This is not the first time Apache.org has been hacked, it was comprised back in September 2009 using SSH keys.
This time another targeted attack against the site was successful and allowed the attackers to capture the passwords of users logging into the bug-tracking service.
It also exposed the entire password list, which sadly although hashed was salted with a static salt rather than a random one..so it
The link for this article located at Darknet is no longer available.
