1000 web sites defaced in massive defacement by Kebracho Crew of Argentina
Kebracho, a hacking crew from Argentina, compromised a Solaris web server hosted by ROOT-DNS.COM at SITESTREAM.NET( how appropriate) and was able to deface 1000+ web sites in a 'massive' mass defacement that is close to setting a record for most defacements in a single compromise at a single hosting company. I noticed that the folks at ROOT-DNS.COM were smart enough to not put their own web site on this poorly secured, sardine packed web hosting server. UPDATE: Since posting this article, Kebracho have now defaced another server at SITESTREAM.NET operated by PUBLICHOST.COM. This compromise only resulted in four sites being defaced : hackertronics.com, internet-help.org, internet-help.net and undergroundculture.com. SITESTREAM.NET reports they have reverted to backups to restore the sites and believe they have everything in order...
According to the records kept at AllDas.de, this is only the fifth time that the Kebracho team has reached out to deface a web site and the record shows no particular pattern to their choices or the types of operating systems that they prefer to compromise.
12/08/2001
001hq.com
mirror
Solaris
Massdefacement
08/07/2001
ututo.org
mirror
Linux
none
25/05/2001
www.bmark.com.tw
mirror
Linux
none
17/05/2001
www.renar.gov.ar
mirror
Windows
Massdefacement
L33tdawg: AllDas.de and SafeMode had not yet captured a copy of the defacement that was left on the 1000 defaced sites when this article was being prepared. A copy off one of the web sites and has been attached and the list of 1000+ web sites that were defaced during this compromise has also been included.
-------- Defacement Begins ---------
root@kebrachoHQ:~# telnet 216.34.231.40
Trying 216.34.231.40...
Connected to 216.34.231.40.
Escape character is '^]'
login: root
Password: ***************
Last login: Tue Jul 24 20:10:09 from labs.kebrachohq.com.ar
[root@stats-01-001 /]# echo "dr_fdisk^ cyberpiquete my ass"
dr_fdisk^ cyberpiquete my ass
[root@stats-01-001 /]# seejpeg mentor.jpg
[root@stats-01-001 /]# logout
Connection to 216.34.231.40 closed.
-------- Defacement Ends ----------------
001hq.com
1800ourdish.com
1ibs.com
1st-class-homes-texas.com
1st-financial.com
2001financialnewsletter.com
2002wintergamesparkcityproperties.com
2rosesstudios.com
3dcreativeservices.com
3d-virtual-mall.com
a1unitedtransmissions.com
aaaautoglassco.com
aaagopainter.com
aaahousingq8.com
aab-inc.net
abc-dental.com
abclittleschools.com
abdservices.com
abeadingfrenzy.com
aboutaustin.com
absi.org
a-corporate-christmas-gift.com
acrylicinnovations.com
acsaa.com
acucommerce.com
acu-web.com
adamisanob.com
adconner.com
advancedgroupplans.com
advertisingpromostore.com
africanswingers.com
afterhourspoolandspa.com
aircargoexpediting.com
airdallasinstruments.com
airlinegraphics.com
airlinelimousa.com
air-spec.com
ais.ca
akenaiview.com
aldarsystems.com
al-don.com
aljassim.net
allaboutarbitron.com
alliedcraftsman.com
alliedlift.com
alliedroofing.net
allrightplumbing.com
allstarnametags.com
alltecengravers.com
ambiguousclothing.com
americandatabanque.com
americanmedia.com
americanpine.com
americantoolandfastener.com
ameri-tex.com
anaheimdesertinn.com
ancellin.com
