Publicly disclosed information for this event

Index Number:

Title:

2002_001

Remote access on naval IT systems.

Day	Month	Year	Country	Activity	Incident Type
1	April	2002	United States	Defence	Intrusion

Summary

A group of hackers managed to penetrate the computer systems of the U.S. Navy's command and other entities. They defaced the U.S. Navy's website to highlight security vulnerabilities. A defense contractor, developing a website for the U.S. Navy, shut down its network after the hackers accessed employee passwords. The website pages were also defaced, information was made public, and messages claimed the action under the name "Dynamic Duo".

Victim

US Navy

Claimed/Reported Threat Actor

Dynamic Duo

Origin

Undisclosed

Main impact

Integrity

References

https://www.symantec.com/content/en/us/about/media/securityintelligence/SSR-Timeline.pdf

Recommendations to Defence to reduce Intrusion risks:

Implement strong access controls and authentication mechanisms to limit unauthorized access, such as Multi Factor Authentication.
Regularly update and patch software and systems to address known vulnerabilities.
Use Network Intrusion Detection Systems (NIDS) to monitor and block suspicious activities.
Segment your network to limit lateral movement by attackers in case of a breach.
Educate your employees about phishing attacks and social engineering tactics to prevent credential theft.

Previous Next

Disclaimer: the data are provided as is. France Cyber Maritime and the M-CERT take no responsibility for the soundness, quality, precision, nor the eventual attribution made by the referenced URLs. We give a lot of respect and support to the victims of attacks.

Files generated on Thursday, 10th October 2024.
ADMIRAL is licensed under the Creative Commons