How Hackers Hacked Google Pakistan And Many Other Websites

Early morning when I woke up, I was shocked to see that many Pakistani high profile websites are hacked and showing deface page. Some websites have been taken down and some are showing a deface page.

But I want to note one important thing that servers of these high profile websites are safe.

Actually, Hackers have hacked into the DNS server that holds the records for .pk domain. They have the full access to the PKNIC server, so they can change the DNS records of any website. And hackers have done the same. They have change the DNS records of these high profile websites.

• http://www.google.pk/
• http://www.google.com.pk/
• http://www.yahoo.pk/
• http://www.sony.pk/
• http://www.blogspot.pk/
• http://www.coca-cola.pk/
• http://www.paypal.pk/
• http://www.microsoft.pk/
• http://www.apple.pk/
• http://www.hp.com.pk/

If you want to see the current DNS records of these domains, you can either use any Whois service or use CMD in window system.
Open command prompt and type following:

nslookup -d google.com.pk 

see the results

See the name server: dns1.freehostia.com

If you check for other hacked websites, you will find the same name server. It is the webserver where deface page is hosted. 

Many people are also claiming that the DNS server is safe and the deface has been done by DNS cache poisoning attack. But the mass attack indicates that something went worst than this. And PKNIC server has been hacked.elsGLE HACK, Hacking tutorials