此刻！世界著名杀毒软件公司小红伞Avira官方网站被黑！|蓝点网

世界著名杀毒软件公司小红伞Avira官方网站被黑！

最新消息请关注本人新浪微博：山外的鸭子哥

直到现在还没有恢复。

PS：

10月8日：

23:21 已恢复！

23:29 再次出现无法打开，PING请求不到主机！

23:34 终于又打开了被黑的界面，前十几分钟，有网友打开是正常的界面，一闪而过，刷新后又是被黑的界面。。

00:00 悲剧的不只是小红伞。。刚刚上了这个巴勒斯坦团队的推特。。AVG、WHATSAPP、ALEAX等等，都被黑了。。

00：25 小红伞已经确认，DNS被劫持了。原文如下见博文最下面。。

10月9日

早上起来，发现小红伞网站直接显示：

Could not determine user from environment

11:28 http://www.avira.com/zh-cn/for-home 能正常打开了

直播停止。。

小红伞网站被黑，打开会显示以下内容：

上面用英文宣称“

我们要告诉世人这世界上有一个地方叫做巴勒斯坦，

这片土地被犹太人所窃取。

巴勒斯坦人民有权和平地居住在这片土地上，

巴勒斯坦人应取回他们的国土，

并且所有在以色列监狱的巴勒斯坦人都应该获得释放。

我们只想要和平。

第二：没有绝对安全的地方，我们可以赶上你。。。

原文：

Hello World

We Are Here To Deliver Two Messages

First one:

we want to tell you that there is a land called Palestine on the earth
this land has been stolen by Zionist
do you know it ?
Palestinian people has the right to live in peace
Deserve to liberate their land and release all prisoners from israeli jails
we want peace

long live Palestine

Second Message:

There Is No Full Security
We Can Catch You !

———————————————————————————-

Hacked by KDMS team
Now .. We Will Quit Hacking
———————————————————————————-

Twitter : https://twitter.com/KdmsTeam

小红伞官网：http://www.avira.com

附1：小红伞的声明：

Palestinian hackers of KDSM Team have managed to deface several high-profile websites, including the ones of AVG, Avira and WhatsApp. Moments ago, Avira representatives have confirmed for Softpedia that this is a case of DNS hijacking.

“It appears that several websites of Avira as well as other companies have been compromised by a group called KDMS. The websites of Avira have not been hacked, the attack happened at our Internet Service Provider ‘Network Solutions’,” Avira Security Expert and Product Manager Sorin Mustaca said in a mailed statement.

According to Mustaca, the DNS records of the impacted websites have been changed to point to arbitrary domains.

“It appears that our account used to manage the DNS records registered at Network Solutions has received a fake password-reset request not being initiated by anyone at Avira,” the expert explained.

“Network Solutions appears to have honored this request and allowed a 3rd party to assume control of our DNS. Using the new credentials the cybercriminals have been able to change the entries to point to their DNS servers.”

Avira reassures customers that their internal networks have not been compromised. Until all DNS entries are back in their possession, the company has shut down all external services.

“We are working with the ISP to receive control on the domain name and only when we have solved the problem we will restore the access to the Avira services. At this point we are not aware of any effect to our customers,” Mustaca concluded.

While this statement comes only from Avira, the scenario is most likely the same for all the impacted companies.

Additional details will probably be provided by Network Solutions in the upcoming hours. Stay tuned to find out more.