‘What Security?’: LG’s Website Hacked

LG’s Australian electronic website was hacked on Friday morning forcing the company to suspend the site up until Monday, according to a SMH report.

The hackers, who call themselves ‘Intra’, had changed the entire homepage of lge.com.au, forcing LG Australia to temporarily take the site down until services could be restored.

“It seems as though your website has been hacked. How did we get past your security? ……. What security? ;),” said a message on the site prior to it being pulled down.

Large Australian sites are generally compromised on average once a week, compared to several times per day overseas, claims private security consultant Chris Gatford.
 
“Website defacements occur worldwide many times on a daily basis. Here in Australia we have one significant Australian website defacement probably at least once a week.”
 
It is believed the server hosting LG’s site was compromised since the entire homepage was defaced. Ty Miller, CTO of Pure Hacking, believes this attack was more serious than the common SQL injection method.

“It looks like the attacker has compromised the web server itself as the website home page has been replaced completely,” said Miller.

“Usually if the web application itself was compromised via Stored Cross Site Scripting or SQL Injection then you would still see the original home page HTML code containing the malicious code.”