NullCrew FTS hacked Comcast e-mail servers

<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody> <tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqY6pjM4drRxva66AJn_DBiTiH-Vd_2FBCacbxOTofkChaiT-gmW9aGsuKpcIHAWA9H8swuvpILTIcAMerTMyLsdIHI6oL3zl_et8FyYIkY83x2MoDYTJtNyx1ArZHRNdHwdp2A4l8RFM/s1600/hack.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqY6pjM4drRxva66AJn_DBiTiH-Vd_2FBCacbxOTofkChaiT-gmW9aGsuKpcIHAWA9H8swuvpILTIcAMerTMyLsdIHI6oL3zl_et8FyYIkY83x2MoDYTJtNyx1ArZHRNdHwdp2A4l8RFM/s1600/hack.jpg" width="320" /></a></td></tr> <tr><td class="tr-caption" style="text-align: center;">NullCrew FTS hacked Comcast e-mail servers</td></tr> </tbody></table> A <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">hacking </a>group by the name of <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">NullCrew FTS</a> compromised at least 34 servers belonging to Comcast yesterday. The group <a href="https://www.blogger.com/null" target="_blank">took to Twitter</a> to announce that it has successfully hacked the largest cable company and home Internet service provider in the United States. The group also posted yesterday a <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">Pastebin</a> document containing leaked information as proof, but it has since been removed.<br /> According to the hacking group, all hacked servers fell victim to a single exploit. “<a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">Fun Fact: 34</a> Comcast mail servers are victims to one exploit”, the group tweeted yesterday.<br /> The compromised mail servers apparently run on a groupware email server client called Zimbra, whose Lightweight Directory Access Protocol <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">(LDAP)</a> service contained a local file inclusion vulnerability, which the hackers were able to exploit in order to gain access to the credentials and passwords.<br /> If you haven't heard about <a href="https://www.blogger.com/null" target="_blank">LFI vulnerability</a> before, it occurs due to the use of user-supplied input without proper validation, and allows a hacker to include a remote file, usually through a script on the web server. This can lead to code execution on the web server, sensitive<a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank"> information</a> disclosure, <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">DDos </a>attacks, and more.<br /> Comcast ISP users can access services like payment information, account creation, e-mail settings, and more, through a master account, which is enabled by default, and can be accessed through <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">Zimbra w</a>ebmail. If you are one of those who use the same password across different online services, you should immediately change it.<br /> <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">NullCrew </a>has claimed to have hacked some big names over the years, including Sony, PayPal, Orange Telecom, Ford, and more.

NullCrew FTS hacked Comcast e-mail servers

NullCrew FTS hacked Comcast e-mail servers A hacking group by the name of NullCrew FTS compromised at least 34 servers belonging to Comcast yesterday. The group took to Twitter to announce that it has successfully hacked the largest cable company and home Internet service provider in the United S…

Read more »