Email this article   Print article 


300,000 Iranian IP Addresses Compromised In DigiNotar SSL Hack

By Stefanie Hoffman
September 06, 2011    5:47 PM ET

Page 2 of 2

The hacker said that the attack was in retaliation for the Dutch government’s failure to protect Srebrenica during the Bosnian War.

”I wanted to let the world know that ANYTHING you do will have consequences, ANYTHING your country, anything your country did in past, you have to pay for it,” the hacker said in the pastebin post.

“I thought if I issue certs from Dutch Gov. CA they’ll lose a lot of money,” he added. “When Dutch government, exchanged 8,000 Muslim for 30 Dutch soldiers and Animal Serbian soldiers killed 8,000 Muslims in sameday, Dutch government have to pay for it. Nothing is changed, just 16 years has been passed. Dutch government’s 13 million dollars which paid for DigiNotar will have to go DIRECTLY into trash.”

Fox-IT said it would hand the list of compromised IP addresses to Google so the search giant could inform their users that their e-mail, as well as the login cookies, could have been intercepted.

“Using this cookie, the hacker is able to log in directly to the Gmail mailbox of the victim and also read the stored e-mails. Besides that, he is able to log in all other services Google offers to users like stored location information from Latitude or documents in GoogleDocs,” Fox-IT said.

Fox-IT warned the affected Iranian users that hackers could use the captured information to infiltrate and launch attacks other accounts, and advised them to change their login credentials altogether.

‘Once the hacker is able to receive his targets’ e-mail, he is also able to reset passwords of other services like Facebook and Twitter using the lost password button. The login cookies stay valid for a longer period,” Fox-IT said. ‘It would be wise for all users in Iran to at least logout and login but even better, change passwords.”



<< Previous | 1 | 2

To continue reading this article, please download the free CRN Tech News app for your iPad or Windows 8 device.
Related: Videos | Slide Shows | Comments

SHARE THIS ARTICLE

More Security

Recent Articles

Head-To-Head: Symantec Vs. McAfee In Endpoint Protection

McAfee and Symantec are archrivals with a firm grip on the North American security market. CRN pits both vendors' endpoint security products against each other and names a winner.

The 8 Steps Behind The Massive $45M Cyber Bank Heist

More than $45 million was stolen from banks in the U.S. and 19 other countries in a scheme that law enforcement is calling an international conspiracy to drain millions from bank accounts using stolen debit cards and PIN numbers. Here's how they did it.

Name Of The Game: Top 10 States For Identity Theft

A Federal Trade Commission report provides statistics on identity theft and fraud complaints in 2012. Learn which state has the dubious distinction of having the most victims.

  More Slide Shows




Related Videos
Loading...