Kaspersky's US website hacked

The US Kaspersky site admits a vulnerability which hackers used to access its private database.

Kaspersky has suffered from an embarrassing security lapse, with hackers from HackersBlog.org claiming to have infiltrated the US version of its website.

A SQL injection attack was used to break into Kaspersky's database, gaining access to "everything," according to the hackers, who claimed visibility of user accounts, activation codes and customers' personal details.

Kaspersky admitted in a statement that a subsection of the usa.kaspersky.com domain detected a vulnerability at the weekend which a hacker tried to attack. Upon detection, Kaspersky Lab USA took action to roll back the subsection of the site to eliminate the risk.

The Russian company has stressed that the attack didn't affect the UK site in any way. The US website infrastructure is hosted and operated independently, so the breach was confined to the US only.

Both the hackers and Kaspersky stressed that the attack was not malicious, and that no data was exploited due to the flaw. "Kaspersky['s] team doesn't need to worry about us spreading their confidential stuff," the hackers said on their blog in response to a story on The Register.

"Our staff will never save or keep any confidential data. We just point our fingers to the big websites with security problems. We hope to see that vulnerability patched very soon (If it isn't already patched)."

It's alleged that Kaspersky wasn't the only security vendor to be hit by the hackers. They claimed they had also broken into the Portuguese version of BitDefender's company website, accessing personal details and email addresses.

BitDefender said in reply that the site hacked was not owned or operated by it. It said: "A partner site was compromised and we are working to investigate exactly what happened so we can help our partner prevent this from happening again."

Featured Resources

Consumer choice and the payment experience

A software provider's guide to getting, growing, and keeping customers

Download now

Prevent fraud and phishing attacks with DMARC

How to use domain-based message authentication, reporting, and conformance for email security

Download now

Business in the new economy landscape

How we coped with 2020 and looking ahead to a brighter 2021

Download now

How to increase cyber resilience within your organisation

Cyber resilience for dummies

Download now

Recommended

Nigerian cyber criminals target Texas unemployment system
cyber security

Nigerian cyber criminals target Texas unemployment system

27 May 2021
Hackers use open source Microsoft dev platform to deliver trojans
Security

Hackers use open source Microsoft dev platform to deliver trojans

14 May 2021
NSA releases guidance on voice and video communications security
Voice over Internet Protocol (VoIP)

NSA releases guidance on voice and video communications security

18 Jun 2021
Ransomware criminals look to other hackers to provide them with network access
ransomware

Ransomware criminals look to other hackers to provide them with network access

17 Jun 2021

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

16 Jun 2021
Q&A: Enabling transformation
Sponsored

Q&A: Enabling transformation

10 Jun 2021
What is HTTP error 400 and how do you fix it?
Network & Internet

What is HTTP error 400 and how do you fix it?

16 Jun 2021