French TV station 'hacked by ISIS' exposes account passwords on air

10 Apr, 2015 19:18 / Updated 10 years ago

TV5Monde, which was the victim of an Islamic State cyber-attack, has accidentally exposed social media account passwords to its viewers. An interview was being filmed in the newsroom, where passwords were left hanging on a wall for all to see.

In the wake of the recent mass cyber-attack, French media spoke to employees of the television station to learn how they had been affected. However, the cameraman in one interview forgot one tiny detail – to check the backdrop behind one of the people being interviewed.

The interview with reporter David Delos, which was being recorded by France 2, revealed details about TV5Monde’s social media accounts, which had been stuck onto a wall. These included account names and passwords, which were in full view, behind the back of the journalist who was being interviewed.

Passwords on the wall... That's why we can't have nice things.

— pent0thal (@pent0thal) April 9, 2015

comment faire une attaque "élaborée" chez #tv5monde ? lisez les mots de passe affichés sur le mur #facepalmpic.twitter.com/Af6hPCHWy8

— vinzniv (@vinzniv) April 9, 2015

Although the picture quality was poor, one Twitter user ‘pent0thal,’ claims he was able to decipher the password to TV5Monde’s YouTube channel, which according to him, was “lemotdepassedeyoutube", translated as "thepasswordforyoutube" from French.

Well, the TV5Monde YouTube channel password was "lemotdepassedeyoutube" In English "thepasswordofyoutube"

— pent0thal (@pent0thal) April 9, 2015

After watching other reports, the Twitter user discovered that the French BFM TV channel also captured an image of another note allegedly containing private account information of a TV5Monde employee.

Another password spotted in the wild... pic.twitter.com/9RvVTr6FOn

— pent0thal (@pent0thal) April 9, 2015

French investigators launched a probe into the cyber-attack carried out by hackers claiming to be supporters of the Islamic State (IS) late on Wednesday. French media reported on Thursday that the attack was “well prepared beforehand”.

Heureusement que TV5Monde ne publie pas de schémas réseaux dans les médias suite à son hack #ohwait#ITSecuritypic.twitter.com/utB9XqW6Il

— François Baligant (@fbaligant) April 10, 2015

During the attack, a total of 11 channels belonging to the TV network were blacked out for about three hours. The channel’s website and social media accounts were infiltrated by pro-IS photos and slogans such as “Je suis IS” ("I am IS").

One of the messages posted on the TV5Monde Facebook page reportedly said that the hacking group, which calls itself ‘CyberCaliphate,’ is carrying out “cyberjihad against the enemies of Islamic State.”

The director of TV5Monde, Helene Zemmour, said on Thursday that this was the biggest cyber-attack the network has experienced in the past 30 years.

‘No soldier IDs compromised in attack’

The IS supporters also claimed that they published confidential documents on the hacked TV5Monde's Facebook page. These included ID cards and other information concerning the relatives of French soldiers involved in anti-IS operations in Iraq.

On Friday France’s Defense Ministry dismissed these claims saying that after "thorough examination" none of the documents were “defense-related.

"None of these documents mention the identity of French soldiers or of their families," the ministry said in a statement.

"The defense ministry categorically denies that those who attacked TV5Monde's broadcasting capabilities published defense-related confidential documents."

French authorities said the attack was a “terrorist act.” They have also urged the media to stay alert.

In March, French security officials warned that more jihadist attacks are expected in the country as the terrorist threat has “reached a level without precedent.” Islamic militants have been targeting the country in retaliation to France joining the US-led coalition’s air strikes against IS militants in Iraq.