How Google Pakistan and 284 other website were hacked by a Turkish Hacker

The news just coming in is that google.co.pk, ebay.com.pk, visa.com.pk, microsoft.com.pk, blogspot.pk and other 280 websites (list below) have been hacked allegedly by Turkish Hackers.

You would ask HOW DID THIS HAPPEN?

The answer lies in checking the Name Servers of the website, Name servers are basically the hosts names the domain points to. Clearly, the nameserver here is Freehostia.com, which means that the hackers compromised the DNS servers and pointed it to a server where the defacement page was present, Apparently, major chunk of top global brand’s Pakistani version of the websites were defaced.

Why will that happen? Most of them were on the Same registrar, Mark Monitor

There is a chance that the Turkish hackers may have gained access to MarkMonitor servers and have changed the DNS servers.

Another possibility is that the hackers may have used an attack called “DNS Cache Poisoning“, shall be explained soon on The DNetWorks, in order to change the DNS servers.

The exact scenario has not been known yet but this article will be updated as soon as the reason is known.

There have been no group claiming the responsibility for the incident, but the message appearing on the pages was written in Turkish language, hinting the hand of Turkish Hackers in it.

There is only one thing that we could understand on the defaced Pages, “Downed Pakistan”, which is hackers way of rejoicing.

Here is the complete list of websites hacked today, 24th November 2012

google.com.pk
microsoft.pk
biofreeze.com.pk
blackstone.pk
blogspot.pk
itunes.pk
gmails.pk
zynga.com.pk
chrome.com.pk
chrome.pk
visa.com.pk
bx.com.pk
abbvie.com.pk
abbvie.pk
cgma.pk
chacos.com.pk
cimacpa.pk
cisco.pk
ciscosystems.pk
blogspot.com.pk
cpacima.pk
cpaintl.pk
cpaldglobal.pk
cpalwglobal.pk
drivealliance.pk
eastman.biz.pk
eastman.net.pk
eastman.org.pk
ebay.pk
monatin.pk
everyblock.pk
youtube.pk
3com.web.pk
hp.web.pk
revlon.pk
streetwear.pk
windows7.pk
windows8.pk
windowsrt.pk
yahoo.pk
yahoomaktoob.pk
zynga.pk
firstdirect.com.pk
flickr.pk
fordgofurther.pk
gbuzz.pk
gmailbuzz.pk
gmail.pk
googlebrowser.com.pk
google.pk
googlebuzz.pk
googlechrome.com.pk
abbviepharmaceuticals.pk
abbviepharmaceuticals.com.pk
hewlettpackard.pk
hexagon.com.pk
hsbcamanah.biz.pk
hotmail.com.pk
hpcloud.com.pk
hp.com.pk
hpscalene.com.pk
hsbc.biz.pk
hsbcadvance.com.pk
hsbc.pk
hsbcpremier.com.pk
hsbcprivatebank.biz.pk
hsbcamanah.com.pk
hsbcdirect.com.pk
hsbcnet.com.pk
hsbcpremier.biz.pk
hsbcpremier.pk
hsbcprivatebank.com.pk
investdirect.biz.pk
investdirect.com.pk
ipod.pk
jaiku.pk
kellyservices.com.pk
maktoob.pk
markmonitor.pk
microsoftsmartglass.com.pk
microsoftsmartglass.pk
xboxsmartglass.com.pk
xboxsmartglass.pk
msn.org.pk
windowsstore.pk
windowsstore.com.pk
opteron.com.pk
parkplaza.pk
paypal.pk
postini.pk
scalene.com.pk
schwab.biz.pk
schwab.com.pk
sonystyle.com.pk
streetwear.com.pk
theworldslocalbank.com.pk
genapp.pk
genapp.com.pk
generationapp.pk
generationapp.com.pk
windows.com.pk
windows7.com.pk
windows8.com.pk
3com.biz.pk
3com.fam.pk
3com.net.pk
3com.org.pk
gchrome.com.pk
aicpacima.pk

The DNetWorks Team