Home » Archive

Articles in the Cyber attacks Category

Cyber attacks »

[16 Jan 2011 | No Comment | ]

A hacker called TiGER-M@TE [localhost_80@hotmail.com] have defaced the following sites:
google.com.bd
linux.com.bd
kaspersky.com.bd
avast.com.bd
Hmusic.com.bd
Ryahoo.com.bd
microsoft.com.bd
hsbc.com.bd

(note that .bd is bangladesh’s TLD)

Appearantly the attack was a DNS attacks, probably a DNS cache poisoning attack,  meaning he actually never hacked into the servers and never edited the files.
All the sites’ traffic was redirected to a server hosted at 173.233.68.2
(NetRange 173.233.64.0 – 173.233.95.255 owned by Turnkey Internet Inc.)
current whois data
google.com.bd 74.125.226.80
www.google.com.bd 74.125.226.16
linux.com.bd 216.239.34.21
www.linux.com.bd 74.125.95.121
kaspersky.com.bd 38.117.98.208
www.kaspersky.com.bd 38.117.98.208
avast.com.bd 217.19.248.132
www.avast.com.bd 217.19.248.132
music.com.bd 184.107.41.76
www.music.com.bd 184.107.41.76
yahoo.com.bd 68.180.206.184
www.yahoo.com.bd 206.190.60.37
microsoft.com.bd 207.46.232.182
www.microsoft.com.bd 207.46.197.32
hsbc.com.bd 203.112.92.6
www.hsbc.com.bd 203.112.92.6
All domains/Sites were restored/fixed.
The attacks have been mirrored at zone-H.
Note that major sites were …