Rapid7 Incident Response Delay: KDMS Website Takeover Analysis

Rapid7 has acknowledged that it waited too long to take the security actions needed to prevent a pro-Palestine hacking group from taking down two of its websites by sending a fax to the sites' registrar.

The group, called KDMS, sent the phony fax Friday to Register.com, requesting a change to the IP addresses associated with the URLs of Rapid7 and Metasploit. As a result, visitors to the sites' homepages were redirected to a politically charged message.

The link for this article located at CSO Online is no longer available.