Internet Hacking and Warfare (IHAW)

Hi

2009-11-04T20:58:00.001-08:00

:)

-sysmon

Nicaragua attacks the Philippines

2009-05-18T17:29:00.000-07:00

The website of the Philippine Airforce was successfully attacked by Nicaraguan forces. The outdated computers of the Airforce (like their aircrafts) "disintegrated" within minutes of the attack.

DSWD site attacked

2009-05-07T17:36:00.000-07:00

This is what the DSWD site looks like now. The defacement is very minor, but after a few seconds the entire site is redirected to another site (see below)

Xavier University - Ateneo de Cagayan

2009-05-06T23:31:00.000-07:00

Websites of the Xavier University in Cagayan de Oro City were defaced. The screencap above is one of the 12 sites of XU defaced since yesterday, the defacement continues as of this posting.

Another .ph site hacked

2009-05-04T18:25:00.000-07:00

Hackers attacking computer manufacturers sites

2009-05-04T18:17:00.000-07:00

First it was HP, now hackers successfully defaced ACER's services website.

Defaced HP website

Defaced Services website of Acer Philippines

IHAW learned that the websites of Asus and MSI were also attacked yesterday.

Primary Structures Corporation

2009-04-27T17:44:00.000-07:00

Another .ph site defaced.

Also, the University Archives of the Ateneo de Manila University was hacked by a group of Turkish hacker. Sources said that the university is still investigating if sensitive data were stolen from the server.

The Abra government website

2009-04-27T17:29:00.000-07:00

IHAW learned that this is just one of the successful attacks of the group against a .gov.ph sites. We are waiting for the additional screencap of other .gov.ph sites defaced by the same group.

guideme.com.ph

2009-04-26T23:49:00.000-07:00

The hacker also successfully defaced the site of a security company based in the Philippines.

Saudi hackers continue to deface .gov.ph sites

2009-04-22T17:21:00.000-07:00

The website of pulilan.gov.ph defaced today by cyberhero of KSA Haxors. Other sites defaced today are pilar.gov.ph, pugo.gov.ph, bangar.gov.ph, pila.gov.ph.

Hack the Vote: The 2010 Elections

2009-04-20T18:41:00.000-07:00

The Commission on Elections (COMELEC) held a pre-bidding conference last month of prospective election systems suppliers for the automation of the May 10, 2010 National and Local Elections.

According to COMELEC, ten firms have already secured the necessary bid documents, including the terms of reference from the COMELEC.

Smartmatic:

Smartmatic Corp. or Smartmatic International is a multinational corporations pecializes in the design and deployment of complex purpose-specific technology solutions including Electronic voting systems, integrated security systems, and biometric systems for people registration and authentication for government applications.

The Electronic Voting system of Smartmatic is calle SAES or Smartmatic Automated Elections Systems it's a direct-recording electronic (DRE) voting system comprising hardware (voting machines), the software operative in same, election management software, and canvassing software for a central location's servers.

SAES technology has been used in seven national elections in Venezuela, USA, Philippines (ARMM) and Curaçao.

The election results in Venezuela was however challenged as tainted with fraud because it showed that Chavez was consitently strong in parts of the country where he had weak support. A Venezuelan mathematican found a "very subtle algorithm" that appear to adjust the vote in Chavez's favor.

Sequoia:

In 2005 Smartmatic acquired Sequoia Voting Systems, one of the leading US companies in the Electronic voting industry.

This company was also controversial because of the March 2006 electoral fiasco in Chicago and Cook County in the United States, where a percentage of the machines involved were manufactured by Sequoia, and Sequoia provided technical assistance on the day. According to Sequoia the tabulation problems were due to human error, as a post-election check identified only 3 mechanical problems in 1000 machines checked. Election officials blamed poor training. A local alderman said the troubles could be due to an "international conspiracy".

