Anonymous Threat actor group compromised hundreds of websites and destroyed nearly 1 million Israeli based webpages that belong to some of the leading brands including Coca-Cola, ToysRUs, McDonald’s.
This breach also affected some of the leading websites in Isreal including
Ynet and Calcalist where hackers displayed political messages.
Hackers mostly compromised the well-known brand websites that launched for Isreal users such as co.il address -mcdonalds.co.il, cocacola.co.iletc.
A vulnerability that existing the third party accessibility plugin-in called nagich.co.il loaded malicious JavaScript code that corrupted the site and let attackers took advantage to exploit and compromise the millions of web pages.
The
Hundreds of Websites compromised by hackers due to the nagich team lethargic action in order to fix this vulnerability.
Initially, this breach related vulnerability posted by a security researcher Yuval Adam in Twitter where he says nagich script implemented Isreali websites are hacked and displays the following message.
The way Third Party Plugin Abused by Hackers
Since the
It was successfully achieved by taking control of a record on a DNS server of the
Ran Bar-Zik Programmer and a security researcher wrote in “Internet
The
Once we gave permission to other functions then it has an ability to run code on our site means
As soon as the attackers diverted the traffic from the legitimate server to their illegitimate server, they injected malicious code that made defacement, that’s all. Researcher said.
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.