Hacker steals 22,000 email address, demands Astley tune

Dutch database hacker Darkc0ke strikes again

Dutch hacker Darkc0ke hijacked a radio station database containing 22,000 email addresses and threatened to publish them unless the station play Rick Astley's "Never Gonna Give You Up," a variation of an internet meme known as "rickrolling."

Last weekend Darkc0ke mailed DJs from the Dutch nationwide radio station 3FM and issued his threat and demand. The DJs notified the station's IT department, which realised that a backdoor to their database was indeed open.

"Of course, we did not comply" with the demand, says a 3FM spokeswoman. She confirmed that the database could be accessed and that Darkc0ke obtained the email addresses. "We repaired the vulnerability as soon as possible." 3FM reported the hack to the police.

Darkc0ke said in various email messages that he warned 3FM two weeks ago and pointed out the vulnerability to the station. He claims he never got an answer. 3FM's spokeswoman said the email was not received.

Darkc0ke said he planned to publish the database contentthreads on Pastebin.com. In the end, he published the table of contents, but didn't go through with his threat to publish the email addresses. The blackmail, he said, was a frustrated attempt to get 3FM to listen to him, and to have some fun. Tricking people into clicking a link leading to a video of Astley singing his popular 1987 song "Never Gonna Give You Up" is believed to have first started in 2007 at the image-based bulletin board, 4chan.

"It was a joke," Darkc0ke says via email. "They didn't play the song. Why can't they do someone a favour, just for once?" Darkc0ke says he cracked the database using a basic SQL injection to exploit a security vulnerability. The hacker is known for breaking into databases. Last year, he stole a database containing 46,000 email addresses from the Dutch magazine Autoweek.

While 3FM did not find it "fun" to be blackmailed and reported the incident to police, Darkc0ke says he is not concerned about the police. "They never heard anything in that case [of the Autoweek hack]. The police simply can't do much about these things."

Join the newsletter!

Error: Please check your email address.

Tags Security ID

Show Comments

Market Place

[]