Thursday, 17 May 2012
NUS server infiltrated via SQL injection
NUS server infiltrated via SQL injection
By SecurityAsia Editors | Jan 9, 2012
0 comments
Digg
PrintA server at the National University of Singapore was compromised by hackers who made confidential information garnered from the attack public.
Private data released by a hacking group calling itself Team Intra consisted of staff usernames, domain information and hashed passwords. Team Intra had apparently used a SQL vulnerability to obtain the data.
The issue was first highlighted http://www.scmagazine.com.au/News/285906,singapore-university-hacked.aspx in SC Magazine Thursday.
According to SC Magazine, the hackers alleged they had been motivated to attack the server after probes of the website resulted in a message stating: “If you’re trying to use SQL error message to dig for juicy information, get lost.”
The University’s head for IT Security Yong Fong Lian confirmed the attack had taken place and told http://www.straitstimes.com/BreakingNews/Singapore/Story/STIStory_752543.html the Straits Times that the 70 affected accounts provided access to a deparmental server hosting research papers and publications. Yong added data in the server was ‘not of a confidential nature’ and that accounts on the university’s main NUSNET network had not been compromised.
Affected accounts have since been reset and the affected server disconnected from the network.
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
