For Sale: Government Web Sites at a Bargain

December 21, 2016

We trust that government Web sites are safe and secure with our information as well as the data that keeps our countries running.  We also expect that government Web sites have top of the line security software and if they did get hacked, they would be able to rectify the situation in minutes.  Sadly, this is not the case says Computer World, because they posted an article entitled, “A Black Market Is Selling Access To Hacked Government Servers For $6.”

If you want to access a government server or Web site, all you need to do is download the Tor browser, access the xDedic marketplace on the Dark Web, and browse their catalog of endless government resources for sale.  What is alarming is that some of these Web sites are being sold for as little as six dollars!

How did the xDedic “merchants” get access to these supposed secure government sites?  It was through basic trial and error using different passwords until they scored a hit.  Security firm Kaspersky Lab weighs in:

It is a hacker’s dream, simplifying access to victims, making it cheaper and faster, and opening up new possibilities for both cybercriminals and advanced threat actors,’ Kaspersky said.

Criminal hackers can use the servers to send spam, steal data such as credit card information, and launch other types of attack…Once buyers have done their work, the merchants put the server back up for sale. The inventory is constantly evolving.

It is believed that the people who built the xDedic are Russian-speakers, possibly from a country with that as a language.  The Web site is selling mostly government site info from the Europe, Asia, and South America.  The majority of the Web sites are marked as “other”, however.  Kaspersky track down some of the victims and notified them of the stolen information.

The damage is already done.  Governments should be investing in secure Web software and testing to see if they can hack into them to prevent future attacks.  The Dark Web scores again.

Whitney Grace, December 21, 2016

Comments

Comments are closed.

  • Archives

  • Recent Posts

  • Meta