MicroSoft.com Hacked and Defaced

[Greatis]

Microsoft Press has been defaced this evening by a group named "Outlaw Group". Although the group doesn't seem to have caused much damage, this is clearly an embarassment for Microsoft.com webmasters.

;D ;D ;D

http://img31.photobucket.com/albums/v93/dunejm/mspresshacked.png

Full Story

http://www.theinquirer.net/?article=16120

[deakie]

hahahha....and in there as well.....

A spokesman for Zone-h said the hacker group has been a bunch of busy spotty Herberts. The group was first noticed in December last year when it defaced this Brazilian address, which is a Linux based site. Since then the mob has knocked out over 60 sites.

[kilaj1]

I wonder how much old bill will put out for a reward for these guys

[Greatis]

tell you what kilaj1. When Bill announces this reward we will say it was you and collect the reward on your behalf. :) you all can pm me to discuss the cutting up of the proceeds. ;D ;D ;D

[Chris]

tell you what kilaj1. When Bill announces this reward we will say it was you and collect the reward on your behalf. :) you all can pm me to discuss the cutting up of the proceeds. ;D ;D ;D


Bwoy greatis, you too evil man >:( You'd really do that to your bredrin ???

*pssst ... greatis ... don't forget my cut ... you hear??*

[igodit]

Microsoft admitted that a portion of their UK website was compromised by hackers and defaced.

As can be seen from the screenshot below, the UK press site was replaced with text showing that the site was temporarily taken over by hackers calling themselves the "OutLaw Group". They also left a couple of books on the site, obviously as a dig at the site administrators, one on developing international software, and one on administrating Windows Server 2003.



This isn't great news for Microsoft, who have been pushing the security aspects of Windows Server 2003 hard. Microsoft spokesperson Mui Luc gave us the following statement regarding the security breach:

"Microsoft has confirmed that a page on its UK website that relates to technical text books was briefly replaced by unauthorized content on Monday May 24th.`Microsoft UK quickly regained complete control of the targeted page and is currently investigating the incident."

Mui Luc went on to say that Microsoft do not believe that any customer data was jeopardized as part of the attack. However, for a firm constantly pushing customers to update their Operating Systems with the latest patches and to stay abreast of the latest anti-virus updates, this attack, rumoured to have taken advantage of a months old flaw in Windows Server 2003, is a bit of an embarrassment all round really.

Hopefully they'll learn their lesson and we'll see less of this sort of thing in the future, but we have a suspicion this may not be the case

Source: IT Vibe (http://itvibe.com/default.aspx?NewsID=2544)

[BlackCryptoKnight]

Ouch! :o

[Arch_Angel]

Sounds like the ole "Do what I say, not what i do". ::)

[Chris]

Probably the administrators of the webserver got tired of performing the numerous patches ;D

[jamrock]

Probably the administrators of the webserver got tired of performing the numerous patches

Perhaps BCK can recommend some good patch management software. ;D ;D

[BlackCryptoKnight]

Perhaps BCK can recommend some good patch management software. ;D ;D


;D ;D Imagine me recommending "Service Pack Manager" to M$ instead of SMS ;D ;D

Funnily enough, M$ internal IT group was in Ja maybe a year or 2 ago and were talking about how they used M$ products internally to manage their IT infrastructure and what kinds of challenges they faced. They actually beta test their own stuff live in their own production environments before sending to customers.
When asked whether they used SMS 1.2 (which was a pain to many people at the time) they said "no". They shelved it in favour of some other home grown solution. :D

They seemed to have fixed plenty with the new SMS2003 though. We'll see how that one does ;)