During the February 12, until the 14th of the same month, China's top search engine, Baidu, was hacked, as the domain's DNS were changed, redirecting to a site where one could read a menssaje suggesting that the vulnerability was made by the Iranian army cyber. This group of security experts has successfully hacked other sites. Now they have given more insight into the whole mess happened and slowly begins to be laughably absurd, something worthy of appearing in a program of Ripley. More or less the story goes like this:

• The hacker (who posed as agents of Baidu) initiates a chat room with the support of register.com.
• The imposter calls to technical support, change the email address used as Baidu contact form.
Register.com • The employee claims that the alleged agent of Baidu, a security code to verify the legitimacy of their identity. As the hacker obviously had no access to that code, it sent the wrong one.
• The strangeness begins when the employee support has not verified the validity of the code and proceeds to change the contact, although information provided by the hacker is false.

From this point, the rest was easy for the attackers, as they were able to change the DNS and redirect search engine traffic. Something that is also absurd is that register.com person who was attending the event, did not suspect anything wrong, despite the change of the email was made from a cuenta@baidu.cn to antiwahabi2008@gmail.com . Such behavior is suspect miles.

After noticing these problems, Baidu's team tried to fix things, but the support was not entirely register.com friendly. Finally after a couple of hours, they could communicate with the domain registrant company, but it took 2 days to reset the DNS to the originals, resulting in a huge loss for the form.

The result of this problem is a lawsuit against Baidu register.com, and possibly discharge from medium, which still do not understand, and could do so much wrong in so little time.

Via The Next Web