Google, Microsoft and Yahoo DNS records hacked
מאת Yaron Orenstein | 8 תגובותTwo days ago, while looking for information regarding the owner of a certain domain, I decided to check who is the owner of the Google.com domain. Using one of the websites providing the Whois service I discovered that the DNS was hacked by a Russian group called www.web-hack.com.
This hacking group has modified some of Google’s records and added information to the end of each specified Google domain.
For example, they modified the main Google.com domain to:
GOOGLE.COM.HAS.LESS.FREE.PORN.IN.ITS.SEARCH.ENGINE.THAN.SECZY.COM
GOOGLE.COM.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COM
Intrigued by these findings I tried the Whois for Microsoft.com and incredibly, this domain’s DNS have also been abducted by the same hacking group, though this one contains some cleverer modifications, such as:
MICROSOFT.COM.WILL.LIVE.FOREVER.BECOUSE.UNIXSUCKS.COM
MICROSOFT.COM.SHOULD.GIVE.UP.BECAUSE.LINUXISGOD.COM
and if that’s not enough, Yahoo.com has suffered the same fate:
Two days later, this data is still available to those checking the Whois for these domains. None of the affected companies' IT departments has fixed it.
Sharon Vardi, a security and IT expert, explains: “What happened is that some hackers managed to "poison" the DNS registration information for some companies. This causes the updated information to replicate to all DNS servers worldwide without any ability to control the infection until the data is deleted and replicated again. Such hacking is called DNS poisoning or spam. It is basically harmless and causes no real damage except the messages placed in the DNS records.”
This raises two questions:
1. How come a Russian hacking group manages to hack the DNS records of the three largest Internet companies in the world?
2. While not fatal, why none of these companies has managed to trace and fix it for two days (so far) ?
the.co.ils is the leading Israeli Web2.0 blog, covering and analyzing Internet trends from various aspects, with a focus on the Israeli Web2.0 scene. We are planning on launching our English version soon, so please feel free to add our English RSS feed and be there when it happens.
