Anonymous Hacker Group Destroyed 1 Million Web Pages using severe Plug-in vulnerability

guest · Mar 4, 2019

Anonymous Hacker Group Destroyed 1 Million Web Pages using severe Plug-in vulnerability
March 4, 2019
https://gbhackers.com/hacker-group-destroyed-million-web-pages/

Anonymous Threat actor group compromised hundreds of websites and destroyed nearly 1 million Israeli based webpages that belong to some of the leading brands including Coca-Cola, ToysRUs, McDonald’s.

Hackers mostly compromised the well-known brand websites that launched for Isreal users such as co.il address -mcdonalds.co.il, cocacola.co.il etc.
A vulnerability that existing the third party accessibility plugin-in called nagich.co.il loaded malicious JavaScript code that corrupted the site and let attackers took advantage to exploit and compromise the millions of web pages.
The way Third Party Plugin Abused by Hackers
Since the nagich accessibility Plugin contains a severe vulnerability let hackers to replace the malicious code with an embedded link.
Click to expand...

guest · Mar 4, 2019

Some more info:

The vulnerability, which included malicious code with an embedded link that downloads ransomware to the users’ computer [...]
All in all the issue was resolved in under an hour; but it demonstrated the risk of using an unsecured third party plug-in across so many websites.
Click to expand...

guest · Mar 6, 2019

mood said: ↑

Anonymous Hacker Group Destroyed 1 Million Web Pages using severe Plug-in vulnerability
March 4, 2019
https://gbhackers.com/hacker-group-destroyed-million-web-pages/
Click to expand...

JCry ransomware is now infecting Windows users
Over the last few days, a new ransomware campaign infected several users around the world
March 6, 2019
https://securityaffairs.co/wordpress/82030/hacking/opjerusalem-2019-jcry-ransomware.html

Last weekend, hundreds of popular Israeli websites were targeted by a cyber attack called #OpJerusalem. This attack has the goal of infecting Windows users with the JCry ransomware. In this case, the attack vector used to distribute the ransomware are defaced websites.

To carried out this attack, crooks modified the DNS record of a popular web accessibility plugin from nagich[.]com. When users access a website using that plugin, a malicious script is loaded instead of the legitimate plugin.

SI-LAB analyzed this new ransomware in order to understand its behavior and techniques used by criminals.
If users download the exe file called flashplayer_install.exe, the infection process starts. As shown, the malware icon is the same used by common Adobe Flash Player executables, a trick used by crooks to lure victims.
Click to expand...

Log in or Sign up

Anonymous Hacker Group Destroyed 1 Million Web Pages using severe Plug-in vulnerability

guest Guest

guest Guest

guest Guest

Log in or Sign up

Anonymous Hacker Group Destroyed 1 Million Web Pages using severe Plug-in vulnerability

guest Guest

guest Guest

guest Guest

Useful Searches