When examining the hacked Web mirror of the US Senate site, (hacked by MOD), with a side-by-side comparison of the Spice Girls Web site hack, (hacked by CodeZero group member so1o) we noticed some startling similarities on the surface of the page. If you look closely at both pages, The layout is pretty much the same right down to the picture of the 'challenged kids' at the bottom. However, looking further into the source code of the site reveals much more information. Lets take a look. ------ w3lc0m3 t0 th3 ph34r n4t10n [From the Spice Girls hack we see an array of meta tags which hold the authors name "Tetsu Khan" aka so1o. The generator or what tool was used to author the Web page was on a Win95 machine running Netscape (the generator in this case) and finally a description of the site. Now look at the title tags... sure does look similar to the one below and right down to the numerics and characters] ------ w3lc0m3 t0 th3 ph34r n4t10n [From the Senate hack we see just about the same thing except this time the hacker has changed the content source but the layout seems to be the same. Also look between the title tags.. Its an EXACT match to the one above.. makes ya wonder huh? And where else is that title.. on the following hacked pages: [97.12.16] [code zero] FMB (www.fmb.com) [97.11.14] [code zero] Spice Girls (unknown domain) [97.04.26[ [code zero] Amnesty International (www.amnesty.org) [98.01.03] [code zero] Bolling AFB (www.bolling.af.mil) [98.01.02] [code zero] Janet Jackson Official Site (www.janet-jackson.com) [98.01.02] [code zero] Rolling Stones (www.the-rolling-stones.com) ------ [From the Spice Girls hack, the next line down shows the colors used for text, background, the links, and the links that have been followed.] ------ [From the Senate hack... wow, sure does look similar infact, its exactly the same!] ------

wh0 laughs last you fools? [From the Spice Girls hack... signature phrase of so1o from CodeZero which was used in many hacks some of the sites in which he used that phrase were the following: [97.12.16] [code zero] FMB (www.fmb.com) [97.11.14] [code zero] Spice Girls (unknown domain) [97.04.26[ [code zero] Amnesty International (www.amnesty.org) ------

wh0 laughs last? [From the Senate hack... heh, I don't think anything needs to be said here.. it speaks for itself!] ------

0wned (0wn`3d) : the art of showing how stupid a sysadmin can be, see sekurity.

[From the Spice Girls hack we see that so1o has taken the word 0wned (owned) and put his definition to the word owned in there] ------

0wned (0wn`3d) : the art of showing how stupid a sysadmin can be, see sekurity.

[From the Senate hack... wow we have a match. Looks like somebody messed up big time. Again, this speaks for itself!] ------

[From the Spice Girls hack we see the bottom graphic is of the 'challenged kids' named retard.jpg] ------

[From the Senate hack we see the exact same graphic at the bottom labled the same retard.jpg but, its being pulled from a hacked page archive at 2600.net and the funny part is its the archive of the Spice Girls hack in which we are comparing the Senate hack to... Somebody REALLY messed up!] ------ Other important references: [Mirror of the Senate.gov hack] http://www.attrition.org/mirror/attrition/gov/www.senate.gov/ [Mirror of all of CodeZero's hacks (member so1o)] http://www.attrition.org/mirror/attrition/codezero.html Look at the Senate hack and the Spice Girls hack... look how it is layed out, how the break bars are layed out on both, how the titles at the top of the browser are the same, how the colors are the same, how the graphics are very similar, and how the bottom graphic is the same. In fact, I would go as far as saying that the hacker that hacked the Spice Girls and the hacker that hacked the Senate are the same.