Коментар
оттук:
///
Статия от блога на уж хакера, писана вчера! Взех я от кеша на гугъл, тъй като вчера този блог го имаше, но днес – не.
It’s a Bulgarian shop .. for pc games .. 90% of Bulgarian gamers know this website and shop from there .. It’s a simple SQL vulnerability and the website has about 33,000+ users .. lets say I have around 15-20k emails from this website. There are allot of blizzard,steam and allot of high ELO League of Legends accounts(got beef with RIot Games Inc.) + some e-banking accounts .. The admins of the website are NOT aware that they have been hacked you guys are one of the first that know.Why I hacked this website .. well cuz’ I can and many other people can hack it too so let me be the first one to do it.I don’t want to cause chaos or some other bullshit.I just want all the information I can get without anyone knowing.Bulgarian administrators are just dumb and most of them can’t code PHP right.
There’s a picture of one of the shops located in Bulgaria,Varna,Grand Mall(This is not the only pulsar shop in Bulgaria)
Grand-Mall-VARNA
It looks nice ;P right!? But behind all of this are standing dumb people that doesn’t pay much attention to security.
They have port 3389 opened .. they are clearly vulnerable to RDP brute force ddos attack .. but I don’t think I will go this far ,as I said I don’t want to cause any chaos I just want all the information that I can get.The solution for their problem is simple .. Changing the default port from 3389 on your RDS server, or a redirect to their firewall from lets say port 4567 to port 3389 internally would help.
Its just dumb because they have the default port open and USE IT ,hackers(you,me ANYONE) scan for this specifically,but with a different port,they don’t know which port you use.(Im blackhat.)
In my case of view Bulgarian websites have the baddest security of all .. I’ve managed to hack allot of big sites(15-25k+) with just a laptop and a kali linux .. I’ve put allot of effort and time into this message providing all the details and solutions.
I post this message 1-2 months after the hack.
