The Kenyan government is busy investing lots of cash developing the various ICT initiatives in the country that it forgot to build quality well secured websites. Apparently, an Indonesian novice on a hacking crash course program went on the rampage last night and hacked and defaced over 100 Government of Kenya websites, most of them built in Joomla CMS!
Boasting of his exploits on a forum, the hacker left this message:
*show off by me...*
>>
>> *thanks for tutorial in www.code-security.com all...*
>>
>> *i have exploit from cs web, and i attacking to server Goverment
>> Kenya,,,, and then,,, success full... this is deface in this night...*
In plain English, he is saying that he has hacked Kenyan Government websites in one night thanks to tutorial from the website whose URL is listed. Even before the hacking, most of the Kenyan government websites were very poorly done both design -wise and in some cases there were cases of disturbing typos in the content. It seems the security of the sites was also not given due consideration.
It has also been determined that all the websites were hosted in one server, giving this student a very easy time since compromising the server simply gave them a field day hacking all the websites hosted therein. Defacing one website is common but defacing 100 websites in one night is pure madness, probably the work of a sociopath. But the fault is with the GOK's ICT Team.
The government has now deployed a "Cyber Incidence Response Team(CIRT)" to get the websites back online but this is a warning lesson for the Kenyan ICT Department to preach water and drink water when it comes to cybersecurity.
Here are the hacked websites:
1. http://www.administrationpolice.go.ke/index.html
2. http://www.aideffectiveness.go.ke/index.html
3. http://www.bungomacounty.go.ke/index.html
4. http://www.businesslicense.go.ke/index.html
5. http://www.cak.go.ke/index.html
6. http://www.commstaskforce.go.ke/index.html
7. http://www.cooperative.go.ke/index.html
8. http://www.crd.go.ke/index.html
9. http://www.crisisrcentre.go.ke/index.html
10. http://www.ditkenya.go.ke/index.html
11. http://www.doshs.go.ke/index.html
12. http://www.economicstimulus.go.ke/index.html
13. http://www.eldoretmunicipal.go.ke/index.html
14. http://www.emu.go.ke/index.html
15. http://www.education.go.ke/index.html
16. http://www.environment.go.ke/index.html
17. http://www.filmservices.go.ke/index.html
18. http://www.fisheries.go.ke/index.html
19. http://www.forestryandwildlife.go.ke/index.html
20. http://www.gender.go.ke/index.html
21. http://www.governmentpress.go.ke/index.html
22. http://www.greenenergy.go.ke/index.html
23. http://www.housing.go.ke/index.html
24. http://www.ifmis.go.ke/index.html
25. http://www.immigration.go.ke/index.html
26. http://www.industrialization.go.ke/index.html
27. http://www.isc.go.ke/index.html
28. http://www.iprs.go.ke/index.html
29. http://www.itentambachtowncouncil.go.ke/index.html
30. http://www.itmis.go.ke/index.html
31. http://www.kenao.go.ke/index.html
32. http://www.kapsabetmunicipal.go.ke/index.html
33. http://www.kenyayearbook.go.ke/index.html
34. http://www.kerugoyakutusmunicipal.go.ke/index.html
35. http://www.kesi.go.ke/index.html
36. http://www.kipi.go.ke/index.html
37. http://www.kisumucountycouncil.go.ke/index.html
38. http://www.kirinyagacountycouncil.go.ke/index.html
39. http://www.kitalemunicipal.go.ke/index.html
40. http://www.kituimunicipal.go.ke/index.html
41. http://www.kkv.go.ke/index.html
42. http://www.knfparms.go.ke/index.html
43. http://www.knsdi.go.ke/index.html
44. http://www.kntc.go.ke/index.html
45. http://www.laikipiacountycouncil.go.ke/index.html
46. http://www.lands.go.ke/index.html
47. http://www.leatherdevelopmentcouncil.go.ke/index.html
48. http://www.limurumunicipal.go.ke/index.html
