In conjunction with #OpNicaragua, over the weekend the Nicaraguan Ministry of Energy and Mines was hacked, defaced, and confidential log in information tied to various databases attached to the website were stolen/leaked online. The attacks were pulled off by a relatively new Anonymous hacker going by the name of “SystemD” – Twitter handle @sig_kill_9 – whom managed to bypass their Web Application Firewall, deface the site and ultimately record sensitive information belonging to various Government officials and web administrators – including emails and encrypted passwords.
Rogue Security Labs has reached out to the Nicaraguan Government and some of the officials compromised in the breach to confirm whether or not the information exposed in the leak provided below was indeed legitimate, but as of November 5th 2018 Nicaraguan officials have declined comment on the matter. Though, upon analysis, the website targeted by the attack – http://www.mem.gob.ni/ – lacks fundamental and basic security measures, such as an active SSL Certificate, indicating that the hack may have been easier than not to pull off.
Leaked Information: https://ghostbin.com/paste/6qg9o
#OpNicaragua has been launched by Anonymous to fight back against the repressive actions of the Nicaraguan Government, whom have repeatedly attempted to forcefully silence or outright kill legitimate protesters and protest movements inside the country. The actions of the Nicaraguan Government have caught the worlds attention and as of November 2018, the country is considered one of the worlds worst violators of human rights. If you would like to learn more about the ongoing situation in Nicaragua, you are invited to educate yourself utilizing the following links:
Nicaraguan Reports – Amnesty International: https://www.amnesty.org/en/search/?country=38314
Nicaraguan Reports – Human Rights Watch: https://www.hrw.org/sitesearch/nicaragua