The AnonSec hacking team has published data that contains data from 2.414 NASA officials, 631 video recordings from various NASA aircraft and radar and 2.143 flight recordings.
In the text that accompanied the data, the AnonSec said that NASA was accidentally hacked into 2013 when one of the Gozi viruses released on the internet infected one of the server's servers.
Using this initial access, οι hackers της ομάδας κατάφεραν να αποκτήσουν πρόσβαση στον root του server σε μόλις 0.32 δευτερόλεπτα λόγω του εξαιρετικά απλού κωδικού πρόσβασης διαχειριστή.
The team not only retained access to the hacked server, but over time they managed to extend their access to NASA's internal network, ultimately breaking up three NAS (Network Attached Storage) devices.
NASA made use of these devices to download and then back up flight plans from missions of unmanned aircraft (drones). AnonSec members got root access to these devices and stole some of the data stored on the hard disk.
Later, the hackers were able to view the CCTV cameras from Glenn Research Center, Goddard Space Flight Center, and Dryden Flight Research Center.
AnonSec members also uncovered video recordings from NASA Global Hawk drones and Operation Ice Bridge regular missions.
At analysis After a few moves on the network, the hackers found that NASA engineers often uploaded a predetermined flight plan for most of their drone missions.
Using a simple MITM (Man-in-the-middle) attack, hackers took off one of these flight plans and replaced it with one of their own, which provided a NASA-rated Global Hawk Drone worth $ 222.700.000 to crash in the middle of the Pacific Ocean .
Although the managed team loaded a custom .gpx file that controls the unmanned aircraft according to its wishes, one of the NASA engineers detected a change in the original plan of the unmanned aircraft and thus manually took control of the ship .
Soon after this incident, NASA realized what was going on and AnonSec lost access to NASA servers. The team shared a screenshot showing that the violation of the drone flight plan took place on 9 April 2015.
Before uploading the files in their hands to Facebook and Infowars, the hackers tried to contact Wikileaks and The Guardian. After a pre-briefing and initial access to the data, Infowars has confirmed that the data contains accurate information about the 2.414 NASA employees including name, email and phone numbers. But no one agreed to publish the data, not even Wikileaks.
AnonSec has justified their actions by saying that the US and NASA have long been involved with cloud mechanics (cloud clouds, or chemtrails) and have handled local and global weather conditions.
The team has shared around 275GB data via BitTorrent links.
https://www.youtube.com/watch?v=NySx6A_PO4M
