Start page for majority of Pakistanis – when they first visited it this morning – was found hacked and defaced. Yes, Google.Com.PK along with 284 other .PK domains were hacked today (and are still defaced).
According to Irfan Ahmed, an expert on Pakistani websites and web-servers, this defacement is due to change in DNS entries for 284 .PK domains that are managed by MarkMoniter.
Defaced domains include Microsoft.PK, apple.PK, paypal.PK, ebay.PK, blogspot.PK, chrome.PK, Cisco.PK and others.
Apparently no one has claimed the responsibility for the incident, but a message appearing on defaced pages, including on Google.com.pk is displaying a message in Turkish language, hinting that the hacker could be Turkish in origin.
Hacker hasn’t left any message for anyone, unlike the norm that hackers follow to convey their message through such defacements.
However, there is a phrase saying “Downed Pakistan”, a sign of victory for hackers when the deface a website.
Check below the screenshot of hacked Google.com.pk – which is still in-tact for few users.
Follow ProPakistani on Google News & scroll through your favourite content faster!
Support independent journalism
If you want to join us in our mission to share independent, global journalism to the world, we’d love to have you on our side. If you can, please support us on a monthly basis. It takes less than a minute to set up, and you can rest assured that you’re making a big impact every single month in support of open, independent journalism. Thank you.
Working perfect
not working…
is it still down at your side
haha
working fine at the moment
where working…
using main page of google.com instead .pk domain
Strange. Still down for me
lol! that means its ISP based hacking
I am on wi-tribe. Your ISP?
Wateen
still not working :(( who the hell hacked !
when i checked in the morning it was working fine but now its not!
nopsss…. some people have http://www.google.com as homepage, whereas http://www.google.com.pk is hacked and is still out of function :D
its not isp based hacking .. its http and https based hacking .. HTTPS is working Well :) http://google.com.pk is hacked .. https://www.google.com is working well :)
this one http://www.google.com.pk/ is onliy hacked .. not https ;
Seems Turkish hacker Mr. eboz got access to the PKNIC account for changing Nameservers ~ http://goo.gl/yREkq
– It’s not their fault (Google) this breach happened from our side (PKNIC) – Google is still down from my side since last 3 hours. It’s 10:02 AM – I’m using PTCL Broadband.
take a look here http://www.zone-h.com/mirror/id/18639746
whole .PK registry is poisoned
you are right!
A lot of experts sitting here and i want to share some thing too.
Its not google that has been hacked. Possibly our TLD (top Level Domain) i.e pknic has been compromised and the name server entries were changed . The websites are re-routed not hacked. This was the same thing happened to supreme court website couple of moths back so it seems that there is some security hole that is not covered by pknic.We should blame pknic not google, but at the end of the day security is not 100% possible.
Cannot be the work of any Turkish. It is some Indian or Israeli who is using Turkish Language just to create confusion.
ROFL konse molvi ko sunke aye ho. grow up.
I agree with Umar Looks like a work of a non-Turkish. I’ve been to Turkey personally, Turkish people treat us Pakistanis in the best possible way in today’s era. Turkey is one country that stands by us and helps us. Turkish language has been used to create confusion, confusion among the Turkish and Paki people :).
One of the most simple ways.
I hereby nominate you for the “Worst Conspiracy Theory of 2012” award.
Who the hell you are to announce the award. Its by indian or Israilis.. Grow UP
hackers are few in millions dude…and are jerks [most of the time]. and turkey being a hospitable nation doesn’t make few jerks the angels.
and why is that you’re so sure of the man behind this being a turkish…it’s just a sentence written in turkey. that doesn’t NECESSARILY make him turkish. grow up you too
grow up buddy :)
most possible way using google translator :) i knw trukhs hacker they show weakness not pak downed
LOL he is the hacker http://www.dl4hacks.net/user-4952.html
ye ap ko kaha se Israeli or Indian lagta hai?
Registration Date: 09-23-2012
Registration Date: 09-23-2012 hmm
There is one born every minute.
Aise pagal moulvi hamarey mulk ko le dubein ge. Turkish tere mamey ke putar hein ? Theka nhi uthaya hua unhon ne hamari terha dunya ka
totally agree with you Israelis did this because a few days earlier Pakistani did the same to Israeli sites…this is the counter attack…
yes…you’re making some sense here
Agreed, this is a counter attack………
I agree with you. There’s no such dispute between Pakistan and Turkey. Why should Turkish people do this.
As far as it is about profile nd message in Turkish Language. It can be fake.
Complete List of Hacked .PK Domains
How Google.com.pk and other .PK Domains were Hacked
No this is down by Turkish. Eboz is Turkish hacker. Don’t worry you will see more Israel defacements soon. ;)
opening
someone using evo? having any trouble with this today? disconnecting every 2 minute from 7a.m today
bhai ptcl tu eisa he haii… witribe is the best
evo working fine… might be signal problem at your end..
just downloaded 292 Mb file in one attempt…
no signal problem facing disconnectivity
Its better to clear the history and then use it.. google.com…
page removed by Google…
restoring might be in progress…
Lol, only the home page is down.
If you try to Google something from the Chrome address bar, it works absolutely fine.
Misleading title for an article, since only the “homepage” has been hacked, not the entire website.
A great message to Google. appreciated………….. Well Done
Ok now go back to your cave.
I am going back to my cave.. Now you can clean your cave..
Not working with me
google.com.pk is still down
but
google.com working fine..
Yes Hack in morning, But know working
It is not Google, but instead PKNIC account of the agent MarkMonitor instead, the hacker was able to change DNS addresses to freehostia.com.
now Google.com opening not .com.pk
I think someone is trying to create hatred among Turkish and Pakistani people.
waisay bhi google pakistan konsa Pakistanio nay banaya hay
only http site is hacked not HTTPS .. HTTPS is working cool ..
