Attacker: MrBrew1337
Target: https://pt-kaltara.go.id
Source: http://www.zone-h.org/mirror/id/41316190
Attacker: ./Outsiders
Target: rdm.mtsn1banyumas.sch.id/wle.t…
Source: https://zone-xsec.com/mirror/id/703475
Attacker: ./Outsiders
Target: ppdb.mtsn1banyumas.sch.id/wle….
Source: https://zone-xsec.com/mirror/id/703474
Attacker: ./Outsiders
Target: elearning.mtsn1banyumas.sch.id…
Source: https://zone-xsec.com/mirror/id/703473
Attacker: ./Outsiders
Target: mtsn1banyumas.sch.id/wle.txt
Source: https://zone-xsec.com/mirror/id/703472
Attacker: fitwilliamx12
Target: kmews.drmc.gov.et/12.html
Source: https://zone-xsec.com/mirror/id/703465
Attacker: MrBrew1337
Target: antrian.pt-kaltara.go.id
Source: https://zone-xsec.com/mirror/id/703464
Attacker: MrBrew1337
Target: eseksi.pt-kaltara.go.id
Source: https://zone-xsec.com/mirror/id/703463
Attacker: MrBrew1337
Target: pt-kaltara.go.id
Source: https://zone-xsec.com/mirror/id/703462
Attacker: Cynn7
Target: lomsak.go.th/headimg/0x.html
Source: https://zone-xsec.com/mirror/id/703460
Attacker: M4K10 R0Y
Target: bayanadraga.khe.gov.mn/upload/…
Source: https://zone-xsec.com/mirror/id/703458
Attacker: M4K10 R0Y
Target: www.mlsp.gov.mn/home01/mlspgov…
Source: https://zone-xsec.com/mirror/id/703457
Attacker: fitwilliamx12
Target: kmews.drmc.gov.et/12.html
Source: https://haxor.id/archive/mirror/214486
Cybersecurity Attack Analysis Report: Government Website Defacements
Introduction
In recent months, several government websites across various countries have fallen victim to cyber attacks, specifically web defacement. These attacks are executed by hackers to alter the visual appearance of the targeted website, often to convey a political message or simply to demonstrate their technical prowess. This report outlines the nature of these attacks and the specific countries and sectors affected.
Overview of Attacks
A total of several government and educational websites were defaced, compromising their integrity and potentially undermining public trust in these digital services. The attackers employed varying techniques, ranging from exploiting vulnerabilities in the website infrastructure to using automated scripts that allowed them to gain unauthorized access.
Victim Countries and Targeted Sectors
The following table summarizes the countries affected and the respective sectors targeted by the attackers:
| Country | Website | Sector |
|——————|————————————————–|————————-|
| Indonesia | https://pt-kaltara.go.id | Government Administration|
| Indonesia | rdm.mtsn1banyumas.sch.id | Education |
| Indonesia | ppdb.mtsn1banyumas.sch.id | Education |
| Indonesia | elearning.mtsn1banyumas.sch.id | Education |
| Ethiopia | kmews.drmc.gov.et | Health |
| Thailand | lomsak.go.th | Government Administration|
| Mongolia | bayanadraga.khe.gov.mn | Government Administration|
| Mongolia | www.mlsp.gov.mn | Government Administration|
| Ethiopia | kmews.drmc.gov.et | Health |
Details of Specific Attacks
1. Indonesia (Various Educational Websites): Multiple educational websites in Indonesia were targeted by the group “Outsiders.” These attacks affected content management systems and disrupted access to educational resources, which may impact students and staff.
2. Ethiopia: The website kmews.drmc.gov.et, which is a health-related government site, was compromised. This could have implications for public health services and the integrity of healthcare information.
3. Thailand: The website lomsak.go.th, representing a government agency, was targeted, showcasing that government portals are increasingly becoming a primary target for hackers.
4. Mongolia: Websites associated with government agencies such as bayanadraga.khe.gov.mn and www.mlsp.gov.mn were also defaced, potentially affecting public trust and the dissemination of governmental information.
Conclusion
The recent spate of web defacements highlights the vulnerabilities present in government and educational sectors across various countries. These attacks not only disrupt services but can also lead to a loss of public confidence in the digital infrastructure that supports essential services. It is imperative for governments to invest in robust cybersecurity measures, regular audits, and staff training to prevent further incidents and protect citizens’ data and trust. Public awareness of cybersecurity is also crucial, as a well-informed user base can act as the first line of defense against such attacks.