Software designed to exploit the much lauded Gmail service has been released this week. Aptly named “Gmail Hack” the software performs Dictionary and Brute Force Attacks against a GMail email account.
The software is a windows based application that requires no technical knowledge to use. The only information you need to be able to crack a users account is their username (the first part of their @gmail.com address).
The developers AusPhreak, an Australian based hacking group, have developed the software to be simple to use, enabling anyone, not simply ardent hackers to follow a three step process to cracking/hacking into a users account.
Andrew Bonar who discovered the software and informed Google of its existence earlier today stated “I bought it because I was worried as a Gmail user myself. What is interesting is Gmail doesnt warn you when say 100+ unsuccesful login attempts have been made against your account”
Google has already fought back having instigated a Visually-Oriented Anti-Robot Test. The test identifies IP Address making multiple login attempts against an account and then kicks in with additional ‘tests’ which disables the software.
However Sean, a representative of AusPhreak said “we will try and get around any future security they put in place” and specifically commenting on the Visual Verification Tests, when asked if Gmail had put an end to the softwares usability stated “No I don’t think they have” explaining “they’ve tried to setup a pic verification only when a certain IP attacks gmail so I’m giving proxies a go” ending with the promise “I’ll get an update out”.
The software was available for sale on Ebay for less than a dollar until Midnight (GMT) 6th August 2004, when it was withdrawn, but not before several copies had already been sold.
Gmail staff have been contacted, but had not returned a comment by the time of going to publication. Ebay have contacted all bidders on the item to advise them not to go ahead with the transaction.
A UK Based technology fan and new media and marketing specialist