angelcityentertainment.com
anti-rocker.com
antlab.net
anwhat.com
any-cruise-travel.com
anythingforbaby.com
aocfoods.com
aplusfoundationrepair.com
applejackhollow.com
approvedmobilehome.com
aquaticshop.com
architectural-salvage.com
arisatsute.com
arizonacleanfuels.com
arlingtonfinancial.com
artglassltd.com
art-on-anything.com
astarproduction.com
atbuildersinc.com
atcapri.com
atinman.com
atinvestments.com
atomcast.net
atouchofflash.com
atrinc.net
audiotechnology.com
australianlobstertails.com
availableresources.com
avlelevator.com
avm-radio.org
axzis.com
ayurmedic.com
b2bservices.net
baccvending.com
backyardbarbeques.com
bagsandwrap.com
bakerbrothersinstall.com
bakervegas.com
bamboo2000.com
bamboodrumsticks.com
barbsworld.com
barryhowardlimited.com
bashawinc.com
bboxmagazine.net
bedshopkw.com
beingsintouch.com
bentlog.com
berkshirehealthcare.com
bestboxcompany.com
bestlabs.com
best-router-bits.com
bhtechnologies.com
bid4cure.com
biggsnoopdoggradio.com
billquateman.com
biogifts.net
birdscopies.com
bluebonnetpestcontrol.com
bluec-store.com
blueridgearch.com
blueskyymassage.com
bluewaterfun.com
bmslab.com
bnm-us.com
boathousecanoeskayaks.com
boattown.com
bomoptimizer.com
booksizepcs.com
bootycallxxx.com
bphpartners.com
branson.yourworlhost.com
bravoevents-online.com
bridgingofthespirit.com
brightfuturefoundation.com
brightfuturefoundation.org
brightstarfoundation.com
brookhavenmga.com
bsgbenefits.com
buckhornbilliards.com
bucknergarcia.com
buckyscasino.com
buddymiles.com
buildersblinds.com
bwseminars.com
cadley.com
cadnetinc.com
cafedorocappuccino.com
caferacer.com
cafesolo.com
californiawildlifecenter.org
callthecow.com
camelotarmor.com
camien.com
canaancentertech.com
canvascosmetics.com
capitalfa.com
carstips.com
cartipsandmore.com
cashregisters.ws
casinopartydallas.com
cassanova2000.com
catcreek.com
catimesystems.com
catsonly.net
ccf-law.com
ccvolleyball.net
cdcardsplus.com
cdinfomercials.com
centralroof.com
ceramics.seeleys.com
chameleonfunds.com
champagnefurniture.com
championfancorp.com
charliezen.net
charlottekemp.com
checkmy401k.com
chinsurance.cc
choice-mortgage.com
chori-america.com
christopherdesigns.com
cierraaircompressor.com
classiccarsofdallas.com
cleanproduction.org
cmcmotocross.com
coachinthebox.com
coffeecastlenv.com
coffeenewsatlanta.com
colorado-whitewater.com
comavision.com
comfortfactory.com
commonwealthinstitute.org
connect2angels.com
consignnet.com
construction-expert.com
contactlive.com
convertibletopsonline.com
coolercenter.com
copanmayafoundation.org
cornermusic.com
corporategiftboxes.com
corumwatches.com
cosmeticdentistrydallas.com
coulterglass.com
courtyardcandles.com
cowboycoins.com
cr-ad.com
craftix.com
crbryce.com
creatiful.com
creativebrain.net
credit-card-counseling.com
crestlimo.com
crmetro.com
croninfinancial.com
cubberly.com
curtisexcavating.com
customersbol.com
cybernetqueen.com
d2ronline.com
dalecasper.com
dallaspi.com
dallas-pools.com
dallas-preschool.com
dallas-tennis.com
dameonroman.tv
danceusadance.net
danielconstructionco.com
dare-to-be.com
darkblueproductions.com
darnallfundraising.com
darq8.com
darrellposey.com
dataaire.com
datatelecomproducts.com
davealexander.com
dccdallas.com
ddddd.com
ddresortproperties.com
dealmakerssouth.com
