The hacker from Mi Argentina and the SUBE website spoke: why he did it and what was the security flaw he found

The hacker from Mi Argentina and the SUBE website spoke: why he did it and what was the security flaw he found

December 26, 2024 – 18:22

More than twenty national State websites suffered a cyber attack on Wednesday night. Some accused him of being a Kirchnerist. Others, libertarian. He denies it.

One of the hackers who attacked more than 20 government websites, including Mi Argentina and the SUBE website, spoke this Thursday and explained the reasons. He assured that there were only two people involved and there were no political motives behind it. “We did it for fun,” said @gov.eth.

The cyber attack occurred last Wednesday night. The official Mi Argentina site and the SUBE Card application – two of the Government’s most important digital platforms – were hacked and the news revolutionized social networks. “503 Service Unavailable. “No server is available to handle this request”was read next to a completely white screen. This basically means that there is no server available to handle a request.

One of those responsible contacted the Clarín newspaper via Telegram and explained the reasons for the attack. “We are two different people and there is no group involved This is by no means about politics. We did it for fun. “I am @gov.eth and my partner is h4xx0r1337,” he stated.

I hack my Argentina.jpeg

In his testimony he reiterated several times that he has no political intentions. “There are people on Twitter saying that I am a K journalist from Página 12 “I worked for Kicillof and nothing to do with it, I’m a kid who’s been there for years and no one told me to do anything,” @gov.eth defended himself.

They not only linked him with the Buenos Aires governor, but also with the ruling party of La Libertad Avanza. He also denied it. “This has nothing to do with politics, much less with those conspiracies of libertarians on Twitter. It’s anyone, I read everything. We are two kids who were bored and we were able to do it,” he said.

What the hacker did confirm is that they obtained “sensitive information” of public places, although he ruled out putting it up for sale.

How the websites of the national State were hacked

According to @gov.eth, they gained access using a leaked credential they obtained from a government testing site. “We enter with the same test login at the back of argentina.gob.ar. From there we pass permissions with a higher administrator account,” he explained.

After that step, They hacked the VPS [servidor en la nube]. With this they had free access to all the information on the sites. “We had access to absolutely everything, the backup codes were given away,” they snorted. The fault was that the hacked VPS had no second factor.

Source: Ambito

Leave a Reply

Your email address will not be published. Required fields are marked *

Latest Posts