[ubuntu-uk] Website Hacked.....

[Harry Rickards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Lucy wrote:
<snip>
> But, I've just gone to furrycritters.co.uk in a browser (was telneting
> to port 80 before, which gives a different response for some reason)
> and it appears that it's been hacked by a group called CiH_H at CkErZ
> 
> A quick Google gave this website:
> http://www.zone-h.org/archive/defacer=CiH_H@CkErZ
> 
> Which lists a number of sites that have been reported as having been
> hacked by this group. Importantly it lists a mass defacement of sites
> on the same IP address: 213.175.194.16. So, I'd guess that one of
> those 412 sites had a vulnerability, or that someone sniffed the ftp
> connections (or someone had a weak password or ...), and managed to
> infect a number of/all sites.
> 
A google also found me http://students.itb.ac.id/~g-ardana/. itb.ac.id
says it's the 'Institut Teknologi Bandung', and a google for 'g ardana
institut teknologi bandung' turns up with the name 'Gustaf Ardana.' His
twitter profile (http://twitter.com/gustafardana) makes him look like a
typical 1337 k1d h4x0r(trying not to stereotype), and his Facebook
profile (http://en-gb.facebook.com/people/Gustaf-Ardana/1095917833)
confirms he's got something to do with the
http://en-gb.facebook.com/people/Gustaf-Ardana/1095917833. Maybe a
possible suspect?

- --
Many thanks
Harry Rickards (GPG Key ID:58449F6F)

- -----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GAT/GCM/GCS/GCC/GIT/GM d? s: a? C++++ UL++++ P- L+++ E--- W+++ N o K+
w--- O- M- V- PS+  PE Y+ PGP++ t 5 X R tv-- b+++ DI D---- G e* h! !r y?
- ------END GEEK CODE BLOCK------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iJwEAQECAAYFAkpGaB4ACgkQ+9DWHFhEn2/FUwQAtGbKKE1saWEOfmB4geeUI+Fw
tOQdRL7rt67cv5ahG9tCtjRYOFDO0gWF6LlPk0KMU3SDtzrw1xdoeVZ95Kz08vfP
81qbuRRGtiWsqos3Y7fVcdlosOhAIzyBExMFgT9cn4GNo9vS8CrmFo+fgZPu/29I
VswY0K9K2rNo9XHRHGA=
=1fvq
-----END PGP SIGNATURE-----