Question

Daniel is a Web designer for Xeemahoo, Inc., a news agency. Inaccurate or fallacious news on the Web site poses a threat to the company: the agency can be sued for publishing false information. Part of Daniel’s responsibilities is to upload HTML files to the Web site each day. He confirms with the editors that the content is accurate. Then he marks up the news with HTML tags and uploads it to the server of AgentonWeb, the hosting site.

One day, Daniel checks the daily upload to ensure that accurate news was posted, but discovers that incorrect, damaging information has been uploaded in place of the marked-up files.

Jason Springfield, an ethical hacker, was called in to investigate the situation at Xeemahoo. Investigations revealed that Daniel’s session was hijacked by an Agenton employee during the upload. A disgruntled employee of AgentonWeb had files that contained the fallacious information on his desktop.

1. How did this happen?
2. Is there a problem with the Web server configuration?
3. How can this be prevented in the future?
4. Is there a risk in outsourcing Web hosting to third-party service providers?

Answer 1

a) An admistration hijacking session attack allows attackers easily gain access over admins sessions on the web browser to perform mailicious operations ,i.e backdoor the device by creating a new admistrative account.

b) The website was built with all default configuration and web server was not updated .

c) Computer Hacking Forensic investigation is the process of detecting hacking attacks and properly extracting evidence to report the crime and conducts audits to prevent future attacks.

d) Yes , there is a risk in outsourcing web hosting to third party service providers without proper check.