此刻!世界著名杀毒软件公司小红伞Avira官方网站被黑!
早上起来,发现小红伞网站直接显示:
Hello World
We Are Here To Deliver Two Messages
First one:
we want to tell you that there is a land called Palestine on the earth
this land has been stolen by Zionist
do you know it ?
Palestinian people has the right to live in peace
Deserve to liberate their land and release all prisoners from israeli jails
we want peace
long live Palestine
Second Message:
There Is No Full Security
We Can Catch You !
----------------------------------------------------------------------------------
Hacked by KDMS team
Now .. We Will Quit Hacking
----------------------------------------------------------------------------------
Twitter :
小红伞官网:http://www.avira.com
附1:小红伞的声明:
“It appears that several websites of Avira as well as other companies have been compromised by a group called KDMS. The websites of Avira have not been hacked, the attack happened at our Internet Service Provider ‘Network Solutions’,” Avira Security Expert and Product Manager Sorin Mustaca said in a mailed statement.
According to Mustaca, the DNS records of the impacted websites have been changed to point to arbitrary domains.
“It appears that our account used to manage the DNS records registered at Network Solutions has received a fake password-reset request not being initiated by anyone at Avira,” the expert explained.
“Network Solutions appears to have honored this request and allowed a 3rd party to assume control of our DNS. Using the new credentials the cybercriminals have been able to change the entries to point to their DNS servers.”
Avira reassures customers that their internal networks have not been compromised. Until all DNS entries are back in their possession, the company has shut down all external services.
“We are working with the ISP to receive control on the domain name and only when we have solved the problem we will restore the access to the Avira services. At this point we are not aware of any effect to our customers,” Mustaca concluded.
While this statement comes only from Avira, the scenario is most likely the same for all the impacted companies.
Additional details will probably be provided by Network Solutions in the upcoming hours. Stay tuned to find out more.