deborahbeverlyhills.com
deer-valley-vacation-homes.com
defoggi.com
demodomain.com
dennydoherty.com
dentalassist.org
denverdj.com
desertspringspools.com
designerbaskets.com
designextensions.com
develop-photography.com
devtest.sitestream.net
dfwbilliards.com
dicevanlines.com
digitaldimension.net
digitalvis.com
dischargedebts.com
ditechnology.com
diversegolf.com
divestsc.com
dmoproductions.com
domainateria.com
domainsbyauction.com
dontcallmeotter.com
dontmasturbate.com
dontmesswithtexas.org
door-tite.com
dothost.com
dotla.com
douglasfab.com
download.v8venom.com
drais.net
dresserconsulting.com
drhhomes.com
dricophotography.com
drkmedical.com
drmoy.com
drsusanblock.com
dryaker.com
dsor.com
dtcboard.org
dthreedesigns.com
dtmrealestate.com
dura-tech.com
dwc.to
eagleoil.com
earth2net.com
eastbaygolfclub.com
easternenvironmental.com
easterseals-kankakee.org
easydnatest.com
e-cubegraphix.com
egochallenge.net
ehteasley.com
eigercm.com
ejequipment.com
e-lasvegasrealestate.com
elegantfloralandevent.com
eleventhirteen.com
elranchofe.com
e-lumbershop.com
emagdnim.com
e-mailcontrol.net
empireworldservices.com
endeavor2000.com
enetworkelectric.com
enterprisemachinerysalesinc.com
entertainmentink.com
e-pssinc.com
ericgleason.com
esportz.net
esportz.org
estatelawman.com
estreamvideo.net
etiquetteforoutlaws.com
etrancemission.com
eu-iti.com
executiveflyers.com
expresstrak.com
extremeimprovements.com
eyesonhold.com
ezlocks.com
fansandfriends.com
fantasizeme.com
farleygraphix.com
fatefulparallels.com
fcaaustin.org
features.ridinthewave.com
ferf.com
fickes-engineering.com
field-marketing-professionals.com
findacosmeticdentist.com
findadvd.com
firestack.com
firstandlastwivesclub.com
fishnet.cc
fivestarexhibits.com
fivethreedesign.com
flexersgym.com
floweryholidays.com
foamdo.com
fossees.com
foxpowerequipment.com
freestyleskatepark.com
frisk-me.com
frontpagereallysucks.com
frontsoft.com
fs-gd.com
fun-on-wheels.com
galaxykitchens.com
gameofwork.com
gardeninacan.com
gascity.net
gearmonkey.net
genelex.com
generalsyouthfootball.com
georgiaclosingattorney.com
getcheats.com
ghettoblueprint.com
gicins.com
giftcardmall.com
gigantor.org
gitgold.net
glazelockshims.com
gnr8.net
gobigentertainment.com
godsgenerals.org
gold-in-pa.com
golfladies.com
gonzocom.com
gounitrax.com
greatchoiceinc.com
greatpeninsula.org
greenforesttemple.org
greenweave.com
growmore.com
gslsolutions.com
guaranteedwaterproof.com
guideschool.com
gwinnettbizconnection.com
gworksphotographic.com
hackertronics.com
haddawaymusic.com
hadleytest.com
harborpublications.com
hargravefoundation.com
harlowsharlots.com
hautestuffla.com
haynesstewart.com
hdinteriordesign.com
healthanddna.com
healthy-4life.com
heatforkids.com
heavenla.com
helicoptersparesinc.com
helpuside.com
hereistheanswer.com
herpfood.com
herpshop.com
hesenviro.com
hgs.org
highlandfire.com
hillcomm.com
hilltoptrailersinc.com
hiltonpiano.com
hofmannsausage.com
hollyporn.com
homeinhawaii.net
homelightstore.com
hondaofglendale.com
horning-intl.com
hostingaffiliate.com
hoststream.net
hubbysfirstclass.com
hughesfiles.com
hurstranch.com
iafca.com
ibahosting.com
ibcwebst.com
ibijband.com
icra.cc
iddiet.com
iexc.net
ifanz.net
iguanaking.com
ihps.net
iigkw.com
illinoisnsa.com
iloveshoe.com
