Skip to main content

One More Black hat act of PCA against Indian Government - My Review in Divyabhaskar

Yesterday I received a call from relevant media resources the a website page of Gujarat High court has been hacked by PCA (Pakistan Cyber Army).

A well known black hat hacker Faisal hacked a page of website and put a message regarding repulsion towards Indian soldiers in Kashmir along with greeting Pakistani hackers. 

They hacked a website page named 'Recruitment' on official website of Gujarat high court. However they neither steal nor delete any data.



As per primary observation this is obvious case of Web defacement. There are various techniques which may use for this act such as 

  • SQL injection 
  • XSS attack 
  • Buffer overflow etc. 
Here we have to learn a recondite lesson that hackers can do anything. I always says "If a hacker decided to enter in you system(or network or anywhere) he will and you can't stop him. You can just make this process hard for him."

We can consider this hacker 'Faisal 1337' as a black hat hacker. There is also a Facebook page on his name. He have quite long list of the websites hacked by him including Shri lanka and Nepal's websites. He also keep record of his complots on facebook page. His major targets are Indian Government websites. Few months ago he hacked Kerala Government website. As a hit back a group of Indian Hackers called Mallu cyber soldiers hacked few websites of Pakistan Government. This kind of turbulence will continue in cyberspace from both side. But yes it is totally unpredictable how serious the next attack will. 

I have shared my opinion to a regional news paper Divyabhaskar along with Mr.Himanshu Kikani - Respected Editor of Cybersafar Magazine. 



http://www.divyabhaskar.co.in/news-srh/MGUJ-AHM-c-69-1250773-NOR.html?seq=3
As of now as part of counter action the website has been recovered and revamped by NICA but we cant say anything how severe threat are hidden for government or defense agencies from these kind of attackers. I will not say what and how to do it but I will just say that now government agencies have to become more activator as well as painstaking regarding this kind of issues. 

Comments

Popular posts from this blog

CIA Triad for- Base of Information security

The essential security principles of confidentiality, integrity, and availability are often  referred to as the  CIA Triad. All security controls must address these principles. These three  security principles serve as common threads throughout the CISSP CBK. Each domain  addresses these principles in unique ways, so it is important to understand them both in  general terms and within each specific domain: Confidentiality is the principle that objects are not disclosed to unauthorized subjects. Integrity is the principle that objects retain their veracity and are intentionally modified by  authorized subjects only. Availability is the principle that authorized subjects are granted timely access to objects  with sufficient bandwidth to perform the desired interaction. Different security mechanisms address these three principles in different ways and offer varying  degrees of support or application of these principles. Objects must be properly classified

List of Company Slogans

·          3M : "Innovation" ·          Agere Systems : "How Communication Happens" ·          Agilent : "Dreams Made Real" ·          Airbus : "Setting the Standards" ·          Amazon.com : "…and You're Done" ·          AMX : "It's Your World. Take Control" ·          Anritsu : "Discover What's Possible ·          AT&T : "Your World. Delivered" ·          ATG Design Services : "Circuit Design for the RF Impaired" ·          ATI Technologies : "Get In the Game" ·          BAE Systems : "Innovating for a Safer World" ·          Ball Corporation : "The Leader in Small Space and Rocket Systems" ·          BellSouth : "Listening, Answering" ·          Blackhawk : "Powering DSP Development" ·          Boeing : "Forever New Frontiers" ·          Bose Corporation : "Better Sound Through Research" ·          Bowers & Wil

My Article :- હેકર બનવું છે? કઈ રીતે?

મારી ૨ વર્ષ ની કારકિર્દી માં મને કેટલાય  લોકોએ, ખાસ કરીને કોલેજ ના વિદ્યાર્થીઓએ ઘણી વાર પૂછ્યું છે કે "મારે હેકર બનવું છે. તો હું શું કરું? " અને મારા બ્લોગ્સ માં પણ પૂછવામાં આવે છે કે એક સારો હેકર કઈ રીતે બની શકાય? એવું હું શું કરું અથવા તો મારા માં કઈ લાયકત હોવી જોઈએ એક હેકર બનવા માટે? આ પ્રશ્ન નો સંતોષકારક જવાબ આપવા માટે મેં internet પર શોધખોળ કર્યા પછી મને જે કઈ માહિતી મળી તેને હું આજે અહી રજુ કરું છું. મિત્રો, સૌપ્રથમ હેકર કઈ રીતે બનવું એ જાણવા પહેલા એ જાણવું જરૂરી છે કે ખરેખર હેકિંગ શું છે ? અને હેકર કોને કહેવાય. હેકિંગ ની સીધી અને સરળ વ્યાખ્યા નીચે મુજબ છે.  "તમારા કમ્પ્યુટર,નેટવર્ક(ઈન્ટરનેટ કે LAN દ્વારા) કે કોઈ ડીવાઈસ માં (ફોન, ટેબ્લેટ) માં કરવામાં આવતા ગેરકાયદેસર પ્રવેશ અને ઉપયોગ એ હેકિંગ કહેવાય છે."અને હેકિંગ કરતા લોકોને હેકર કહેવાય છે. હવે તમને થશે કે આવું શું કામ કરવું જોઈએ? આ તો ક્રાઈમ છે. તો તમને જણાવી દઉં કે હેકર મુખ્યત્વે ૨ પ્રકારના હોય છે.    વાઈટ હેટ હેકર્સ (એથીકલ હેકર્સ) : ધારો કે તમે તમારો ફેસબુક નો પાસવર્ડ ભૂલી ગયા(ખરેખર ના ભૂલતા ક્યારેય..)કે ત