Pentagon E-mail System HACKED

Use Netsparker


The Pentagon got owned pretty hard with 1,500 accounts being taken offline due to a hack attack. For once however they did admit the incident and didn’t try to cover it over or brush it off.

I guess the amount of attacks they get is exponentially more than other networks…but still, I would have thought they should be super secure.

About 1,500 unclassified e-mail users at the Pentagon had their service disrupted yesterday when a hacker infiltrated the e-mail system, forcing the accounts to be taken offline.

In a briefing today with reporters in Washington at the Pentagon, Secretary of Defense Robert M. Gates confirmed the incident and said that the users were disconnected from the system after the intrusion was discovered.

“The reality is that the Defense Department is constantly under attack,” Gates said during the briefing. “Elements of the [Office of the Secretary of Defense] unclassified e-mail system were taken offline yesterday afternoon, due to a detected penetration. A variety of precautionary measures are being taken. We expect the system to be online again very soon.”

The funny thing is the Secretary of Defense himself doesn’t even use e-mail…so I doubt he even noticed what had happened.

Hopefully the government will sharpen up it’s ideas.

Gates said that he was not sure why the 1,500 users were removed temporarily from the system. “Well, I don’t know the answer to that, and they’re still investigating it.”

Gates said he doesn’t use e-mail, so he didn’t know if his account was affected.

“I don’t do e-mail,” he said. “I’m a very low-tech person.”

A spokesman at the Department of Defense late this afternoon said he had no additional information about the incident.

This comes shortly after the GAO (Government Accountability Office) report slamming FBI Internal Security.

Source: Computer World

Posted in: Hacking News

, ,


Latest Posts:


Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.
Eraser - Windows Secure Erase Hard Drive Wiper Eraser – Windows Secure Erase Hard Drive Wiper
Eraser is a hard drive wiper for Windows which allows you to run a secure erase and completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.
Insecure software versions are a problem Web Security Stats Show XSS & Outdated Software Are Major Problems
Netsparker just published some anonymized Web Security Stats about the security vulnerabilities their online solution identified on their users’ web applications and web services during the last 3 years.
CTFR - Abuse Certificate Transparency Logs For HTTPS Subdomains CTFR – Abuse Certificate Transparency Logs For HTTPS Subdomains
CTFR is a Python-based tool to Abuse Certificate Transparency Logs to get subdomains from a HTTPS website in a few seconds.
testssl.sh - Test SSL Security Including Ciphers, Protocols & Detect Flaws testssl.sh – Test SSL Security Including Ciphers, Protocols & Detect Flaws
testssl.sh is a free command line tool to test SSL security, it checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws and more.


13 Responses to Pentagon E-mail System HACKED

  1. gyaresu July 10, 2007 at 9:36 am #

    Well that was bound to happen. Who would like to bet they don’t use keys for email verification hmmm?

  2. SN July 10, 2007 at 12:34 pm #

    That is am amazing story. I wondor what was compromised.

    -SN

  3. backbone July 10, 2007 at 2:52 pm #

    gyaresu, your right… every person would do the same because they would feel secure having there email account on a pentagon server… this is the illusion of security…

  4. gyaresu July 10, 2007 at 11:05 pm #

    Monkeys got nukes. Sigh.

  5. Sandeep Nain July 11, 2007 at 1:46 am #

    and I assumed pentagon must be having the best sysadmin and most hardened servers…. silly me :)

  6. wyatt July 11, 2007 at 3:23 am #

    The pentagon is a joke

  7. gyaresu July 11, 2007 at 4:25 am #

    Great example to show clients. That and the myspace activeX virus from last year.

  8. backbone July 11, 2007 at 12:46 pm #

    no wyatt, there sysadmin is a joke =)

  9. gyaresu July 11, 2007 at 1:02 pm #

    No backbone: ‘their’.

  10. backbone July 11, 2007 at 2:27 pm #

    hey gyaresu, don’t correct me, I am not a native English speaker, so mistakes are accepted :

  11. gyaresu July 11, 2007 at 9:45 pm #

    No offence meant backbone. Just a repetition joke based on correcting the corrector.

    I should have had smileys or similar to make that clear. I apologise.

  12. backbone July 11, 2007 at 9:50 pm #

    It was no offense gyaresu, only I cannot understand ironic jokes in plain-text format… And from the way I replied it doesn’t look as I was offended, I tried making up an excuse for myself for not trying hard to write correctly ;)

  13. gyaresu July 11, 2007 at 10:40 pm #

    Right then. Comments apology war! /smiley