The Greek Electronic Army is alleged to have carried out a coordinated cyberattack against a specific service of the Ministry of Infrastructure, Transport and Networks. Specifically , as reported by katohika.gr, hackers with the pseudonym “Greek Cyber Army – Greek Electronic Army” carried out a targeted attack against the Special Service for Public Works and Studies EYDE/MK/EPP.
The Greek hackers, using a weakness that they likely identified in the Service's infrastructure (on the website pa-py.gr), acquired administrator capabilities, extracting data and first altering the main website.
Before the attack/alteration, the website had the following appearance, as depicted in a screenshot they published:
As is evident, until now the website remains corrupted, displaying the following image to every visitor:
The Greek Electronic Army probably installed, using the vulnerability they identified, a known PHP backdoor that allows them to access the server's data.
The service that was targeted is responsible for Public Works, Studies and Constructions in the Peloponnese. The system that the hackers attacked concerns a database ( PHPMyAdmin is clearly installed in the screenshots that were made public).
It is not clear whether the server targeted by the hackers contained sensitive data such as personal data or proposals from competing companies for public works. It is also not clear whether it was an active system or a server used for testing.
It is certain that the responsible administrators must IMMEDIATELY investigate the attack data anddetermine whether the service's internal systems have been affected or data has been intercepted.
We thank katohika.gr and the anonymous reader for the valid and timely information.
