Harvard grad school site hacked, files distributed on BitTorrent network

Share this article:

The website of Harvard University's Graduate School of Arts and Sciences (GSAS) apparently was hacked on Monday, with some of its database files made available on a peer-to-peer file sharing network by someone who said they wanted to “demonstrate” the alleged lack of security on the university's server.

The attacker posted what purported to be four files from the GSAS site on the BitTorrent P2P network. The files were then listed on the Pirate Bay, a site that tracks torrents, information files that administer content downloads from BitTorrent users.

The hacked files were described in the posting as a backup file for the GSAS site server, a joomla.sql database file for the site, a contact list from the database, and a file described as “other minor things.”

The database file posting was accompanied by a grammatically incorrect statement, which announced that the attack was intended to demonstate the lack of security of Harvard's server, and specifically questioned the competance of Harvard's systems administrator.

“This is a backup of gsas.harvard.edu. We have released it because we want demonstration the insecurity of harvard's server…Maybe you don't like it but this is to demonstrate that persons like [administrator of the server] in they don't know how to secure a website.”

A separate file accompanying the site file release, labeled password.txt, contained the message “stupid people, you don't use a secure password.”

The GSAS website went offline on Monday and was not restored as of Tuesday afternoon. Harvard's media relations office did not return a call requesting comment.

News that a website for America's most prestigious university had been hacked was reported around the world. People's Daily Online in China took special note of the fact that Harvard's website had been attacked on “U.S. Presidents Day.”




Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters


More in News

Email promises free pizza, ensnares victims in Asprox botnet instead

Email promises free pizza, ensnares victims in Asprox ...

Cloudmark came upon an email that offers free pizza, but clicking on the link to get the coupon ends with victims being ensnared in a botnet.

Report: most orgs lacking in response team, policies to address cyber incidents

In its Q3 threat intelligence report, Solutionary learned that 75 percent of organizations it assisted had no response team or policies and procedures to address cyber incidents.

Flash redirect campaign impacts Carnegie Mellon page, leads to Angler EK

Flash redirect campaign impacts Carnegie Mellon page, leads ...

Malwarebytes found that, since early July, thousands of sites had been targeted in the campaign.