49. http://www.livestock.go.ke/index.html
50. http://www.lodwarmunicipal.go.ke/index.html
51. http://www.maraguacountycouncil.go.ke/index.html
52. http://www.mariakanitown.go.ke/index.html
53. http://www.maurestoration.go.ke/index.html
54. http://www.migoricountycouncil.go.ke/index.html
55. http://www.minesgeology.go.ke/index.html
56. http://www.mirp.go.ke/index.html
57. http://www.monitoring.go.ke/index.html
58. http://www.moyalecountycouncil.go.ke/index.html
59. http://www.murangacounty.go.ke/index.html
60. http://www.murangamunicipal.go.ke/index.html
61. http://www.nairobicity.go.ke/index.html
62. http://www.naivashamunicipal.go.ke/index.html
63. http://www.nakurucounty.go.ke/index.html
64. http://www.nationaldisaster.go.ke/index.html
65. http://www.nationalheritage.go.ke/index.html
66. http://www.nccs.go.ke/index.html
67. http://www.nec.go.ke/index.html
68. http://www.northernkenya.go.ke/index.html
69. http://www.nyandaruacountycouncil.go.ke/index.html
70. http://www.othayatowncouncil.go.ke/index.html
71. http://www.pec.go.ke/index.html
72. http://www.pfmr.go.ke/index.html
73. http://www.pghnyeri.go.ke/index.html
74. http://www.pharmacy.go.ke/index.html
75. http://www.prisons.go.ke/index.html
76. http://www.psrpc.go.ke/index.html
77. http://www.publichealth.go.ke/index.html
78. http://www.publicservice.go.ke/index.html
79. http://www.publicworks.go.ke/index.html
80. http://www.reformskenya.go.ke/index.html
81. http://www.refugees.go.ke/index.html
82. http://www.regional-dev.go.ke/index.html
83. http://www.roads.go.ke/index.html
84. http://www.rprlgsp.go.ke/index.html
85. http://www.scat.go.ke/index.html
86. http://www.scienceandtechnology.go.ke/index.html
87. http://www.singlewindow.go.ke/index.html
88. http://www.sprogrammes.go.ke/index.html
89. http://www.tabakatown.go.ke/index.html
90. http://www.tanathi.go.ke/index.html
91. http://www.tfdg.go.ke/index.html
92. http://www.technologycentre.ac.ke/index.html
93. http://www.theenergytribunal.go.ke/index.html
94. http://www.thekenyawewant.go.ke/index.html
95. http://www.thikamunicipal.go.ke/index.html
96. http://www.transformingkenya.go.ke/index.html
97. http://www.treasury.go.ke/index.html
98. http://www.ugunjatown.go.ke/index.html
99. http://www.ukwalatown.go.ke/index.html
100. http://www.westernkenya.go.ke/index.html
101. http://www.vihigamunicipal.go.ke/index.html
102. http://www.works.go.ke/index.html
103. http://www.youthaffairs.go.ke/index.html
Work can be republished with attribution. Email Us africadomainnames@gmail.com
Boasting of his exploits on a forum, the hacker left this message:
*show off by me...*
>>
>> *thanks for tutorial in www.code-security.com all...*
>>
>> *i have exploit from cs web, and i attacking to server Goverment
>> Kenya,,,, and then,,, success full... this is deface in this night...*
In plain English, he is saying that he has hacked Kenyan Government websites in one night thanks to tutorial from the website whose URL is listed. Even before the hacking, most of the Kenyan government websites were very poorly done both design -wise and in some cases there were cases of disturbing typos in the content. It seems the security of the sites was also not given due consideration.
It has also been determined that all the websites were hosted in one server, giving this student a very easy time since compromising the server simply gave them a field day hacking all the websites hosted therein. Defacing one website is common but defacing 100 websites in one night is pure madness, probably the work of a sociopath. But the fault is with the GOK's ICT Team.
The government has now deployed a "Cyber Incidence Response Team(CIRT)" to get the websites back online but this is a warning lesson for the Kenyan ICT Department to preach water and drink water when it comes to cybersecurity.
