Google's Romanian Domain Gets Defaced By Algerian Hacker MCA ...

Looks like Pakistan is not the only place where major Internet companies? domain names can get hacked?hijacked.?This morning, google.ro?was taken over, with the credit being taken by ?Algerian Hacker? MCA-CRB, a serial website defacer. The site looked like the picture above for at least an hour, according to our tipster. It still looked like this when I took the screenshot, although now the site seems to have been taken down altogether.

It appears to be slowly coming back to the normal Google Romania page worldwide now, and is being described as a possible ?DNS hijacking attack? (more below). Google, meanwhile, says that it was ?not hacked? but that someone had managed to redirect visitors to another site for Google.ro and ?a few other web addresses.? (Full statement below.)

Softpedia is reporting that the same thing has happened to Yahoo?s site, but the site looks fine to me right now. Paypal.ro is also redirecting to the same page as Google.ro, although PayPal also operates another site at?https://www.paypal.com/ro/ that is up.

The text on the hacked site reads: ?By MCA-CRB / Algerian Hacker? and gives credit to three names, ?all members Sec? ? so perhaps in one of the many loose groups of hackers that associate themselves with Anonymous and LulzSec. ?S thanks = Mr-AdeL & i-Hmx & Lagripe-Dz All Members Sec,? the page reads.

MCA-DRB is also threatening more. ?To Be Continued ?.? the site says.

That?s not an empty threat, it seems. MCA-DRB, according to Zone-h?s registry of hacked sites, has been responsible for 5,530 site hacks and defacements to date, with many of them appearing to cover government and public services sites from countries across Asia, Africa, Europe, Australia and the Americas. By comparison, the Zone-h attributes 313 sites to Eboz, not counting the 284 from over the weekend.

Interestingly, this doesn?t seem to be happening everywhere. My colleague Drew sent me the screenshot for Google.ro from his computer in California and it seems to look like business as usual:

And it doesn?t seem to be following the same form as this weekend?s defacement exercise in Pakistan, where 284 sites were taken down by a hacker called Eboz. That attack appeared to have to do with the infiltration of the country?s domain registry PKNIC, where all of the affected domain name servers were redirected to servers hosted by Freehostia. But according to current checks on Google.ro, the site is still going to Google name servers.

We are reaching out to Google for comment and will update this story. [Update below.]

Update: Stefan Tanase, a Kaspersky lab expert writing at Securelist, notes that the incident may be due to a ?DNS hijacking? attack. He notes that ?both domains resolve to an IP address located in the Netherlands,? at?95.128.3.172?(server1.joomlapartner.nl), ?so it rather looks like a DNS poisoning attack.?

Google meanwhile says that it was not hacked.

?Google services in Romania were not hacked. For a short period, some users visiting?www.google.ro?and a few other web addresses were redirected to a different website. We are in contact with the organization responsible for managing domain names in Romania,? a spokesperson tells TechCrunch.

H/T Marius M.

September 7, 1998

NASDAQ:GOOG

Google provides search and advertising services, which together aim to organize and monetize the world?s information. In addition to its dominant search engine, it offers a plethora of online tools and platforms including: Gmail, Maps, YouTube, and Google+, the company?s extension into the social space. Most of its Web-based products are free, funded by Google?s highly integrated online advertising platforms AdWords and AdSense. Google promotes the idea that advertising should be highly targeted and relevant to users thus providing...

? Learn more

Source: http://techcrunch.com/2012/11/27/googles-romanian-domain-gets-taken-down-by-algerian-hacker-mca-crb/

ladainian tomlinson mark wahlberg pipa keystone xl sopa bill sopa and pipa piracy