Hackers' challenge Web site goes dark

One day after news broke about an online contest for malicious hackers, the Web site set up for the contest is offline and security experts are casting doubt on the severity of the threat posed by the contest.

The contest, known as the Defacers Challenge, awards points to malicious hackers who successfully compromise an organization's Web server and deface its Web pages, according to a warning from Internet Security Systems Inc. (ISS).

The international hacking contest is scheduled to begin Sunday and could cause headaches for organizations worldwide and disrupt the Internet, ISS said.

On Thursday, however, the contest Web site, http://www.defacers-challenge.com, was offline.

The company that hosted the Web site, Affinity Internet Inc. of Ft. Lauderdale, Florida, took the site down Wednesday after learning of the site. An Affinity spokeswoman cited violations of the terms of its customer usage agreement as the reason for shutting the site down.

Security experts and those close to the defacers community said Thursday that large scale disruptions caused by the contest are unlikely.

"This is something that we're not taking that seriously," said Caleb Sima, chief technical officer for security company SPI Dynamics Inc. of Atlanta, Georgia. "Most real hackers don't pay much attention to things like this, and the kids who do participate in these (contests) are script kiddies who are already out trying to scan and deface things anyway, without needing a special day for it."

In addition, Symantec Corp. has not seen an increase in the volume of attack-related traffic on its DeepSight Alert global network of sensors, according to Oliver Friedrichs, senior manager of Symantec Security Response.

"Compared to last week, it's not that different. Companies are always under attack," he said.

Should the challenge take place, however, the sites that are most likely to be affected will be those with little or no security, Sima said.

"You're going to see defacements of Web sites that have not been maintained for four years. I don't see any real names defaced -- Macy's or Bank of America," he said.

And while the rules of the contest put a higher value on compromising systems running less common operating systems like Apple Computer Inc.'s Macintosh and IBM Corp.'s AIX, winning is still based on hacking 6,000 unique Web domains in the shortest period of time.

That puts a higher value on compromising Web hosting servers that contain hundreds or even thousands of separate domains, according to Roberto Preatoni, also knowns as "SyS64738," founder of Zone-h.org, a Web site that tracks Web site defacements.

"The rules make no difference in attributing points to mass-defacements (on Web servers) and single IP (Internet Protocol addresses). So why bother hitting multiple targets when you can win just hitting one Web hosting company," Preatoni wrote in an online chat session with IDG News Service held in the Zone-h.org Web site.

All the same, Preatoni said that Zone-h has noted an 80 percent decline in notifications of new Web site defacements over the last four or five days, suggesting that hackers may be saving up defacements for Sunday, when the contest begins.

Hackers, including the contest organizers, may already be in possession of exploits to all the servers needed to win the challenge, Preatoni said, predicting that the contest could be won within a matter of seconds.

Security companies of all stripes issued alerts to their customers and the press on Wednesday, offering everything from advice to free vulnerability scans.

To protect themselves, companies should make sure their existing security measures, including firewall, antivirus and intrusion detection systems, are up to date and properly functioning. Administrators should also check to make sure that public facing Web servers and application servers are properly patched, Friedrichs said.

"Right now, we tell (our customers) to take standard precautions," SPI Dynamics' Sima said. "This is not something you need to do something extra for. You should have been doing this all along...There's always somebody scanning you."

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Paul Roberts

IDG News Service
Show Comments

Cool Tech

Bang and Olufsen Beosound Stage - Dolby Atmos Soundbar

Learn more >

Toys for Boys

Nakamichi Delta 100 3-Way Hi Fi Speaker System

Learn more >

Sony WF-1000XM3 Wireless Noise Cancelling Headphones

Learn more >

ASUS ROG, ACRONYM partner for Special Edition Zephyrus G14

Learn more >

Family Friendly

Philips Sonicare Diamond Clean 9000 Toothbrush

Learn more >

Mario Kart Live: Home Circuit for Nintendo Switch

Learn more >

Stocking Stuffer

SunnyBunny Snowflakes 20 LED Solar Powered Fairy String

Learn more >

Teac 7 inch Swivel Screen Portable DVD Player

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?