indianaustin.com
indianhouston.com
indyballroom.com
infinitevisionnet.com
infoscapes.com
insideoutint.org
insitelearning.net
integratedmediasystems.com
intelli-baby.com
intellier.com
internet-help.net
internet-help.org
internetmediadevelopment.com
investordefender.com
ironbed.org
ironwoodbuildersinc.com
irvingrkatz.com
islma.org
isprinters.com
ivichosting.com
jaykogen.com
jdtropheus.com
jeanstestdomain01.com
jeantestingwithoutstream.com
jeffbackerministries.org
jeffdevlin.com
jeffdivinephoto.com
jeffniemi.com
jeffreyburr.com
jeffreylburr.com
jensen1.com
jerusalemprayer.org
jessesellshomes.com
jhiara.com
jigsawevents.com
jillnovick.com
jim-evans.com
jodyvilandre.com
joesgarage.com
joesorren.com
joewashingtonspeaks.com
johnbelmont.com
johnkingsley.com
johnwright.com
jokeland.com
jonnyshouse.com
junktemp.com
jupiterpcplus.com
justicegalleries.com
justinsweet.com
justnoles.com
justwideshoes.com
kairoscorp.com
kankakeefair.org
karaokecharlie.com
katharinewright.com
kcarweb.com
kdscomputers-demo.com
kennyssolutions.com
keystowork.com
kfnnlive.com
khayal.shop4domain.net
kiltedmadman.com
kingfishmedia.com
klein-tools-at-bobstools.com
knightcalls.com
koehlerwinery.com
ktstfm.com
laffcmh.com
lalichresources.com
larrysrvs.com
laserdiscshop.com
lasupply.com
lasvegasesthetics.com
leadmgmtservices.com
lenawald.com
leopardzone.com
lesicka.com
lextran.com
lifesavertips.com
lilslavender.com
lilywhite.com
lindasalvin.com
linexjp.com
littlecrowtoys.com
liveunsigned.com
lizasnyder.com
lockwoodchevrolet.com
log-beds.net
logicalfirstaid.com
logoprints.com
lonestarsupplies.com
lonniehaskins.com
loudmouthdesign.com
love2jump.com
luciezolcerova.com
lumenessence.com
luxurioushomesoflasvegas.com
madcreations.com
madingo.com
magicbyrandy.com
magnoliaglen.com
mallternative.com
maltvault.com
mandetv.com
mangogrits.com
mapleandassociates.com
maritimelifevideo.com
marketingbywhirlwind.com
marriottanaheim.com
martini-shots.com
massachusettswebdesign.net
matman.net
mavcorporateservices.com
mbeinstitute.org
mbk1.com
mdtransfer.com
media-enterprises.com
melsgifts.com
mercurypress.com
metal-arte-internet.com
meticulousservices.com
mgas.net
mgiproducts.com
michaelpinkus.com
mikegoulian.com
millcreekcoffeeroasters.com
millerhoney.com
milligannews.com
mindgame.tv
mitchellvideo.com
mkwebworks.com
mmcc.com
mobile-comm.net
moffiestudio.com
moldstrikelabs.com
moonstomp.net
mouassa.com
movingtothemoon.com
mrcarpetshopathome.com
mrgreenscomics.com
mrtaxinternational.com
mvseeds.com
myartteacher.com
mycentralbank.com
myshoplifter.com
mysticangel.com
mytimepatterns.com
nachosautoupholstery.com
nadahot.com
napavalleyweddings.com
nationaloutrage.org
nationhost.com
nazko.com
nbdmkt.com
nbidrivers.com
needforspeedmotorsports.com
neighborhoodhouseonline.org
neonjelly.com
netlistingshosting.com
netricinc.com
nevadafilm.com
nevadafoot.com
nevadaonshoretrust.com
never2naughty.com
nevermind-jean.com
newyorkflat.com
newzoid.com
nexo.com.bo
nexsmart.com
nglogistic.com
nightcallsoflasvegas.com
nitrorecords.net
norcrossfurniture.com
normanwilson.com
normdecker.com
northeastsnowboarding.com
northfultonexterminating.com
nrnetaccess.com
nrnetmail.com
nrnet.net
oakdalehigh.com
oc-aa.org
ociabc.com
ocpreschool.org
odfenterprise.com
