Baidu was hacked

Who hacked Baidu?

[redstorm]

There is news saying that largest Chinese search engine Baidu was hacked today Jan. 12, 2010. Here is a link to share:
China's top search engine Baidu hacked [english.people.com.cn]

[edited by: bill at 4:40 am (utc) on Jan. 12, 2010]
[edit reason] updated link [/edit]

[bill]

I can't get Baidu.com [baidu.com] to resolve from Japan at all. I've tried for over an hour.

[bill]

I found an article with a bit more information:

Group behind Twitter hack takes down Baidu.com [computerworld.com]

According to security experts, Baidu's domain name records appear to have been tampered with. On Monday, the company was using domain name servers belonging to HostGator, a Florida ISP, instead of the Baidu.com nameservers the company normally uses. "It looks like their domain account credentials may have been snagged," said Paul Ferguson, a researcher with the antivirus vendor Trend Micro.

That's the same technique that was used to hijack Twitter, when Iranian Cyber Army hackers were apparently able to log in to the account used to manage Twitter's DNS records and redirect visitors to another Web server that posted a message similar to the one spotted on Baidu.com. That attack knocked Twitter offline for more than an hour.

[JAB Creations]

Now that everyone in the world has hacked everything the new challenge is to do it all over again, with a Commodore 64.

- John

[jecasc]

Come on you hackers, get a girl friend and get on with your lives. This gets boring.

[bill]

I'm able to see some of Baidu once again. They were offline for most of the business day. Some internal URLs are still not resolving for me. I guess it will take some time for everything to get back to normal.

[qianyunhu]

It's OK now . I'm from China. It's my first time here. Very glad to communicate with you friends.Oh my poor English.

[StoutFiles]

You would think that with their skill sets they could get a high-paying job doing non-illegal things or things for the govt.

[travelin cat]

qianyunhu,

Welcome to WebmaterWorld and thank you for your post. No worries about your English, it's much better then my Mandarin ;)

[moltar]

You would think that with their skill sets they could get a high-paying job doing non-illegal things or things for the govt.

I'd imagine the skill set consists of sending out a mass number of trojan viruses to a bunch of @baidu.com addresses, hoping that a right person will open them. Then steal passwords for things like DNS and other related accounts. It's not really a kind of skill that most employees look for :)

[mack]

If nothing else this is a wake up call. Just how secure is your dns?

Mack.

[frontpage]

Since the release of Google's Public DNS system, it would be interesting if they actually got into Secondary DNS Services for domains.

[EvilSaint]

I wonder if Google's paying for the hacking in order to get some more market share in China ;)

[directwheels]

did anyone read about google getting hacked and they suspect it's the chinese government who did it?

[bill]

did anyone read about google getting hacked and they suspect it's the chinese government who did it?

Yes, we have a thread about that topic over here:
[webmasterworld.com...]