---------- Forwarded message ---------- Date: Wed, 15 May 2002 14:24:38 -0400 (EDT) From: security curmudgeon <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [defaced-commentary] Crackers deface Ferrari
[Once again, Mr Rodrigues does some good digging on the latest high profile defacement.] ---------- Forwarded message ---------- From: Giordani Rodrigues <[EMAIL PROTECTED]> To: security curmudgeon <[EMAIL PROTECTED]> Date: Wed, 15 May 2002 10:41:38 -0300 Subject: Re: [defaced-commentary] Crackers deface Ferrari Hi, Brian. Every major site posted an article about it, here in Brazil. And the reasons are: Barrichelo and the defacers are Brazilians. But, IMHO, everybody made a mistake, including Mr. Leyden from The Register. As far as I know, the sites don't belong to the real Ferrari, and I said it in my article (in colaboration with Eva Mothci and Fernando Sousa, from Terra/Lycos): http://www.infoguerra.com.br/infonews/viewnews.cgi?newsid1021323288,70815,/ There were 3 defaced sites: ferrari-group.com and ferrari-group.biz, defaced by S4t4n1c_Souls and ferrari.co.jp, defaced by Silver Lords. The mirrors are: http://www.zone-h.org/defaced/2002/05/12/www.ferrari.co.jp/ http://www.zone-h.org/defaced/2002/05/12/www.ferrari-group.com/ http://www.zone-h.org/defaced/2002/05/12/www.ferrari-group.biz/ Click on www.ferrari-group.com (it's restored now). Do you really think this site belongs to Ferrari? (The title of the page is "new domain"!!) Ferrari is located at Maranello, Italy, and its company's name is Ferrari S.p.A. But, take a look at these whois: Ferrari-group.biz and ferrari-group.com (the domain ferrari-group.com was created in 2001-09-27, only 6 months ago!!!): Domain Name.......... ferrari-group.com Creation Date........ 2001-09-27 Registration Date.... 2001-09-27 Expiry Date.......... 2002-09-27 Organisation Name.... Ferrari Group srl Organisation Address. via T. Gallio, 3 Organisation Address. Organisation Address. Cittadella Organisation Address. 35013 Organisation Address. PD Organisation Address. ITALY xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx FERRARI-GROUP.BIZ Domain ID: D2348143-BIZ Sponsoring Registrar: MELBOURNE IT D/B/A INTERNET NAMES WORLD WIDE Registrant ID: B10128418300782 Registrant Name: Ferrari Group srl Registrant Organization: Ferrari Group srl Registrant Address1: Via T. Gallio, 3 Registrant City: Cittadella Registrant State/Province: PD Registrant Postal Code: 35013 Registrant Country: Italy Registrant Country Code: IT Registrant Phone Number: +39.0498056830 Registrant Facsimile Number: +39.0498056834 Registrant Email: [EMAIL PROTECTED] [snip] Technical Contact Email: [EMAIL PROTECTED] Name Server: NS.SEVEN.IT Name Server: NS2.SEVEN.IT Created by Registrar: MELBOURNE IT D/B/A INTERNET NAMES WORLD WIDE Last Updated by Registrar: MELBOURNE IT D/B/A INTERNET NAMES WORLD WIDE Domain Registration Date: Mon Feb 04 16:57:11 GMT 2002 Domain Expiration Date: Tue Feb 03 23:59:59 GMT 2004 Domain Last Updated Date: Tue Feb 05 16:33:59 GMT 2002 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxx Ferrari.co.jp Domain Information: a. [Domain Name] FERRARI.CO.JP g. [Organization] KATO INC. l. [Organization Type] Corporation m. [Administrative Contact] SS535JP n. [Technical Contact] MA129JP p. [Name Server] ns.ferrari.co.jp p. [Name Server] ns2.birthday.co.jp y. [Reply Mail] [EMAIL PROTECTED] [State] Connected (2002/06/30) [Registered Date] 1997/06/30 [Connected Date] 1997/07/02 [Last Update] 1998/07/29 21:29:30 (JST) [EMAIL PROTECTED] xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx The real Ferrari (Ferrari.it): domain: ferrari.it x400-domain: c=it; admd=0; prmd=ferrari; org: Ferrari SpA descr: Fabbrica Automobili Sportive e da corsa admin-c: MS2780-ITNIC tech-c: MS2780-ITNIC tech-c: BC339 postmaster: IM175-ITNIC zone-c: BC339 nserver: 193.42.138.2 dns.ferrari.it nserver: 194.196.14.4 genius.intesa.it mnt-by: INTESA-MNT created: before 960129 changed: [EMAIL PROTECTED] 19990726 changed: [EMAIL PROTECTED] 19990630 changed: [EMAIL PROTECTED] 20000817 source: IT-NIC person: Mauro Sabbatini address: Via Abetone Inferiore, 4 address: I-41053 Maranello (MO) address: Italy phone: +39 0536 949230 fax-no: +39 0536 949414 nic-hdl: MS2780-ITNIC changed: [EMAIL PROTECTED] 19980120 source: IT-NIC xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx The real Ferrari at USA: Ferrari North America (FERRARI6-DOM) via Abetone Inferiore 4 Maranello, MO 41053 ITALY Domain Name: FERRARI.COM Administrative Contact: Sala, Alessandro (ASV707) [EMAIL PROTECTED] ferrari s.p.a. via Abetone Inferiore 4 Maranello, MO 41053 IT +39 0536 949792 (FAX) +39 0536 949011 Technical Contact: Ciaoservice Domain Registration Staff (CD3998-ORG) [EMAIL PROTECTED] Ciaoservice s.p.a. Strada 3 - Palazzo B/2 - 20 Piano Assago, 20090 ITALY +39 02 575591 Fax- +39 02 57559319 Regards, Giordani Rodrigues http://www.infoguerra.com.br - The information and commentary is Copyright 2002, by the individual author. Permission is granted to quote, reprint or redistribute provided the text is not altered, and the author and attrition.org is credited. The opinions expressed in this mail are not necessarily the opinion of all Attrition staff members. Commentary Archive: http://www.attrition.org/security/commentary/ The Attrition Mirror: http://www.attrition.org/mirror/attrition/ Country/TLD Statistics: http://www.attrition.org/mirror/attrition/country.html Attrition Defacement Statistics: http://www.attrition.org/mirror/attrition/stats.html Operating System Graphs: http://www.attrition.org/mirror/attrition/os-graphs.html Other Web Defacement Mailing Lists: http://www.attrition.org/security/lists.html Contacting Attrition Staff: [EMAIL PROTECTED] To subscribe to Defaced Commentary, send mail to [EMAIL PROTECTED] with "subscribe defaced-commentary" in the BODY of the mail (without quotes). To unsubscribe, include "unsubscribe defaced-commentary" in the BODY of the mail. - ISN is currently hosted by Attrition.org To unsubscribe email [EMAIL PROTECTED] with 'unsubscribe isn' in the BODY of the mail.
