Return-Path: <sentto-279987-3078-1003379470-fc=all.net@returns.onelist.com> Delivered-To: fc@all.net Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Wed, 17 Oct 2001 21:32:12 -0700 (PDT) Received: (qmail 26386 invoked by uid 510); 18 Oct 2001 04:30:49 -0000 Received: from n9.groups.yahoo.com (216.115.96.59) by 204.181.12.215 with SMTP; 18 Oct 2001 04:30:49 -0000 X-eGroups-Return: sentto-279987-3078-1003379470-fc=all.net@returns.onelist.com Received: from [10.1.4.52] by n9.groups.yahoo.com with NNFMP; 18 Oct 2001 04:31:10 -0000 X-Sender: fc@big.all.net X-Apparently-To: iwar@onelist.com Received: (EGP: mail-8_0_0_1); 18 Oct 2001 04:31:09 -0000 Received: (qmail 21572 invoked from network); 18 Oct 2001 04:31:09 -0000 Received: from unknown (10.1.10.142) by m8.onelist.org with QMQP; 18 Oct 2001 04:31:09 -0000 Received: from unknown (HELO big.all.net) (65.0.156.78) by mta3 with SMTP; 18 Oct 2001 04:31:09 -0000 Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id VAA07103 for iwar@onelist.com; Wed, 17 Oct 2001 21:31:09 -0700 Message-Id: <200110180431.VAA07103@big.all.net> To: iwar@onelist.com (Information Warfare Mailing List) Organization: I'm not allowed to say X-Mailer: don't even ask X-Mailer: ELM [version 2.5 PL1] From: Fred Cohen <fc@all.net> X-Yahoo-Profile: fcallnet Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com Delivered-To: mailing list iwar@yahoogroups.com Precedence: bulk List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com> Date: Wed, 17 Oct 2001 21:31:09 -0700 (PDT) Reply-To: iwar@yahoogroups.com Subject: [iwar] [fc:Pakistani.Hackers.Deface.U.S..Site.With.Ultimatum] Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 8bit Pakistani Hackers Deface U.S. Site With Ultimatum By Brian McWilliams, Newsbytes, 10/17/2001 <a href="http://www.newsbytes.com/news/01/171217.html">http://www.newsbytes.com/news/01/171217.html> A Pakistani hacking group has defaced a Web server operated by the U.S. government and threatened to hit American and British military sites unless its demands are met. A Web server operated by the National Oceanic & Atmospheric Administration (NOAA) was attacked this morning by a group known as GForce Pakistan, according to records at Alldas, a Web site defacement archive. The attackers replaced the site's homepage with their own, which bore the title "GForce Strikes Back" and contained a 350-word text message. The message said the group would target "major US military and major British Web sites" in coming days and jeopardize their internal security. GForce claimed to have "some very high confidential US data" that it would hand over to officials of Al Qaeda unless the U.S. met several demands. The group's confusing ultimatum included the removal of U.S. troops from Saudi Arabia, the cessation of bombing in Afghanistan, and the production of "evidence," among other demands. Al Qaeda is the terrorist organization blamed for the Sept. 11 attacks on America. NOAA officials were not immediately available for comment. The compromised site, located at the Web address <a href="http://anburs.kc.noaa.gov">http://anburs.kc.noaa.gov> , appears to be part of a network operated by the organization's Aviation Weather Center in Kansas City, Mo., and may have been somehow involved in a system for data exchange between the National Weather Service and the Federal Aviation System known as Alphanumeric Backup Replacement System (ANBURS). The server, which was unreachable this morning, was running the Linux operating system and had open file transfer protocol and telnet ports, according to a scan performed by Alldas. The message from the attackers said GForce Pakistan condemns the terrorist attacks on the U.S. but also supports Al Qaeda. "Usama Bin Laden is a holy fighter, and whatever he says makes sense," said the group's message. At the bottom of the defaced page under a heading that read "We Are In No Way Responsible For This Message" was a section of text announcing the formation of a group called Al-Qaeda Alliance Online. According to the text, the group will target major U.S. government sites in coming days. "We won't hurt any data, as it's unethical. All we want is our message conveyed," said the message. The text also included this threat aimed at U.S. President George W. Bush and U.K. Prime Minister Tony Blair: "The day of judgment is very near for both of you." On Tuesday, the FBI warned Americans to expect an increase in cyber protests. The agency's National Infrastructure Protection Center said that besides defacements and denial of service attacks, the "hacktivists" could also target systems supporting "the national infrastructure." A mirror of the defaced NOAA site is here: <a href="http://defaced.alldas.de/mirror/2001/10/17/anburs.kc.noaa.gov/">http://defaced.alldas.de/mirror/2001/10/17/anburs.kc.noaa.gov/> . Reported by Newsbytes, http://www.newsbytes.com . 09:44 CST (20011017/WIRES TOP, ONLINE, LEGAL, BUSINESS, ASIA/HACKERGEN/PHOTO) © 2001 The Washington Post Company ------------------------ Yahoo! Groups Sponsor ---------------------~--> Pinpoint the right security solution for your company- Learn how to add 128- bit encryption and to authenticate your web site with VeriSign's FREE guide! http://us.click.yahoo.com/yQix2C/33_CAA/yigFAA/kgFolB/TM ---------------------------------------------------------------------~-> ------------------ http://all.net/ Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
This archive was generated by hypermail 2.1.2 : 2001-12-31 20:59:55 PST