Newsletters
Customer Relationship Management News NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
Home CRM Systems Customer Service Business Intelligence Contact Centers More Topics...
Network Security
24/7/365 Network Uptime!
Average Rating:
Rate this article:  
Russian Hacker Tries To Sell Access to BBC Server
Russian Hacker Tries To Sell Access to BBC Server

By Jennifer LeClaire
December 30, 2013 11:02AM

Bookmark and Share
What can we expect in 2014? The BBC break-in is far from the first time hackers have broken into media servers. David Bills, chief reliability strategist at Microsoft's Trustworthy Computing, said online services across the industry and around the world have experienced service disruptions during the past year -- and he expects this trend to continue.
 



Reports of a Russian hacker who stealthily took over a BBC computer server before Christmas are circulating far and wide. Hold Security first shared details of the hack with Reuters.

Alex Holden, chief information security officer at Hold Security, told Reuters that his "researchers observed a notorious Russian hacker known by the monikers 'HASH' and 'Rev0lver,' attempting to sell access to the BBC server on Dec. 25."

According to the Reuters report, Holden said "HASH" sought to convince high-profile hackers that he had infiltrated the site by showing them files that could only be accessed by somebody who really controlled it, Holden said, noting that his researchers have found no evidence the conversations led to a deal or that data was stolen from the BBC.

Rehashing 2013's Media Hacks

BBC issued a public statement, stressing, "We do not comment on security issues." Justin Clarke, a principal consultant for the cybersecurity firm Cylance, told Reuters that while "HASH" was only offering access to an obscure FTP server not a Web server, some buyers might see it as a steppingstone to more prized assets within the BBC.

"Accessing that server establishes a foothold within BBC's network which may allow an attacker to pivot and gain further access to internal BBC resources," he said.

This is far from the first time hackers have broken into media servers. Earlier in December, hackers hit The Washington Post for at least the third time in the past three years. The Post was more forthcoming than the BBC, disclosing that the extent of the data loss is not clear, but employees had been instructed to change their user names and passwords -- even though they were stored in encrypted form -- based on the assumption that they may have been compromised.

In August, the Syrian Electronic Army hit The New York Times, Twitter and its image server Twimg, among other sites, with a DNS attack. And earlier this year, the SEA targeted The Financial Times, The Guardian and The Associated Press, as well as The Washington Post.

Expect More Attacks in 2014

What can we expect in 2014? David Bills, chief reliability strategist at Microsoft's Trustworthy Computing, said online services across the industry and around the world have experienced service disruptions during the past year -- and he expects this trend to continue.

"Cloud service providers adopting contemporary resilience-enhancing engineering practices like failure mode and effects analysis and programmatic fault injection can help to reduce this trend," he said. "The adoption of practices such as these will help to effectively address the persistent reliability-related device failures, imperfections in software being triggered by environmental change and mistakes made by human beings while administering those services."

Mike Reavey, general manager of Operational Security Assurance at Microsoft's Trustworthy Computing, said as more and more organizations across the industry embrace secure development tools like Microsoft's Security Development Lifecycle, and operations teams mature their processes to become more security-centric with methodologies such as Operational Security Assurance for online services, attackers will be left trying to exploit the seams between development and operations.

"We'll see operational security champions build tighter connections with their developer counterparts. Threat modeling will grow to a broader, more systems-based approach," Reavey said. "And methodologies will become more repeatable and rigorous, borrowing from tried-and-true processes in development such as application threat modeling, and growing similar muscle in operations using continuous monitoring and operational reviews.

"While attackers are already trying to exploit these gaps, many of the pieces for the defense's playbook exist, and we'll see them come together to increase the challenge for attackers."
 

Tell Us What You Think
Comment:

Name:



Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.


 Network Security
1.   Tor Working To Fix Security Exploit
2.   Wall Street Journal Hacked Again
3.   Dropbox for Business Boosts Security
4.   Hackers Breached StubHub Accounts
5.   Banks Hit by Android-Skirting Malware


advertisement
Android SMS Worm on the Loose
Malware lets bad actors cash in.
Average Rating:
Tor Working To Fix Security Exploit
Bug reportedly reveals ID of users
Average Rating:
New Technology Defeats Privacy Efforts
Study identifies 3 browser techniques.
Average Rating:


advertisement
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Researchers Working To Fix Tor Security Exploit
Developers for the Tor privacy browser are scrambling to fix a bug revealed Monday that researchers say could allow hackers, or government surveillance agencies, to track users online.
 
Wall Street Journal Hacked Again
Hacked again. That’s the story at the Wall Street Journal this week as the newspaper reports that the computer systems housing some of its news graphics were breached. Customers not affected -- yet.
 
Dropbox for Business Beefs Up Security
Dropbox is upping its game for business users. The cloud-based storage and sharing company has rolled out new security, search and other features to boost its appeal for businesses.
 

Enterprise Hardware Spotlight
Microsoft Makes Design Central to Its Future
Over the last four years, Microsoft has doubled the number of designers it employs, putting a priority on fashioning devices that work around people's lives -- and that are attractive and cool.
 
Contrary to Report, Lenovo's Staying in Small Windows Tablets
Device maker Lenovo has clarified a report that indicated it is getting out of the small Windows tablet business -- as in the ThinkPad 8 and the 8-inch Miix 2. But the firm said it is not exiting that market.
 
Seagate Unveils Networked Drives for Small Businesses
Seagate is out with five new networked attached storage products aimed at small businesses. The drives are for companies with up to 50 workers, and range in capacity from two to 20 terabytes.
 

Navigation
CRM Daily
Home/Top News | CRM Systems | Customer Service | Business Intelligence | Contact Centers | Sales & Marketing | Customer Data | CRM Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.