On September 2nd, 2018, the official website of Pusat Inovasi Lembaga Ilmu Pengetahuan Indonesia was defaced by the hacker known as S4W_BL457, a member of the hacking group Ghost Hunter Illusion. The attack, involving an unspecified web application bug, underscores the vulnerabilities present in research and innovation websites. Below are the details of the hacking incident.
Hacker Details:
- Hacker Name: S4W_BL457
- Hacker Group: Ghost Hunter Illusion
Website Details:
- URL: http://inovasi.lipi.go.id/server1234.php
- System: Linux
- Web Server: Apache
- IP Address: 203.160.128.6
- Location: Indonesia
Incident Details:
- Date: September 2nd, 2018 08:18:02 (WIB)
- Proof of Concept: Other Web Application Bug
- Reason: Not available
- Archive Page: https://defacer.id/mirror/id/1450
- Cyber Attack Report Page: https://defacer.id/cyber-attack-report/1450
Summary:
The website of Pusat Inovasi Lembaga Ilmu Pengetahuan Indonesia was defaced by S4W_BL457 from Ghost Hunter Illusion. The attack reveals vulnerabilities in the site related to web application bugs, emphasizing the need for robust security measures on research and innovation platforms.
Proof of Concept:
The exact proof of concept (PoC) for this attack has not been specified. The hacker exploited an unspecified web application bug, which indicates that the method of attack might involve exploiting vulnerabilities unique to the web application in use.
Reason:
The reason for the attack has not been disclosed by the hacker. This lack of information about the motive suggests that the defacement could have been a test of security vulnerabilities or a demonstration of hacking skills rather than a targeted political or financial attack.