Thursday, 28 August 2008

A website, SpreadFirefox.com, which is used by The Mozilla Foundation to promote its Firefox web browser and other such open-source services has been hacked, a recent statement from The Mozilla Foundation confirmed the information.

The attack shutdown the website for several days last week and was disclosed to the community members by the management via an e-mail. According to reports, there are about 100,000 community members that have registered on SpreadFirefox.com by entering their personal information, such as mailing addresses, birth dates, e-mail address and instant messenger screen names. This attack may’ve compromised personal information of all the community members that are involved in the joint promotional effort.

The management at The Mozilla Foundation said it could not confirm whether any personal information has been compromised at this point. However, the site was hacked, so hackers could use the site’s servers to send out spam messages. "It appears that a part of Spread Firefox was hacked in an attempt to use it to send out spam," posted Asa Dotzler, Developer, Firefox in one of his latest blog postings on Friday. "It doesn't look like the attacker accessed any personal data on the site, but to be safe, we're encouraging all of our users to log in and change their passwords," he further added.

The Mozilla Foundation reported that the hack was made possible by accessing an undisclosed security flaw in the Drupal Content Management System, which is used to run to maintain and operate the back-end of the site.


Article Tools
Index
E-mail Email this article