AT&T, Verizon, US Small Business Administration and a couple of banks have been targeted

Mar 21, 2013 10:12 GMT  ·  By

A few weeks ago, we learned that hackers of the Tunisian Cyber Army and ones from the Al-Qaida Electronic Army were preparing OpBlackSummer, a campaign against the United States.

The hackers claim to have breached several websites, but they say they will not leak any of the data they’ve stolen until May 31, when the campaign is officially launched.

Their latest targets are websites of AT&T and Verizon, on which the hacktivists have found SQL Injection vulnerabilities. They’ve also targeted the sites of Merrimack County Savings Bank (mcsbnh.com), State Bank of Park Rapids (statebankofparkrapids.com), and the US Small Business Administration (sba.gov).

In addition, they also claim to have exploited a cross-site scripting vulnerability on the FBI’s site to trick an administrator into giving them temporary access to a computer from which they’ve downloaded crime reports.

Sabari Selvan of E Hacking News has confirmed that the vulnerabilities identified by the hackers are valid. However, the expert highlights the fact that until the hackers start dumping data, it’s difficult to verify their claims.