Major Israeli websites hacked

Unprecedented number of Israeli websites hacked: Hundreds of websites were damaged by hackers in recent hours, following IDF activity in the Gaza Strip. The hackers are members of the Moroccan “Team Evil” group, responsible for most of the website damage in Israel in the past year. This is the largest, most concentrated attack on Israeli websites in recent years.
A Ynet investigation revealed that more than 750 Israeli websites, on a number of different domains, were hacked into and damaged in recent days. Prominent among them were the Soldier’s Treasury Bank, Bank Hapoalim (not the main page), Rambam Hospital, the Society for Culture and Housing, BMW Israel, Subaru Israel, Jump Fashion, non-profit organization “Yedid,” Kadima’s youth website, and the Globus Group ticket center. Many of these sites have not yet returned to normal.

Hackers left the message: You’re killing Palestinians, we’re killing servers.

Early on Wednesday, the IDF began operation “Summer Rains” in Gaza: Forces entered the southern end of the strip, adjacent to the

point of Cpl. Gilad Shavit’s kidnap. The air force attacked a power station and blacked out areas of Gaza. Three bridges were bombed in central Gaza, in order to prevent movement of the kidnapped soldier.   Many Israeli websites are hacked every day – most of these are small sites, with inadequate information security. It is significantly different when the sites are ones of large companies, who have adequate defenses from this sort of attack.

Past success of Team Evil

In the past, Team Evil succeeded in hacking into several sites of medium-sized but recognized Israeli companies. In April, they hit tens of sites, including those of the “Shilav” children’s store, “The Blue Square” supermarket and McDonald’s.

The group’s spokesman previously told Ynet that “we are a group of Moroccan hackers that hack into sites as part of the resistance in the war with Israel. We attack Israeli sites every day. This is our duty…hacking is not a crime.”

Added another group member: “We want Israel to stop fighting. Stop killing children and we’ll stop hacking.” According to the spokesman, the group’s members are all Moroccan youths, under the age of 20.

The increase in hacking of websites following military operations is a well-known phenomenon, in Israel and in the rest of the world. A similar increase was seen in attacks on both Israeli and Arab websites in the first days of the second intifada, pursuant to military operations that took place in Gaza, Judea and Samaria at that time.

Read More

Hacker penetrates T-Mobile systems

A sophisticated computer hacker had access to servers at wireless giant T-Mobile for at least a year, which he used to monitor U.S. Secret Service e-mail, obtain customers' passwords and Social Security numbers, and download candid photos taken by Sidekick users, including Hollywood celebrities, SecurityFocus has learned.

 Twenty-one year-old Nicolas Jacobsen was quietly charged with the intrusions last October, after a Secret Service informant helped investigators link him to sensitive agency documents that were circulating in underground IRC chat rooms. The informant also produced evidence that Jacobsen was behind an offer to provide T-Mobile customers' personal information to identity thieves through an Internet bulletin board, according to court records.

Jacobsen could access information on any of the Bellevue, Washington-based company's 16.3 million customers, including many customers' Social Security numbers and dates of birth, according to government filings in the case. He could also obtain voicemail PINs, and the passwords providing customers with Web access to their T-Mobile e-mail accounts. He did not have access to credit card numbers.

The case arose as part of the Secret Service's "Operation Firewall" crackdown on Internet fraud rings last October, in which 19 men were indicted for trafficking in stolen identity information and documents, and stolen credit and debit card numbers. But Jacobsen was not charged with the others. Instead he faces two felony counts of computer intrusion and unauthorized impairment of a protected computer in a separate, unheralded federal case in Los Angeles, currently set for a February 14th status conference.

The government is handling the case well away from the spotlight. The U.S. Secret Service, which played the dual role of investigator and victim in the drama, said Tuesday it couldn't comment on Jacobsen because the agency doesn't discuss ongoing cases-- a claim that's perhaps undermined by the 19 other Operation Firewall defendants discussed in a Secret Service press release last fall. Jacobsen's prosecutor, assistant U.S. attorney Wesley Hsu, also declined to comment. "I can't talk about it," Hsu said simply. Jacobsen's lawyer didn't return a phone call.

T-Mobile, which apparently knew of the intrusions by July of last year, has not issued any public warning. Under California's anti-identity theft law "SB1386," the company is obliged to notify any California customers of a security breach in which their personally identifiable information is "reasonably believed to have been" compromised. That notification must be made in "the most expedient time possible and without unreasonable delay," but may be postponed if a law enforcement agency determines that the disclosure would compromise an investigation.

Company spokesman Peter Dobrow said Tuesday that nobody at T-Mobile was available to comment on the matter.

Source : http://www.securityfocus.com/news/10271

Read More