oflonline.com
oldetimefarmshow.com
oletaadams.com
onesourcestaffing.org
onestopgospel.net
only-natural-progesterone.com
onthepiperacing-promo.com
orionmonitoring.com
orthodontist-tustin.com
ourayglassworks.com
ouraymountainrescue.com
overeasymedia.com
pa-gold.com
pandoraendeavors.com
parashaunt.com
passable.com
pathfindersinc.com
pattersonbowl.com
paulshermanassociates.com
peotone.com
pepeserna.com
perkinson.cc
phirstgospel.com
photos-by-parker.com
phpal.com
piclife.com
piedpiperpestpatrol.com
piedpiperwaterproofing.com
pierpointeinn.com
pikespeakhunt.com
pinnaclecapitalmanagement.net
pinnica.com
pioneerpestcontrol.net
pittbuilding.com
planetrascals.com
plannersindex.com
planners.net
playmatesonly.com
playstring.com
pointofsalepos.net
pointofsalesystems.org
polarusa.com
polyglottic.com
porta-safe.com
possoftware.org
postfactory.com
potterlawoffices.com
poulsbobakery.com
powerhousetool.com
praesidiuminc.com
preconstruction.com
premieremotorsports.com
primebuilders.net
private-gardens.com
privateschoolsprogram.com
probate-estatelaw.com
probatelawlv.com
profimages.com
promotionalweb.com
pro-serv.com
pro-show.com
prospectfinders.com
protecservicesinc.com
psychicvista.com
punkrockaholic.com
pureairsystems.com
pursuitofbeauty.com
pypereng.com
qualityinnbradley.com
quickpagecafe.com
ralphrussell.com
ramadamaingate.com
rankmyboobs.com
raptorjnb.com
rasroots.com
readytotransform.com
real-estate-park-city.com
realweenies.com
rebeccawild.com
redfishaudio.com
redsboutique.com
remetrix.com
reptiledepot.com
reptileoutpost.com
republichost.com
retrogradefilms.com
returntohealth.com
reusaudio.com
reynoldsandassociates.net
reynoldshomes.com
rickshouseofporn.com
ricksmerch.com
riophotography.com
rla-advertising.com
rlki.com
roadprocessingresources.com
roadredwood.com
road-show-live.com
robinsonfamilygreetings.com
rockymtnjellyco.com
rogersrepairservice.com
romanmedia.net
roseink.com
rtutours.com
rufftuff.com
rushingexterior.com
russianimmigration.org
rwholmes.com
ryanreuminsurance.com
ryanvaleko.com
sacredsilks.com
s-and-m-cycles.com
sandrademo.com
sanpedrocityballet.com
save-a-bundle.com
saydel.com
scentstotreasure.com
scottishclansman.com
seaandsea.net
seahawks2000.com
seeingdouble.com
sekai-electronics.com
sengerdesign.com
sennacosmetics.com
sexxxy4you.com
sexykayla.com
sffcommittee.com
shereenasoutdoors.com
shmilycreations.com
showinfo.net
shrevearts.org
shreveportshows.com
shrm-kankakee.org
sickschools.com
simpsonandsimpsoncpas.com
singlesnightbylaura.com
sis-store.com
sjsindy.org
sketch.net
slouch.tv
slowtosurface.com
sluysbakery.com
snyderelectricinc.com
softessentials.com
softubsalespros.com
solomonlaw.com
solutionsourcing.com
soozanne.com
spiritbody.com
sportsbusinessgroup.com
sportznet.com
stacykaplan.com
stagfinancialgroup.com
starchannelmedia.com
starvideoentertainment.com
star-wars-figures.com
steponeweb.net
sterlingbelles.com
sterlingveba.com
stevensonautorepair.com
stewardsministries.com
stimulusmedia.com
storefrontsale.com
streamingmediadirect.com
streamplace.com
subseapropeller.com
suwaneefamilymedicine.com
suzimccoppin.com
sweetsoulmusic.com
swinggolfproducts.com
symphoniarecords.com
systemsup.org
tandembenefits.com
tattooedlady.com
taylorinsuranceservices.com
