Pentagon E-mail System HACKED


The Pentagon got owned pretty hard with 1,500 accounts being taken offline due to a hack attack. For once however they did admit the incident and didn’t try to cover it over or brush it off.

I guess the amount of attacks they get is exponentially more than other networks…but still, I would have thought they should be super secure.

About 1,500 unclassified e-mail users at the Pentagon had their service disrupted yesterday when a hacker infiltrated the e-mail system, forcing the accounts to be taken offline.

In a briefing today with reporters in Washington at the Pentagon, Secretary of Defense Robert M. Gates confirmed the incident and said that the users were disconnected from the system after the intrusion was discovered.

“The reality is that the Defense Department is constantly under attack,” Gates said during the briefing. “Elements of the [Office of the Secretary of Defense] unclassified e-mail system were taken offline yesterday afternoon, due to a detected penetration. A variety of precautionary measures are being taken. We expect the system to be online again very soon.”

The funny thing is the Secretary of Defense himself doesn’t even use e-mail…so I doubt he even noticed what had happened.

Hopefully the government will sharpen up it’s ideas.

Gates said that he was not sure why the 1,500 users were removed temporarily from the system. “Well, I don’t know the answer to that, and they’re still investigating it.”

Gates said he doesn’t use e-mail, so he didn’t know if his account was affected.

“I don’t do e-mail,” he said. “I’m a very low-tech person.”

A spokesman at the Department of Defense late this afternoon said he had no additional information about the incident.

This comes shortly after the GAO (Government Accountability Office) report slamming FBI Internal Security.

Source: Computer World

Posted in: Hacking News

, ,


Latest Posts:


HELK - Open Source Threat Hunting Platform HELK – Open Source Threat Hunting Platform
The Hunting ELK or simply the HELK is an Open-Source Threat Hunting Platform with advanced analytics capabilities such as SQL declarative language, graphing etc
trape - OSINT Analysis Tool For People Tracking Trape – OSINT Analysis Tool For People Tracking
Trape is an OSINT analysis tool, which allows people to track and execute intelligent social engineering attacks in real-time.
Fuzzilli - JavaScript Engine Fuzzing Library Fuzzilli – JavaScript Engine Fuzzing Library
Fuzzilii is a JavaScript engine fuzzing library, it's a coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language.
OWASP APICheck - HTTP API DevSecOps Toolset OWASP APICheck – HTTP API DevSecOps Toolset
APICheck is an HTTP API DevSecOps toolset, it integrates existing tools, creates execution chains easily and is designed for integration with 3rd parties.
trident - Automated Password Spraying Tool trident – Automated Password Spraying Tool
The Trident project is an automated password spraying tool developed to be deployed on multiple cloud providers and provides advanced options around scheduling
tko-subs - Detect & Takeover Subdomains With Dead DNS Records tko-subs – Detect & Takeover Subdomains With Dead DNS Records
tko-subs is a tool that helps you to detect & takeover subdomains with dead DNS records, this could be dangling CNAMEs point to hosting services and more.


13 Responses to Pentagon E-mail System HACKED

  1. gyaresu July 10, 2007 at 9:36 am #

    Well that was bound to happen. Who would like to bet they don’t use keys for email verification hmmm?

  2. SN July 10, 2007 at 12:34 pm #

    That is am amazing story. I wondor what was compromised.

    -SN

  3. backbone July 10, 2007 at 2:52 pm #

    gyaresu, your right… every person would do the same because they would feel secure having there email account on a pentagon server… this is the illusion of security…

  4. gyaresu July 10, 2007 at 11:05 pm #

    Monkeys got nukes. Sigh.

  5. Sandeep Nain July 11, 2007 at 1:46 am #

    and I assumed pentagon must be having the best sysadmin and most hardened servers…. silly me :)

  6. wyatt July 11, 2007 at 3:23 am #

    The pentagon is a joke

  7. gyaresu July 11, 2007 at 4:25 am #

    Great example to show clients. That and the myspace activeX virus from last year.

  8. backbone July 11, 2007 at 12:46 pm #

    no wyatt, there sysadmin is a joke =)

  9. gyaresu July 11, 2007 at 1:02 pm #

    No backbone: ‘their’.

  10. backbone July 11, 2007 at 2:27 pm #

    hey gyaresu, don’t correct me, I am not a native English speaker, so mistakes are accepted :

  11. gyaresu July 11, 2007 at 9:45 pm #

    No offence meant backbone. Just a repetition joke based on correcting the corrector.

    I should have had smileys or similar to make that clear. I apologise.

  12. backbone July 11, 2007 at 9:50 pm #

    It was no offense gyaresu, only I cannot understand ironic jokes in plain-text format… And from the way I replied it doesn’t look as I was offended, I tried making up an excuse for myself for not trying hard to write correctly ;)

  13. gyaresu July 11, 2007 at 10:40 pm #

    Right then. Comments apology war! /smiley