14 DAY TRIAL // Earlier today, a hacker that goes by the name of Hyst3ria (@Hyst3riaKMS) has notified us that he has breached the official website of Romania’s National Authority for Qualifications (anc.gov.ro), a public institution coordinated by the country’s Ministry of Education, Research, Youth and Sports.
As a result of the hack, names, usernames, and passwords, including the ones of the website’s administrators, have been leaked online.
The two administrator passwords are encrypted with the MD5 cryptographic hash function. However, at least one of them can be decrypted within seconds.
As far as user passwords are concerned, they’re all in clear text.
In addition to the data leak, the website’s main page has been defaced by Anonymous hackers $ic@riu$ and The Ass@ss1nat10n Crew.
“All your base are belong to Anonymous,” the hackers wrote on the defaced website. It’s uncertain if the Anonymous hackers have collaborated with Hyst3ria on the attack.
One possible scenario is that they utilized the admin credentials leaked by Hyst3ria to deface the site.
We’ve reached out to the National Authority for Qualifications to see if they can comment on the incident. The post will be updated if they respond to our inquiry.
At the time of writing, the main page of anc.gov.ro was still defaced.
Update. The National Authority for Qualifications' website has been taken offline. The organization's representatives have told Softpedia that they're working on addressing the issue, but they've failed to provide any details.