Reply to thread

Message: <blockquote data-quote="retuom" data-source="post: 10908244" data-attributes="member: 98545">Sri Lanka hacker group hacked DNS servers of Apple, Microsoft, Facebook & SymantecAnonymous Sri Lanka hacker group claims they have hacked the Domain Names System servers of Apple, Microsoft, Facebook & Symantec: Foreign Media - Gold FM NewsSri Lankan based hacker group attacks prominent websites including Apple, Microsoft and Facebook         Thursday, 01 September 2011 - 09:29 AM         A hacker group based in Sri Lanka  have claimed that they  have successfully launched a Domain Name System  Server Cache Snoop  Poisoning attack against a number of prominent  software giants across  the world.   Issuing  a Press Release the group calling themselves “Anonymous Sri  Lanka have  claimed that they are responsible for a series of online  attacks that  have been launched over the past few days against Apple,  Microsoft,  Facebook, Skype, Symantech and other companies.   The  group had posted their Press Release and list of sites they  claim to  have attacked on the website Pastebin.com and claimed credit  for  launching "DNS Cache Snoop Poisoning" attacks against its victims.   Meanwhile  international media reports state that the attacks appear  to have  started on August 22 against a number of Sri Lankan based  websites and  later proceeded on to launching attacks against  international websites  with an attack against Skype being the last  claimed attack.Anonymous Sri Lanka Attacks Apple & Others, Reveals Name Server Records<img src="http://www.macobserver.com/imgs/teaser_images/20110831badguyburglar.png" alt="" class="fr-fic fr-dii fr-draggable " style="" />A hacker group calling itself Anonymous Sri Lanka announced  this week that it had successfully launched a DNS Cache Snoop Poisoning  attack against Apple, Facebook, and other high-profile tech companies.  In a post to hacker hangout and repository Pastebin, the group released  the primary DNS name server records associated with those companies,  listing hundreds of entries, some of which these companies may not have  intended to make public.Anonymous Sri Lanka (ignoring the irony  of the lack of anonymity such specifics impart) posted lists of all of  the name server records with names like, “APPLE.COM - World’s Largest  Consumer Electronics Leader DNSi,” and “FACEBOOK.COM - The World’s  Social Media Giant - DNS R00T3D, Fuck3D and Leaked.” To that effect, the group offered a (vaguely literate) mini-manifesto to explain its attack against Facebook, writing:Yo  Facebook Assholes - If you want to run a Social Network - do it as it  is as a real guys. Don’t try be smart asses. You are the most stupid and  notorious fuckheads ever. The way you control and treat to your members  are not acceptable under any circumstances. But we don’t care  who you are and what you do. Do not BLOCK the people and do not CONTROL  them. Where is your fucking FREEDOM or the SOCIALISM. Censorship =  Freedom (Don’t try to change the meaning of the wordings). Let the  people have their own freedom on the social networks. This is hack  against your fuckhead censorship. The group offered no such commentary on Apple. In  the headers of their post, they claimed that, “Primary DNS Server  Hacked with DNS Cache Snoop Poisoning.” They offered no proof of the cache poisoning, but did provide proof of the snooping in the form of listing Apple’s DNS name servers. For  most of us mortals, there’s not a whole lot in the information in that  list. The group found the company’s DNS name servers, showed that it  tried to perform a zone transfer on those servers (it failed), and then  listed hundreds of individual servers such as: <ul> <li data-xf-list-type="ul">17.254.3.16     gidget16.apple.com</li> <li data-xf-list-type="ul">17.254.3.65     customer.apple.com</li> <li data-xf-list-type="ul">17.254.2.108    testswupdate.apple.com</li> </ul>As  we said, that doesn’t seem all that interesting. What it does, however,  is provide a starting point for others to probe these individual  servers for vulnerabilities. Even that may not seem like a big deal,  especially for a domain like customer.apple.com, which was already known  to exist. For the rest, servers like jobsws2.apple.com, the  starting point could be seen as valuable to the bad guys and a nuisance  to Apple and its cyber security team. Plus, it’s fun to conclude that  that stands for “Jobs Work Station #2.” Then there are listings  such as icloudstatus.apple.com, which could suggest that Apple is  working on a monitoring tool for iCloud status. The company provided  such tools for .Mac and MobileMe, and doing so for the much larger  iCloud is logical. Similarly, webcast.apple.com does resolve to a  page with the image below. ZOMG! Is that an unannounced product? Our  guess is that it’s an internal tool for meetings, but it’s another  example of the bad guys having a new starting point.</blockquote>

Verification: Nawa warak dahaya keeyada? (Namaya wadi kireema dahaya)

Top Bottom