dslreports logo
Hacker Group Claims Comcast Mail Server Hack

On the heels of recently hacking Bell Canada and exposing private small business customer data, a hacker collective calling itself the NullCrew now claims they've hacked into Comcast mail servers.

Click for full size
Posting to Twitter about the breach (and apparently confusing a Comcast Twitter support rep in the process), the group claims that 34 Comcast mail servers were vulnerable to one local file inclusion vulnerability exploit, which NullCrew says they used to obtain Zimbra LDAP and MySQL passwords.

A file was briefly posted to Pastebin by the group confirming the hack and providing details of the vulnerability, and while I confirmed that doc did not contain user data, it's unclear if any Comcast subscriber personal information was obtained by others using the posted exploit. I've reached out to Comcast for confirmation and additional information.

Most recommended from 56 comments



newview
Ex .. Ex .. Exactly
Premium Member
join:2001-10-01
Parsonsburg, MD

4 recommendations

newview

Premium Member

What I expect from Comcast

quote:
I've reached out to Comcast for confirmation and additional information.
They'll lie about it even if true.