/feeds.mobile.msn.com/

-
The information and commentary is Copyright 2001, by the individual author.
Permission is granted to quote, reprint or redistribute provided the text is not
altered, and the author and attrition.org is credited. The opinions expressed
in this mail are not necessarily the opinion of all Attrition staff members.

Commentary Archive: http://www.attrition.org/security/commentary/
The Attrition Mirror: http://www.attrition.org/mirror/attrition/
Country/TLD Statistics: http://www.attrition.org/mirror/attrition/country.html
Attrition Defacement Statistics: http://www.attrition.org/mirror/attrition/stats.html
Operating System Graphs: http://www.attrition.org/mirror/attrition/os-graphs.html

Other Web Defacement Mailing Lists: http://www.attrition.org/security/lists.html
Contacting Attrition Staff: staff () attrition org

To subscribe to Defaced Commentary, send mail to majordomo () attrition org
with "subscribe defaced-commentary" in the BODY of the mail (without
quotes). To unsubscribe, include "unsubscribe defaced-commentary" in
the BODY of the mail.


ISN is hosted by SecurityFocus.com
---
To unsubscribe email isn-unsubscribe () SecurityFocus com.


Current thread: