[iwar] Hackers Discuss Retaliatory Cyberstrikes

From: Fred Cohen (fc@all.net)
Date: 2001-09-12 13:45:33


Return-Path: <sentto-279987-1787-1000327631-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Wed, 12 Sep 2001 13:49:13 -0700 (PDT)
Received: (qmail 29770 invoked by uid 510); 12 Sep 2001 20:47:28 -0000
Received: from n29.groups.yahoo.com (216.115.96.79) by 204.181.12.215 with SMTP; 12 Sep 2001 20:47:28 -0000
X-eGroups-Return: sentto-279987-1787-1000327631-fc=all.net@returns.onelist.com
Received: from [10.1.4.55] by b05.egroups.com with NNFMP; 12 Sep 2001 20:47:11 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_3_2_1); 12 Sep 2001 20:47:11 -0000
Received: (qmail 23941 invoked from network); 12 Sep 2001 20:46:22 -0000
Received: from unknown (10.1.10.27) by l9.egroups.com with QMQP; 12 Sep 2001 20:46:22 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta2 with SMTP; 12 Sep 2001 20:46:22 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id NAA04249 for iwar@onelist.com; Wed, 12 Sep 2001 13:45:33 -0700
Message-Id: <200109122045.NAA04249@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Wed, 12 Sep 2001 13:45:33 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] Hackers Discuss Retaliatory Cyberstrikes
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Hackers Discuss Retaliatory Cyberstrikes

By Brian McWilliams, Newsbytes WASHINGTON, D.C., U.S.A., 12 Sep 2001,
3:40 PM CST

Although the U.S.  government has yet to publicly identify suspects in
Tuesday's terrorist attacks on America, some hackers are already
plotting counterstrikes against Islamic Web sites, according to postings
in Internet newsgroups. 

So far, the impact of the planned retaliatory hacking has been limited. 

The official Web site of the Presidential Palace of the Islamic State of
Afghanistan was unreachable today, after its address was published in
several Internet newsgroups. 

"Let the Afghan government know what you think about them harboring Bin
Laden," wrote one participant in talk.guns.politics. 

Similarly, the homepage of the Islamic Republic of Pakistan has been
frequently inaccessible today, despite a statement at the site from
president general Pervez Musharraf condemning the attacks.  The site's
address was posted Tuesday to an Internet newsgroup named
alt.hackers.malicious in a message entitled "Pakistani government LOVES
trojans."

Attempts to reach operators of the two sites, which may be under a
denial of service attack, were unsuccessful. 

The Web site of the Ministry of Foreign Affairs of the Islamic State of
Afghanistan, however, appeared to be fully operational today. 

Federal agents reportedly have taken into custody several people in
three states today who may be connected to the attacks on New York and
Washington, D.C.  But no arrests have yet been announced. 

A message posted to several hacking newsgroups Tuesday instructed
readers to "trash this site ASAP" and provided what the poster claimed
was the address of "Osama Bin Laden's Web site."

The address currently redirects surfers to a page that has "exceeded its
allocated data transfer" according to a message from Yahoo's Geocities
free Web page service. 

According to a statement from the U.S.  State Department, Usama Bin
Muhammad Bin Awad Bin Ladin "is one of the most significant sponsors of
Sunni Islamic terrorist groups."

An article published today at an online news site suggested that
Taleban.com, a Web site registered to an organization in Flushing, New
York, was defaced by a Russian hacker in response to Tuesday's attacks. 

It was not immediately clear, however, when the defacement took place. 
The same hacker also defaced Taleban.com in March and July of this year,
according to records maintained by the Alldas.de and Safemode.org
defacement archives. 

The July defacement of Taleban.com was identical to the one on display
at the site Tuesday, according to James Atkinson of the Granite Island
Group, a firm specializing in technical surveillance counter measures. 

The operators of Taleban.com could not be reached for comment. 

In a statement issued today, the Computer Emergency Response Team said
it is "not seeing any significant increases in incident activity on the
Internet."

The federally funded security information clearinghouse advised,
however, that "recent events might cause people to examine the need to
protect the information infrastructure."

One contributor to a security mailing list offered this advice today to
what he termed "patriotic script kiddies," "If you really want to do
your nation a favor, lock your desktop, then go out and donate blood."

The Ministry of Foreign Affairs of the Islamic State of Afghanistan is
online at http://www.afghan.gov.af . 

The Islamic Republic of Pakistan is at http://www.pak.gov.pk . 

The Presidential Palace of the Islamic State of Afghanistan is at
http://www.afghangovernment.org . 

Reported by Newsbytes, http://www.newsbytes.com . 

15:40 CST

(20010912/WIRES TOP, ONLINE, LEGAL, BUSINESS, ASIA/CRACKER/PHOTO)

                            ) 2001 The Washington Post Company

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Secure your servers with 128-bit SSL encryption! Grab your copy of VeriSign's FREE Guide: "Securing Your Web Site for Business." Get it Now!
http://us.click.yahoo.com/n7RbFC/zhwCAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:41 PDT