Home » Cyber attacks

mega bangladesh hacks

16 January 2011 No Comment

A hacker called TiGER-M@TE [localhost_80@hotmail.com] have defaced the following sites:

google.com.bd
linux.com.bd
kaspersky.com.bd
avast.com.bd
Hmusic.com.bd
Ryahoo.com.bd
microsoft.com.bd
hsbc.com.bd

(note that .bd is bangladesh’s TLD)

Appearantly the attack was a DNS attacks, probably a DNS cache poisoning attack,  meaning he actually never hacked into the servers and never edited the files.

All the sites’ traffic was redirected to a server hosted at 173.233.68.2

(NetRange 173.233.64.0 – 173.233.95.255 owned by Turnkey Internet Inc.)

current whois data

google.com.bd 74.125.226.80
www.google.com.bd 74.125.226.16

linux.com.bd 216.239.34.21
www.linux.com.bd 74.125.95.121

kaspersky.com.bd 38.117.98.208
www.kaspersky.com.bd 38.117.98.208

avast.com.bd 217.19.248.132
www.avast.com.bd 217.19.248.132

music.com.bd 184.107.41.76
www.music.com.bd 184.107.41.76

yahoo.com.bd 68.180.206.184
www.yahoo.com.bd 206.190.60.37

microsoft.com.bd 207.46.232.182
www.microsoft.com.bd 207.46.197.32

hsbc.com.bd 203.112.92.6
www.hsbc.com.bd 203.112.92.6

All domains/Sites were restored/fixed.

The attacks have been mirrored at zone-H.

Note that major sites were hit by the same attack ,like twitter.

Your opinion matters!

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.