:::
eboz of a friend always there for me My homies have not shot by me with every breath
Downed Pakistan
?
trabzon 2012Hello friends who are still alive not dead!
Really a great shame for Google, must be done by some genius hackers out there wanna learn it too.
Might this could be reaction to Block Mobile Networks
hmm not working..
paypal.PK dafauq is that ???
Pay Pal does not have any link up with PK so far… upto my correspondence with their support team!!!
How much time more for restoring?
Its just because Pakistani hackers deface over 30 Israeli websites to show support for Gaza…
From the last few days, Pakistani Hackers are in action and are keep on hacking Israeli different important websites just to show their respect towards muslims and their anger towards Israeli’s f__k policies…. May be all of this be the result of that Paki hacker’s act!
.pk domains down due to security reasons for moharram,by rehman malik……………lolzz
Google.com.pk is restored.
Google Translate, Translates it as My homies is not with me I always have with me for a friend with every breath shot
And the footer line says My homies is not with me I always have with me for a friend with every breath shot
And not only that, The hacker just haven’t hacked Pakistani domains but even thousands of different domains
https://www.google.com/search?q=dostlara+selam+%C3%B6lmedik+hala+ya%C5%9F%C4%B1yoruz&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
And the Turkish hacker is eboz http://www.dl4hacks.net/user-4952.html
not accessable, connection reset error…… even ip is not accessable. server has been retarded :(
It says downed by Eboz!! he is a turkish hacker. To everyone the page asks you to download a plugin dontt !!!
off topic but just clicked a link at Facebook got re routed to youtube and suddenly video started playing. Did i miss any notification issued about opening youtube in pakistan? I am on EVO by the way.
yar ab ishq mamnu kai bad turkish citizens nai aik aur musibat bna di :P
Aray wahh ab bhi dekhte ho kya :P
Great …. Super Likes … !
nothing is safe in pakistan o_O
I really LiKe The HACKERS.
I wish to be a HACKER.
i bet its the israeli hackers
thank God that i use olny .kr sites :P
lolxx.. deface page was hosted on freehostia as i checked dns. so i let them know about it and now they suspended hosting account of that person who did it ..
Hello,
The account has been suspended.
Kind Regards,
Kevin Johnson
[email protected]
http://www.Freehostia.com
Haha Pakistani Fuckers!!
Retard NOOB, NERD, Blah blah blah
All The Websites Hacked Are Only Multinational Websites. Like Fanta.pk , http://www.ebay.pk ,www.msn.org.pk , http://www.hp.com.pk , http://www.apple.pk , http://www.microsoft.pk
It is a registry level hack! they have gotten into Pknic and managed to change dns of sites like google.com.pk at this point it seems like Google.com.pk dns is pointed to a free dns host, which as of now is suspended. Hacker could have poisoned all .pk domains, would of been a biggest hack of century! https://twitter.com/ThisIzSparta/status/272290661309497346
Jitni Website Bhe Hacked Hoi Hain Sab Ki Sab Multinational Companies Ki Thi. Or Tmam Ka NS dns1.freehostia.com , dns2.freehostia.com Per Set kiya gaya he.
i Think PKNIC K Database Se Koi Gar Bar hoi he. Wo Tmam .pk Domain Hacked Hoaay Hain Jin Ka CNAME Redirected Tha.
Aamir bhai ap kese bach gaye .PK to apka bhi he shukar manayen!!
so technically pknic was hacked :P
It is really creating a mayhem in the image of paki people about the Hackers
There was a paypal.com.PK ??? how did no one knew abt it ? and did paypal.com.pk provides payment services for pakistan ??
turkish prime minister visited Ghaza as solidarity of Muslims. Pakistani hackers hacked their websites. Jews are very sensitive to their enemies. Thats why they pictured such event to disheart people of Pakistan and to counter attack on us. in other words aik teer sa do shikaar.
so where are the smart hacker …..
they should have foreseen the attack and must have defended it ….
if they can not defend us then should not enter the game ….
Hun Aram eh .Hor lo Pangye……. !
Now the site is back they just change the main servers that why it takes time to re-update the servers name back. believe me this is noting big they cant hack internet giant google original servers:))
My homies is not with me I always have with me for a friend with every breath shot .
kankalarim hep yanimda arkadas icinde yanimda olmayan mi var cekimlik her nefeste .
All the websites can be open easily. It is a fake news.
http://tny.cz/44e5a1d5 Full report ..Admin should publish this report also in new post
@Admin: Where is my last comment for this story?
Pakistani’s are earning enough with non PK domains then why should we worry about these domains :P
Here is my observation:
Most of them are well known cTlds for example, microsoft.pk, yahoo.pk, ebay.pk, visa.com.pk, paypal.pk, sony.pk etc.
Interesting part is they all have 2 things in common:
1. They are all registered through PKNIC
2. They are all “not in use” domains and registered for Brand and identity protection only (in simple words, so that no one else can have it).
Hackers had access to PKNIC as they modified NS entries for each domain and change to dns1.freehostia.com and dns2.freehostia.com respectively.
I have a feeling that these domains were ignored or forgotten by their owners. Every domain is set to expire in less than 4 months if you closely observe. These domains domains were not actively used and there was no pages to serve on these domains. They were all registered by a single company : MarkMonitor. who is responsible to manage brand protection, etc. for all of the above companies.
any feedback?
PKNIC has a big problem of ns name grouping, first of all user need to create a ns name record group and then allocate it to a domain or set of domains
if some one need to change in ns then he need to create a new ns group not directly. if you just locate the domain and click the ns to change it will change the whole group not a single domain.
So that could be reason for mark monitor