Date: September 14, 2024
On September 14, 2024, the page at https://camarasalgadofilho.pr.gov.br/uploads/_.htm on the official website of the City Council of Salgado Filho, Brazil, was compromised by hacker Ramil Feyziyev, affiliated with the group Az-Xploit. The attack resulted in the defacement of this specific page, raising concerns about the security of government websites in the region.
Hacker Details:
- Hacker Name: Ramil Feyziyev
- Hacker Group: Az-Xploit
Website Details:
- URL: https://camarasalgadofilho.pr.gov.br/uploads/_.htm
- System: Linux
- Web Server: Apache
- IP Address: 179.188.17.105
Incident Details:
- Date of Incident: September 14th, 2024, 23:28:35 WIB
- Method of Attack: Exploitation of a web application vulnerability
- Motivation: “I just want to be the best defacer.”
- Archive Page: https://defacer.id/mirror/id/125515
- Cyber Attack Report: https://defacer.id/cyber-attack-report/125515
Method of Attack:
The attack was executed by exploiting a vulnerability in the web application hosted on the City Council’s server. This vulnerability is typically linked to inadequate input validation, allowing attackers to manipulate web content without proper authorization. Once the hacker gained access, they were able to alter the HTML content of the website, replacing it with their own messages and imagery. This type of attack is commonly referred to as “defacement,” where the primary goal is to publicly showcase the hack, rather than to steal data or disrupt services.
Motivation:
Ramil Feyziyev’s motivation behind the attack appears to be driven by a desire for recognition within the hacking community. His statement, “I just want to be the best defacer,” suggests that he seeks to establish a reputation for his hacking skills through high-profile attacks. Such motivations are not uncommon in the hacking world, where individuals or groups often aim to demonstrate their technical prowess or challenge the security measures of organizations, particularly those in the public sector.
The defacement of government websites can also serve as a form of protest or commentary, although in this case, it seems to be more about personal achievement than a political statement.