Federal Fiscal Court switches off website after hacker attack

Status: December 17, 2021 1:37 p.m.

At the weekend, IT security experts warned against the “Log4j” vulnerability, which hackers could exploit. The Federal Fiscal Court is now apparently affected by this. The court’s website has been shut down.

The Federal Fiscal Court (BFH) temporarily shut down its website after a hacker attack in connection with the “Log4j” vulnerability. Only the website of the highest German tax court was affected, the attack was successfully fended off and stopped, said a spokesman for the BFH. The hackers therefore had no access to the intranet or sensitive data from tax procedures or from citizens.

It is not yet clear when the BFH page will be reactivated. “Due to maintenance work on the server, our website is not available until further notice,” read there on Friday. Information on the work of the court and key tax law decisions can usually be found there.

BSI announces warning level “red”

The Federal Office for Security and Information Technology (BSI) announced the warning level “red” at the weekend because of the “Log4j” weak point. According to information from BSI President Arne Schönbohm, there have been numerous attempts by criminals who wanted to exploit the vulnerability and install malicious software on the attacked servers.

At the beginning of the week, a spokesman for the Federal Ministry of the Interior announced that several points in the federal administration were affected by the vulnerability. So far, however, there has been no evidence of “successful attempted attacks on federal authorities or critical infrastructure”. The number of federal authorities where the vulnerability was discovered is in the single digits.

The Federal Fiscal Court, based in Munich, is the highest court for tax and customs matters. Along with the Federal Court of Justice, the Federal Administrative Court, the Federal Labor Court and the Federal Social Court, it is one of the five highest courts in Germany.


Leave a Reply

Your email address will not be published.