The Gantengers Crew, a group of Indonesian hackers, reportedly targeted the website of the Greek banking application development company PCS! According to the same information reported on foreign websites, the Gantengers Crew gained access to the company's web server and altered an internal link by posting content!
PCS is a leading company in the provision of integrated vertical IT systems and services for the broader financial sector. Collaborating with leading global banking organizations for over 15 years, it has unique market knowledge and a very significant number of successful implementations both in Greece and abroad. The company's clients include Alpha Asset Management, Eurobank EFG, ING, Allianz and many others.
The group of Indonesian hackers, probably using a SQL Injection, gained access to the server and proceeded to post content on an internal link.
A screenshot of the attack can be seen below, while the link is still active here.
The website, apart from its corrupted area, does not show any other problem during its operation. However, we estimate that the responsible administrators should IMMEDIATELY take the website out of operation in order to check whether the Indonesian hackers have placed access backdoors or a piece of malicious code that allows them to access the website. Checking for the existence of malicious code is ABSOLUTELY NECESSARY since it can create a spread of malicious software (phishing) to unsuspecting visitors.
Looking for more information about the Gantengers Crew , we found that they are low-level hackers , not having the necessary expertise for high-level attacks, while using common tools available on the Internet to carry out the website alterations. A few weeks ago, they had similarly altered 6 official Ubuntu One domains belonging to Canonical Ltd (see details here ). The Indonesian hackers had carried out a similar attack by uploading a modified page to the company's servers.
The website is purely informative and does not appear to provide any connection to the company's banking applications. Consequently, it does NOT appear that any bank or financial institution customer data has been compromised.
