EC council's website hacked, website defaced with image of Edward Snowden’s passport

EC Council, a company well known for its ethical hacking course has been defaced by a hacker who has signed off with the fictitious name Eugene Belford – a character in the movie ‘Hackers’.

Eugene Belford wrote on the EC-Council homepage, “Defaced again? Yep, good job reusing your passwords morons jack67834#”. With respect to the claim that passport and other information was stolen, the hacker posted a photo of Edward Snowden's passport, along with an e-mail from him to the council from 2010. The site's hacker referred to an attrition.org page that lists its grievances against the certifier.

EC Council is the world's leading provider of certifications and training in the information security domain led and co-founded by Indian born Jay Bavisi.

This is not the first defacement for EC-Council. Based on the e-mail screenshot posted to the organization's homepage, security researcher Ashkan Soltani and Collin D. Anderson suggested on Twitter that the "attacker hijacked DNS and gained access to GApps through domain verification account reset."

The exact amount of damage caused by the attacker is yet unknown but when we look at the source code of the page we know the attacker uploaded the two pictures directly on to the EC-Council web server which means that the website is definitely compromised. It might be that the attacker has gotten access to the emails of EC Council and hence all the email correspondence of the Law Enforcements and Military officials might be compromised also.