Security firm Imperva reports that a hacker is selling access to military, educational, and government websites for bargain basement prices ranging from $55-499. Imperva, which reported on the hacker on Friday, believes that he was able to gain access to the sites through a SQL injection technique.
The priciest hack is access to the homepages of the U.S. Army, National Guard, and Army Forces, goes for $499 each. The Department of Defense, surprisingly, is lower-priced, and access only costs $399.
In addition to these and other .mil, .edu, and .gov sites, the hacker is also selling personal data at the going rate of $20 for 1,000 names, addresses, and telephone numbers. As an example, Imperva displays a redacted screenshot of University of Connecticut staff members' information.
The hacker will also scan a site for security vulnerabilities for a mere $2, "hack a normal website" for $10, hack a "high-profile website" for the open-ended $10+, or give a customer 3MB of random hacked accounts for $65.
Truly, this hacker is sort of the Target, or even Wal-Mart of hacks, with a large selection of wares. It's truly frightening, especially with his sale on "normal" websites and person information.