BSI Security Warning
We have received a security warning from the federal office of information technology security (BSI), forwarded from the Baden-Württemberg state's Computer Emergency Response Team (CERT BWL).
The CERT BWL Warning:
BSI warns of an "Anti-Security" operation from the Lulz Hacker Security group.
The Lulz Hacker Group Security ranks third on the"Anti-Security" list of websites that have been deemed defaced. DDoS attacks are also possible. Be aware that classified (sensitive) documents may be stolen and publicized. The following preventative measures are recommended for those in the state's management offices:
- Servers that can be reached through the internet should always be kept at the most current patch level. This is especially the case for web servers, CMS (including plug-ins), data bases as well as fora and software.
- The individual websites should be watched, especially for defacement. Any suspicions should be immediately reported to the CERT BWL, who will make an initial judgement of the report and forward it to the BSI central office if necessary.
- Administrators should be informed and regularly check their log-in information for any hints of attacks.
- Guest books or fora can be checked for "Anti-Security" spam reports.
You can find more background information on Wikipedia as well as links to current information regarding Lulz security:
http://de.wikipedia.org/wiki/Lulz_Security
Thanks from the CERT BWL Team!