Gaza Ceasefire Doesn't Hold Online: New Anonymous Hack
By Mathew J. Schwartz
InformationWeek
In the online realm, however, despite the ceasefire and U.N. vote, related skirmishes have continued without stop, with hacktivist supporters from both sides continuing to knock websites offline and release sensitive information.
Notably, Anonymous -- as part of its Operation Israel (OpIsrael) campaign -- announced Thursday that it had hacked the Debka news agency in Israel, and released login email names and passwords -- all in plain-text format -- for 91 of the site's users.
"We have managed to hack their systems and acquire highly sensitive information, including employees' and authors' personal information, labs details and of course their subscribers," according to the Anonymous statement, which was released via Pastebin. "For now, we [will] only release [a] portion of what we have got."
That data breach followed the online release, earlier this week, of the email addresses for 167 people who are allegedly connected to Israel's nuclear weapons program. The data was apparently stolen from the U.N.'s International Atomic Energy Agency (IAEA), which is currently investigating Iran's nuclear program. A never-before-seen hacking group, Parastoo -- which in Persian means "swallow," as in the bird, and is a popular female name in Iran -- claimed credit for the breach, which it said involved an IAEA server located in Vienna.
[ Izz ad-Din al-Qassam Cyber Fighters resurface. See U.S. Bank Attackers Dispute Iran Ties. ]
"You will be hearing game changing news from us frequently from now on," the group said via Pastebin, signing its message with a variation on the Anonymous hacktivist-collective's "We are Anonymous" tagline: "You are not anonymous. Expect us."
The IAEA has confirmed the data breach. Spokeswoman Gill Tudor told Reuters that the data was stolen from "an old server that was shut down some time ago," said that the agency "deeply regrets" the incident and noted that the vulnerability exploited by attackers has been mitigated.
"The IAEA's technical and security teams are continuing to analyze the situation and do everything possible to help ensure that no further information is vulnerable," she said.
The ceasefire between Israel and Hamas, signed in Cairo, took effect on November 21, thus putting an end to eight days of conflict, including Israeli airstrikes, that the U.N. estimates resulted in the death of 158 Palestinians -- including 103 civilians -- as well as 1,250 being injured. Meanwhile, four Israeli civilians, as well as two soldiers, were reportedly killed by Palestinian rocket fire, and 224 Israelis were injured.
In the wake of the ceasefire, however, supporters from both sides intensified their distributed denial of service (DDoS) attacks against each other. Matthew Prince, CEO of CloudFlare, which helps businesses defend against DDoS attacks, told Wired that while the identity of the attackers remains a mystery, his company has recently signed up as customers 10 "fairly high-profile" websites from both sides of the conflict that were hit with DDoS attacks. He said the pace of DDoS attacks noticeably increased in the hours after the ceasefire was signed.
While CloudFlare didn't detail its customers' identities, they reportedly include both the Israeli Defense Forces as well as al-Qassam, the paramilitary wing of Hamas.
Federal agencies must eliminate 800 data centers over the next five years. Find how they plan to do it in the new all-digital issue of InformationWeek Government. Download it now (registration required).
A security information and event management system serves as a repository for all the security alerts and logging systems from a firm's devices. But this can be overkill for a company that is understaffed or has overestimated its security information needs. In our report, Does SIEM Make Sense For Your Company?, we discuss 10 questions to ask yourself in determining whether SIEM makes sense for you--and how to pick the right system if it does. (Free registration required.)
| To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy. |
InformationWeek Reports
Cloud Implementer's Checklist
Once your agency has completed the business case for a private cloud, how do you actually move ahead with your data center transformation? Our report provides a practical set of steps to get you there, including a "to do" list that will be helpful to anyone on your IT team who's involved in the project. By the time you're done, your data center should be home to a more flexible, on-demand IT services.
Cloud Compliance in Government
Compute clouds created for government data centers must adhere to a range of specifications designed to support data and system security, privacy, and governance. FISMA, HIPAA, SOX, and SAS 70 are just some of the requirements that have to be taken into account as federal IT pros deploy a shared-services cloud model. In this report, we identify the key specs that need to be factored into any federal cloud architecture.
Government Cloud Platform Strategy
This report analyzes the key IT infrastructure considerations that must be taken into account for implementing cloud services in federal data centers: software/hardware environment, multi-tenancy, security, virtualization, and management tools. We also explain the key important role that APIs play in supporting hybrid scenarios that tap into public cloud services.
The Business Case for Government Clouds
This report assesses usage scenarios, barriers, and other variables that factor into the decision of whether and how to implement cloud computing in federal environments.




Subscribe to RSS