taylorrentalgarland.com
techservco.com
techstockz.com
teens-on-line.com
teensupreme.org
tempestech.com
test2378.com
test4001.com
testbrian07189.com
testbrian2.com
testies2389ey298.com
testset.net
theappraisalplace.com
theatreequipment.net
thediamondexchange.com
theequitygrouplv.com
theequitygroupnv.com
theeventhorizon.net
thegardensatmilehigh.com
the-golf-store.com
theherbalshoppeonline.com
thehouseband.org
thekungfuminute.com
themagazineonline.com
themotherofallshows.com
the-napa-valley.com
theonholdexperience.com
thepregulmans.com
thestoddardgroup.com
thewinemakingstore.com
tiamoimages.com
tikvatisrael.com
tinda.com
tirelock.com
tnlmarketing.com
toleavealegacy.com
tompinkus.com
topnotchvipservices.com
topplacement.net
topsecretjpn.com
torreyatlanta.com
totalbodywellnesslec.com
towerzero.com
transitsurplus.com
trashtroll.com
triangleemploymentservices.com
trimedstaffing.com
tripleg.net
triplethreatentertainment.com
trivalleyappraisal.net
troop-36.org
tsarinamedia.com
tsnorthernstar.com
tstacy.com
tunji.com
twominute.net
twominute.org
ub2world.com
udev01.sitestream.net
udrc.net
unclebob.com
uncledickstoyshop.com
undergroundculture.com
undergroundi.com
unimousa.com
unitychristcenter.org
universalexhibits.com
unsolvedcrimes.org
untamedbeauties.com
usbbankcard.com
used-homeschool-books.com
us-iti.com
us-marketing.com
uvcsite.com
vailbeavercreekrealestateonline.com
vailhealth.com
valleypacific.com
valleypc.com
vhf.org
vickismith.com
vidbox.co.il
vilandre.com
villageofpeotone.com
visionbomb.com
visionbomb.tv
visit-ecr.com
vitronusa.com
vsjasontest123.com
vstestaki.com
vstestbill01.com
vstestbill04.com
vstestbill10.com
vstestbill11.com
vstestbill4000
vstestbill4007.com
vstestbill4008.com
vstestbill4009.com
vstestbill4010.com
vstestbill4011.com
vstestbillfppromo2.com
vstestbillstream.com
vstestbrian02.com
vstestbrian03.com
vstestbrian04.com
vstestbrian05.com
vstestbrian09.com
vstestbull.com
vstest.com
vstest-databaseerror.com
vstestjason031801-001.com
vstestjason031801-002.com
vstestjason031801-003.com
vstestjason031801-004.com
vstestjason031801-005.com
vstestjason031801-006.com
vstestjason031801-007.com
vstestjason031801-008.com
vstestjason031801-009.com
vstestjason031801-010.com
vstestjason10101.com
vstest-jc222.com
vstestjean010.com
vstestjean01.com
vstest-jean-dns2.com
vstest-jean-dns.com
vstestjeantest1.com
vstest-jmc11-nttest.com
vstest-jmc13-nttest.com
vstest-jmc15-nttest.com
vstest-jmc2.com
vstest-jmc3.com
vstest-jmc7-newdns.com
vstest-jmc.com
vstestjzacha.com
vstestkamera.com
vstestkevin.com
vstestsupport23.com
vstesttomp02.com
vstest-tomp.com
vstesttomp.com
vstestwillyp.com
vstestworldc.com
vstestworld.com
vwcnet.com
warpainter.com
wavebreakerboatlifts.com
wdacpa.com
webcoinsurance.com
webdesignboston.net
webevents.org
webeyecon.com
webfoot-designs.com
webfoothosting.com
web-hosts.org
weblady.com
webmineral.com
webscriptors.com
websiteperformanceconsulting.com
webtrific.com
wedwed.com
wertheim.ca
wes-global.com
whitelightproductions.net
wildlandsconservancy.org
wildwestfun.com
williamsteffey.com
wirelessrepair.net
wizeguides.com
wlion.com
wolfsspirit.com
wolfsspirit.net
wpseap.org
wroughtenfilms.com
xilstudios.com
xpnlive.org
xussr.net
ymgmanagement.com
yourdomainname.com
zc8.com
