NullCrew Breaches Yale DataBases

A hacker group known as NullCrew claims it obtained the personal information of 1,200 Yale students and staff members from University databases.

University spokeswoman Elizabeth Stauderman ’83 LAW ’04 confirmed that hackers obtained files containing personal information from participants in the Yale Initiative to Strengthen Teaching in Public Schools on July 17, but she said only 450 accounts were affected. NullCrew claims it gained access to social security numbers, names, addresses and phone numbers, though only usernames, passwords and email addresses were published by the collective, which claims its only intention was to prove the security faults in institutional databases.

“In fact, the governmental and educational sites are the least secure in the experience we’ve had with .edu and .gov websites,” the hackers said in a message alongside the published data.

Stauderman said Yale has taken immediate action to secure the breached computer and is in the process of notifying the authorities and the affected participants. She added that the University will offer identity protection services to those affected.

The NullCrew breach was the largest known breach of Yale databases since late 2010, when the names and Social Security numbers of 43,000 people affiliated with the University were hacked and then made searchable online. The University announced that breach 10 months later, in August 2011.

Follow @thehackersmedia

ASUS eStore Hacked, Administrator Credentials Leaked

NullCrew, the hacker collective that has taken credit for breaching PBS and the World Health Organization, returns with another major data breach. They claim to have gained access to the databases of Asus’ eStore (us.estore.asus.com).


A number of 23 administrator usernames and hashed passwords have been published on Pastebin, the hackers urging everyone to try them out.

“Greetings everyone. Today we decided to leak some very interesting information. Information from the Web-Admin from good old ASUS,” one of the hackers wrote.

“These accounts are from the ASUS eStore, and I've tried, and you can login to them. I also found it a challenge because I saw the GoDaddy ‘Security’ icon. That said they were verified for proper security. Couldn't stop after I saw that ;). Enjoy.”

Since many of the hashes are fairly easy to decrypt and since the chances for misuse are high, we will not be providing a link to the data leak.

On the other hand, we have reached out to Asus and asked them for additional details regarding the incident.

This is not the first major hardware manufacturer to become a target of hackers in the past few days. Last week we’ve learned that NVIDIA was forced to shut down its forums because of a breach that may have affected as many as 400,000 users. shop.nvidia.com has also been compromised.

Reference: Link1

South Africa's Leading ISP Directory Hacked by NullCrew, 450 Account Details Leaked

NullCrew, The Hacker group that has taken credit for hacking WHO, ASUS and PBS ,returns with another major data breach. Hackers claimed to have access to the database belong to the South Africa's Leading ISP Directory and Community Portal(ispdirectory.co.z).

Hackers leaked the database in pasteBay. "We have hacked an ISP Directory from Africa, and we have dumped all the results." Hacker said in the leak.

http://pastebay.net/1068140

The leak contains Usernames, passwords and Emails. Passwords are in plain text format.