Ready for Cyberwar?
Summary: Security vendor Imperva reported a hacker claiming root access to and control over several dot-gov, dot-mil and dot-edu sites, including cecom.army.mil, which he was advertising for $499 payable only in Liberty Reserve virtual currency. Imperva traced the postings to SQL injection vulnerabilities, likely exploited with an automated vulnerability scanner, and said the same hacker was selling personally identifiable information from hacked sites at $20 per 1,000 records.
Key Takeaway: The sites were reportedly breached with SQL injection and an automated scanner, and the seller priced full control of an Army domain at $499 - a figure that tells you how little effort the intrusion was assumed to require. Krebs notes such access is typically bought to plant links to rogue online pharmacies, because search engines treat dot-mil, dot-gov and dot-edu links with more authority than random .com sites.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026