The Wall Street Journal Website Hacked, Data Offered for Sale for 1 Bitcoin

Dow Jones & Co. Took 2 Servers that Store the News Graphics for The Wall Street Journal Website Offline Yesterday Evening after a Confirmed Intrusion by an Hacker Calling Himself, 'w0rm'. The Hacker was Offering What he Claimed was User Information and Server Access Credentials that would Allow Others to “modify articles, add new content, insert malicious content in any page, add new users, delete users and so on”, Andrew Komarov, Chief Executive Officer of Cybersecurity Firm, IntelCrawl, Told The Wall Street Journal. 'W0rm', according to Komarov, is the Same Individual Previously Known as 'Rev0lver' and 'Hash', a Russian Hacker Who Tried to Sell Access to the BBC’s Servers Last December and Attacked the Web Servers of Vice Media Earlier this Year.


At 5:30 p.m. ET on July 21, he Posted a Screenshot to Twitter that Showed the Email Address, Username and Hashed Password for the Database Admin on a WSJ.com Server. He Offered to Sell the Full Dump of the Database Table of Authorized Users for 1 Bitcoin through an Exploit Marketplace at w0rm.in. According to The Journal, Dow Jones has Taken the Servers Offline to Isolate them and Prevent further Intrusions into their Systems. A Spokeperson for the Company Said, “At this point we see no evidence of any impact to Dow Jones Customers or customer data”.  However, Komarov, Whose Firm Discovered the Posting Offering the Vulnerabilities, Said that, IntelCrawl had Confirmed that, a SQL Injection Vulnerability in the WSJ.com Website Made it Possible “to get access to any database on the wsj.com server”. While the Database Affected by the Attack Hosted Map Graphics for the WSJ.com Website, there were Over 20 Other Databases Hosted on the Affected Servers.




Info Source:

http://online.wsj.com/articles/wsj-takes-some-computer-systems-offline-after-cyber-intrusion-1406074055

http://www.cnet.com/news/hacker-tried-to-sell-access-to-bbc-server-report

https://pbs.twimg.com/media/BtGS-j9CYAAw1pP.png