Monday, 24 January 2011

Hacker offers access to military, government, educational sites for bargain-basement prices

Security firm Imperva reports that a hacker is selling access to military, educational, and government websites for bargain basement prices ranging from $55-499. Imperva, which reported on the hacker on Friday, believes that he was able to gain access to the sites through a SQL injection technique.

The priciest hack is access to the homepages of the U.S. Army, National Guard, and Army Forces, goes for $499 each. The Department of Defense, surprisingly, is lower-priced, and access only costs $399.

In addition to these and other .mil, .edu, and .gov sites, the hacker is also selling personal data at the going rate of $20 for 1,000 names, addresses, and telephone numbers. As an example, Imperva displays a redacted screenshot of University of Connecticut staff members' information.

The hacker will also scan a site for security vulnerabilities for a mere $2, "hack a normal website" for $10, hack a "high-profile website" for the open-ended $10+, or give a customer 3MB of random hacked accounts for $65.

Truly, this hacker is sort of the Target, or even Wal-Mart of hacks, with a large selection of wares. It's truly frightening, especially with his sale on "normal" websites and person information.