Black Hat Spammers (NIST Hacked)

by Bruce Brown | 6 Comments

NIST.gov, heidelberg university and others have been hacked by black hat spammers.

Lately I’ve been getting some spam that I consider a special treat.  These are websites that have been exploited and used to promote spammy pharmacy products such as viagra and cialis. 

I am not happy that victims are being used, I’m intriqued on how the spammers managed to get away with it.

This one comes from NIST.gov: 

SPAM Hack of NIST.gov
viagra
http://www.nist.gov/HyperNews/atp/get/collaboration/285/1.html
viagra
[URL=”http://www.nist.gov/HyperNews/atp/get/collaboration/285/1.html”]viagra[/URL]
tramadol
http://www.nist.gov/HyperNews/atp/get/collaboration/288.html
tramadol

I’ve been working with the U.S. Govt for a long time so I am familiar with the NIST.  It is the National Institue of Standards and Technology: “Founded in 1901, NIST is a non-regulatory federal agency within the U.S. Commerce Department’s Technology Administration.” 

When I thought that they might have been hacked, I immediately sent and email to the webmaster.  But unfortunately they rejected my email.
Here is another hack attempt (this one unsuccessful):

UTA.edu
viagra
http://www.uta.edu/HyperNews/get/delgua/158.html
viagra
[URL=”http://www.uta.edu/HyperNews/get/delgua/158.html”]viagra[/URL]
phentermine
http://www.uta.edu/HyperNews/get/delgua/160.html
phentermine

Here is one is what looks like a division of Heidelberg University:

physi.uni-Heidelberg.de
cheap xanax
http://www.physi.uni-heidelberg.de/HyperNewsFachschaft/get/discussion/862.html
cheap xanax
[URL=”http://www.physi.uni-heidelberg.de/HyperNewsFachschaft/get/discussion/862.html”]cheap xanax[/URL]
generic viagra
http://www.physi.uni-heidelberg.de/HyperNewsFachschaft/get/discussion/860.html
generic viagra

email I sent to Heidelberg Universtiy (translated with babelfish):

Hallo,
Ihr Aufstellungsort kann ausgenutzt worden sein:
http://www.physi.uni-heidelberg.de/HyperNewsFachschaft/get/discussion/862.html
Die Person, die dies getan hat, benutzt Ihren Aufstellungsort zu Spam andere Internet-Aufstellungsorte. Traurig über meinen Deutschen. Ich verwende babelfish.altavista.com, um zu übersetzen. Auf Wiedersehen

Here is another attempt on Kryten.murdoch.edu.au 

pacific poker
http://kryten.murdoch.edu.au/HyperNews/get/forums/thal/300.html
pacific poker
[URL=”http://kryten.murdoch.edu.au/HyperNews/get/forums/thal/300.html”]pacific poker[/URL]
cialis
http://kryten.murdoch.edu.au/HyperNews/get/forums/thal/297.html
cialis

As with any exploit, the spammers used a flaw in the webpage to post the data on victims webpages.  The sad thing is that it can happen to anyone.  Security Awareness is really the only defense one can have.
 

I have been getting a lot.  I’ll update this when I get some good one.

6 Comments on Black Hat Spammers (NIST Hacked)

  1. Zelda Willow
    July 14, 2007 at 1:25 am (10 years ago)

    What in the world happened to yo. Zelda Willow.

    Reply
  2. siriuslek
    July 31, 2007 at 1:22 am (10 years ago)

    Hi here how are you? I am newbie in elamb.org so i hope i will get some friends here 🙂

    Reply
  3. Jane
    May 23, 2009 at 11:05 pm (8 years ago)

    invertabrates
    [URL=http://bihoxidoruzej.freeunmeteredhost.com/invertabrates/]invertabrates[/URL]
    meyers snow plow wiring
    [URL=http://penytyhofasis.freeunmeteredhost.com/meyers-snow-plow-wiring/]meyers snow plow wiring[/URL]
    bicycle history
    [URL=http://jykerycevyfuv.justfree.com/bicycle-history/]bicycle history[/URL]
    videos perros cojiendo mujeres
    [URL=http://penytyhofasis.freeunmeteredhost.com/videos-perros-cojiendo-mujeres/]videos perros cojiendo mujeres[/URL]
    level g vocab answers
    [URL=http://penytyhofasis.freeunmeteredhost.com/level-g-vocab-answers/]level g vocab answers[/URL]
    danny mcfly
    [URL=http://jykerycevyfuv.justfree.com/danny-mcfly/]danny mcfly[/URL]
    hi res mugen download
    [URL=http://penytyhofasis.freeunmeteredhost.com/hi-res-mugen-download/]hi res mugen download[/URL]
    verve records
    [URL=http://penytyhofasis.freeunmeteredhost.com/verve-records/]verve records[/URL]
    free habbo coins
    [URL=http://bihoxidoruzej.freeunmeteredhost.com/free-habbo-coins/]free habbo coins[/URL]
    free letter stencil
    [URL=http://penytyhofasis.freeunmeteredhost.com/free-letter-stencil/]free letter stencil[/URL]

    Reply
  4. conference tables
    September 3, 2010 at 1:39 pm (7 years ago)

    Wow! This is a wonderful piece. Do continue. I shall be keenly waiting.

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

Comment *