DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Sri Lanka Media Centre For National Security Hacked, Pathetic Security Exposed

Posted on January 16, 2013 by Lee J

headder Game Over has been at it again, this time @GameOverVirus has tipped us off to an attack that happened a few days ago which has resulted  in shame for Sri Lanka Media Centre For National Security (MCNS) website (www.nationalsecurity.lk).

MCNS, the brainchild of President Mahinda Rajapaksa comes within the purview of Defence Spokesman for the Government and Secretary, Ministry of Defence, is administered by the Director General of the MCNS. Media coordinators of all three Armed Forces, Police & Special Task Force, attached to the Joint Operations Headquarters (JOH), liaise with field formations and work round the clock to ensure speedy collection and dissemination of information.

The attack appears to of happened around the 10th and sadly the effects can still be seen on the site with defacement still live, main site showing maintenance notice and other links to downloads on the server still working. msnc freezepage-gameover The downfall of the Media Centre’s site is due to the fact they have made a silly choice to use a software named cute news as the way of publishing news. Now the fact a national security news website is using this software does not really say to much for the experience of the people hired to build it for them as in the past we have seen smaller scale attacks like this lead to much larger and more embarrassing attacks for Governments around the world. The leak has been published in the format of a txt file with the full configuration file of cute news as well as a list of users that contain usernames, emails and encrypted passwords as well as other server information. Full archive on ozdc.net Deface paga on nationalsecurity.lk or mirror on freeze page


Related:

  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • KT Chief to Resign After Cybersecurity Breach Resolution
  • Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
  • A business's cyber insurance policy included ransom coverage, but when they needed it, the insurer refused to pay. Why?
  • Before Their Telegram Channel Was Banned Again, ScatteredLAPSUS$Hunters Dropped Files Doxing Government Employees (2)
  • Attorney General James Secures $14.2 Million from Car Insurance Companies Over Data Breaches
Category: Breach Incidents

Post navigation

← McGraw-Hill Construction Hacked, 10,000 Credentials Leaked
AU PM Julia Gillard Announces Cyber Security and Safety Program, bCyberWise →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition
  • Did you hear the one about the ransom victim who made a ransom installment payment after they were told that it wouldn’t be accepted?
  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.