Top 10 hacking groups for the 2nd half of 2015

Every six months, Shodan founder John Matherly publishes a list of the 10 most efficient hacking groups engaged in website breaches.

A few hours ago, it published the third edition of this list, covering the second half of 2015. In first place in the ranking remains the same hacking group as in the previous half, GHoST61, a small group from Turkey.

Compared to the June 2015 edition, only four hacking crews remained in the top 10 along with GHoST61. r00t-x, TechnicaL and virus3033.

The GHoST61 group is not particularly well-known outside of this list as it has not been linked to any major website breaches. As many experts have explained in the past, most of these defacements are almost opportunistic breaches. The groups that carry them out often simply stumble upon unprotected websites while researching larger targets and then simply deface the websites’ infrastructure only to leave behind corruption messages.

According to Mr. Matherly, the most hacked websites run on Ecommerce Organization servers (419 websites), followed by Unified Layer (112) and third GoDaddy (70).

If we talk about server technology, first are servers running Apache Web with 1,584 compromised websites, followed by nginx with 222 and Microsoft's IIS with 111.

Here is the top 10 list for the last three editions. A more detailed report can be found here.