infosec-news January 2011 archive
Main Archive Page > Month Archives  > infosec-news archives
infosec-news: [ISN] Got $500? You can buy a hacked U.S. military

[ISN] Got $500? You can buy a hacked U.S. military website

From: InfoSec News <alerts_at_nospam>
Date: Mon Jan 24 2011 - 08:06:26 GMT

By Robert McMillan
IDG News Service
January 21, 2011

If you're a criminal looking for full control of the Web used by the
U.S. Army's Communications-Electronics Command (CECOM), you can get it
for just under US$500.

At least that's what one hacker is offering in underground forums.
Security vendor Imperva found the black market sales pitch Thursday and
posted details of the incident on Friday.

The hacker says he has control over a number of websites, including
other military sites, government sites, and those belonging to
universities, said Noa Bar-Yosef, Imperva senior security strategist.
Prices range from $33 to $499, depending on how important or widely used
the website is. "You can actually buy the capability of being the
administrator of the website," she said.

The hacker is also selling databases of personal information he's stolen
from the websites for $20 per thousand records, she said. That data
could be used by spammers, or by fraudsters to break into online


Tegatai Managed Colocation: Four Provider Blended
Tier-1 Bandwidth, Fortinet Universal Threat Management,
Natural Disaster Avoidance, Always-On Power Delivery
Network, Cisco Switches, SAS 70 Type II Datacenter.
Find peace of mind, Defend your Critical Infrastructure.