Tuesday, January 17, 2012

103 Government of Kenya Websites Hacked Overnight by Indonesian Novice

The Kenyan government is busy investing lots of cash developing the various ICT initiatives in the country that it forgot to build quality well secured websites. Apparently, an Indonesian novice on a hacking crash course program went on the rampage last night and hacked and defaced over 100 Government of Kenya websites, most of them built in Joomla CMS!

Boasting of his exploits on a forum, the hacker left this message:
*show off by me...*
>>
>> *thanks for tutorial in www.code-security.com all...*
>>
>> *i have exploit from cs web, and i attacking to server Goverment
>> Kenya,,,, and then,,, success full... this is deface in this night...*


In plain English, he is saying that he has hacked Kenyan Government websites in one night thanks to tutorial from the website whose URL is listed. Even before the hacking, most of the Kenyan government websites were very poorly done both design -wise and in some cases there were cases of disturbing typos in the content. It seems the security of the sites was also not given due consideration.

It has also been determined that all the websites were hosted in one server, giving this student a very easy time since compromising the server simply gave them a field day hacking all the websites hosted therein. Defacing one website is common but defacing 100 websites in one night is pure madness, probably the work of a sociopath. But the fault is with the GOK's ICT Team.

The government has now deployed a "Cyber Incidence Response Team(CIRT)" to get the websites back online but this is a warning lesson for the Kenyan ICT Department to preach water and drink water when it comes to cybersecurity.

Here are the hacked websites:
    1. http://www.administrationpolice.go.ke/index.html
    2. http://www.aideffectiveness.go.ke/index.html
    3. http://www.bungomacounty.go.ke/index.html
    4. http://www.businesslicense.go.ke/index.html
    5. http://www.cak.go.ke/index.html
    6. http://www.commstaskforce.go.ke/index.html
    7. http://www.cooperative.go.ke/index.html
    8. http://www.crd.go.ke/index.html
    9. http://www.crisisrcentre.go.ke/index.html
    10. http://www.ditkenya.go.ke/index.html
    11. http://www.doshs.go.ke/index.html
    12. http://www.economicstimulus.go.ke/index.html
    13. http://www.eldoretmunicipal.go.ke/index.html
    14. http://www.emu.go.ke/index.html
    15. http://www.education.go.ke/index.html
    16. http://www.environment.go.ke/index.html
    17. http://www.filmservices.go.ke/index.html
    18. http://www.fisheries.go.ke/index.html
    19. http://www.forestryandwildlife.go.ke/index.html
    20. http://www.gender.go.ke/index.html
    21. http://www.governmentpress.go.ke/index.html
    22. http://www.greenenergy.go.ke/index.html
    23. http://www.housing.go.ke/index.html
    24. http://www.ifmis.go.ke/index.html
    25. http://www.immigration.go.ke/index.html
    26. http://www.industrialization.go.ke/index.html
    27. http://www.isc.go.ke/index.html
    28. http://www.iprs.go.ke/index.html
    29. http://www.itentambachtowncouncil.go.ke/index.html
    30. http://www.itmis.go.ke/index.html
    31. http://www.kenao.go.ke/index.html
    32. http://www.kapsabetmunicipal.go.ke/index.html
    33. http://www.kenyayearbook.go.ke/index.html
    34. http://www.kerugoyakutusmunicipal.go.ke/index.html
    35. http://www.kesi.go.ke/index.html
    36. http://www.kipi.go.ke/index.html
    37. http://www.kisumucountycouncil.go.ke/index.html
    38. http://www.kirinyagacountycouncil.go.ke/index.html
    39. http://www.kitalemunicipal.go.ke/index.html
    40. http://www.kituimunicipal.go.ke/index.html
    41. http://www.kkv.go.ke/index.html
    42. http://www.knfparms.go.ke/index.html
    43. http://www.knsdi.go.ke/index.html
    44. http://www.kntc.go.ke/index.html
    45. http://www.laikipiacountycouncil.go.ke/index.html
    46. http://www.lands.go.ke/index.html
    47. http://www.leatherdevelopmentcouncil.go.ke/index.html
    48. http://www.limurumunicipal.go.ke/index.html
    49. http://www.livestock.go.ke/index.html
    50. http://www.lodwarmunicipal.go.ke/index.html
    51. http://www.maraguacountycouncil.go.ke/index.html
    52. http://www.mariakanitown.go.ke/index.html
    53. http://www.maurestoration.go.ke/index.html
    54. http://www.migoricountycouncil.go.ke/index.html
    55. http://www.minesgeology.go.ke/index.html
    56. http://www.mirp.go.ke/index.html
    57. http://www.monitoring.go.ke/index.html
    58. http://www.moyalecountycouncil.go.ke/index.html
    59. http://www.murangacounty.go.ke/index.html
    60. http://www.murangamunicipal.go.ke/index.html
    61. http://www.nairobicity.go.ke/index.html
    62. http://www.naivashamunicipal.go.ke/index.html
    63. http://www.nakurucounty.go.ke/index.html
    64. http://www.nationaldisaster.go.ke/index.html
    65. http://www.nationalheritage.go.ke/index.html
    66. http://www.nccs.go.ke/index.html
    67. http://www.nec.go.ke/index.html
    68. http://www.northernkenya.go.ke/index.html
    69. http://www.nyandaruacountycouncil.go.ke/index.html
    70. http://www.othayatowncouncil.go.ke/index.html
    71. http://www.pec.go.ke/index.html
    72. http://www.pfmr.go.ke/index.html
    73. http://www.pghnyeri.go.ke/index.html
    74. http://www.pharmacy.go.ke/index.html
    75. http://www.prisons.go.ke/index.html
    76. http://www.psrpc.go.ke/index.html
    77. http://www.publichealth.go.ke/index.html
    78. http://www.publicservice.go.ke/index.html
    79. http://www.publicworks.go.ke/index.html
    80. http://www.reformskenya.go.ke/index.html
    81. http://www.refugees.go.ke/index.html
    82. http://www.regional-dev.go.ke/index.html
    83. http://www.roads.go.ke/index.html
    84. http://www.rprlgsp.go.ke/index.html
    85. http://www.scat.go.ke/index.html
    86. http://www.scienceandtechnology.go.ke/index.html
    87. http://www.singlewindow.go.ke/index.html
    88. http://www.sprogrammes.go.ke/index.html
    89. http://www.tabakatown.go.ke/index.html
    90. http://www.tanathi.go.ke/index.html
    91. http://www.tfdg.go.ke/index.html
    92. http://www.technologycentre.ac.ke/index.html
    93. http://www.theenergytribunal.go.ke/index.html
    94. http://www.thekenyawewant.go.ke/index.html
    95. http://www.thikamunicipal.go.ke/index.html
    96. http://www.transformingkenya.go.ke/index.html
    97. http://www.treasury.go.ke/index.html
    98. http://www.ugunjatown.go.ke/index.html
    99. http://www.ukwalatown.go.ke/index.html
    100. http://www.westernkenya.go.ke/index.html
    101. http://www.vihigamunicipal.go.ke/index.html
    102. http://www.works.go.ke/index.html
    103. http://www.youthaffairs.go.ke/index.html


Work can be republished with attribution. Email Us africadomainnames@gmail.com