Google Ireland and Yahoo Domains Hijacked

[1337]

Irish websites Google.ie and Yahoo.ie went offline on Tuesday afternoon after their DNS servers were apparently hijacked to point to those of a third party, resulting in visitors being redirected to an 'allegedly fraudulent' address - farahatz.net. That site has now been taken offline, but it is not known whether the site could have been created with malicious intent.

A short note on the homepage of the IE Domain Registry said the move followed a "security incident on Tuesday 9th October, involving two high profile .ie domains that has warranted further investigation and some precautionary actions on the part of the IEDR." The IE Domain Registry have requested assistance from the Garda Bureau of Fraud Investigation.

There was an unauthorised access to one registrar’s account [MarkMonitor] which resulted in the change to the DNS nameserver records for the two .ie domains. The IEDR worked with the registrar to ensure that the nameserver records were reset and corrected promptly.

Serious questions are being raised about how this breach occurred. Security experts have suggested that the login details for the IEDR registrar’s console may have been ‘socially engineered’

eMarkmonitor, the company which is listed as having registered google.ie on Google’s behalf, is also responsible for the registration of the Irish domain names for the likes of eBay, Microsoft, Yahoo and PayPal. None of those sites appeared to have been affected.

Sursa: Google Ireland and Yahoo Domains Hijacked | THN Security and Hacking News