Ask Need: comcast

NullCrew FTS hacked Comcast e-mail servers

<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqY6pjM4drRxva66AJn_DBiTiH-Vd_2FBCacbxOTofkChaiT-gmW9aGsuKpcIHAWA9H8swuvpILTIcAMerTMyLsdIHI6oL3zl_et8FyYIkY83x2MoDYTJtNyx1ArZHRNdHwdp2A4l8RFM/s1600/hack.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqY6pjM4drRxva66AJn_DBiTiH-Vd_2FBCacbxOTofkChaiT-gmW9aGsuKpcIHAWA9H8swuvpILTIcAMerTMyLsdIHI6oL3zl_et8FyYIkY83x2MoDYTJtNyx1ArZHRNdHwdp2A4l8RFM/s1600/hack.jpg" width="320" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">NullCrew FTS hacked Comcast e-mail servers</td></tr>
</tbody></table>
A <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">hacking </a>group by the name of <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">NullCrew FTS</a> compromised at least 34 servers belonging to Comcast yesterday. The group <a href="https://www.blogger.com/null" target="_blank">took to Twitter</a>
 to announce that it has successfully hacked the largest cable company 
and home Internet service provider in the United States. The group also 
posted yesterday a <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">Pastebin</a> document containing leaked information as 
proof, but it has since been removed.<br />

According to the hacking group, all hacked servers fell victim to a 
single exploit. “<a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">Fun Fact: 34</a> Comcast mail servers are victims to one 
exploit”, the group tweeted yesterday.<br />

The compromised mail servers apparently run on a groupware email server
 client called Zimbra, whose Lightweight Directory Access Protocol 
<a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">(LDAP)</a> service contained a local file inclusion vulnerability, which the
 hackers were able to exploit in order to gain access to the credentials
 and passwords.<br />

If you haven't heard about <a href="https://www.blogger.com/null" target="_blank">LFI vulnerability</a>
 before, it occurs due to the use of user-supplied input without proper 
validation, and allows a hacker to include a remote file, usually 
through a script on the web server. This can lead to code execution on 
the web server, sensitive<a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank"> information</a> disclosure, <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">DDos </a>attacks, and 
more.<br />

Comcast ISP users can access services like payment information, account
 creation, e-mail settings, and more, through a master account, which is
 enabled by default, and can be accessed through <a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">Zimbra w</a>ebmail. If you 
are one of those who use the same password across different online 
services, you should immediately change it.<br />

<a href="http://askneed.blogspot.com/2014/03/nullcrew-fts-hacked-comcast-e-mail.html" target="_blank">NullCrew </a>has claimed to have hacked some big names over the years, including Sony, PayPal, Orange Telecom, Ford, and more.