Cyber Incident Victim: Aviacion Militar Bolivariana
Date:
Nov 2015
Location:
Venezuela
Summary
KelvinSecTeam hacks the website of the Aviacion Militar Bolivariana (aviacion.mil.ve) and dumps 1,997 records.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In 2015, the Bolivarian Military Academy (Aviacion Militar Bolivariana) in Venezuela was hit by a cyber attack that exposed sensitive information of military personnel and their families. The incident occurred on November 8th, when an unknown group of hackers managed to gain unauthorized access to the institution's application server, stealing personal data of over 10,000 users.
According to a report by KelvinSecTeam, the attacker responsible for the breach was able to exfiltrate sensitive information such as names, addresses, phone numbers, and email addresses of military personnel and their families. The hackers also gained access to personal data related to financial transactions, including bank account details and credit card numbers.
The cyber attack on Aviacion Militar Bolivariana highlights the vulnerability of institutions in Venezuela when it comes to protecting sensitive information online. Despite being a military institution, the Academy failed to implement adequate security measures to prevent such an incident from occurring. The breach also underscores the importance of cybersecurity awareness and training for organizations that handle sensitive data.
The attackers used an exfiltration technique to steal the information, which allowed them to extract data without being detected by security systems. This highlights the need for institutions to implement robust security measures to prevent such techniques from being successful in the future.
The cyber attack on Aviacion Militar Bolivariana is a serious incident that underscores the importance of protecting sensitive information online. Institutions must prioritize cybersecurity and take necessary steps to prevent similar incidents from occurring in the future.