Iranian hacking group extend scope of cyber-attacks

Written by Jackson Irvine Friday, 06 May 2011 10:26

As previously reported by AAN, an Iranian hacking group P8H8 has in recent days targeted the official website of popular military game Arma 2 with a series of digital defacements which have left the developers and security experts baffled, both by the means in which the hacking group are carrying out the attacks and more specifically the reason for the attacks and the mysterious information being left behind following each attack.

AAN can now report that not only has there been a further wave of attempted hacks by P8H8, but this time the hacking group went after a number of websites affiliated with arma2.com which has sent a shiver of panic right through the core of the Arma2 community.

At 2200 GMT last night, three Arma2 community websites: Ofpec.com, Armaholic.com and ArmedAssault.info were targeted for defacement apparently by P8H8, web and security experts at the three sites fiercely battled against the cyber-attacks and we can report that as of this morning all three have confirmed to us that they avoided actually being defaced by P8H8, the contents of the websites was protected and the hackers were this time foiled in their attempts, the only thing they managed to do was upload one mysterious file to the servers of each website.

The Bohemia Interactive community is abuzz with this latest development and there is wild speculation as to the meaning for everything that has happened to date, while many are concerned about how far this seemingly untouchable hacking group will go to further their aims, most are occupied with trying to solve what has become a stunningly mysterious riddle, early analysis of the image indicate that it contains a hidden url in the properties as well as a number of characters hidden in the depths of the actual image, which can only be detected by acute ocular observations. The codes were identified as video reference codes for the popular video sharing website Youtube, the codes equate to three different videos: Tom Waits "Black Wings", Rihanna "Breaking Dishes" & Bruce Springsteen "The Wrestler", specifically the codes point to exact time stamps during the videos which then play three words: stone, man & wheat, as to what these three words signify AAN has no further information.

Whilst we have no specific details about a continuation of planned attacks, it does appear that the hackers still have an agenda that they have not finished pushing. AAN this morning attempted to contact Bohemia Interactive for a statement but were met with a terse “no comment�, after attempting to explain that they had a duty to assure the Arma2 community that they aren’t in further danger from the hackers, we received a further reply of “the situation is on-going and we have nothing to say until we have concluded a full investigation.� We can only advise the Arma2 community as a whole to stay alert, be vigilant, and to trust no-one.

Further developments in on-going digital attack to popular mil-sim game site.

Written by Jackson Irvine Thursday, 05 May 2011 13:52

The sudden and unexpected defacement attack to the official webpage of a popular modern military game Arma 2, as previously reported on AAN, continues. Despite attempts by security and software experts which initially removed the digital attack by an Iranian hacking group calling themselves "p3R51An 8lacK Hat5 8oy5" (p8h8). There has been a further incident in which the arma2.com website was targeted and had its contents replaced by digital imagery and text by p8h8 which seems to identify some kind of hidden cache in a real world location.

Following the information provided by the hackers, the community at Bohemia Interactive's forum has informed us that a cache was indeed found buried in the Czech Republic on the exact spot identified in the hacker’s photographs. The cache was collected by a local treasure hunter and we bring pictures of the cache and its content link. The uncovered map seems to be a sheet from a military manual identifying some kind of war maneuvers across parts of Europe. Early indications from experts we’ve consulted say that the map does indeed appear to be authentic.

Continued digital attack on Arma2.com website

Written by Jackson Irvine Wednesday, 04 May 2011 08:00

As the hackers warned, 42 hours after the previous attack occurred, the arma2.com website has been hacked again.

Since only the background image was changed, the damage is much less significant than those of the first incident. The replaced image is archived here.