Cyber Risks · Krebs on Security

Syrian Electronic Army Denies New Data Leaks

Summary: The Syrian Electronic Army denied that its Web server was compromised, even as gigabytes of data purportedly taken from the group's site in April 2013 leaked onto Tor hidden services. The archive reportedly includes hundreds of working usernames and passwords for Hotmail, Outlook and Gmail accounts, more than six gigabytes of email messages, and dozens of credential pairs for SEA members' Twitter and LinkedIn accounts.

Key Takeaway: The leak ties the SEA's syrian-es.com administration contact address to Hatem Deeb, a name Vice and NBC News linked to the group's leadership, turning an anonymous hacking crew into named individuals. For defenders, the group's own claim that it keeps nothing sensitive on a public server is the same assumption most organizations make about their exposed infrastructure.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related