BlackBoxvoting.org has reported several issues against Sequoia including: "Someone accessed 40 Palm Beach voting machines in Nov 2004" it reported that "internal logs of at least 40 Sequoia touch-screen voting machines reveal that votes were time and date-stamped as cast two weeks before the election, sometimes in the middle of the night." and it has released a report that says "it has audited 70,000 manual errors and 100,000 computer errors of Sequoia Voting Machines in Palm Beach, FL 2004 Election. "Audit Shows Electronic Voting in Disarray, Thousands of Re-boots, Re-Calibrations Required Throughout Election." (wiki.cp-union.com, Comelec's AES Implementation)

AMA Group Holdings Corp.- Election Systems and Software International Inc.

Read the link and below and decide. ES&S has other issues including unverrifiable programming, undercounts and uncounted votes in US Elections

http://blog.wired.com/27bstroke6/2007/08/dan-rather-inve.html#previouspost

MORE ON THIS...

WANTED: Computer hackers

2009-04-19T19:27:00.000-07:00

The Associated Press (AP) reported that the US Federal authorities are looking for hackers NOT to prosecute them, but to pay them to secure the United State's networks. (http://tech.yahoo.com/news/ap/20090419/ap_on_hi_te/us_cyber_security)

The US government according to the report is looking for people who could "think like the bad guy", and applicants must "understand hackers' tools and tactics and be able to analyze Internet traffic and identify vulnerabilities in the federal systems".

This was already done by the Philippines, reformed(?) hackers are already in the government's payroll but according to some of them, they could not do anything because their "handlers" -- the agency who took them in are clueless on what to do. Only the NBI among all the agencies have a credible cybercrime unit. The hackers are now under a different unit.

A new week starts with .ph sites being hacked

2009-04-19T17:51:00.001-07:00

Again, the sites below where vulnerable because the Sys Ads failed to update and patch their respective servers.

PRC website hacked!

2009-04-16T18:03:00.000-07:00

The website of the Professional Regulation Commission of the Philippines was hacked by a group of hackers that called themselves Fatal Error.

This is the same group that defaced the website of the Department of Trade and Industry (www.dti.gov.ph) and the Department of Science and Technology (www.dost.gov.ph) a few weeks ago.

The group said that the PRC website has multiple vulnerabilities due to unpatched Internet Information Services (IIS). It is also vulnerable to Cross Site Scripting (XSS) attacks.

The hackers, according to them, gave the system administrators tips on how to secure the site to avoid the same problem from happening again.

Hundreds of .gov.ph hacked by Saudi Hackers

2009-04-16T17:28:00.000-07:00

Hackers from the Kingdom of Saudi Arabia (KSA haxors) successfully defaced hundreds of .gov.ph sites today. The defacement is still going on as of this posting.

Below are some of the sites:

Aguilar, Pangasinan

Alitagtag, Batangas

Alilem (where is this place?)

Agno

Agoncillo

Pinoy Badminton website

2009-04-15T18:34:00.000-07:00

The OSIST site of DOST

2009-04-14T17:22:00.000-07:00

One Stop Information Shop for Technologies
"The OSIST is a compendium or collection of technologies ready for transfer and are available on-line. These technologies were generated by the Department of Science and Technology (DOST) and other institutions."

This is the fifth .gov.ph site defaced by "md.root" this week.

Screenshot of BF's website

2009-04-14T00:27:00.000-07:00

This is what happened to Bayani Fernando's website after it was defaced. IHAW thanks bandido for the heads up and the screenshot. More power to you sir.

Immaculate Concepcion Cathedral School of Cubao

2009-04-13T22:51:00.001-07:00

Presidentiable's site hacked

2009-04-13T22:21:00.001-07:00

A computer security enthusiast (I guess) recently informed IHAW that Bayani Fernando's website (http://bayanifernando.com.ph/) was hacked. If you will check the site as of this posting, only the words "under construction" could be seen instead of the smiling face of Bayani Fernando with matching hard hat infront of a huge TV :).

Department of Health Portal

2009-04-13T20:37:00.000-07:00

Another one...

