Skip to main content

Pro-ISIS hackers attack 800 US school websites

Published on: 14 Nov 2017

Hundreds of websites for US schools were hijacked by pro-ISIS hackers this week as the terrorist organisation expanded its war online.

Around 800 sites were affected after their web hosting provider was compromised and redirected users to a website displaying ISIS messages and a recruitment video, as well as an image of former Iraqi president Saddam Hussein, according to IBTimes.co.uk

Hacking group Team System Dz has claimed responsibility for the cyber attack - the same group that, in June, attacked government websites in Ohio, Maryland and New York, and defaced them with a pro-ISIS messages such as ‘I Love Islamic state’.

The websites' hosting services provider, Atlanta-based SchoolDesk, said any affected sites were immediately taken down.

A statement from the provider revealed that the attack was made possible by a small file injected into the root of one of the SchoolDesk websites. This redirected school and district websites to an iFramed YouTube page containing an audible Arabic message, unknown writing and a picture of Saddam Hussein.

SchoolDesk added that they were unsure if the exact method and point of intrusion, it suspected it could be due to an SQL injection or through a user account with a weak password.

Multiple layers of redundant protection have been applied to prevent a repeat of the attack