Sunday, September 30, 2007

Not just US .gov websites

Hi folks,

It's fairly well understood now that there are bunches of US .gov websites that are either directly hacked, or at least have compromised DNSs, but over the last few days, we have seen .gov for both the Philippines and Saudi Arabia exhibiting the same symptoms. I suspect the Kingdom would be very upset if they knew what they were hosting, or at least said to be hosting.

And at least one Syrian Embassy website is also hacked, with an invisible iframe link to an Esthost (Russian) exploit server. That server is currently not talking to anyone, but it can be brought online at any minute.

It's nice to know that website security is not limited to US gov.




Post a Comment

<< Home