What Protection! Kaspersky's Site Gets Hacked

[shadow2get]

Source

Nothing is so hilarious as when a security vendor gets its site hacked. All right, we will admit that when ICANN was hacked that was also funny. In this case, Kaspersky, who many say (arguably) has the best security software around, had their Malaysian website hacked (yes, we probably could cut them some slack for the fact it was only their Malaysian site - nah).

“The official Malaysian Kaspersky Antivirus’s website has been hacked yesterday by a Turkish cracker going by the handle of “m0sted”. Along with it, the same cracker hacked also the official Kaspersky S.E.S. online shop and its several other subdomains. The attacker reported “patriotism” as the reason behind the attack and “SQL Injection” as the technical way the intrusion was performed.

Both websites has been home page defaced (sic) as well as several other secondary pages. The incident, though appearing a simple website defacement, might carry along big risks for end-users because from both the websites, evaluation copies of the Kaspersky Antivirus are distributed to the public. In theory, the attacker could have uploaded trojanized versions of the antivirus, infecting in this way the unaware users attempting a download from a trusted Kaspersky’s file repository (remember the trojan in the Debian file repository?).”
SQL injection again? This is the same way that the RIAA's website was wiped clean in January. At the time of this writing, kaspersky.com.my remains offline (it asks for a password).

[amitash]

lol its riddiculously funny

[NucleusKore]

[iNFiNiTE]

OMG ROFL

reminds me of Diya tale andhera? (Shadown under a lamp?)

[ssk_the_gr8]

WTH..
no more buyin Kasspersky

[Cyrus_the_virus]

If you would realize that there are basic differences between server protection and desktop protection, then no one would come to the conclusion that you cannot buy kaspersky anymore because of this.

[coolbuddy]

let we choose the better one...........

[slugger]

not sure why KAV should get a bad name because of this attack.

anti-virus softwares are never expected to offer protection from crackers and script kiddies

[thewisecrab]

LOL
Although it is an irony that the best AV sofware company in the world had its website hacked, I dont see why KIS 2009 it will not remain No. 1 (as far as I know) as website server protection and PC protection are two totally different things just like Cyrus_the_virus said

[Cyrus_the_virus]

Originally Posted by thewisecrab

as website server protection and PC protection are two totally different things just like slugger said

I said that

..
..
.
.

[Faun]

lulz...there are still some good antivirus but people like paid solution

[x3060]

am still on free solution ;avast.

[hellgate]

i'm using Kaspersky 2009 with a free 1yr license and it'll continue to use it even after hearing this.

[MetalheadGautham]

I don't use windows
But when I do, I use Avast! Antivirus Home Edition

[zyberboy]

kav has best protection,but this is sooo funny

[thewisecrab]

Originally Posted by Cyrus_the_virus

I said that

..
..
.
.

Sorry
Changes Made

[Charan]

ok some facts to be cleared here.. first of all its a SQL injection hacking .. this is due to stupid coding by the (lazy) web developer who did the site.. this way of hacking is done when a developer uses literal strings in his SQL query.. this type of hacking is platform/language independent. Fresh developers often find it easy to write literal statements than using parameters which is available in Java & .NET .. dono abt other languages..

In this technique the hacker gives a smartly crafted SQL statement as the search string or input to a text field ( which ever is available ) once he knows abt the vulnerability, all he has to do is just write SQL statements to getinto the database... no hacking tools needed.

This technique can be used to erase the whole database itself..

Please note .. this technique is independent of OS/Language used to host the website. Blame the stupid developer of the website .. not the owner of the site.

[nitish_mythology]

^^Charan
Thanks for the info...
Even if the incident has nothing to do with the antivirus solution.. Its sure to get a bad name for them!

[ico]

Originally Posted by IT Idiot

cool

Seriously, are you a Spambot or something?

[hullap]

Originally Posted by gagandeep

Seriously, are you a Spambot or something?

http://www.thinkdigit.com/forum/sear...nduser&u=42012
^ COOL

[nitish_mythology]

^^hullap
Nice find

[naveen_reloaded]

Is that a web designers prob?

I like kaspersky...

[Charan]

Originally Posted by naveen_reloaded

Is that a web designers prob?

Web develoeper will be a better name web designers only design the webpage.. web developers make dynamic webpages.. Now a days most sites are dynamic webpages.. so there will be lot of coding behind. from what I see the news database got hacked .. but cannot say to what extent the hacker got into.. if he getinto the User database then he could know each and every user's details registered in the site.

[nvidia]

@Charan: Isn't it the same way Rohan hacked Digit Forum? SQL injection?

Seriously, are you a Spambot or something?

Nope.. He is a COOLbot!

[Charan]

^^ I dont remember rohans post.. will search and check ..

edit: I cannot find the thread .. can you link me to it ?

[nitish_mythology]

@Charan is this what you need??

ThinkDigit Site Hacked

[Charan]

Originally Posted by nitish_mythology

@Charan is this what you need??

ThinkDigit Site Hacked

Yes thats the thread .. Thanks

[nitish_mythology]

^^ Charan
Not a big job...... The link was there in the similar threads!!