HomeSecurity'I hacked Citrix' says Russian hacker w0rm

'I hacked Citrix' says Russian hacker w0rm

'I hacked Citrix' – Hacker 'w0rm' claims to have successfully hacked Citrix's remote assistance system.

Citrix, an American software company specializing in virtualization and cloud computing, has reported a breach of its systems by the Russian hacker, named w0rm.

I hacked Citrix, says Russian hacker w0rm

The w0rm is notorious for several attacks over the past five years on a number of high-profile targets, including the BBC, CNET, Adobe and Bank of America. The identity of the individual or group behind 'w0rm' is unknown.

https://www.secnews.gr/100302/nissan-%CE%BF%CE%B9-anonymous-%CF%84%CE%B7%CE%BD-%CE%B1%CE%BD%CE%B1%CE%B3%CE%BA%CE%AC%CE%B6%CE%BF%CF%85%CE%BD-%CE%BD%CE%B1-%CE%BA%CE%B1%CF%84%CE%B5%CE%B2%CE%AC%CF%83%CE%B5%CE%B9-%CF%84%CE%B9%CF%82/See also: Nissan: Anonymous forces it to take down its websites!

According to a blog post (from Russia), w0rm claims he was able to gain access to Citrix's network content management system via an insecure password. From there, he was able to exploit a number of security holes and gain access to the company's administrative system, including the remote assistance system.

Cyberint, an Israel-based cyber-security intelligence firm, said it identified the hack in October and immediately tried to notify Citrix.

https://www.secnews.gr/100281/hack%CE%AC%CF%81%CE%B5%CF%84%CE%B5-%CE%AD%CE%BD%CE%B1-%CF%83%CF%84%CF%81%CE%B1%CF%84%CE%B9%CF%89%CF%84%CE%B9%CE%BA%CF%8C-drone/See: How to Hack a Military Drone > The manual is available online

According to Elad Ben-Meir, vice president of marketing at Cyberint, the company made repeated attempts to notify Citrix, but received no response. In addition, the hacker w0rm tweeted Citrix with a link to his blog post on October 25, 2015, and reported that he received no response.

According to Ben-Meir, an analysis of the w0rm attack showed that it had gained access to all Citrix clients through the management system. This would have allowed an attacker to potentially bypass the clients' security systems and upload malware unnoticed.

https://www.secnews.gr/100286/trochilus-rat-government-attack/Read also: The Trochilus RAT at the heart of a major attack campaign…

 

 

📧
Subscribe to the SecNews Newsletter

The most important Security & Technology news in your Inbox.

SEARCH

FOLLOW US

📧
Newsletter SecNews
The most important Security & Technology news in your inbox.

LIVE NEWS