Security Bullet In
Communiques from the security front, sir
Tuesday 22 July 2008, 4:33 PM
Kaspersky websites hacked while being built
Russian security vendor Kaspersky's nascent Malaysian website has been hacked and defaced.
According to security site Zone-H.org, Kaspersky's website and online shop, which are under construction, were hacked into on Saturday by a hacker calling them self "m0sted".
While Zone-H warned that Kaspersky customers may have been affected, as the websites were linked to the corporate network, Kaspersky told me that no damage could have been done.
"This situation can be compared to a thief breaking into an empty house that is still under construction and has not been yet properly secured," stated Kaspersky. "Breaking in is therefore an easy task, but in such cases there is nothing to steal or damage – the websites are not yet live and are not linked to other Kaspersky Lab corporate websites. We therefore do not believe that this attack could harm users in any way."
Kaspersky added that it was using a third party to host the sites.
According to security site Zone-H.org, Kaspersky's website and online shop, which are under construction, were hacked into on Saturday by a hacker calling them self "m0sted".
While Zone-H warned that Kaspersky customers may have been affected, as the websites were linked to the corporate network, Kaspersky told me that no damage could have been done.
"This situation can be compared to a thief breaking into an empty house that is still under construction and has not been yet properly secured," stated Kaspersky. "Breaking in is therefore an easy task, but in such cases there is nothing to steal or damage – the websites are not yet live and are not linked to other Kaspersky Lab corporate websites. We therefore do not believe that this attack could harm users in any way."
Kaspersky added that it was using a third party to host the sites.
PreviousComments on this post
That analogy of 'thief breaking into a house under construction' gives the impression that they knowingly left their site open to attacks. Whatever the excuse, a breach is a breach, especially for a security company who should know better!
