Incident
incident:west_virginia_police_department_website_hack
Compromise of a West Virginia police-department website through SQL injection and exposure of a police database.
Compromise of a West Virginia police-department website through SQL injection and exposure of a police database.
“he hacked into the West Virginia Police Department’s website using an SQL injection”
“That database had a list of all the police officers in that department”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ATTRIBUTED_TO | Higinio Ochoa | Explicit | 63 |
| outgoing | INITIAL_ACCESS_VIA | SQL injection vulnerability | Explicit | 63 |
| outgoing | INVOLVES | Doxxing | Explicit | 63 |
West Virginia Police Department website hack ATTRIBUTED_TO Higinio Ochoa
The West Virginia police website hack is attributed in the episode to Higinio Ochoa/w0rmer.
Explicit Confidence 96% · Jack Rhysider EP 63 Details
“The first one that he found that was vulnerable was the police department’s website in West Virginia.”
“W0rmer’s real name is in fact Higinio, or Hig, for short.”
West Virginia Police Department website hack INITIAL_ACCESS_VIA SQL injection vulnerability
The West Virginia police website was entered through an SQL injection vulnerability.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“He found the website was vulnerable to SQL injections”
“he hacked into the West Virginia Police Department’s website using an SQL injection”
West Virginia Police Department website hack INVOLVES Doxxing
The incident involved obtaining and publishing police officers’ personal information, which Jack identifies as doxxing the police.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“This is what you call doxxing the police.”