It seems that Indian government websites are one of the favorite targets of the Powerful Greek Army, as this time it managed to hack high-profile websites in the country and obtained the passwords of hundreds of users.
Kapustkiy, who describes himself as a security pentester and a member of the Powerful Greek Army, says he gained access to the database of two different websites of the High Commission of India using SQL injection. He eventually managed to obtain credentials from nearly 200 accounts.
The High Commission of Ghana, the High Commission of Finland, and the corresponding website of India were hacked a few hours ago by Kapustkiy, who decided to leak part of the database in order to convince the Indian administrators to fix the vulnerabilities.
Kapustkiy says he decided to hack the page in India after its administrators failed to tighten security and patch vulnerabilities he had identified earlier, helping him gain access to the credentials of hundreds of users.
"I had spoken to Yatin Patel (he runs all these sites) and he promised me a while ago that he would take a look," the hacker said.
“I didn’t send the email because they claimed to have fixed everything which wasn’t true.”
Later, Indian authorities publicly acknowledged the vulnerabilities discovered by Kapustkiy and issued a thank-you note to the security pentester to show their appreciation for helping them address weaknesses that could have exposed website users.
