Original URL: http://www.theregister.co.uk/2010/10/15/mpaa_site_dns_hack/
Anonymous plants pirate flag on MPAA website
Eat my DNS, etc
Posted in Security, 15th October 2010 16:13 GMT
Watch Now : Virtual Machine Movement with Hyper-V
Updated Hacktivists planted a pirate flag after defacing an MPAA website, according to security analysts.
The attack on copyprotected.com – a Motion Picture Association of America that reports violations of the copy protection controls on DVDs and Blu-ray discs - is the latest in a string of assaults against the entertainment business organised by the loosely affiliated Anonymous groups. Previous victims have included the RIAA and, most famously, ACS:law.
The attack on the MPAA website shows the group's hacktivism has moved away from using tools to flood the websites of its enemies with spurious traffic. The defaced page carried the logo of the Pirate Bay.
Security experts are split over how the attack was pulled off.
A blog post [1] by Sunbelt Software suggests the site was the victim of a DNS cache poisoning attack. However a somewhat more detailed analysis [2] by Sean-Paul Correll of PandaLabs suggests SQL Injection techniques were used to pull off the attack. ®