Hacking Incident #388: IdiotCrew’s UnM@SK Strikes Mercedes-Benz Serbia

Incident Date: December 2, 2024, 06:47 (Zone-H Server Time)
Publication
Date: December 7, 2024, 12:45 WIB

A hacking incident targeting the Serbian website of Mercedes-Benz (URL: https://www.ass.mercedes-benz.rs/ic.html) was reported on December 2, 2024, at 06:47:43 Zone-H Server Time. The attack was claimed by a hacker using the alias UnM@SK, associated with the group IdiotCrew. The hacker successfully defaced the site, leaving a message and a list of nicknames, presumably referencing collaborators or peers.

Technical Details:

The defaced page displayed a message from the hacker stating:

“Nothing Hurts Anyone In This Deface, Just Drop Files, Remember Never Trust Anyone, Trust Yourself~!”

The page also included a list of nicknames:

“UnM@SK – Developer_Kamikaze – s4dness – k3bay4 mer4h – Eval – Miraaa45 – unknown_3x”*

Post-Incident Status:
As of this publication, the website has been restored, and the defaced file (ic.html) has been removed by the website administrator.

Hacker Profile:

  • Hacker Name: UnM@SK
  • Group Affiliation: IdiotCrew

Response from Mercedes-Benz:
At the time of writing, there has been no official statement from Mercedes-Benz regarding the incident. The swift restoration of the website suggests that the company or its web hosting service quickly identified and mitigated the breach.

Security Implications:
While the defacement itself appears non-destructive and does not seem to have compromised sensitive data, it serves as a reminder of the vulnerabilities present in online systems. Organizations are urged to implement stringent security protocols and maintain regular system audits to mitigate the risk of similar incidents.