Pentagon E-mail System HACKED


The Pentagon got owned pretty hard with 1,500 accounts being taken offline due to a hack attack. For once however they did admit the incident and didn’t try to cover it over or brush it off.

I guess the amount of attacks they get is exponentially more than other networks…but still, I would have thought they should be super secure.

About 1,500 unclassified e-mail users at the Pentagon had their service disrupted yesterday when a hacker infiltrated the e-mail system, forcing the accounts to be taken offline.

In a briefing today with reporters in Washington at the Pentagon, Secretary of Defense Robert M. Gates confirmed the incident and said that the users were disconnected from the system after the intrusion was discovered.

“The reality is that the Defense Department is constantly under attack,” Gates said during the briefing. “Elements of the [Office of the Secretary of Defense] unclassified e-mail system were taken offline yesterday afternoon, due to a detected penetration. A variety of precautionary measures are being taken. We expect the system to be online again very soon.”

The funny thing is the Secretary of Defense himself doesn’t even use e-mail…so I doubt he even noticed what had happened.

Hopefully the government will sharpen up it’s ideas.

Gates said that he was not sure why the 1,500 users were removed temporarily from the system. “Well, I don’t know the answer to that, and they’re still investigating it.”

Gates said he doesn’t use e-mail, so he didn’t know if his account was affected.

“I don’t do e-mail,” he said. “I’m a very low-tech person.”

A spokesman at the Department of Defense late this afternoon said he had no additional information about the incident.

This comes shortly after the GAO (Government Accountability Office) report slamming FBI Internal Security.

Source: Computer World

Posted in: Hacking News

, ,


Latest Posts:


Axiom - Pen-Testing Server For Collecting Bug Bounties Axiom – Pen-Testing Server For Collecting Bug Bounties
Project Axiom is a set of utilities for managing a small dynamic infrastructure setup for bug bounty, basically a pen-testing server out of the box with 1-line.
Quasar RAT - Windows Remote Administration Tool Quasar RAT – Windows Remote Administration Tool
Quasar is a fast and light-weight Windows remote administration tool coded in C#. Used for user support through day-to-day administrative work to monitoring.
Pingcastle - Active Directory Security Assessment Tool Pingcastle – Active Directory Security Assessment Tool
PingCastle is a Active Directory Security Assessment Tool designed to quickly assess the Active Directory security level based on a risk and maturity framework.
Second Order - Subdomain Takeover Scanner Tool Second Order – Subdomain Takeover Scanner Tool
Second Order Subdomain Takeover Scanner Tool scans web apps for second-order subdomain takeover by crawling the application and collecting URLs (and other data)
Binwalk - Firmware Security Analysis & Extraction Tool Binwalk – Firmware Security Analysis & Extraction Tool
Binwalk is a fast and easy to use Python-based firmware security analysis tool that allows for firmware analysis, reverse engineering & extracting of firmware.
zBang - Privileged Account Threat Detection Tool zBang – Privileged Account Threat Detection Tool
zBang is a risk assessment tool for Privileged Account Threat Detection on a scanned network, organizations & red teams can use it to identify attack vectors


13 Responses to Pentagon E-mail System HACKED

  1. gyaresu July 10, 2007 at 9:36 am #

    Well that was bound to happen. Who would like to bet they don’t use keys for email verification hmmm?

  2. SN July 10, 2007 at 12:34 pm #

    That is am amazing story. I wondor what was compromised.

    -SN

  3. backbone July 10, 2007 at 2:52 pm #

    gyaresu, your right… every person would do the same because they would feel secure having there email account on a pentagon server… this is the illusion of security…

  4. gyaresu July 10, 2007 at 11:05 pm #

    Monkeys got nukes. Sigh.

  5. Sandeep Nain July 11, 2007 at 1:46 am #

    and I assumed pentagon must be having the best sysadmin and most hardened servers…. silly me :)

  6. wyatt July 11, 2007 at 3:23 am #

    The pentagon is a joke

  7. gyaresu July 11, 2007 at 4:25 am #

    Great example to show clients. That and the myspace activeX virus from last year.

  8. backbone July 11, 2007 at 12:46 pm #

    no wyatt, there sysadmin is a joke =)

  9. gyaresu July 11, 2007 at 1:02 pm #

    No backbone: ‘their’.

  10. backbone July 11, 2007 at 2:27 pm #

    hey gyaresu, don’t correct me, I am not a native English speaker, so mistakes are accepted :

  11. gyaresu July 11, 2007 at 9:45 pm #

    No offence meant backbone. Just a repetition joke based on correcting the corrector.

    I should have had smileys or similar to make that clear. I apologise.

  12. backbone July 11, 2007 at 9:50 pm #

    It was no offense gyaresu, only I cannot understand ironic jokes in plain-text format… And from the way I replied it doesn’t look as I was offended, I tried making up an excuse for myself for not trying hard to write correctly ;)

  13. gyaresu July 11, 2007 at 10:40 pm #

    Right then. Comments apology war! /smiley