Cyber-vandals are voicing support for Napster, the music file sharing service, as part of a campaign to deface websites across the world.

A hacker known as Pimpshiz yesterday hacked a number of sites including the US government's Federal Maritime Commission, US-based Filenet and the Aboriginal People's Television Network.

Pimpshiz also claimed to have defaced one of Nasa's websites - the Innovative Recoverable Spacecraft site.

The defacement on each site slammed the Recording Industry Association of America (RIAA), saying the organisation does not represent music artists but "rich record executives".

"These are the fat cats who make profits from the other 95 per cent of CD sales," it said.

"Also, may I say I applaud the lawsuit brought by 26 states against the big five music labels for CD price fixing and violating antitrust laws. This is a great positive step towards decentralisation of power in these companies," it adds.

However, Pimpshiz admits that he is not a Napster user. "I just saw something wrong and I'm doing what I can to help right it."

Chris McNab, network security analyst at security consultancy MIS, said the hack most likely takes advantage of vulnerability in Microsoft's Internet Information Server (IIS) 4.0.

"It seems the majority of web servers that the hacker known as Pimpshiz has defaced are running Microsoft Windows NT Server with IIS version 4 installed. Many vulnerabilities exist in IIS 4.0 when deployed out of the box, which can be exploited easily by hackers using simple 'point and click' tools in order to deface the website," he said.

"Hacker groups of this genre also include Gforce Pakistan and Brazilian groups such as the Crime boys. We have witnessed an increasing level of defacements being committed against Windows NT servers running vulnerable IIS services. It is important that the latest Microsoft service packs and security hot fixes are installed," he added.

The defacements follow similar attacks on websites last month. Several attacks were made on major corporate sites in the US by pro-Napster activists, although these were claimed to have been conducted by exploiting a weakness in Microsoft's SQL server.

See also:

Set a hacker to catch a hacker

Pimpshiz sells his services as security supremo  25 Jan 2002

Napster: A musical revolution online

Napster, the website, was built as a central host for users wishing to swap MP3 music files. It has sparked an almighty legal battle over its legitamacy and has changed the way people obtain music.  01 May 2001

Bill Gates targeted in hack attack

A story posted on a US newspaper's website has suggested that Bill Gates has been arrested for breaking into "hundreds, maybe thousands" of computers including those of Nasa's Jet Propulsion Lab in Pasadena and Stanford University.  12 Oct 2000

Student's PC seized over MP3 files

Campus police at a US university have confiscated the computer of a 19 year-old student following claims that he was distributing downloaded MP3 music files. He is believed to have downloaded the files from music sharing website Napster.  21 Sep 2000

Napster support won't wane, say analysts

File sharing websites such as Napster will continue to grow despite the introduction of digital security and the threat of legal action, according to two separate studies.  20 Sep 2000

HSBC reassures customers after hack attack

HSBC said no customer details or bank accounts were at risk when a hacker broke into several of its websites on Tuesday night.  20 Sep 2000

HSBC internet sites hacked

HSBC's UK internet site and three of its international sites have been hacked as part of an ongoing campaign in support of the fuel protest.  20 Sep 2000

Websites lock out cyber-vandals

Websites are getting tooled-up to stop cyber-vandals defacing their homepages.  08 Sep 2000

Weak security found in many web servers

One in three supposedly secure ebusiness servers are using software with known security weaknesses, and European sites are the worst offenders, according to a survey.  07 Sep 2000

Hacker insurance becomes a priority

Insurance firms are hoping for a boom in business as companies scramble to protect themselves against the rise in computer crime.  05 Sep 2000

Ticketmaster hacked by music fans

Online ticket seller Ticketmaster has become the latest victim of a hack attack after a group of rap music supporters defaced its website.  23 Aug 2000

Hacked websites 'didn't read the manual'

Microsoft has blamed administrator error, rather than a bug in its software, for leaving hundreds of websites running SQL server open to attack this week.  18 Aug 2000

Hacker attacks UK government websites

Several UK government websites have been defaced by a hacker protesting about the dangers of smoking.  17 Aug 2000

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!