Cyber Risks · Krebs on Security

Who Built the Syrian Electronic Army?

Summary: Krebs on Security reports that the Syrian Electronic Army, the group behind hijackings of The New York Times and The Washington Post websites, had its own main site hacked after moving its domains to a Russian host following Web.com's seizure of hundreds of Syrian domains. The attacker downloaded the entire user database for sea.sy and syrianelectronicarmy.com, where many top members had reused their site passwords on Hotmail, MSN and Outlook accounts and passwords were stored in plain text.

What's compelling: The group that grabbed headlines by taking over major news sites was undone by plain-text passwords and reused credentials, and the leaked records tied accounts to named individuals in Damascus and Turkey - a reminder that the identity trail behind an intrusion often comes from the attackers' own basic hygiene failures.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related