What's new

Pakistani server used to hack Indian Army officer’s computer

sudhir007

SENIOR MEMBER
Joined
Jul 6, 2009
Messages
4,728
Reaction score
1
Pakistani server used to hack Indian Army officer’s computer idrw.org

Indian security agencies have tracked a server in Pakistan that was used to hack the computer of an Indian Army major based in the Andamans who is being questioned by the National Investigation Agency (NIA).

According to sources, the computer of the army officer containing some sensitive information was being accessed from two proxy servers.

The location of one the servers has been tracked to Pakistan while there is some confusion over the origin of the other server, which is also likely to be based in that country, the sources said Monday.

They said the actual location of the second server is being examined as the hackers have been using proxy IP addresses through various internet gateways of European countries.

The sources said a forensic report has also pointed out that some key files and e-mails were deleted from the computer after it was seized by authorities.

The army major came under the scanner after a tip-off from US intelligence agencies examining suspicious internet traffic during their probe related to Lashkar-e-Taiba operative David Headley. The American agencies found a user in Andaman and Nicobar Islands dispatching to a computer in Pakistan a picture of a serving Indian brigadier who was attending a training programme in the US.

Indian agencies quickly zeroed in on the officer and a quiet operation was planned to call him to New Delhi. The major has pleaded ignorance.

The army and the defence ministry have ruled out espionage, saying it was a cyber security breach.

However, the NIA is probing if there was a deliberate leak of information from the major’s computer.

Official sources close to the investigation process say the probe till now points towards the violation of stringent Official Secrets Act as the major had over 2,500 defence presentations on his personal computer, much beyond his sphere of work. Some of these files, the sources said, are ’secret and even top secret’.

The computer is currently with the Central Forensic Science Laboratory (CFSL) in Hyderabad.

The major has been called twice to the national capital and has been detained for questioning.
 
Hacking is simple....make a program which can read the files system....trigger an event by a program which PC get connected to internet
and read the file and send the data in form of http packets...the fire wall thinks that user is accessing some website....
DON'T FORGET TO ATTACH IT WITH SOME E-MAIL...
 
Last edited:
This news, good for Pakistan. it shows our telent
 
Hacking is simple....make a program which can read the files system....trigger an event by a program which PC get connected to internet
and read the file and send the data in form of http packets...the fire wall thinks that user is accessing some website....

dear you've made it quite very simple.. :yahoo:
 
Hacking is simple....make a program which can read the files system....trigger an event by a program which PC get connected to internet
and read the file and send the data in form of http packets...the fire wall thinks that user is accessing some website....

making the program is easy part :agree:!

infecting the target system is the main task,achieved by penetrating through layered security depending upon the setup. all the network peeps here would agree how hard it can be to hack in if an industrial strength firewall is configured properly and locked down at a very granular level.

Now the first question should be how the computer was infected? , was it done over the WWW or was the PC physically bugged.

If it was done over WWW how the hacker penetrated stringent defence network.. or is it that the target PC actually visited some malicious honey pot and got infected. (This is very common now a days where a honey pots are setup in DMZ and someone trying to gain access think they hacked in but actually they are only accessing fake server which in turns infects the source.)

Another possibility is where hackers had physical access to the device and they bugged it - so it uploads info to servers whenever user connects to internet.

from my experience i have noticed that most of the times networks / PCs get hacked because proper security is not applied and security policies are not adhered by the end user.
 
This news, good for Pakistan. it shows our telent
Taking into account the security level appiled in indian systems
u pakistani's can neither be proud of or u can claim it as ur talent
Bcoz Even a DTP operator who is not a tech savvy have hacked the indian passport website

see the below news :

To hack a government run website one need not be a tech savvy.
Even a DTP operator can easily hack it and access data. Hyderabad based DTP operator,
G. Lathadhara Rao, has hacked the Indian passport website and has managed to remain hidden for
over four months without anyone knowing it. He managed to get through the Firewalls and gain
access to NIC servers. Rao used to work at an agency to fill client forms online.
During the course of his work, he found bugs in the passport website with the help
of which he could access the NIC server and succeeded in submitting the passport applications
with confirmed dates under the Tatkal scheme even though the dates were yet to be officially released
by the passport authorities.The cyber intrusion was not meant to steal data of Government departments which have their databanks
on NIC servers. The cyber escapade came to light when Hyderabad police busted a gang of seven persons
who were charging a hefty fee for getting confirmed appointments for submitting passport applications
under Tatkal scheme.This incident shows the careless state of security on Government run websites. Luckily, this was a small
time guy trying to make money. It could very well have been case of passport applicants
database being compromised. Imagine, what would have happened with that kind of information in wrong hands.


link:Ordinary man hacks Indian passport website - SiliconIndia
 
NIC is really stupid IT organization.....I dont know why people dying to be the part of NIC.Look at the websites develop by NIC...even a 10 grade student make better then the NIC
 
By now everything must have been changed now.Totally reformatted server with new ip's.Besides the good thing is we've got classified info from indian major.
 

Back
Top Bottom