2009-04-13T20:26:00.000-07:00

City of Calamba website

2009-04-13T20:11:00.000-07:00

A reliable source informed IHAW that a government agency is monitoring hackers or group of hackers based in Laguna. Instead of harassing these talented guys I think it is better to seek their help to secure government sites.

Center for Health Development -- a DOH website

2009-04-13T19:42:00.000-07:00

Another one, a recent attack.

Why hackers are successful in attacking government websites

2009-04-13T19:15:00.000-07:00

In an interview dated April 2, 2009 and published in the website of the Philippine Journal an official of the Anti-Transnational Crime Division of the Philippine National Police Criminal Investigation and Detection Group said that 667 government websites were defaced during the five year period (2003-2008).

He also enumerated the hackers who successfully defaced government websites including Rebarz99 crediting him with "six hits during the same period." Rebarz99 is a well known Filipino hacker who was responsible for hacking Philippine government websites like:

National Power Corporation (www.napocor.gov.ph),
Supreme Court of the Philippines (www.supremecourt.gov.ph),
Office of the Ombudsman (www.ombudsman.gov.ph),
National Economic Development Authority (www.neda.gov.ph),
National Computer Center (www.ncc.gov.ph),
Philippine Institute for Developmental Studies (www.pids.gov.ph)
Commission on Information and Communications Technology (www.cict.gov.ph),
Department of Science and Technology (www.dost.gov.ph),
Advanced Science and Technology Institute (www.asti.dost.gov.ph),
The Domain Name Registry of the Philippines (dns.gov.ph)
and there are more...

but hmmm wait that's already a total of TEN government sites successfully hacked by Rebarz99 but the authority quoted in the Philippine Journal report only credited Rebarz99 with SIX. Does this mean that the agency tasked to protect the Philippines' cyber infrastructure does not know the real score?

The claim that only 667 government websites is also erroneous, according to the data gathered by ISAW (http://technews-isaw.blogspot.com) before they went legit, there where 702 Philippine government website defacements in 2006 alone. How come the authorities only recorded only 667 defacements for a period of FIVE years?

So why are hackers successful in attacking government websites? IHAW believes that the authorities tasked to protect the government's cyber infrastructure are clueless.

The proof, the Philippine Journal online quoted the same official saying that PIDS or the website of the Philippine Institute for Development Studies was "hit 28 times", he knew that it was "hit" but he did not do anything about it, go to this link, www.pids.gov.ph/main.htm this hack was done by Rebarz99 in 2006 and you can still see it inside the PIDS website.

Go to WAKOPAKI's blog for more about this (http://wakopaki.blogspot.com/2009/04/linux-is-highly-vulnerable-to-hacking.html)

ADDU website

2009-04-11T16:10:00.001-07:00

Acer websites defaced

2009-04-10T17:34:00.001-07:00

A day after a successful launch of their new products in Australia, hackers defaced Acer's websites in the land down under. Above is one of the defaced sites. Gateway and eMachines websites in Australia were also defaced, both owned by Acer.

Hackers attacking Chinese government websites

2009-04-09T16:27:00.000-07:00

A concerted attack is being launched against Chinese government websites. Hackers from Iran, Indonesia and Israel have successfully defaced hundreds of Chinese government websites in just two days.

Holy Week attacks

2009-04-09T16:17:00.000-07:00

Hackers defaced the sites of Dlink Malaysia, Singapore, Indonesia, India and Vietnam. In the homefront, hackers attacked and successfully defaced the government sites of Sorsogon, Cebu, DOST, DOH (again) and about a dozen more .ph and .edu.ph sites. No sysad could reached in these offices because they are all on vacation for the holy week.

Screenshots will be posted soon.

DOH site

2009-04-05T18:24:00.001-07:00

The website of the Department of Health... as of today. They were informed about this more than a month ago.

Another .gov.ph site defaced

2009-04-05T18:23:00.000-07:00

... when will this end?

