Internet Archive targeted in new attack, this time on support tickets.

The Internet Archive continues to feel the effects of the recent attack on its platform, not only in terms of DDoS attacks but also unauthorized access to the entity. The latest impact is now affecting the entity’s Zendesk platform, which is used as its support platform, where users can create support tickets for various purposes.

Since yesterday, several users who have submitted requests to the Internet Archive in recent months have started receiving messages in old tickets. In response, a message was left indicating that the entity had been attacked and that a security flaw allowed the sending of responses to the tickets.

The issue seems to stem from the fact that the Internet Archive did not revoke some old API keys, which technically could allow access to the tickets created on the platform. Attackers appear to have used this to send responses to thousands of old tickets. The message stated that the attackers had access to over 800,000 tickets created in the system since 2018.

The message seems to have been sent directly from the Internet Archive’s systems, confirming its legitimacy. According to BleepingComputer, this incident may have allowed third parties to access the content of thousands of tickets created with the entity since 2018, some of which may contain personal data and other information, such as requests for content removal from the Wayback Machine and personal data within it.

Depending on the access granted by the token, the attacker may have been able to access attachments within the tickets and potentially download the content. It is believed that these recent attacks on the Internet Archive are not a form of protest or dissatisfaction with the platform but rather a way for the attackers to gain recognition within the community. Targeting a important internet platform like the Internet Archive is certainly a way to achieve that reputation. This is further supported by the fact that no ransom demands have been made for the content, and the information is being directly made available and visible.