X

Hackers: Here's Zimbabwe, Brazil, UMG, Viacom data

Anonymous-LulzSec AntiSec campaign issues its first official release.

Elinor Mills Former Staff Writer
Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service and the Associated Press.
Elinor Mills
3 min read
 

Hackers today released data they said was from the governments of Zimbabwe and Brazil, entertainment giants Universal Music Group and Viacom, and a municipal government in Australia.

Meanwhile, the Anonymous group also reportedly temporarily shut down a tourism Web site for Orlando, Fla., with a distributed denial-of-service (DDoS) attack today to protest the arrest of Food not Bombs volunteers for serving food in public in Orlando without a permit.

Later in the day the data dump, which the hackers said was the first official release from the AntiSec campaign launched by Anonymous and LulzSec last week, appeared on The Pirate Bay file-sharing site. It purports to offer for download nearly 380 megabytes of data, including information from: the Zimbabwe government, Mosman Municipal Council (mosman.nsw.gov.au), Universal Music Group Partners and umusic.com's user:passwords, internal mapping of Viacom and its servers, Brazil government passwords and other data. The type and origin of the released data could not immediately be verified.

A Universal Music Group representative said he would look into the matter, and representatives from Viacom did not immediately respond to e-mails seeking comment.

The Mosman Municipal Council, based in Australia, said in a statement that someone had hacked the council's Web sites but no ratepayer or other information from the organization's internal systems had been accessed. "The hack was made via an sql injection exploit on a subsidiary website deployed some years ago. The hack was able to initiate a 'data dump' of some of our public-facing websites. The information being made available is essentially what you are able to access when browsing our websites. The web editors' passwords are encrypted, and are now being changed," the council said in a statement.

Here is the AntiSec statement that accompanied the download:

Greetings fellow Buccaneers,

It has been a week since the LulzBoat reeled the LulzSec flag in and now proudly flies with the #AntiSec flag. Since this day, the movement is organized by a fleet of independent but allied vessels.

In this short time, the friendly vessels were abe to reel in amazingly huge amouznts of booty, all claimed in the name of #AntiSec. Make no mistake: While the LulzBoat is still sailing with us (albeit not with the LulzSec fag), the objective of #AntiSec is slightly different. Despite being still driven by Lulz and therefore also providing them, the mission has become larger than us. #AntiSec is more than Lulz and more than even Anonymous: It is our true belief that this movement has the capability to change the world. And should that fail, we will at least rock the world.

Thus, the introductory #AntiSec release (dubbed AntiSec-001) does not contain the type of loot that any Lulz Lizard can just abuse mindlessly. Instead, we provide material that is primarily against corrupt Governments (in our world this is all Governments) and corrupt companies. In this release you will find network data for the Governments of Zimbabwe, Australia, Anguilla (a British overseas territory in the Caribbean) as well as internal information about companies like Universal and Viacom.

This chest of booty may not be interesting for everyone, but rest assured: #AntiSec vessels are keeping lots of very valuable loot aboard; the crews are currently working hard to sort the loot in a way that even the lousy media sailboats are able to just grab it and sail away. You will be hearing very soon of us.

And always remember: Let it flow and it flows back to you.

Updated June 29 at 9:02 a.m. PT with Mosman Council statement.