Barugo, Leyte government website

2009-04-03T18:00:00.000-07:00

Giving a clerk responsibility to upload contents does not make him a systems administrator. IHAW was informed that aside from typing jobs and occasional errands to the nearest grocery store, clerks of this office are maintaining their website.

Office of Muslim Affairs

2009-04-03T17:52:00.000-07:00

Internet Hacking And Warfare (IHAW) informed the sysads of OMA about this hack a few weeks ago. They removed it thinking that it would not come back. Here it is again now. Removing the hacked page does not mean that you have secured the site boys.

Another one...

2009-04-02T18:29:00.000-07:00

This site has been like this for more than a week now.

Cyberthreat worst than the Abu Sayyaf threat

2009-04-02T17:47:00.000-07:00

The Abu Sayyaf is not capable of launching a massive attack against the government. It is a spent force. The only thing that it could hurt now is the pride of the government officials and they can do this by means of kidnapping the few stubborn volunteers who refused to have military bodyguards. The three were offered protection but they refused... the rest is history.

What I am pissed about is the seeming lack of the government's attention to the Cyberthreat that has been happening since 2005. ISAW or Internet Security And Warfare warned every government agency that cared to listen but they failed. Most ISAW members are now "consultants" of the agencies that they have warned. They have lost their voices and they have lost their abilities to call the attention of the victims because they are now their bosses that pay them.

The government's attention now is with the Abu Sayyaf, a group that could only kidnap and threat or kill a few people. Cyberterrorists were taken for granted, a more dangerous group that could bring this government to its knees.

The government should re-activate ISAW, I know we have some differences with the group but now it's one of the groups that could help them.

PRC

2009-04-02T17:32:00.000-07:00

The site was hacked yesterday. The sysads put the site back just minutes after the attack but the site is still vulnerable to the same exploits.

pampanga.gov.ph -- hackers playground

2009-03-31T20:27:00.000-07:00

Any script kiddie could change the website at will. The security of the site is ZERO.

One of the latest hacks

2009-03-31T19:42:00.000-07:00

S.W.A.T. so far defaced about 20 .gov.ph sites in two weeks, including the one above.

Hacked and ridiculed

2009-03-31T19:03:00.000-07:00

Whew...

We hate to tell you this... BUT WE TOLD YOU SO!

2009-03-31T19:00:00.000-07:00

We were not surprised by the news that government sites have been compromised by foreign hackers. We have been telling those who care to listen over and over again that an accident of gigantic proportion is about to happen in the Philippine information superhighway if they would not act.

We called, we emailed and we informed them thru out contacts but they did not listen.

GAME.

2008-10-19T11:23:00.001-07:00

THIS IS NOT A TEST.

http://en.wikipedia.org/wiki/Man-in-the-middle_attack

Scary but true, and still gives administrator some nasty days.

National Center for Mental Health

2008-09-27T01:02:00.000-07:00

Optical Media Board

2008-09-27T00:58:00.000-07:00

Department of Interior and Local Government

2008-09-27T00:55:00.000-07:00

deputizing ISAW did not do any good

2008-09-27T00:40:00.000-07:00

Taking ISAW in the fold of the government did not do any good as hundreds of gov.ph and thousands of .ph sites where hacked in just seven months after the dissolution of the group.

What happened was ISAW's voice in reporting hacked sites was just silenced, that and nothing more.

IHAW will continute where ISAW left. We will post hacked sites and potentially vulnerable site again here.

Thanks thanks...

email your concern and reports to cyberfriar at gmail dot com

PCCCI site redirected

2008-04-06T05:46:00.000-07:00

The site of the Philippine Chinese Chamber of Commerce and Industry has been redirected to another site.

hacker wrecks havoc to .gov.ph sites

2008-04-06T05:35:00.000-07:00

The hacker behind the defacement of Bancnet has done it again. This time this hacker not only defaced but breached some .gov.ph servers including DOJ, Supreme Court, Senate and the Philippine Government portal.

