WHO and UNESCO websites were hacked by simply uploading a PDF file

The websites of the World Health Organization (WHO), the United Nations Educational, Scientific and Cultural Organization (UNESCO) and other international non-profit organizations appear to have been compromised by a cybercriminal identified as m1gh7yh4ck3r, who has published multiple PDF files on hacked websites.

La imagen tiene un atributo ALT vacío; su nombre de archivo es who01.jpg

According to a report published by CYBERWARZONE, the staff in charge of the WHO website has already removed the content from their platform, although these PDF files can still be found on the UNESCO website.

La imagen tiene un atributo ALT vacío; su nombre de archivo es who02.jpg

Apparently, these PDF files contain multiple manuals for hacking activities on computer systems, plus include a link to redirect users to the hacking forum known as hackit.shop.

La imagen tiene un atributo ALT vacío; su nombre de archivo es who03.jpg

Although at first glance this does not seem like a harmful activity, compromising the websites of such organizations could lead to highly risky scenarios.

La imagen tiene un atributo ALT vacío; su nombre de archivo es who04.jpg

Thanks to an analysis of cybersecurity specialists it has been detected that there are more than 1000 indexed links to Google, all include the term m1gh7yh4ck3r.

So far no further details are known about the incident or the alleged attacker’s intentions; security teams in affected organizations are expected to delete information published by the hacker shortly.