Anti virus firm Kaspersky Labs has had its US website violated by an anonymous hacker who claims to have gained access to the company's customer database. Rushing (shurley Russian? - Ed) to its own defence, Kaspersky dismissed the hack, saying "the vulnerability was not critical and no data was compromised from the site". But the un-named hacker begged to differ with Kaspersky, publishing details of his findings on a website called Hackersblog.org, whilst noting he would not release confidential customer information, because he was just a good guy, trying to point out the gaping security flaws in big rich companies who treat their punters' information so callously. According to the secret security superhero, Kaspersky "doesn't need to worry about us spreading their confidential stuff. Our staff will never save or keep any confidential data. We just point our fingers to big websites with security problems". The hacker's discretion may be a very lucky break for Kaspersky, especially as the hacker boasted he'd been able to gain access to users accounts, activation codes and even personal data, backing up his claims with several screenshots of the different tables available in the database. The hack, which would appear to be nothing more than an SQL injection attack, is even more embarrassing for Kaspersky because almost every single one of the firm's sites has been hacked in the past few years. That's what you call giving the Russian firm a red face. ( www.theinquirer.net )Source
Post a Comment