This store sells hacking and counter hacking books

2008-03-29T17:39:00.000-07:00

NO WE WON'T HACK the BLOG of an HIV Positive gay!

2008-03-29T17:32:00.000-07:00

For the nth time, we won't do it, try ISAW they might help you hahaha.

And by the way mate, the computers in the Internet cafe that you used when you sent those emails have keyloggers :). This means that we have access to your emails and other stuff... whew if only that Aussie know how desperate you guys are...

GMA should step down -- Hackers

2008-03-11T18:28:00.000-07:00

Local hackers joined the call for the resignation of President Gloria Macapagal Arroyo. An email sent to IHAW by a local hacker group said that they have already supplied an opposition senator intercepted emails that could directly pin point the first family including the president of wrongdoings. "We understand that these information are not acceptable in any courts of law, we however believe that these could help the Senate to identify individuals that are knowledgeable in illegal contracts entered to by the government," the email said.

The above screenshot is from Sysmon a former member of ISAW. IHAW believes that Sysmon acted alone on the above "project".

Local hackers tapped for network wars

2008-01-29T16:47:00.000-08:00

Local hackers were asked unofficially by a TV network to passively monitor their site for possible defacement and check their servers for possible leak of information.

A group of legit pinoy hackers was allowed to install a gateway that would filter all outgoing and incoming emails. The filter was designed to flag and immediately re-route suspected emails to the company's top executives before sending them to the recipient. The TV network believes that sensitive information was leaked and that only insiders have access to those information. Data suspected to be compromised include names of employees and ex-employees of the network.

IHAW was informed that the TV network's own IT department blocked all emails that contain the name and the number of the rival network. A wrong move as it turned out that most of the emails that were blocked are legitimate emails. Because of the fiasco it created, the network was forced to UNOFFICIALLY contact a local legit hacker group to fix the mess.

IHAW believes that there are more projects given to the local hacker group because the above task can be done easily by just anybody else in the company.

Another .ph site hacked

2008-01-15T17:13:00.000-08:00

The forum of IPER was hacked. The site is using an outdated version of phpBB, while the latest release of phpBB as of this posting is 3.0.0, the site is still using version 2.0.4. This is another example of hacks that could have been avoided only if the sysdas are doing their jobs.

Sysads should read and subscribe to security mailing lists in order to be updated always NOT outdated!

NOTE: The above is the same problem of about 50 government websites.

Do you think you are safe? Think again

2008-01-15T16:57:00.000-08:00

The website of the company that offers vehicle protection and security thru tracking and monitoring using the web was hacked weeks ago. This company was informed about it but obviously they did nothing to secure their site as it was rehacked for several times this week.

Since the server is insecure, what would make attackers stop from just simply defacing the site? A group of hacker responsible for one of the hacks in the site said that they have found ways to monitor the clients of this company.

Monitoring device and tracker may help you but it can also be used against you especially if your supplier does not care about security.

NO hacking took place in the DOJ website

2008-01-04T21:02:00.000-08:00

I agree with PLDT it was a glitch. No hacking was involved in the recent panic that happened. Below however are real hacks. These people would not really listen, all of these sites were already informed about what happened. They have a couple of days to secure their sites. ISAW already sent the case study to the government on how to secure the sites, we learned that ISAW was informed that it is impossible to secure all these sites because of budget constraints. IHAW will post screencap of hack sites.

The Philippine Air Force Website

Department of Trade and Industry

Development Bank of the Philippines - DCI

DNS server of the Philippine Government

Supreme Court of the Philippines

What's in a name?

2007-12-12T17:44:00.000-08:00

IHAW is now the new ISAW. Due to differences in what we believe in, we have decided to form a new group. While life would be easier now at ISAW because of legitimacy and fundings, we believe that the things that we are doing should be done without somebody looking over our shoulders. Yes, there was a promise of independence but what we are doing borders between the white and the black and could be used against us anytime.

IHAW will continue where ISAW stopped. We will still bring you the news, the warnings, the criticisms and the mockery to those who would not listen.