Search This Blog

Powered by Blogger.

Blog Archive

Labels

Showing posts with label TurkishAjan Hacker Group. Show all posts

City of Lansing website hacked and database leaked by TurkishAjan


The City of Lansing, capital of the U.S. State of Michigan, official website(lansingmi.gov) has been hacked by the Turkey hacker group known as TurkishAjan.  The group defaced the website an leaked the database.

The home page(index.jsp) of the website is not affected by the defacement.  Hackers seem to have uploaded the defacement page in "index.html" page. The defacement is still available at "www.lansingmi.gov/index.html".

In case you missed it, you can still check the mirror of the defacement at zone-h record : goo.gl/PnmX6



5.83MB size RAR file has been uploaded in the Speedyshare.  As you can see in the above image, the RAR file contains 20 folders.  Each folder contains few 'xls' files.

After analyzing the files, EHN found the files contain username, email address and plain-text passwords and few other details.

Recently, the same group breached the City of Akron , Akron-Canton Airport  websites and left their home page defaced.

Akron-Canton Airport website defaced and database leaked by TurkishAjan

The Akron-Canton Airport website(www.akroncantonairport.com) currently displays a message stating the website is hacked by the Turkish hacker group called TurkishAjan. 

A security breach was announced from the @TurkishAjan twitter account :
"Akron Canton Airport Hacked. File:http://goo.gl/uE0ZM  Zone:http://goo.gl/1O2vV  @EHackerNews #hack pic.twitter.com/own9t1hcSu"

Defaced page

The link provided in the tweet leads to "Akron Canton Airport.rar"(532kb) file that contains the few documents, xls files and a config.txt file.

The configuration file contains database name, Database username and database password.

While the contest.xls contains less sensitive information such as names and email addresses,  the users.xls file contains user id, email address and encrypted password.

The same group is responsible for the City of Akron website hack.  Following the city of akron security breach, the city filed a police report.  The city is also reportedly working with the FBI.