IT Tech Talk

29  05 2008

Comcast’s DNS records hijacked

For a couple of hours yesterday, Comcast’s Internet Portal (Comcast.net) had its DNS records hijacked and a defaced webComcast’s DNS records hijacked page was loading from third-party domains. Further investigation into this incident reveals a connection between the group responsible for Comcast’s DNS hijacking and previous incidents such as the  defacements of Justin Timberlake, Hilary Duff and Tila Tequila’s MySpace profiles. Comcast.net wasn’t hacked, its DNS records got hijacked, so whenever someone visited Comcast.net, the defaced page was loading from different servers. Let’s assess the incident by taking a look at the way Comcast’s DNS records changed yesterday, find out who’s behind it, and how a couple of hours later Comcast restored access to its domain.

During that time, the page used in the defacement was loading from two different locations, namely, freewebs.com /buttpussy69 and freewebs.com /kryogeniks911 which continue returning the message :

KRYOGENIKS EBK and DEFIANT RoXed COMCASTsHouTz To VIRUS Warlock elul21 coll1er seven

To read more about the story, click here

Rate this:
2.5

Leave a Reply

« How to choose hosting provider Free security tools for IIS »