FBI Affiliate Infragard hacked by LulzSec

Chester Wisniewski
NakedSecurity
June 6, 2011

In a self-titled hack attack called “F**k FBI Friday” the hacking group known as LulzSec has published details on users and associates of the non-profit organization known as Infragard.

Infragard describes itself as a non-profit focused on being an interface between the private sector and individuals with the FBI. LulzSec published 180 usernames, hashed passwords, plain text passwords, real names and email addresses.

Where did the plain text passwords come from? Considering LulzSec was able to decrypt them it would imply that the hashes were not salted, or that the salt used was stored in an insecure manner.

Read more

This article was posted: Monday, June 6, 2011 at 10:06 am

---

---

---

---