Suriname, Antigua and Barbuda, and Saint Lucia High Profile Sites hacked by 1337

hacked by 1337

If the domain registrar server or NIC of a country was hacked recently, there’s a decent chance it is hacked by Pakistani Hacker 1337. The infamous hacker 1337 hit domain registrar server again and hijacked high profiles domains of Caribbean islands of Antigua and Barbuda, Suriname, and Saint Lucia.

Two days ago, CoCCA – Council of Country Code Administrators Registrar Service was hacked by 1337 with 12 NIC domain registrar website of CoCCA. The NIC hack don’t stop here. The 1337 hacker hacked Bhutan Nic (NIC.bt), Togo NIC (Nic.tg), NIC of Israel(.il), Pakistan NIC (.pk), NIC of Serbia (.rs), Nic of Uganda(.ug), NIC of Cape Verde(.cv) and NIC of Burundi(.bi).

It merit mentioning here that all domains are defaced with DNS poisoning attack. The hackers managed to hack into Domain Registrar website and changed the authoritative DNS records of the domain, to point the domain name to the madleets name server.
Name Server: b0x1.madleets.com
Name Server: b0x2.madleets.com

The complete list of Hijacked domains with mirror are listed below.

  • http://nic.ag
  • http://zone-h.org/mirror/id/20939686
  • http://nic.lc
  • http://zone-h.org/mirror/id/20939828
  • http://samsung.com.ag
  • http://samsung.co.ag
  • http://orange.com.ag
  • http://oracle.co.ag
  • http://volvocars.com.ag
  • http://cola.ag
  • http://window.ag
  • http://ibm.ag
  • http://canon.ag
  • http://canon.co.ag
  • http://canon.com.ag
  • http://canon.net.ag
  • http://canon.org.ag
  • http://clarion.ag
  • http://clarion.com.ag
  • http://fujitsu.ag
  • http://fujitsu.com.ag
  • http://hitatchi.com.ag
  • http://toshiba.ag
  • http://toshiba.com.ag
  • http://bmw.lc
  • http://toshiba.lc
  • http://toshiba.com.lc
  • http://hitatchi.com.lc
  • http://honda.com.lc
  • http://hitatchi.com.lc
  • http://samsung.co.lc
  • http://fujitsu.com.lc
  • http://canon.lc
  • http://audi.sr
  • http://blackberry.sr
  • http://avg.sr
  • http://bing.sr
  • http://microsoft.sr
  • http://mastercard.sr
  • http://intel.sr
  • http://microsoftwindows.sr
  • http://msn.sr
  • http://philips.sr
  • http://rollsroyce.sr
  • http://rolls-royce.sr
  • http://symantec.sr
  • http://vodafone.sr
  • http://samsung.sr
  • http://zone-h.org/archive/ip=185.8.105.81

At the time of publishing, the websites are still defaced and showing the message left by the hackers.

18 thoughts on “Suriname, Antigua and Barbuda, and Saint Lucia High Profile Sites hacked by 1337

  1. […] days before, I wrote, If the domain registrar server or NIC of a country was hacked recently, there’s a decent chance it is hacked by Pakistani Hacker […]

  2. […] days before, I wrote, If the domain registrar server or NIC of a country was hacked recently, there’s a decent chance it is hacked by Pakistani Hacker […]

  3. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on ’1337′s’ Facebook page says ‘Google Malaysia Stamped By […]

  4. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on ’1337′s’ Facebook page says ‘Google Malaysia Stamped By […]

  5. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on ’1337′s’ Facebook page says ‘Google Malaysia Stamped By […]

  6. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  7. […] hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  8. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  9. […] hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  10. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  11. […] Antigua and Barbuda – Google Blog Search | Suriname, Antigua and Barbuda, and Saint Lucia High… […]

  12. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  13. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  14. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  15. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  16. […] hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  17. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

  18. […] an individual hacker within the group called 1337, who has recently (allegedly) performed hacks on domain registrars of several countries. A message on 1337′s Facebook page says “Google Malaysia Stamped By 1337″ and references the […]

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>