Earlier this week the FBI issued a warning that hackers sympathetic to the Islamic State will use WordPress plugin vulnerabilities to compromise websites.
“These individuals are hackers using relatively unsophisticated methods to exploit technical vulnerabilities and are utilizing the ISIL name to gain more notoriety than the underlying attack would have otherwise garnered,” the FBI public service announcement states. “Methods being utilized by hackers for the defacements indicate that individual Web sites are not being directly targeted by name or business type. All victims of the defacements share common WordPress plug-in vulnerabilities easily exploited by commonly available hacking tools.”
The FBI says “ISIS-branded attacks” have targeted news organizations, commercial entities, religious institutions, federal, state, and local government institutions, foreign governments, and assorted other domestic and international websites, according to ZDNet, a business technology news website published by CBS Interactive.
On Wednesday, the “Islamic State Hacking Division” allegedly took down the French-language TV station TV5Monde’s website and Facebook page, halting operations. The suspected perpetrators referred to themselves as the “CyberCaliphate.” The station is broadcast in over 200 nations around the world, including the U.S., Canada and Britain.
In January, ISIS allegedly attacked the U.S. Central Command Twitter feed. “A Twitter account from a group identifying itself as Anonymous said Monday it had tracked the source of the hack to Maryland, but that was not confirmed by official sources,” USA Today reported.
Anonymous later said the hack traced back to Maryland, home of the National Security Agency.