EC Council hacked again,website defaced.


EC-Council, an organization that offers Certified Ethical Hacker(CEH) has been hacked by a hacker named Eugene Belford (A character from the 1995's movie "Hackers").
Passport and photo ID details of more than 60,000 security professionals who have obtained or applied for the EC-Council's Certified Ethical Hacker certification are at risk after the breach, many of whom work in sensitive political and military positions. They include members of the US military, FBI, United Nations, and National Security Agency.
The hacker left the EC-Council website with the Passport of Edward Snowden and documents proving that Snowden attended the CEH classes in India.

The self-described "certified unethical software security professional" responsible for the attack reportedly used a DNS redirect to access those details, which were stored in an inadequately protected location.
When we take a look at the source code, we can see that the hacker has uploaded two pictures directly on to the EC-Council web server.
As of still it seems as though EC-Council has not gained control of their website.  An update was posted on the EC-Council site stating:
“owned by certified unethical software security professional
Obligatory link: http://attrition.org/errata/charlatan/ec-council/ -Eugene Belford

P.S It seems like lots of you are missing the point here, I’m sitting on thousands of passports belonging to LE (and .mil) officials”.

No comments: