Skip to main content

Pakistan-Linked Hackers Deface Meerut Development Authority Website; Portal Restored After Cyberattack


MEERUT,India 

The website belonging to the Meerut Development Authority (MDA) in Meerut has been defaced recently following an attack by some anonymous threat actors that resulted in the defacement of the government-run website with anti-India and pro-Pakistan messages.

Those attempting to visit the MDA website recently were met with a black screen with political slogans, instead of visiting the normal interface of the website offering services like construction approval, announcements, etc. The attackers have also revealed their identity through the defacement of the site, with "Overthrush1337" being the name used by them.

This is obviously a typical case of website defacement in which the attackers gain access to the web server and deface it to make changes to the content available on the website.

Attack Timeline

Initial Compromise and Defacement of Website

Based on preliminary reports, it appears that the hackers could have taken advantage of an unpatched vulnerability or poor admin credentials in order to access the server. Once gaining access, the hackers proceeded to deface the homepage of the website with messages that were politically motivated and seen by all visitors.

Website Off the Air

As soon as the defacement was noticed on Saturday, MDA took down the website off the air to begin containment and remediation processes.

Cyber Crime Case Registered with Police

Later in the day, Superintendent of Police (City) Vinayak Gopal Bhosale revealed that the police were aware of the cyber attack. The relevant provisions under the Information Technology (IT) Act have been filed for the crime.

Digital Forensics Investigation Ongoing

A digital forensics investigation will be carried out by forensic experts who will analyze server logs and other forms of digital evidence to find out the entry point, IoCs, and if any government or citizens’ sensitive information was accessed by the attackers.

Website Restoration

Following completion of the containment steps and security checks, the MDA’s IT staff managed to restore its website at the beginning of the early morning of Monday. Although public services have since then resumed operation, the forensic examination and the criminal investigation continues in order to find out the exact magnitude of the case.

Data Exposure Not Yet Established

As of the moment of writing, no confirmation about citizen records or other government databases having been compromised is known. As part of the forensic examination, it will be decided if the defacement was merely cosmetic or if there had been some deeper unauthorized access.

Website defacements against government websites are normally considered an act of cyber propaganda; however, cybersecurity professionals warn that this type of attack should never be underestimated because it may expose vulnerabilities in system security. Specialists advise conducting forensic examinations, rotating credentials, remediating vulnerabilities, and monitoring the system for possible backdoor access after such cases happen.

Despite the restoration of the MDA website, the investigation into the breach is still underway and new security measures are expected to be implemented to protect the website from further cyberattacks.


Popular posts from this blog

Instagram Security Risk

Recently, attackers took over high-profile Instagram accounts, including the official Obama’s White House account and a United States Space Force chief officer. The attacker didn't break any Instagram code or crack passwords. They convinced Meta's own AI support chatbot to hand over the accounts. Meta uses an AI-powered support chatbot to help users recover locked accounts, change recovery emails, and handle account issues. The chatbot is trained to verify identity through questions and decide whether a request looks legitimate. Attackers figured out how to manipulate that decision making process. Video Credit-  x.com/chetaslua The attack consists of four main steps. Step 1: The attacker contacts Meta's AI support chatbot claiming to be the legitimate owner of a target account. They simply use Instagram's help interface and start an account recovery conversation. For high-profile targets, attackers use publicly available information such as display names, profile bios, ...
Read more

LinkedIn Rolls Out AI Slop Reporting button

                                         LinkedIn is trying to get a handle on the massive amounts of AI slop on the platform. To do that, the company is testing a new reporting tool that let users flag potential slop and removing the "rewrite with AI" button it once promoted on every post. With the new reporting tool, users will have the ability to flag posts as "seems like AI slop." Doing so will "privately flag" via the site's analytics dashboard that others "feel your post may have come off as inauthentic or heavy use of AI," LinkedIn's Chief Product Officer Hari Srinivasan wrote in an update. The move follows an earlier update that aimed to reduce the reach of AI-generated posts on the platform. The company has since done further work to improve its detection systems, Srinivasan said, which should lead to people seeing fewer AI-generated posts recommended in their feeds. Pos...
Read more

A Simple PDF Tool Outpaced Giants by doing the basics faster, cleaner, and better than anyone else.

  I am going to break down the story of a tool that I'm willing to bet you've used, but whose incredible business journey you probably know nothing about. Honestly, this is a master class for any founder looking to build something valuable from scratch. I am calling it the Bootstrapper’s Playbook. A Wild Reality Check Let’s just start with a wild fact. There's a website out there, a deceptively simple one, that in places like India pulls in more traffic than Amazon. I'm serious. Millions and millions of people rely on it every single day. Any guesses? It's iLovePDF. If you've ever needed to quickly merge, split, or compress a PDF file, you've almost definitely landed on this site. But what most people have no idea about is how this massive global platform was built. And that is where the real story begins. Born from Frustration So, let's go all the way back to the beginning. Because this whole thing wasn't born from some grand business plan or a fanc...
Read more