The hacktivist group Anonymous breached into the website of United Nations Framework Convention on Climate Change (UNFCCC) and leaked a trove of personal information of 1415 officials.
While the United Nations Climate Conference (Cop21) is taking place in Paris, France, the online hacktivist Anonymous is protesting against the arrests of peaceful protesters marching against the Climate-related policies in the country’s capital.
Earlier yesterday, 208 protesters were arrested by the police and this is something Anonymous is not happy with. So to mark its protest the group breached into the official website of UNFCCC exploiting simple SQL vulnerability and got accesses to a trove of personal information of registered users and officials from hundreds of countries around the world.
In an exclusive conversation with one of the Anonymous hacktivists, HackRead was told that:
“We will continue fighting for Humans, Greens and Animals rights. We know they use victims of ParisAttacks to restrict people rights, we know they don’t care climate changes what they caused that.”
The Leaked Data:
After scanning the leaked data, HackRead can confirm it to be legit and never been leaked before. The data has been divided into two files and both of them includes usernames, emails, encrypted passwords, secret questions and their answers, phone and fax numbers, PO Box numbers, city name, office address and company names.
Screenshot from the data
Most of the leaked credentials belong to the officials from Australia, Canada, Pakistan, Brazil, Belgium, India, UK, USA, Turkey, Germany, Norway, Ethiopia, Egypt, Ghana, South Africa, Indonesia, Thailand and several other countries.
Screenshot shows Anonymous has access to the CMS of Unfccc.int
Screenshot shows Anonymous can add/edit the data (2)
Screenshot shows Anonymous can add/edit the data (2a)
The leaked data is available here.
The hacktivists are also planning to leak more personal data on the officials against the police attack on the Cop21 march. Once they do, HackRead will update our readers.
According to Anonymous:
“We could deface the site, but that won’t hurt them, we know data leak will and does so there’s more to come. These hacks are not just against Police brutality, these are also against Cop21 to support Global Climate March.”
The kind of information leaked by Anonymous in this attack poses a huge threat to the online identity and privacy of the affected users. Cyber criminals can use this information to hack into their emails, social media and even the banking accounts.
This is not the first time when Anonymous protested in support of climate, human and animal rights. In the past, the hacktivists went against X-Rated animal abuse websites and shut down world’s largest animal abuse forum.
In October 2015, Anonymous also claimed responsibility for shutting down two Japanese Airport websites against Dolphin slaughter in the country.
