Anonymous is in the hactivists game again this time targeting the South African government, as part of their #OpAfrica initiative.
https://www.secnews.gr/101212/opafrica-anonymous-hacks-against-child-labour/#OpAfrica| Anonymous against Child Labor
The group hacked a database within the Communications and Information Systems department and leaked the names, phone numbers, email addresses, and passwords of more than 1,000 civil servants!
Hackers gained access to an old GCIS portal that had not been updated. South Africa said the vulnerability has been identified and closed.
According to Anonymous, Operation Africa is a dismantling of the businesses and governments that enable and perpetuate corruption on the African continent. Specifically, the hacking group focuses on issues related to child labor and Internet censorship on the continent.
https://www.secnews.gr/99333/%ce%b5%ce%ba%cf%83%cf%84%cf%81%ce%b1%cf%84%ce%b5%ce%af%ce%b5%cf%82-%cf%84%cf%89%ce%bd-anonymous-%cf%80%ce%bf%cf%85-%ce%b5%ce%bd%cf%84%cf%85%cf%80%cf%89%cf%83%ce%b9%ce%ac%ce%b6%ce%bf%cf%85%ce%bd/Anonymous campaigns that impress!
“We are fighting alongside other movements like OpNigeria and AnonymousSA to help free the continent from the scourge of exploitation it has suffered for centuries,” the group said.
Evan Knowles, a South African programmer, said that civil servants could not have made Anonymous' job any easier since these passwords are not secure at all. He said that all 1,471 passwords taken by the hackers from the GCIS data were hashed using the MD5 function and it was trivial to crack 1,116 of them anyway!
https://www.secnews.gr/101322/infocom-2016-ethihak-contest2/btn-large” variation=”btn-info”]Infocom 2016–EthiHak Contest // Did you participate?
In total, there were only 549 unique passwords in the collection of 1,116 passwords. There were nine passwords that had only one letter, and 53.1% of the passwords failed a standard and very basic test (i.e. containing at least one number and being at least 6 characters long). 29.8% of the passwords contained the word "password". 628 passwords (42.7%) were already in plain text and did not even need to be cracked.
Furthermore, 25.2% of users had their name as a password!
The top 10 passwords were: password1, password01, password02, password2, password123, Admin#11, Education2015, Password123, password03 and Password. No imagination and no security!
https://www.secnews.gr/100721/anonymous-%cf%81%ce%af%cf%87%ce%bd%ce%bf%cf%85%ce%bd-%ce%b9%cf%83%cf%84%ce%bf%cf%83%ce%b5%ce%bb%ce%af%ce%b4%ce%b5%cf%82-%cf%86%cf%85%ce%bb%ce%b1%ce%ba%cf%8e%ce%bd-%cf%84%ce%b1%cf%8a%ce%bb%ce%ac%ce%bd/btn-large” variation=”btn-success”]Anonymous takes down 20 Thai prison websites!
