Thread: Comcast allegedly hacked

Comcast Allegedly Hacked, Change Your Passwords Now

A hacking group known as NullCrew claims to have hacked Comcast's servers last week, possibly gaining access to user account information. You should change your passwords now. P

NullCrew claims to have hacked Comcast's webmail servers, gaining Zimbra LDAP and MySQL passwords. This not only would give them access to Comcast webmail, but also to the master account that manages payment information and more.P

Comcast responded to the claim, saying there was "no evidence to suggest any personal customer information was obtained in this incident." Still, we recommend any and all Comcast users stay on the safe side and reset their passwords.

Would've been nice to find out about this from Comcast through official channels as opposed to a 3rd Party.

They can't do anything with mine either. No other shared credentials with anything and nothing "terminating" at that account either. It's just the principle of things that Comcast was "hush hush" about the breach and very nonchalant. Others might not be as insulated from it as you or I (and others here).


Change your passwords: Comcast hushes, minimizes serious hack | ZDNet

National Vulnerability Database (NVD) National Vulnerability Database (CVE-2013-7091)

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx %20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter. NOTE: this can be leveraged to execute arbitrary code by obtaining LDAP credentials and accessing the service/admin/soap API.

Yep - except r/netsec doesn't appear (and didn't) to have anything related to comcast regarding this issue at all.....so.....

Originally Posted by DJ Mr. White

When's the last time you went onion peeling?

It's one of my chief problem solving/analytical methods.

And also last week for some fried carnitas.

Tappin dat talk