The Motion Picture Association of America (MPAA) website has been hacked (again) as hackers found a basic vulnerability that they were able to easily exploit to add a bit of humor to the site.
An XSS vulnerability on the MPAA website allowed those responsible to offer a list of Pirate Bay torrent files instead of poll results after site visitors replied to a poll of their favorite movie. Anyone who knew about the vulnerability had the ability to inject images, frames and other types of code into the web site.
After a person filled out the poll, they were greeted by a "thank you for taking the time to share your favorite movie" response, though a Pirate Bay logo and a list of torrent files popped up along with the thank you.
The following screenshot shows one of the changes implementede by the intruders:
Both the MPAA and RIAA have suffered similar attacks in the past, as their campaign against Internet piracy has angered many tech-savvy computer users. Hackers normally choose to deface web sites rather than take them down, often times posting links to pirated materials, or verbally attacking the group.
