Feeds

DNS mega-hack hits thousands of sites

More on Fluffi Bunni Jihad

  • alert
  • submit to reddit

Choosing a cloud hosting partner with confidence

Thousands of UK Web sites registered with domain name registrar NetNames had their front pages redirected to a rant by hacker Fluffi Bunni this morning.

Jonathan Robinson, chief executive at Net Benefit, which runs the NetNames registration and hosting service, told us that the "majority" of its 100,000 customers had their Web traffic re-routed in the hack. He said the firm was focused on restoring services, which were disrupted for more than an hour before been returned to normal between 10am and 1030am today, than counting the number of people affected.

The hack, which directed surfers to a diatribe entitled "Fluffi Bunni goes Jihad", involved an attack on NetNames' Domain Name System server, according to Robinson.

Fluffi Bunni compromised the network of Net Benefit before sniffing a password and disrupting the firm's DNS server to pull off the attack, he said.

The DNS servers were loaded with the latest version of BIND and the attack was not on them directly, according to Robinson, who added that he was now satisfied its systems were secure.

Register readers have informed us of the numerous Web sites affected by the attack among whom were www.forceinternet.co.uk, www.expressandstar.co.uk, www.ammoweeklybulletin.co.uk, www.discoveryhealth.co.uk, www.clicktomusic.co.uk, Totaljob.com, Vnunet.com, and www.westlife.co.uk. The list goes on.

Aidan Goldstraw, head of Internet development at the Express & Star Wolverhampton, was scathing in his criticism of NetNames.

"The hack affected both our own secondary domain, expressandstar.com, and dozens of other third party sites we host with NetNames Web forwarding arrangements.

"What I found incredible was that no-one at NetNames appeared to have the gumption to pull the network plug out of the back of the machine as soon as they knew what was happening".

He added: "I also find it worrying that a company whose stock-in-trade is domain management could fall prey to what at least appears to be a fairly elementary scripting hack."

Russ Spooner, a security consultant at network security specialists Interrorem, pointed out that a DNS redirection hack was particular embarrassing for Net Benefit, The domain registrar has issued press releases advising firms to protect their online identity, something it has conspicuously failed to do itself in this case.

Mark Read, a professional services consultant at MIS Corporate Defence, accused Net Benefit "as a firm offering Internet services" of failing to do its job properly and protect against hack attacks.

Previous victims of Fluffi Bunni (aka Fluffy Bunny) include the Apache Project and Exodus Communications. The attacks by the group (or individual) operating under the Fluffi Bunni moniker are generally more sophisticated than the average defacements. ®

Related Stories:
'Fluffi Bunni' hacker declares Jihad
Hackers run amok during Defcon
Cowboy cracker nails Apache
Linux hackers fall victim to crackers

Beginner's guide to SSL certificates

More from The Register

next story
FYI: OS X Yosemite's Spotlight tells Apple EVERYTHING you're looking for
It's on by default – didn't you read the small print?
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
China is ALREADY spying on Apple iCloud users, claims watchdog
Attack harvests users' info at iPhone 6 launch
Carders punch holes through Staples
Investigation launched into East Coast stores
Kill off SSL 3.0 NOW: HTTPS savaged by vicious POODLE
Pull it out ASAP, it is SWISS CHEESE
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.