NSA Server vulnerable to SMTP Spoofing, can be used for Social Engineering

by Tuesday, January 07, 2014 3 comments

NSA Server vulnerable to SMTP Spoofing, 


can be used for Social Engineering 




An Indian hacker known as "Godzilla" has identified a vulnerability in the NSA website that allows an attacker to send fake emails from NSA's SMTP server.

NSA's SMTP server allows anyone to use the service without verifying the IP address and password.  The most interesting part is that it allows you to use any email address(for eg: admin@nsa.gov).

This vulnerability can be exploited by an attacker for launching a Spear phishing attack. An attacker can send email to anyone inside the organization(for eg to: admin2@nsa.gov).  As it is using the NSA SMTP server, it is need not to worry about firewalls.

In a screenshot provided to EHN, the hacker used the email id of the NSA Director "Gen Keith B Alexander"(KeithAlexander@nsa.gov) to send email to another email id.

"sending a mail with a link attach to it. That can be a bot link. Everyone will receive the mail with .nsa.gov domain as the mail is shooted from the same network." The hacker said.

"The mail will be send with the name of Director as no one will dare to skip the mail and have to read it. After opening the mail the attacking vector will get active. After this the ball will be in the attackers court."
"SMTP is a dangerous protocol and if you dont know how to secure it, its better you shut it down."

"Stupid NSA you are lucky its 31st December and we are not in a mood to shoot are malwares in your server." Hacker said.

Unknown

Developer

Cras justo odio, dapibus ac facilisis in, egestas eget quam. Curabitur blandit tempus porttitor. Vivamus sagittis lacus vel augue laoreet rutrum faucibus dolor auctor.

3 comments:

  1. If you ever want to change or up your university grades contact cybergolden hacker he'll get it done and show a proof of work done before payment. He's efficient, reliable and affordable. He can also perform all sorts of hacks including text, whatsapp, password decrypt,hack any mobile phone, Escape Bancruptcy, Delete Criminal Records and the rest

    Email: cybergoldenhacker at gmail dot com

    ReplyDelete
  2. BE SMART AND BECOME RICH IN LESS THAN 3DAYS (williamshackers@hotmail.com) or WhatsApp +15592016732… It all depends on how fast you can be to get the new PROGRAMMED blank ATM card that is capable of hacking into any ATM machine,anywhere in the world. I got to know about this BLANK ATM CARD when I was searching for job online about a month ago..It has really changed my life for good and now I can say I'm rich and I can never be poor again. The least money I get in a day with it is about $50,000.(fifty thousand USD) Every now and then I keeping pumping money into my account. Though is illegal,there is no risk of being caught ,because it has been programmed in such a way that it is not traceable,it also has a technique that makes it impossible for the CCTVs to detect you..For details on how to get yours today, email the hackers on: (williamshackers@hotmail.com). Tell your loved once too, and start to live large. That's the simple testimony of how my life changed for good… Love you all …the email address again is email (williamshackers@hotmail.com) or WhatsApp +15592016732…

    ReplyDelete
  3. Looking to Solve Your Financials Solutions
    Be careful anytime you are buying cc or dumps, i was searching for a legit vendor before and i was ripped so many time until i met someone who was recommended by Admin of carding forums.
    They sell the following Fresh good Dumps and with pin, Different Countries CVV, Fullz, Banks logins, Paypal with G-talk verified, Ebay, Amazon accounts logins, bestbuy, all kinds of shops account available, RDP, Mailers PHP,Best Leads. EMV Software Reader Writer all are available.

    They are from Russia among the best, they gave me my biggest cash out in cc and dumps till date, i advise you to get your tools ready and have a good setup if you want to get success in your transaction
    you can reach them on below contacts

    Email: gary.jones00222@gmail.com
    jdenterprises@qualityservice.com,
    hark212@hotmail.com
    Telegram: https://t.me/validvendors
    icq: chat- 711343039
    Your financial solutions, stop stressing in silence
    Thank me later

    ReplyDelete