Thursday, 29 November 2012 16:41 Domain News
Google.ro,Microsoft.ro,Yahoo.ro,PayPal.ro and other major .RO domain names were hijacked Wednesday by an Algerian hacker using the nickname MCA-CRB.
This was a DNS poisoning attack ,meaning that the attackers modified the DNS records for yahoo.ro,hotmail.ro,microsoft.ro,windows.ro,kaspersky.ro and paypal.ro,causing the domain names to resolve to incorrect IP addresses.
It seems that Google has already contacted the organization responsible for managing domain names in Romania,RoTLD.
“For a short period, some users visiting www.google.ro and a few other web addresses were redirected to a different website. We are in contact with the organization responsible for managing domain names in Romania,said a Google representative.
“On November 27, Microsoft.ro was impacted by a third-party DNS issue.The site has since been fully restored and we can confirm that no customer information was compromised. We are working with our third-party partners to evaluate their security practices,said a Microsoft representative.
Bogdan Botezatu,a senior e-threat analyst at Bitdefender,believes that those who attacked the Romanian domains are the same ones responsible for the attack in Pakistan.
The situation could have been much worse if the hijackers would have had other goals in mind.
