A Microsoft France Web site was hacked and defaced Sunday, and as of Monday, it remained offline. A U.S. security organization said that it had received reports of a previously unknown vulnerability in Microsoft’s Internet Information Services (IIS) 6.0 server software that may have been used by the hackers.
The Microsoft site — experts.microsoft.fr — was defaced with “HACK!” and “Your System OwNed By Turkish Hackers!”
Mid-day Monday, the site was unavailable.
The SANS Institute’s Internet Storm Center also tentatively tied the defacement with talk of a zero-day exploit against IIS 6.0.
“The defacement of microsoft.fr is used as evidence[but] at this point, we have nothing to support that claim,” wrote Johannes Ullrich, the ISW’s chief research officer in an online alert Monday.
According to the attack and defacement database maintained by Zone-H, the Microsoft France hack was done by someone identified as “TitHacK,” who has been credited with nearly 1,600 site defacements.
