New York Times Site Nearly Normal After Alleged Pro-Syrian Cyberattacks - Wall Street Journal

By BEN FOX RUBIN , DANNY YADRON and SHIRA OVIDE CONNECT New York Times Co. said Wednesday that traffic on its flagship NYTimes.com site has "almost come back to normal," despite some spotty service following an alleged cyberattack a day earlier against several websites by a pro-Syrian government group. Times spokeswoman Eileen Murphy confirmed the website was functioning normally Wednesday morning, though some users were experiencing difficulty accessing the site. Tuesday's hacking, believed to be by the Syrian Electronic Army, a group of hackers that supports Syrian President Bashar al-Assad, redirected readers away from NYTimes.com and to a different address. While the attack isn't continuing Wednesday, some service problems persisted. Still, it appears most major Internet service providers have already removed the bad address, allowing many users to access the site, Ms. Murphy said. The group appeared to attack more than 10 websites, including Twitter Inc. and HuffingtonPost.com Inc., said security researchers citing digital evidence. In the past, the group has taken action against media organizations and websites it believes are sympathetic to Syrian rebels. The hackers repeatedly claimed they had taken over Twitter's Internet address, though they appeared to be unsuccessful. The social media site never appeared to lose service. But for a brief time Tuesday evening, twitter.com, one of the most trafficked U.S. websites, at least appeared to be owned by a group called SEA, also the hacking group's acronym. The website appeared to be registered to sea@sea.sy, according to a security researcher with knowledge of the digital evidence. "Hi @Twitter, look at your domain, its owned by #SEA : )," said a post on a Twitter account believed to be run by the Syrian Electronic Army. The SEA didn't respond to a request for comment. Multiple security researchers with firsthand knowledge of digital evidence said all of the websites hacked shared a common feature: They were registered through a company in Australia. The firm, Melbourne IT, said the credentials of one of its resellers were used to access its systems. The hackers were then able to change the records for several websites, a company spokesman said. The company subsequently locked those records from future changes after the problem was resolved, the spokesman said. Entries in Twitter website records were modified at the company through which Twitter registers its Web address, the San Francisco company said in a blog post late Tuesday. A person familiar with the situation said Twitter's Web address provider is Melbourne IT. Twitter's blog post said the modified records affected one website used to display photos or other images on Twitter's service. As a result, some Twitter users experienced problems accessing images on Twitter, according to the person familiar with the situation. "No Twitter user information was affected by this incident," the company said in its blog post. Similar digital evidence showed the New York Times's website had been hacked by the SEA, said Johannes Ullrich, a cybersecurity expert at the SANS Institute in Washington. Mr. Ullrich, who doesn't work for the Times, found digital evidence that shows the newspaper's website was redirecting to a different server. When Mr. Ullrich, who has tracked the hacker group in the past, checked which new server nytimes.com directs to, he received the message "Hacked by SEA. Connection closed by foreign host." The Syrian Electronic Army has targeted several media organizations in the past, including the Washington Post, Reuters and the Onion, a satirical newspaper. When the SEA hacked the Twitter account of The Associated Press earlier this year, it posted a false headline to the account that said the White House had been attacked. The hoax caused U.S. stock markets to briefly lose $200 billion in value. Write to Ben Fox Rubin at ben.rubin@dowjones.com, Danny Yadron at danny.yadron@wsj.com and Shira Ovide at shira.ovide@wsj.com via Technology - Google News http://news.google.com/news/url?sa=t&fd=R&usg=AFQjCNELHHsSzZTedDs-I_DDVZNlGxtmaA&url=http://online.wsj.com/article/SB10001424127887324009304579040900023429122.html

Put the internet to work for you. via Personal Recipe 2598265