U Tun Lwin

Chiang Mai (Mizzima) – A Burmese hacker group that targets popular Burmese websites broke into the  Myanmar Climate Change Watch (MCCW) website created by noted meteorologist Dr. Tun Lwin.

The website provides free up-to-date information on climate changes and weather news in Burma.

The hackers, known as the Blink Hacker Group (BHG) , posted a notice on the website that said users’ passwords were kept in plain text format, which undermines user privacy, the group said.

They hacked the website first on March 11 and then posted the warning on the website on Thursday.

The warning directed the website owner to repair the flaw in storing passwords as soon as possible or otherwise ‘BHG would hack and destroy this website’.

More info

———

We informed that vulnerability since last year : critical SQL injection (vulnerability) on Myanmar Climate Change Watch

I don’t know why they hack this kind of website, for revenge ? for promote themselves?  for advertise their news? ;; don’t know at all! Whatever and whoever they are, you should take care your site sand fix as soon as possible when you got alerted security weakness. 🙂

 

 

Explore More

What are the various steps in the pre-attack phase?

In the pre-attack phase, there are seven steps, which have been defined by the EC-Council, as follows: 1. Information gathering 2. Determining network range 3. Identifying active machines 4. Finding

Critical XSS Vulnerability in The New Era Journal http://www.khitpyaing.org

PlanetCreator.Net’s Security Team Member has reported another critical XSS vulnerability on http://www.khitpyaing.org These are some information from Vulneral Site http://www.khitpyaing.org: This vulnerability has been alerted to webmaster: [email protected] Vulnerability Link

Critical SQL Injection (http://www.mysuboo.com)

Today we shall consider the SQL Injection error on the site http://www.mysuboo.com/. Applications: ———— PlanetCreator’s_Universal_Advanced_Internet_Security_T00L System Time: ———— (UTC+08:00) Kuala Lumpur, Singapore, 03/23/2010 01:01:56 AM Site : http://www.mysuboo.com/ SQL Version