Publication Date: May 23rd, 2024
Incident Date: May 23rd, 2024
Website Details:
The compromised site is the Ministry of Health Republic of South Sudan, accessible at https://moh.gov.ss/emininBalasi.html. The system is running Linux with an Apache web server. The IP address is 198.54.115.36, and the server is located in the United States. The hacker responsible for this attack is Ramil Feyziyev, affiliated with the hacker group Az-Xploit.
Proof of Concept:
The attack involved a file inclusion vulnerability, which allowed the hacker to inject and execute unauthorized files within the server’s environment.
Reason:
The motivation behind the hack appears to be political in nature, likely as a form of protest or to send a political message.
Archive Page: https://defacer.id/mirror/id/120270
Cyber Attack Report’s Page: https://defacer.id/cyber-attack-report/120270
Hacker Details:
- Hacker Name: Ramil Feyziyev
- Hacker Group: Az-Xploit
Website Details:
- URL: https://moh.gov.ss/emininBalasi.html
- System: Linux
- Web Server: Apache
- IP: 198.54.115.36
- Location: United States