Not even security providers can protect themselves against cybercriminals

Sep 12, 2011 08:59 GMT  ·  By

The official website of Panda Pakistan was attacked by a hacker who calls himself X-NerD. Not much damage was done, apparently the only reason of the hit was to reveal the weak security measures implemented for its protection.

X-NerD, responsible for attacking more than 250 websites in the past few days, wanted to make a point against the world renowned company.

“OoooOOPss...I am ShockeD At YouR SecuritY..S3cuR!tY L3vEL Z3r0...YOu Dont KnoW HOw To SecurRe Your AsS n Pr0vidinG SEcurity to 0therS...Big LauGh...,“ the attacker wrote on the “Why Panda” page.

According to The Hacker News, one of the members of the Pakistan Cyber Army team was behind the whole thing, this being obvious from the links shown on the modified page.

At the time of this post, Panda Pakistan failed to correct the error, one of the plausible scenarios being that they haven't yet noticed the isolated page.

Panda Security is a leading security solutions provider, in numerous cases bringing innovative developments to the field.

In defense of the company's name, I need to mention that it looks like the Asian country's site was created by an independent web developer team with offices in Pakistan and in the U.K. This isn't quite an excuse, but it needs to be said so that their reputation will not suffer unfairly after the incident.

I don't know if management got word of the attack, but it seems that the link to the Pakistan page will not make the redirect to the required place, instead it takes the user to the home of the main website.

It would be interesting to see if Panda will release an official statement on the matter or if they'll take extra security precautions in the future. Most likely, not much will be said and the issue will remain cataloged as a small stain on the company's fame.