Wednesday, August 28, 2013

Syrian Electronic Army hacks Media Giants and Twitter

SAN FRANCISCO: Media companies including the New York Times, Twitter and the Huffington Post lost control of some of their websites Tuesday after hackers supporting the Syrian government breached the Australian Internet company that manages many major site addresses.

The Syrian Electronic Army, a hacker group that has previously attacked media organizations that it considers hostile to the regime of Syrian president Bashar al-Assad, claimed credit for the Twitter and Huffington Post hacks in a series of Twitter messages.

Security experts said electronic records showed that NYTimes.com, the only site with an hours-long outage, redirected visitors to a server controlled by the Syrian group before it went dark.

New York Times Co NYT.N spokeswoman Eileen Murphy tweeted the "issue is most likely the result of a malicious external attack", based on an initial assessment.

The Huffington Post attack was limited to the blogging platform's UK web address. Twitter said the hack led to availability issues for an hour and a half but that no user information was compromised.

The attacks came as the Obama administration considers taking action against the Syrian government, which has been locked for more than two years in an increasingly bloody struggle against rebels.

In August, hackers promoting the Syrian Electronic Army simultaneously targeted websites belonging to CNN, Time and the Washington Post by breaching a third party service used by those sites.

The Syrian Electronic Army, or SEA, managed to gain control of the sites by penetrating MelbourneIT, an Australian Internet service provider that sells and manages domain names including Twitter.com and NYTimes.

Officials at The New York Times, which identified MelbourneIT as its domain name registrar and the primary hacking victim, warned its employees to stop sending sensitive e-mails from their corporate accounts.

MebourneIT spokesman Tony Smith said that login credentials from one of its resellers had been used improperly.

Once MelbourneIT was notified, he said, the company restored the correct domain name settings, changed the password on the compromised account, and locked the records to prevent further alterations.

"We are currently reviewing our logs to see if we can obtain information on the identity of the party that has used the reseller credentials, and we will share this information with the reseller and any relevant law enforcement bodies," Smith said. "We will also review additional layers of security that we can add to our reseller accounts."

Twitter did not respond to requests for comment. In a blog post, the company said "it appears DNS (domain name system) records for various organizations were modified, including one of Twitter's domains used for image serving, Twimg.com. Viewing of images and photos was sporadically impacted."

Read Full Story @ Economic Times

Latest News

LOADING LATEST NEWS....

Loading Blog Posts...

Loading Images...

Loading Videos...

Unknown

- Unknown Updated at: Wednesday, August 28, 2013

Friday, August 16, 2013

Syrian Electronic Army Hacks Outbrain, targets top US media : Technology Desk

There was a major breach reported at Outbrain, by the hackers who promote Syrian Electronic Army. The hackers were targeting major US media sites, on Thursday by breaching Outbrain, a firm which publishes content recommendations on those sites.

Washington Post, CNN and Time links were redirected to SEA sites, says the CEO of Outbrain, Lisa LaCour.

Syrian Electronic Army is a group of hackers who are in support of Syrian President Bashar-Al-Assad and SEA had gained its publicity by hacking most of the high profile clients. This includes the hack of RSS feed for Associated Press.

Following the breach, Outbrain network was taken down at 11AM EDT, and the company technicians based in Israel was able to mitigate the hack. The services were cleaned up and was taken back online later on Thursday itself, although it was restored to operation late on Thursday.

The modus operandi by the hackers were different from the usual attacks which caused the hacking to happen quicker on Outbrain. It is reported that the hacker was able to sent mail to all employees of Outbrain which showed up the header as CEO, and one of the employee fell into the trap and compromised his login credentials. This allowed the hackers to enter the internal network and carry out the attack.

Chris Wyspal, CTO of VeraCode, a security agency told IndiaToday that the growing extend of internet will make the hacks more susceptible as the hackers may choose to attack the weaker link or third party softwares which may not have high end security like the major sites or media giants.

Time and CNN, both owned by Time Warner, and the Washington Post all said they believed that their sites had not been impacted by anything besides the attack on Outbrain.