Israeli Microsoft, CNN, BBC, Skype all Defaced, DNS Server Hacked, or Cyber Trickery?
Visitors to several Israeli websites were greeted with the above message. Numerous big named websites were all supposedly hacked and defaced by a group calling themselves L33t Pakistani H4x0rZ.
About half an hour ago the hacker group anonymous released this message:
And sure enough, if you visited any of these sites, you were greeted with the defaced message from the Pakistani hackers. But were all these websites actually defaced?
A quick ping test tells a different story. All of the IP addresses point to the same address!
As you can see in the screenshot above (taken earlier today) all the websites pointed to the same internet address, or IP address.
It would seem that the hackers were able to infiltrate and modify a DNS server, pointing all of these websites to a single website displaying the Pakistani hacker message. This is actually a scarier attack than just simply defacing a single webpage, as from the browser stand point you would not be able to tell that you are at the wrong website.
But one has to wonder how legit some of the addresses are. Looking at Alexa.com, some of these addresses get very little traffic. And using the internet archive “wayback” machine it looks like some of these haven’t been used (or archived) in years. It appears there may be a bit of “Cyber Trickery” going on here.
Also, some counterhacking might be going on as a few minutes ago surfing to the BBC.org.il website revealed a different message. Just a blank white page with the words, “Pakistans Suck!”
Hacking and counterhacking, when will it end?
* Updated 1pm EST – Added graphic of ping responses from earlier today. It would appear these have been all changed now.