Tag Archive for: EC-Council

You are here: / EC-Council

Posts

EC-Council Site Hacked, But There is a Bigger Issue Now…

Over the weekend, and as of today at 11:00am EST, EC-Council, the organization famous for administering the Certified Ethical Hacker (CEH) as well as the Computer Hacking Forensics Investigator (CHFI) had been hacked by an individual who claims to be a “certified unethical software security professional” going by the alias “Eugene Belford”.  Eugene Belford was actually a character in the movie “Hackers” which came out in 1995 directed by Iain Softley as well as staring Angelina Jolie.

The hacked website was defaced with a picture of  Edward Snowden’s passport and e-mail application for the CEH exam as shown here.  In addition to the images the individual responsible for the site compromise, published the following message:

“owned by certified unethical software security professional -Eugene Belford”.  Eugene Belford, is a character from the movie “Hackers”.

Then a few hours later updated the message to the following:

“owned by certified unethical software security professional

Obligatory link: http://attrition.org/errata/charlatan/ec-council/-Eugene Belford

P.S It seems like lots of you are missing the point here, I’m sitting on thousands of passports belonging to LE (and .mil) officials”.

It did seem many individuals who followed this event in its early stages missed the point pertaining to the unauthorized access and control of personal identifiable information of EC-Council certified professionals now in someone else’s hand.  And due to DoDD 8570 requirements many of these professionals are members of the US military, the FBI, and the National Security Agency just to name a few.

This assertion comes from EC-Council claim that it “has trained over 80,000 individuals and certified more than 30,000 security professionals from such fine organizations as the US Army, the FBI, Microsoft, IBM, and the United Nations”.

It is highly probably that passports and other photo ID details of approximately 30,000 security professionals who have either obtained or applied for EC-Council related certifications are now at risk after this compromise.

With the recent holiday breaches of 2013 so fresh in our minds, this is just another reminder about how safe is our information in the hand of others.

securityorb.com/ has attempted to contact EC-Council but there was no response as of this publishing this article.  securityorb.com/ will continue to make attempts to obtain a statement as well as update any new findings we discover.

EC-COUNCIL Website has been Hacked, Snowden’s Passport on the Site

As of Saturday, February 22, 2014 at 8:00pm EST, it seems like the main website operated by EC-Council has been hacked.  On the site is an image of Edward Snowden’s passport and text stating, “owned by certified unethical software security professional -Eugene Belford”.  Eugene Belford, is a character from the movie “Hackers”.

Edward Snowden, the man who turned whistle-blower against the National Security Agency (NSA) and revealed its global spying program, was trained by EC-Council as a Certified Ethical Hacker (CEH).

The hack maybe a DNS hijacking attack,  the information below kind of point that way:

Server:            75.75.75.75

Address:         75.75.75.75#53

Non-authoritative answer:

Name: eccouncil.org

Address: 93.174.95.82

ECATEL

 

 

 

 

 

As of Feb. 23, it seems as though EC-Council has not gained control of their website.  An update was posted on the EC-Council site stating:

“owned by certified unethical software security professional

Obligatory link: http://attrition.org/errata/charlatan/ec-council/ -Eugene Belford

P.S It seems like lots of you are missing the point here, I’m sitting on thousands of passports belonging to LE (and .mil) officials”

EC-Council, the Creator of the Certified Ethical Hacker, Announces its 7th Annual Hacker Halted – to be Held at the Downtown Hilton in Atlanta, GA September 2013

Hacker Halted, EC-Council’s flagship IT Security conference and training event, continues its commitment to excellence as it moves to an all-new city and presents all-new content with version 8 of the Certified Ethical Hacker, a Global CISO Forum, and the World Finals of the Global Cyberlympics Competition.

For over 5 years, stellar speaking lineups and the industry’s leading training have been the basis for Hacker Halted USA. This year, another emphasis was added: ensuring that the gap between budgetary concerns from the recent sequestration and affordable access to training is bridged. “President Obama’s call to reduce the cyber threat gave us another opportunity to showcase our commitment to this important issue,” says Senior Director Eric Lopez. “EC-Council put together an event that provides the most advanced IT Security training courses at the most affordable rates.”

Hacker Halted provides today’s most current, and relevant, training through the Hacker Halted Academy. Students will learn from the industry’s top trainers in a collaborative and practical environment. The Hacker Halted Academy will showcase EC-Council’s new Certified Ethical Hacker version 8. These classes are boot camp style and give students the opportunity to leave the event holding top industry certifications. Other certification classes include Computer Hacking Forensic Investigator, and Certified Security Analyst as well as Advanced Security Training through the CAST classes which include topics ranging from Advanced Network Defense, Advanced Penetration Testing, Mobile Hacking and Forensics, Hacking “Secure” Encryption and Countermeasures and Metasploit hacking, among others.

Read the rest of the press release here.