.pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#1

Post by nitochi » Sat, Nov 24, 2012, 10:49 AM UTC

.pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected
thehackersmedia.blogspot.ro

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#2

Post by ComputerGuru » Sat, Nov 24, 2012, 11:38 AM UTC

So it's a bit of a misleading title, it appears the registrar for .PK is what was hacked, and these are the sites that are now being redirected.

Also, can someone please add spaces after the commas in the title? Thanks! (currently reads Google,MSN,Apple,Ebay)

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#3

Post by fmax30 » Sat, Nov 24, 2012, 12:00 PM UTC

Everything is normal here (i'm in pakistan) , google msn ebay all are accessible. So either this story is an outright lie, or the so called hackers might actually be just idiots.

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#4

Post by TazeTSchnitzel » Sat, Nov 24, 2012, 12:10 PM UTC

I wonder if somebody misunderstood the meaning of "Hacker News".

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#5

Post by codeka » Sat, Nov 24, 2012, 12:18 PM UTC

This is what I'm getting for google.com.pk currently:

  ;; ANSWER SECTION:
  google.com.pk.		3578	IN	A	127.0.0.1

The name server seems to be set to some random one as well:

  ;; AUTHORITY SECTION:
  google.com.pk.		38400	IN	NS	dns1.freehostia.com.
  google.com.pk.		38400	IN	NS	dns2.freehostia.com.

Google normally host their own DNS, so I'd expect that to go ns1.google.com (etc). Doing a whois for google.com.pk returns the address as "Mountain View, Canada" which is kind of amusing.

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#6

Post by pknerd » Sat, Nov 24, 2012, 12:23 PM UTC

Atleast accessible for me, I am on PTCL network, Pakistan.

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#7

Post by dendory » Sat, Nov 24, 2012, 12:24 PM UTC

If you do a whois on www.pknic.net.pk for any of the listed hacked domains, they all have their correct contact info but refer to "dns1.freehostia.com" so it seems the .pk domain registrar must have been hacked.

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#8

Post by ankitaggarwal » Sat, Nov 24, 2012, 12:33 PM UTC

pknerd wrote: post #6

Atleast accessible for me, I am on PTCL network, Pakistan.

change in name servers take some time to propagate. Try to access it through some US proxy?

Strange to see that Whois data. Surely something wrong.

Though, this post has misleading title.

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#9

Post by neebz » Sat, Nov 24, 2012, 1:31 PM UTC

screenshot : http://cl.ly/L7mk

Re: .pk registrar hacked, Pakistani sites for Google, MSN, Apple, Ebay redirected

#10

Post by mjschultz » Sat, Nov 24, 2012, 1:49 PM UTC

fmax30 wrote: post #3

Everything is normal here (i'm in pakistan) , google msn ebay all are accessible. So either this story is an outright lie, or the so called hackers might actually be just idiots.

You might still have the correct values in your DNS cache for the sites. It looks like the .pk registrar was hacked and the DNS for these site changed.

Since you're in Pakistan, you've probably recently resolved some of these names so you'd get the correct version.