Highlights of the interview:
- “It’s always interesting to see whether a provider such as KPN has it’s act together”, one hacker states
- The hackers were scanning for all sorts of vulnerabilities
- “All servers of KPN were vulnerable”
- The hacker group consists of Dutch and Russian hackers
- The hackers obtained admin rights, using the password ‘g1rlp0w3r’
- The hackers also obtained access to information used to administer internet connections
- The hackers were able to reconnect quarantined customers if they had wanted to
- The hackers were able to disconnect people if they had wanted to
- The hackers argue that KPN was lying previously as they did download data from KPN’s servers
- The hackers only wanted to demonstrate vulnerabilities, they said that they have destroyed the data they’ve downloaded
- The hackers regret the fact that KPN has filed a complaint with prosecution authorities
- KPN has asked for support from the Dutch National Cyber Security Center and has notified the Dutch regulator as well as the Ministry of Economic Affairs
- To KPN, this is a ‘code red’ incident which required the support of 100 individuals working on this incident from 27th January until 3rd February.
- According to KPN (contrary to previous statements), the hackers would have had the possibility to disrupt VOIP services, even preventing calls to emergency numbers. KPN apparently uses this ‘as an excuse’ to explain why it had to go and notify authorities
Dutch language news article:
http://www.nu.nl/internet/2737242/gehackte-servers-kpn-waren-slecht-beveiligd.html
UPDATE
KPN Hack Out Of Control? Hackers Post KPN User Data On Pastebin
http://vrritti.com/2012/02/10/kpn-hack-out-of-control-hackers-post-kpn-user-data-on-pastebin/
Previously:
Server Of Dutch Provider KPN Has Been Hacked, Damage Unknown
http://vrritti.com/2012/02/08/server-of-dutch-provider-kpn-has-been-hacked-damage-unknown/
