Newsletters
Customer Relationship Management News NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
Home CRM Systems Customer Service Contact Centers Business Intelligence More Topics...
UCS Invicta: Integrated Flash
Deploy flash memory technology to
deliver peak workload performance.

Find out more>>
Network Security
Gartner's #1 for endpoint backup
Average Rating:
Rate this article:  
Russian Hacker Tries To Sell Access to BBC Server
Russian Hacker Tries To Sell Access to BBC Server

By Jennifer LeClaire
December 30, 2013 11:02AM

Bookmark and Share
What can we expect in 2014? The BBC break-in is far from the first time hackers have broken into media servers. David Bills, chief reliability strategist at Microsoft's Trustworthy Computing, said online services across the industry and around the world have experienced service disruptions during the past year -- and he expects this trend to continue.
 


Reports of a Russian hacker who stealthily took over a BBC computer server before Christmas are circulating far and wide. Hold Security first shared details of the hack with Reuters.

Alex Holden, chief information security officer at Hold Security, told Reuters that his "researchers observed a notorious Russian hacker known by the monikers 'HASH' and 'Rev0lver,' attempting to sell access to the BBC server on Dec. 25."

According to the Reuters report, Holden said "HASH" sought to convince high-profile hackers that he had infiltrated the site by showing them files that could only be accessed by somebody who really controlled it, Holden said, noting that his researchers have found no evidence the conversations led to a deal or that data was stolen from the BBC.

Rehashing 2013's Media Hacks

BBC issued a public statement, stressing, "We do not comment on security issues." Justin Clarke, a principal consultant for the cybersecurity firm Cylance, told Reuters that while "HASH" was only offering access to an obscure FTP server not a Web server, some buyers might see it as a steppingstone to more prized assets within the BBC.

"Accessing that server establishes a foothold within BBC's network which may allow an attacker to pivot and gain further access to internal BBC resources," he said.

This is far from the first time hackers have broken into media servers. Earlier in December, hackers hit The Washington Post for at least the third time in the past three years. The Post was more forthcoming than the BBC, disclosing that the extent of the data loss is not clear, but employees had been instructed to change their user names and passwords -- even though they were stored in encrypted form -- based on the assumption that they may have been compromised.

In August, the Syrian Electronic Army hit The New York Times, Twitter and its image server Twimg, among other sites, with a DNS attack. And earlier this year, the SEA targeted The Financial Times, The Guardian and The Associated Press, as well as The Washington Post.

Expect More Attacks in 2014

What can we expect in 2014? David Bills, chief reliability strategist at Microsoft's Trustworthy Computing, said online services across the industry and around the world have experienced service disruptions during the past year -- and he expects this trend to continue.

"Cloud service providers adopting contemporary resilience-enhancing engineering practices like failure mode and effects analysis and programmatic fault injection can help to reduce this trend," he said. "The adoption of practices such as these will help to effectively address the persistent reliability-related device failures, imperfections in software being triggered by environmental change and mistakes made by human beings while administering those services."

Mike Reavey, general manager of Operational Security Assurance at Microsoft's Trustworthy Computing, said as more and more organizations across the industry embrace secure development tools like Microsoft's Security Development Lifecycle, and operations teams mature their processes to become more security-centric with methodologies such as Operational Security Assurance for online services, attackers will be left trying to exploit the seams between development and operations.

"We'll see operational security champions build tighter connections with their developer counterparts. Threat modeling will grow to a broader, more systems-based approach," Reavey said. "And methodologies will become more repeatable and rigorous, borrowing from tried-and-true processes in development such as application threat modeling, and growing similar muscle in operations using continuous monitoring and operational reviews.

"While attackers are already trying to exploit these gaps, many of the pieces for the defense's playbook exist, and we'll see them come together to increase the challenge for attackers."
 

Tell Us What You Think
Comment:

Name:



Get Powerful App Acceleration with Cisco. In a world where time is money, you need to accelerate the speed at which data moves through your data center. Cisco UCS Invicta delivers powerful, easy-to-manage application acceleration for data-intensive workloads. So you can make decisions faster and outpace the competition. Learn More.


 Network Security
1.   Microsoft Ruling Raises Privacy Concern
2.   Twitter Buys Password Manager Mitro
3.   Gov't User Data Requests Skyrocket
4.   Retailers Hacked by New Malware
5.   IBM Beefs Up Identity Intelligence


advertisement
Twitter Buys Password Manager Mitro
Startup to release code as open source.
Average Rating:
Gov't User Data Requests Skyrocket
Twitter: From U.S. and around the globe.
Average Rating:
IBM Beefs Up Identity Intelligence
To offer biz better security products.
Average Rating:


advertisement
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Ruling Against Microsoft Raises E-Mail Privacy Concern
Microsoft has been ordered to hand over e-mails to law enforcers in the United States as part of a criminal investigation, even though the e-mail is stored at a data center in Dublin,Ireland.
 
Twitter Buys Password Manager Startup Mitro
Following on the heels of another acquisition earlier this week, Twitter is adding to its fold a password-manager security startup called Mitro, which in turn is releasing its code as open source.
 
Government Requests for Customer Data Skyrocket
Requests for customer data from the government jumped 50 percent in the first half of 2014, according to Twitter, which received more than 2,000 requests for user info from gov't agencies.
 

Navigation
CRM Daily
Home/Top News | CRM Systems | Customer Service | Contact Centers | Business Intelligence | Sales & Marketing | Customer Data | CRM Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.