First Forensic Forum defaced

The "First Forensic Forum" an open forum for digital forensic practitioners and security professionals has been defaced. Good thing they have no shortage of forensics and security professionals to evaluate the situation and track down the vulnerabilities that were exploited :-).

"S4udi-S3curity-T3rror" wrote: "The F3 For Security Hacked. What's Happened In The world. Thay Are No Security Or What"




It goes to show you this sort of thing can happen even to the best in the field (security professionals).

They were using Zeus webserver at the time.
http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES

Which, oddly enough, seems to have a pretty clean security track record. So it might have been human error (permissions and that sort of thing) or badly written applications. Some of the errors on the website seem to indicate a badly written PHP application.

Warning: main() [function.include]: Failed opening '/content/StartupHostPlus/f/3/f3.org.uk/web/protector_core/modules/protector/include/precheck.inc.php' for inclusion (include_path='.:/usr/local/lib/php') in /content/StartupHostPlus/f/3/f3.org.uk/web/mainfile.php on line 104

And again, he has been keeping himself pretty busy lately:

Results 1 - 10 of about 13 for "S4udi-S3curity-T3rror was here"

S4udi-S3curity-T3rror. Was Here. ====================================================== !!!!! The Global Trust Security Hacked. :\ What Happen In The world ...
www.globaltrustsecurity.us/

S4udi-s3curity-T3rror was here
This Site Was Hacked. By. S4udi-S3curity-T3rror | NorTh Hacker. Don't Scare Just Rename The Index :). =========================================== ...
host.alcaldiadesuareztolima.gov.co/

S4udi-s3curity-T3rror was here
HACKED. Big Error By. S4udi-S3curity-T3rror. --------------------------------------------------. TrusT_Me If You Know The Trust. S4curity@HotMail.Com ...
hamtic.antique.gov.ph/sa.php

You get the picture. From "otdotex.com/s4udi.htm" or "www.scribblers.net/s4udi.php" he seems to change the index.