Re: S4T4N1C Web Defacement

From: HggdH (hggdhat_private)
Date: Thu Feb 13 2003 - 11:43:11 PST

  • Next message: perrierorat_private: "RE: FTP/Port 1038"

    "Esteve Aqui" means "Was Here".
    
    I did a quick search on them, and found
    http://www.brunopr.hpg.ig.com.br/index.htm, which might be Cybers Satans
    home page. I did not go deep -- it runs ActiveX (and I don't), but the
    "Guest Book" has, as first entry "Sat4an1c Br41n". There it is said he/she
    is 15 years old, and that he/she is the author of the web ("foi eu que criei
    porra!" -- "was I that created dammit"). As far as I can remember, the verb
    is slightly wrong...
    
    Now, since it seems this web page is part of a free service provided by
    www.hpg.ig.com.br, then you have one more Id to complain about -- 
    brunoprat_private
    
    Other entries show what might be a list of hacked pages, mostly .gov.xx.
    
    It is highly possible he/she is indeed 15 years old -- leaving traces
    everywhere, valid e-mail addresses, etc. I do not know about Brazil's laws
    on hacking, thou.
    
    ..hggdh..
    ----- Original Message ----- 
    From: "Christopher Lyon" <cslyonat_private>
    To: <incidentsat_private>
    Sent: Thursday, February 13, 2003 02:23
    Subject: S4T4N1C Web Defacement
    
    
    Looks like we just got hit with some web defacement and was just
    wondering if anybody else has seen this. It looks like this is a group
    called Satanic_brain or S4T4N1C_BR41N. I can't tell if anything else is
    going on besides just the defacement but I am still going over the IDS
    stuff and the logs. The few google searches that I did one of the links
    was DoS S4T4N1C_BR41N but I don't think that is the case. Anyway, just
    wanted to see if anybody heard about this.
    
    
    Here is what they added to a .mdb that wasn't secured it looks like.
    Starting: 12/12/2009
    Cybers Satans Esteve Aqui.... By S4T4N1C_BR41N
    satanicbrainat_private #cybers_satans
    
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Feb 13 2003 - 14:04:26 PST