SoylentNews is people
SoylentNews
from the brought-to-you-by-security-week...or-is-that-security-weak? dept.
Hacker Uploads Documents to WHO, UNESCO Websites:
A hacker has found a way to upload PDF files to the websites of several organizations, including the World Health Organization (WHO) and UNESCO.
The attack, first reported by Cyberwarzone.com, does not appear particularly sophisticated and its impact is likely low, but the same vulnerabilities could have been exploited by more advanced threat actors for more serious attacks.
The files were uploaded by a hacker who uses the online moniker m1gh7yh4ck3r. A search for "m1gh7yh4ck3r" on Google shows that in recent days they uploaded files to official websites of UNESCO, WHO, the Georgia Institute of Technology, and a Cuban government website.
Georgia Tech and the WHO have apparently removed the files uploaded by the hacker, but the files are still present on the UNESCO and the Cuban government websites at the time of writing.
Reached by SecurityWeek, UNESCO representatives said they will launch an investigation. The WHO and Georgia Tech did not immediately respond to our inquiry.
(Score: 2) by DECbot on Tuesday September 29 2020, @08:55PM (1 child)
m1gh7yh4ck3r?
Which possible American middle schooler might just have family beef against UNESCO, WHO, the Georgia Institute of Technology, and Cuba? I mean whatever did Georgia IoT ever do?
cats~$ sudo chown -R us /home/base
(Score: 2) by c0lo on Wednesday September 30 2020, @01:34AM
Remember kids, the S in IoT stands for security (large grin)
On a serious note, the m1gh7yh4ck3r may not even have specifically targeted the attack, likely he performed a scan for vulns and picked whatever sites happened to be found.
Who knows how many other victims are there, too obscure for Google to index and for the journo to report.
https://www.youtube.com/watch?v=aoFiw2jMy-0
(Score: 2, Interesting) by Anonymous Coward on Tuesday September 29 2020, @08:55PM (5 children)
Someone COMPLETELY forgot to investigate WHAT those PDF's contained?? oh right. No one does journalism anymore. Just sensationalist and unuseful information. Information =/= news.
(Score: 1) by crm114 on Tuesday September 29 2020, @09:18PM (4 children)
Its an interesting question. PDFs can contain macros ... aka executable code.
(Score: 2) by MostCynical on Tuesday September 29 2020, @10:56PM
maybe they were blank..
(..and no one checked the meta-data)
"I guess once you start doubting, there's no end to it." -Batou, Ghost in the Shell: Stand Alone Complex
(Score: 0) by Anonymous Coward on Tuesday September 29 2020, @10:56PM (1 child)
Worse, they may contain the real facts of the UN's 'operations' and 'agenda'.
But yes, the article does not state anything about the content. Too sensitive?
(Score: 2) by Runaway1956 on Tuesday September 29 2020, @11:29PM
Gonna need a steganographer, or maybe a stegosaur, to get to the bottom of those PDFs.
Hail to the Nibbler in Chief.
(Score: 0) by Anonymous Coward on Wednesday September 30 2020, @01:04AM
They can also contain actual executables.
(Score: 0) by Anonymous Coward on Tuesday September 29 2020, @11:56PM (3 children)
(Score: 0) by Anonymous Coward on Wednesday September 30 2020, @12:51AM (2 children)
is this for real?
(Score: 0) by Anonymous Coward on Wednesday September 30 2020, @01:37AM
Use google search and see for yourself.
(Score: 0) by Anonymous Coward on Wednesday September 30 2020, @01:49AM
No, I just made it up. /s