RE: S4T4N1C Web Defacement

From: Dan Perez <danperez(at)san.rr.com>
Date: Thu Feb 13 2003 - 15:40:06 EST

Came across a few more hits in some searches;

• At http://www.secondimpact.net/main.shtml I found

Due to recent hacking issues, the forums are closed until further notice. I will get the updates page back up as soon as possible. If anybody knows anything about the Brazilian hacking group called the "Cyber Satans", please contact me at webmaster@secondimpact.net. On a positive note, my computer problems have been solved, so updates will resume as soon as possible.

• At http://www.delta5.com.br/mirror/2002/07/14/www.sagpya.mecon.gov.ar/0-0/ I found

Secretaria de agricultura, pesca e alimentacao da Argentina - Defaced by tecnowstorm menber of Cyber's Satans we are:TECNOWSTORM, birics and the_clown. Fodam-se todos os argentinos! Brasil rlz (penta hahaha)

• At http://www.solvare.net/index.htm I found

ION was here ! by Mad_Skater ... fuck3d y0ur LinuX b0x ! greetz = Cyber_Satans - Satanic_Souls - Azilum - Birics and all

You may want to touch base with the administrators of some of these to compare notes.

Hope this helps,

Dan

-----Original Message-----
From: Christopher Lyon [mailto:cslyon@netsvcs.com] Sent: Thursday, February 13, 2003 12:24 AM To: incidents@securityfocus.com
Subject: S4T4N1C Web Defacement

Looks like we just got hit with some web defacement and was just wondering if anybody else has seen this. It looks like this is a group called Satanic_brain or S4T4N1C_BR41N. I can't tell if anything else is going on besides just the defacement but I am still going over the IDS stuff and the logs. The few google searches that I did one of the links was DoS S4T4N1C_BR41N but I don't think that is the case. Anyway, just wanted to see if anybody heard about this.

Here is what they added to a .mdb that wasn't secured it looks like. Starting: 12/12/2009
Cybers Satans Esteve Aqui.... By S4T4N1C_BR41N satanicbrain@bol.com.br #cybers_satans

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.comReceived on Thu Feb 13 17:13:19 2003