Online ticket seller Ticketmaster has become the latest victim of a hack attack after a group of rap music supporters defaced its website.
vnunet.com, 23 Aug 2000
Online ticket seller Ticketmaster has become the latest victim of a hack attack after a group of rap music supporters defaced its website.
The attack, which took place yesterday on Ticketmaster's UK website, was perpetrated by a group calling itself M-squad. The site has since been returned to normal.
Security experts said the attack exploited a documented flaw in older versions of Microsoft's Internet Information Server (IIS), using a script well-known by the hacker community.
Some experts believe the same flaw was exploited by the hacker known as Herbless in his attack on nine UK government websites last week.
Matt Tomlinson, business development director at security consultancy MIS, said: "The flaw affects any version of IIS between 4.0 up to 6a."
He added that although the website had been defaced, information such as customers' credit card details appeared to be safe. Ticketmaster declined to comment on this, however.
"Even though Ticketmaster may have been naive in not upgrading their software, the security behind their website appears to be very [good]. It seems that they are hanging the rest of their information behind their website, and this is firewall protected," said Tomlinson, adding that it was very unlikely that anyone attempting to steal credit card information would leave any signs behind.
"If someone hacks for money, they don't leave traces - this site was defaced. But it does shake consumers' confidence and could harm a company's credibility," he added.
Plastic brick theme park Legoland has had its UK website defaced by a hacker who took advantage of an inadequately secured SQL server.
Cyber-vandals are voicing support for Napster, the music file sharing service, as part of a campaign to deface websites across the world.
Websites are getting tooled-up to stop cyber-vandals defacing their homepages.
Microsoft has released a tool to help website operators keep up to date with the numerous security updates for Internet Information Server 5.0.
Intel explains how its Xeon processors can handle data-intensive apps
More thoughts on how servers can help manage overload
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
We chat to Mike Maddison, UK head of Security, Privacy...
Update designed to give mobile users a richer, more personalised...
More thoughts on how servers can help manage overload
Do you agree?
Have your say on this article