Back in January, DataBreaches.net reported that Metropolitan State University had acknowledged that they had been hacked. As I reported at that time, a teenage hacker from Australia, who used the Twitter name @Abdilo, had previously claimed in December that he had hacked them via SQL injection, and he thanked them for 22,000 Social Security numbers. They…
Search Results for: abdilo
Aussie teen hacker Abdilo’s home raided, and he’s ordered to turn over his passwords and decryption keys
Will Ockenden and Benjamin Sveen report that the teenage hacker known as “Abdilo” had his home raided by Australian law enforcement in a pre-dawn raid. DataBreaches.net has reported on a number of Abdilo’s claimed hacks, which included an Australian travel insurance company, the University of Sydney, and numerous educational institutions in the U.S. and elsewhere. Most of his…
Update: U. of Sydney hack was by Abdilo; Dozens of others attacked, too
Earlier today, I posted a breach involving the University of Sydney. As an update, DataBreaches.net can now report that the breach was the work of Abdilo, who has made a point of going after universities (as other posts on this site have demonstrated). Abdilo had dropped hints about an Orsee 0day previously. Today, however, he made it clear that this…
Dear EDUCAUSE Security Maillist – some advice from Abdilo
When someone who’s either hacked your databases or is likely to hack them in the future tells you how to prevent his type of attacks, you might want to pay some attention. Seen on Pastebin, as posted by Abdilo: Dear EDUCAUSE Security Mail-list, ( Good luck profiling me <3 ) How to stop me from…
Metropolitan State U. disclosed breach, but what about other .edu targets of Abdilo?
On December 31, a self-described teenage hacker from Australia who calls himself “Abdilo” claimed to have hacked into dozens of education entities by exploiting SQLi vulnerabilities. Metropolitan State University acknowledged they were breached, but what is going on with the other educational entities that were allegedly hacked, too? Abdilo claims that he started attacking .edu sites back in…
Update: David Kee Crees, aka “DR32,” in U.S. custody, trial scheduled for August
In September 2022, DataBreaches reported that Australian national David Kee Crees was going to be extradited from Australia to the U.S. to stand trial on hacking charges. Crees, now 25, has used a number of aliases. DataBreaches had first known him back when he was calling himself “Abdilo,” but he was also known as “DR32,”…