Here are the hacked websites:
1. http://www.administrationpolice.go.ke/index.html
2. http://www.aideffectiveness.go.ke/index.html
3. http://www.bungomacounty.go.ke/index.html
4. http://www.businesslicense.go.ke/index.html
5. http://www.cak.go.ke/index.html
6. http://www.commstaskforce.go.ke/index.html
7. http://www.cooperative.go.ke/index.html
8. http://www.crd.go.ke/index.html
9. http://www.crisisrcentre.go.ke/index.html
10. http://www.ditkenya.go.ke/index.html
11. http://www.doshs.go.ke/index.html
12. http://www.economicstimulus.go.ke/index.html
13. http://www.eldoretmunicipal.go.ke/index.html
14. http://www.emu.go.ke/index.html
15. http://www.education.go.ke/index.html
16. http://www.environment.go.ke/index.html
17. http://www.filmservices.go.ke/index.html
18. http://www.fisheries.go.ke/index.html
19. http://www.forestryandwildlife.go.ke/index.html
20. http://www.gender.go.ke/index.html
21. http://www.governmentpress.go.ke/index.html
22. http://www.greenenergy.go.ke/index.html
23. http://www.housing.go.ke/index.html
24. http://www.ifmis.go.ke/index.html
25. http://www.immigration.go.ke/index.html
26. http://www.industrialization.go.ke/index.html
27. http://www.isc.go.ke/index.html
28. http://www.iprs.go.ke/index.html
29. http://www.itentambachtowncouncil.go.ke/index.html
30. http://www.itmis.go.ke/index.html
31. http://www.kenao.go.ke/index.html
32. http://www.kapsabetmunicipal.go.ke/index.html
33. http://www.kenyayearbook.go.ke/index.html
34. http://www.kerugoyakutusmunicipal.go.ke/index.html
35. http://www.kesi.go.ke/index.html
36. http://www.kipi.go.ke/index.html
37. http://www.kisumucountycouncil.go.ke/index.html
38. http://www.kirinyagacountycouncil.go.ke/index.html
39. http://www.kitalemunicipal.go.ke/index.html
40. http://www.kituimunicipal.go.ke/index.html
41. http://www.kkv.go.ke/index.html
42. http://www.knfparms.go.ke/index.html
43. http://www.knsdi.go.ke/index.html
44. http://www.kntc.go.ke/index.html
45. http://www.laikipiacountycouncil.go.ke/index.html
46. http://www.lands.go.ke/index.html
47. http://www.leatherdevelopmentcouncil.go.ke/index.html
48. http://www.limurumunicipal.go.ke/index.html
49. http://www.livestock.go.ke/index.html
50. http://www.lodwarmunicipal.go.ke/index.html
51. http://www.maraguacountycouncil.go.ke/index.html
52. http://www.mariakanitown.go.ke/index.html
53. http://www.maurestoration.go.ke/index.html
54. http://www.migoricountycouncil.go.ke/index.html
55. http://www.minesgeology.go.ke/index.html
56. http://www.mirp.go.ke/index.html
57. http://www.monitoring.go.ke/index.html
58. http://www.moyalecountycouncil.go.ke/index.html
59. http://www.murangacounty.go.ke/index.html
60. http://www.murangamunicipal.go.ke/index.html
61. http://www.nairobicity.go.ke/index.html
62. http://www.naivashamunicipal.go.ke/index.html
63. http://www.nakurucounty.go.ke/index.html
64. http://www.nationaldisaster.go.ke/index.html
65. http://www.nationalheritage.go.ke/index.html
66. http://www.nccs.go.ke/index.html
67. http://www.nec.go.ke/index.html
68. http://www.northernkenya.go.ke/index.html
69. http://www.nyandaruacountycouncil.go.ke/index.html
70. http://www.othayatowncouncil.go.ke/index.html
71. http://www.pec.go.ke/index.html
72. http://www.pfmr.go.ke/index.html
73. http://www.pghnyeri.go.ke/index.html
74. http://www.pharmacy.go.ke/index.html
75. http://www.prisons.go.ke/index.html
76. http://www.psrpc.go.ke/index.html
77. http://www.publichealth.go.ke/index.html
78. http://www.publicservice.go.ke/index.html
79. http://www.publicworks.go.ke/index.html
80. http://www.reformskenya.go.ke/index.html
81. http://www.refugees.go.ke/index.html
82. http://www.regional-dev.go.ke/index.html
83. http://www.roads.go.ke/index.html
84. http://www.rprlgsp.go.ke/index.html
85. http://www.scat.go.ke/index.html
86. http://www.scienceandtechnology.go.ke/index.html
87. http://www.singlewindow.go.ke/index.html
88. http://www.sprogrammes.go.ke/index.html
89. http://www.tabakatown.go.ke/index.html
90. http://www.tanathi.go.ke/index.html
91. http://www.tfdg.go.ke/index.html
92. http://www.technologycentre.ac.ke/index.html
93. http://www.theenergytribunal.go.ke/index.html
94. http://www.thekenyawewant.go.ke/index.html
95. http://www.thikamunicipal.go.ke/index.html
96. http://www.transformingkenya.go.ke/index.html
97. http://www.treasury.go.ke/index.html
98. http://www.ugunjatown.go.ke/index.html
99. http://www.ukwalatown.go.ke/index.html
100. http://www.westernkenya.go.ke/index.html
101. http://www.vihigamunicipal.go.ke/index.html
102. http://www.works.go.ke/index.html
103. http://www.youthaffairs.go.ke/index.html
Work can be republished with attribution. Email Us africadomainnames@gmail.com
No comments:
Post a Comment