News

ICANN publicity may have triggered malicious behavior

By Tim Conneally | Published June 27, 2008, 1:36 PM

On a week when ICANN's decisions were headlining hundreds of tech news sites, several of the group's pages were defaced by a group of hackers, and a phishing scam spoofing the group's page hit inboxes across the country.

Yesterday, a Turkish group known as "NetDevilz" -- which is linked to a reported 31 perpetrated attacks just this year, as tracked by site Zone-H -- hijacked icann.com, icann.net, iana.com, and iana-servers.com, all sites belonging to the Internet Corporation for Assigned Names and Numbers (ICANN) and the Internet Assigned Numbers Authority (IANA).

The defacement replaced pages' contents with the group's name, and the message "You think that you control the domains but you don't! Everybody knows wrong. We control the domains including ICANN! Don't you believe us? haha :) (Lovable Turkish hackers group)."

The phishing attack was launched several days before ICANN's site was defaced and targeted domain name owners. The e-mails that were sent contained the following text:

>Dear Domain Account Holder, > >You are being sent this notice from ICANN due to the fact that you >currently own an active domain name. ICANN is currently upgrading all >domains from their registry database. > >The upgrade will introduce new control options for your domain and easier >access. The new upgrade is required by the registry. All domain users are >expected to submit their domain information manually at >http://www.icannresolve.com/[spoofed site name removed] with the >required information for ICANN to apply the required updates. > >The upgrades will be applied to accounts on a first come, first serve >basis. You have until July 25, 2008 to submit the required information to >avoid service and domain interruption. > >Thank you for your time. > >Sincerely, > >ICANNResolve >ICANN.org Resolutions Department

The spoofed site, which has since been removed, was a faithful representation of the pre-hack ICANN page design, with blank fields for all harvestable user information.

Comments

View comments by with a score of at least

partypop
Jun 30, 2008 - 10:03 AM

Its a shame that people who speak English as a second language can deface and hack our sites and take control of our airplanes. We are obviously doing something wrong.
When are people going to realize the "America is untouchable attitude" is not working.
The proof is in the firewall and protection. Lets gets with the program people.

Score: 0

|
Post Reply
daq
Jun 30, 2008 - 2:34 PM

TAKE OFF THE TIN HAT!

Score: 0

|
Post Reply

Report: Microsoft to randomize Europe's browser screen choices

The fact that "A" is for "Apple" was apparently at the heart of browser vendor objections to Microsoft's alternative to listing IE first.

Acer eclipses Dell for #2 spot in global PC shipments, says iSuppli data

It literally does look like a 360-degree turnaround in Dell's fortunes, as the bells of bad tidings now toll solely for Dell.

Microsoft, don't hang up on Windows Mobile, but do call for help

Only a Manhattan Project can save Microsoft's phone strategy now.

See ya later, WinMo: Microsoft's mobile strategy needs a reboot

Carmi Levy | Wide Angle Zoom: Hands up if you're considering upgrading to a Windows phone for the holidays...Anybody?

Playing catch-up in 2010: Windows Mobile, BlackBerry, and Symbian

Microsoft, RIM, and Nokia are each working on improved mobile operating systems. But could these efforts add up to too little, too late?

Will Nokia's plans further alienate American consumers?

A look at Nokia's plans for the coming years does little to shine up the company's increasingly dull image.

Bing bonked by service outage Thursday, Microsoft configured the wrong server

It's always nice to have a backup, but it's even nicer to remember which one is the backup. That's the lesson Bing's admins learned yesterday evening.

Survey reveals there are more women then men, including on social networks

If you think you can market your products and services online as though you're selling car batteries in the middle of halftime, think again. And again.

Android team updates 'Donut' and 'Eclair' SDKs

The Android SDK includes components which optimize app development for each version of the mobile operating system. Today, the 1.6 and 2.0 components got updates.

The Black Screen Syndrome, or, Tech news in search of the apocalypse

Scott Fulton On Point: This is a story about something that should not have been a story, about something that at one time was a story.

Online advertising evolves away from display, toward interactive software

Marketing departments and agencies are increasingly establishing positions for "creative technologists" who can steer designers and developers toward platforms that enable direct connections with consumers.