Multiple web pages affected, credentials database stolen

Sep 5, 2014 12:58 GMT  ·  By

A group of hackers broke into the online portal of the Azad Kashmir government and proceeded to deface some of the pages, as well as to extract the database with the login credentials.

The incident, carried out in protest to the brutality of the government, occurred earlier this week, but the websites continued to be in disarray until moments ago. A pic of the Police Department’s defaced page is available online, as well as one for the government’s site (Johnny Bravo's pose should be enough of a hint that something is not right).

The entire portal is affected by the attack conducted by Pak Cyber Eaglez (PCE) hacker collective. The pages offer access to the police, law, finance, health, industry, social welfare departments, and even to those related to schools and tourism.

Pak Cyber Eaglez managed to get their hands on the list of access credentials for the portal and dumped them on anonymous document publishing platform Pastebin.

We noticed that none of the passwords were stored unprotected in the database, and all the group could extract are the emails of the owners and the password hashes.

At the moment, the authorities suspended access to the portal and are working to restore the original content, so on many of the affected pages an “under maintenance” message is delivered or the 404 HTTP error is displayed.