Jul 19, 2011 12:58 GMT  ·  By

A group of hackers that recently leaked information about a GPS tracking system used by German customs officials are threatening to release a large amount of data stolen from servers belonging to the country's federal police.

Two weeks ago a hacking group called n0-N4m3 Cr3w (No-name Crew) published usernames, passwords, phone numbers, license plate numbers, locations, and geographical coordinates related to the PATRAS tracking system used by the country's customs office.

Last week, the Cologne prosecution office announced the arrest of a 23-year-old man for involvement in the data leak. Computer equipment and other evidence was seized from the suspect's apartment.

In response to the law enforcement action, the n0-N4m3 Cr3w threatened to release a lot more data stolen from official computers. The group posted a 700 MB encrypted archive and warned that the password will be published if any of its leading members is arrested.

The archive is said to contain internal emails, confidential information about ongoing investigations, and other sensitive data stolen from the police's network during the past year.

"As the media announced, we have been for some time in full control of the central download server of the Federal Police. Each update of the programs hosted there was infected immediately," the hackers claim.

This suggests the group had numerous trojans installed on official computers belonging to the Federal Police (BPOL) the Federal Criminal Police Office (BKA) and the customs administration.

According to local media, the authorities are taking the claim very seriously and have assembled a ten-person task force to investigate the matter. Some other reports claim that some police servers were set up using the XAMPP package.

This is a bundle that includes Apache, PHP and MySQL installations pre-configured with default values. It is meant for testing only and does not meet the security requirements of production servers.