TheStar: Websites Hacked After Flag Blunder

News August 23, 2017

Websites hacked after flag blunder

Websites hacked : Thirty-three Malaysian websites have been de­faced as of 3.40pm yesterday, accor­ding to CyberSecurity Malay­sia.

Some of the websites – blogs which are relatively unknown, and are not affiliated to any official body or large corporation – were defaced by the hacker group ExtremeCrew and featured the official souvenir booklet of the Kuala Lumpur SEA Games 2017, which erroneously carried the Indonesian flag upside down.

Kuala Lumpur has since apologised to Jakarta for the flag error after the issue was raised by Indonesian Youth and Sports Minister Imam Nahrawi on Saturday.

The group posted “Bendera Negaraku Bukanlah Mainan” – which translates to “My national flag is not a plaything” – on these websites, while the Indonesian patriotic song Tanah Air Beta played in the background.

“Webpage defacement is one of the oldest attacks carried out by amateur hackers, says C.F. Fong, the founder of cybersecurity firm LGMS.

Website defacement is an attack on a website that changes the visual appearance of the site or a webpage. These are typically the work of defacers, who break into a web server and replace the hosted website with one of their own. Defacement is generally meant as a kind of electronic graffiti and, as other forms of vandalism, is also used to spread messages by politically motivated “cyber protesters” or hacktivists.

“Hackers can deface a website by exploiting loopholes that may exist in current web applications or the web server configurations,” he said.

Professional hackers are less likely to deface websites – they tend to plant sleeping agents and steal information in the background without being detected”

Full article from The Star


You may also find other interesting LGMS News at the following links:

PETYA: Live Interview With Russian Radio Station – Sputnik
SAPS 网站有风险关闭.资料可骇窃教部查漏洞
The Malaysian Reserve: Adopt threat hunting to prevent cyber menace
No security breach during MY domain glitch