[ISN] Hacker attack on village Web site went unnoticed for months

From: InfoSec News <alerts_at_private>
Date: Thu, 7 May 2009 00:32:34 -0500 (CDT)
http://www.chippewa.com/articles/2009/05/06/news/doc4a01ae5be2dae632955634.txt

By LIZ HOCHSTEDLER
Chippewa Herald
May 6, 2009

Visitors to the village of Lake Hallie Web site could have been 
bombarded with links to explicit sites, but would have had to dig deep 
to find them.

Links to pornographic and explicit Web sites were found imbedded in the 
site, www.villageoflakehallie.us, but the links didn’t show up on the 
pages users normally viewed.

“I’d call it a failed attempt right now because most of the time when 
you’ve seen other sites when they’re hacked, they change the pages,” 
Village President Pete Lehmann said. “If it was a successful hack or 
breach normally that would be the activity.”

However, the more than 200 links do not show on any of the pages. They 
can only be seen by making a specific series of mouse clicks on the site 
that a most users would not normally attempt.

Even Lehmann and interim Police Chief Wayne Nehring had to be carefully 
instructed on how to find the links.

[...]


--
LayerOne 2009, Information Security for the discerning professional. 
May 23-24 2009 @ The Anaheim Marriott in Anaheim, California 
Visit http://layerone.info for more information
Received on Wed May 06 2009 - 22:32:34 PDT

This archive was generated by hypermail 2.2.0 : Wed May 06 2009 - 22:43:33 PDT