One day after news broke about an online contest for malicious hackers, the Web site set up for the contest is offline and security experts are casting doubt on the severity of the threat that the contest poses.

The contest, known as the Defacers Challenge, awards points to malicious hackers who successfully compromise an organization's Web server and deface its Web pages, according to a warning from Internet Security Systems.

The international hacking contest is scheduled to begin Sunday and could cause headaches for organizations worldwide and disrupt the Internet, ISS says.

By Wednesday night, however, the contest Web site was offline--yanked by its ISP.

Mixed Concerns

The company that hosted the Web site, Affinity Internet of Fort Lauderdale, Florida, took the site down Wednesday after learning of it. An Affinity spokesperson cites violations of the terms of its customer usage agreement as the reason for shutting the site down.

Security experts and those close to the defacers community say large-scale disruptions caused by the contest are unlikely.

"This is something that we're not taking that seriously," says Caleb Sima, chief technical officer for security company SPI Dynamics. "Most real hackers don't pay much attention to things like this, and the kids who do participate in these [contests] are script kiddies who are already out trying to scan and deface things anyway, without needing a special day for it."

In addition, Symantec has not seen an increase in the volume of attack-related traffic on its DeepSight Alert global network of sensors, according to Oliver Friedrichs, senior manager of Symantec Security Response.

"Compared to last week, it's not that different. Companies are always under attack," he says.

Should the challenge take place, however, the sites that are most likely to be affected will be those with little or no security, Sima says.

"You're going to see defacements of Web sites that have not been maintained for four years. I don't see any real names defaced--Macy's or Bank of America," he says.

Contest Rules

While the rules of the contest put a higher value on compromising systems running less-common operating systems like Apple Macintosh and IBM AIX, winning is still based on hacking 6000 unique Web domains in the shortest period of time.

That puts a higher value on compromising Web-hosting servers that contain hundreds or even thousands of separate domains, according to Roberto Preatoni, also known as "SyS64738," founder of Zone-h.org, a Web site that tracks site defacements.

"The rules make no difference in attributing points to mass defacements (on Web servers) and single IP [addresses]. So why bother hitting multiple targets when you can win just hitting one Web hosting company," Preatoni wrote in an online chat with IDG News Service held in the Zone-h.org Web site.

All the same, Preatoni says Zone-h has noted an 80 percent decline in notifications of new Web site defacements over the last four or five days, suggesting that hackers may be saving up defacements for Sunday, when the contest begins.

Hackers, including the contest organizers, may already possess exploits to all the servers needed to win the challenge, Preatoni says. He predicts the contest could be won within a matter of seconds.

Ongoing Security Urged

Security companies of all stripes issued alerts to their customers and to the press on Wednesday, offering everything from advice to free vulnerability scans.

To protect themselves, companies should make sure their existing security measures, including firewall, antivirus, and intrusion-detection systems, are up-to-date and properly functioning. Administrators should also check to make sure that public-facing Web servers and application servers are properly patched, Symantec's Friedrichs says.

"Right now, we tell [our customers] to take standard precautions," SPI Dynamics' Sima says. "This is not something you need to do something extra for. You should have been doing this all along.... There's always somebody scanning you."

"Do What Thou Wilt Shall Be The Whole Of The Law" - Aleister Crowley 1875-1947

[Link]