Hacker threatens to release stolen ISP data

Powered by SC Magazine
 

Victim said to be among Australia's largest telcos.

Hackers claiming to have stolen 40GB of data from one of Australia's largest internet service providers are threatening to publish part of the cache in protest against the nation's proposed data retention laws.

The group was involved in the defacement of Queensland Government websites this week and claimed to be associated with Anonymous.

A member told iTnews' sister publication SC Magazine that they would not release user details contained in the stolen data or name the victim telco, which they described as "one of Australia's largest".

The stolen cache was said to be a 40GB database backup that was accessed through an unpatched Adobe ColdFusion vulnerability.

The hacker said the telco found and removed the remote shell they uploaded to the server and patched the vulnerability.

The data was stolen "to prove a lack of security at ISPs and telcos to properly protect the information" that would be stored under the Federal Government's data retention draft policies.

The Government has held talks with internet service providers for the past two years on the proposal, which would mandate providers to store up to two years' worth of a users' online historical data.

The issue returned to the spotlight earlier this month in a public discussion paper that also proposed to provide greater powers to the Government's spy agencies.

Copyright © SC Magazine, Australia


Hacker threatens to release stolen ISP data
 
 
 
Top Stories
Westpac committed to core banking plan
[Blog post] Now with leadership.
 
The True Cost of BYOD - 2014 survey
Twelve months on from our first study, is BYOD a better proposition?
 
Photos: Unboxing the Magnus supercomputer
Pawsey's biggest beast slots into place.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  29%
 
Application integration concerns
  3%
 
Security and compliance concerns
  27%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  22%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  4%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 1145

Vote