Home / News I have a News Tip

Turkish Hacker Group Strikes Again, This Time Victims are ICANN and IANA

The same Turkish Hacking Group, NetDevilz, responsible for the hacking and defacement of the popular photo sharing site, Photobucket, has been reported to have briefly succeeded in accessing ICANN and IANA domain names yesterday, June 26, 2008, and redirecting them to a page containing the message:

"You think that you control the domains but you don't! Everybody knows wrong. We control the domains including ICANN! Don't you believe us?"

Hijacked domains include "icann.com", "icann.net", "iana.com" and "iana-servers.com" which, contrary to reports in the media (ZDNet, New York Times), are not the official domains — the official domains are 'icann.org' and 'iana.org'. It has also been reported that the same IP address used for the hacking of Photobucket website, was used again for both ICANN's and IANA's hacked domains.

Latest response received by CircleID from ICANN states that the problem took place at their registrar level. A Whois look up shows Register.com as the registrar for the hacked domains. ICANN has further stated that the registrar "fixed the dns redirection within 20 minutes of us notifying them of the problem. The registrar is actively investigating what happened and has promised to report back to us on what happened."

The hacking incident was first reported by researchers at zone-h.org, a group that collects evidence of site attacks, including page defacements and redirects.

Update: (Jul 4, 2008) ICANN has released an official statement in response to the incident.

Read full story: External Source

Follow CircleID on
SHARE THIS POST

If you are pressed for time ...

... this is for you. More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Vinton Cerf, Co-designer of the TCP/IP Protocols & the Architecture of the Internet

Share your comments

To post comments, please login or create an account.

Related

Topics

DNS Security

Sponsored byAfilias

Whois

Sponsored byWhoisXML API

Cybersecurity

Sponsored byVerisign

Cybercrime

Sponsored byThreat Intelligence Platform

IP Addressing

Sponsored byAvenue4 LLC

New TLDs

Sponsored byAfilias

Domain Names

Sponsored byVerisign