Hackers break into
MI5 web site
The MI5 web site hack revealed earlier today is unlikely to have caused a breach of national security, according to experts. Skip related content
A report in the Daily Express claimed that a hacking gang known as 'Team Elite' managed to break into the site, and alter it so that "the identity of visitors could be stolen and viruses downloaded on to their machines".
The report also quoted Tory MP Patrick Mercer as saying: "Having potentially highly classified information available to hackers is deeply concerning. The identity of agents and informers in terror groups such as Al Qaeda are held by MI5."
However, Sophos senior technology consultant Graham Cluley explained that the hackers were only able to compromise the details of those visiting the site, rather than any confidential MI5 data locked away in back-office systems.
"Frankly, there's a lack of information in this report to let us know just how big a security problem this was. The good news is that the authorities claim to have fixed the flaw, so visitors to the site are no longer at risk," wrote Cluley in a blog post.
"However, this is a timely reminder for all of us who have web sites - big and small - to make sure they are properly secured from attack."
Cluley recommended users to deploy content scanning technology that can detect whether a legitimate site has been compromised, and that site owners invest in scanning services to alert them if malicious code has been planted on their web pages.
No comments:
Post a Comment