*Jozzua Notes from a Business and Marketing Strategist/Tactician

21Nov/079

LTO.GOV.PH Website Hacked!

The Land Transportation Office Philippines (LTO.gov.ph) gets hacked by a Turkish hacker named iSKORPiTX.

LTO hacked
(image courtesy of technogra.ph)

As of 8AM this morning, November 21, 2007, the Iskorpitx website hack message was still displayed.

Iskorpitx is notorious for hacking the most websites simultaneously.

Thought to be a 45-year-old Turkish man, Iskorpitx successfully hacked at least 21,549 sites at once (a tally is still being made-expect the final count to be much higher), defacing pages on all of them. His signature included a Turkish flag, his handle and country of origin, and several repetitions of the "f-word" next to the names of France, Greece, and Armanian - SecurityProNews

According to Stokia.com:

...the mass defacement appears to be related in some way to sites registered or hosted through godaddy or secureserver.net.

zone-h.org has text file that contains a list of the defaced sites at http://www.zone-h.org/defaced/list.txt. We have done a whois search on about 30 sites in the list. All show godaddy as the registrar.

The hack seems to have been done through a asp script that is automatically installed on all hosting customers accounts on these particular servers.

The mass defacement was placed in a sub directory on each site. /ssfm/isko.htm

At this time, I'm trying to reach LTO to inform them about the situation. I'll keep you updated.

Filed under: Uncategorized Leave a comment
Comments (9) Trackbacks (1)
  1. Careful, dude. You know what this government does to whistleblowers.

  2. LOL. Nice one Mike.

  3. Whoa. Scary. :P Scarier than google bomb. Ha-ha!

  4. Eeew! Real Scary! Hope he simply overlooks small time websites like mine which doesn’t even appear in traffic rank of Alexa! :)..Glad i didn’t get Godaddy as host!

  5. saw this around 4am.. obvious na walang magawa sa shift hehehe… as of now mukhang back to normal na ulit..

    # Mike Abundo on November 21st, 2007 5:43 am

    Careful, dude. You know what this government does to whistleblowers. — no wonder wala nang silbato mga pulis ngayon =)

  6. Just an update, Ms. Google errr Ms. Apolo got in touch someone from government and informed them of what happened. Seems they have resolved it.

    Peach, GoDaddy came out with a statement that this was a Windows server vulnerability, and they have addressed the situation.

  7. was this turkish hacker ever caught or penalized for the defacement?

  8. No, Arpee, I don’t think he was ever caught.

  9. hehehe..aus…


Leave a comment