Friday, February 10, 2012

All Foxconn user credentials, incl. parent co. CEO Terry Gou, leaked by hacker group

A group of hackers known as Swagg Security is claims to have breached the security of Apple's manufacturing partner Foxconn. With an avatar very similar to that of LulzSec, we can imagine it's an offshoot of that group, and that this hack was part of the AntiSec campaign (against corruption in government and big business)

The group said it had stolen usernames, passwords, and other private information for every employee including Terry Gou, who is the CEO of parent Hon Hai Industries. Those credentials were uploaded to the site where these groups like to dump data and press releases: pastebin. The group also uploaded the data to The Pirate Bay.

Swagg Security said: "The passwords inside these files could allow individuals to make fraudulent orders under big companies like Microsoft, Apple, IBM, Intel, and Dell," Swagg Security said on its Pastebin page. Be careful ; )"

As a result of the hack, Foxconn has taken down a Web site (Google's cached version here) which explains the services it provides to its key partners, including Apple, HP, Cisco, and Acer.

Why Foxconn? The answer should be obvious, in light of recent news and reports about the miserable conditions at manufacturing sites in China and other countries. Key among them is Foxconn, one of Apple's key manufacturing partners.

The hacker group exploited an unpatched version of Internet Explorers used by one of Foxconn's employees. It's another example of what happens when someone does not keep their desktop software up to date.

Swagg Security gave fair warning, more or less. It warned its "intended victim" on January 26th to ensure that its Web browsers were up-to-date, although it did not name Foxconn as that victim.

The hack came on Wednesday, the day before global planned protest at Apple stores, where petitions asking Apple to produce "ethical" iPhones would be presented, sporting 250,000 signatures.

Although both Foxconn and Apple have denied that these manufacturing conditions exist, or at least assured the public that, in the case of Apple, it is making improvements is its supply chain, statements in the original New York Times report from both past and present Apple executives seemt o belie those denials.

On the pastebin upload page, Swagg Security said,

"So Foxconn thinks they got 'em some swagger because they work with the Big Boys from Intel, Microsoft, IBM, and Apple? Fool, You don't know what swagger is. They say you got your employees all worked up, committing suicide 'n stuff. They say you hire chinese workers 'cause you think the taiwanese are elite. We got somethin' served up good...real good. Your not gonna' know what hit you by the time you finish this release. Your company gonna' crumble, and you deserve it."

No comments: