5 ms·
Google Vietnam Compromised?
Looks like someone has compromised Google's Vietnam site.
A cursory DNS query for google.com.vn against 8.8.8.8 returns a Cloudflare IP. I'm not a security expert, but seems like something decidedly strange is going on.
As of the posting of this message, this is what is found when accessing the home page: http://imgur.com/wMScgY6
- r721 12y agoArchive.org mirror: https://web.archive.org/web/20150223052409/http://google.com.vn/ https://web.archive.org/web/20150223052409/http://google.com...
- bnb 12y agoThat guy looks uber l33t h4x0r to me. Excuse me while I purchase some DDOS from this fine fellow for a fair price.
- sondh 12y agoUsing Viettel ADSL with Google DNS and I can confirm this. Google Chrome detected the issue and didn't load at all (http://imgur.com/qoXPj9R http://imgur.com/qoXPj9R). Going through http is fine. Page source: http://pastebin.com/rHttdwiy http://pastebin.com/rHttdwiy
- deleted 12y ago[deleted]
- brohee 12y agoIt looks more like the Vietnamese NIC was compromised...
- deleted 12y ago[deleted]
- linuxbuzz 12y agoYeah. I just checked: http://pastebin.com/C7f7zGAK http://pastebin.com/C7f7zGAK
- linuxbuzz 12y agogoogle.com.vn NS was changed at vnnic.vn whois too -> http://i.imgur.com/6vvZqXS.png http://i.imgur.com/6vvZqXS.png
- sondh 12y agoEither VNNIC was hacked or someone got Google credentials... I hope it is the later.
- xyzzy123 12y agoOr their registrar, WebNic.cc perhaps.
- yeukhon 12y agoSorry, but why would you hope it was the latter?
- ryanlol 12y agoMaybe a single customer getting owned is better than all the customers getting owned?
- bottled_poe 12y agoAn NIC exploit may be widely repeatable.
- yeukhon 12y agoWell :| certainly not the first time. http://thehackerspost.com/2013/10/google-malaysia-gets-hacked-1337-hacker-madleets.html http://thehackerspost.com/2013/10/google-malaysia-gets-hacke...
- cryptbe 12y agoWhile I'm not 100% sure, it's likely that VNNIC has been 0wned. Rationale: VNNIC doesn't provide any online DNS management tools. One has to submit a paper request in person to change any DNS records. Edit: it looks like it's the registrar WebNic.cc that got hacked.
- linuxbuzz 12y agoI'm using VNPT and I can confirm this issue too, happened twice.
- eddiek85 12y agoHi linuxbuzz, are you located in HCMC?
- linuxbuzz 12y agoYes. I'm in HCMC
- eddiek85 12y agoSweet. What do you do here? Are you local or a foreigner? I need some tech savvy friends in vietnam. Seems like I only meet drunkards
- anh79 12y agoYou would find some guys on meetup.
- bvanalder 12y agoHey, i'm a foreigner techie living in Saigon, what do you need ?
- microcolonel 12y agoI know some tech savvy drunkards who have moved to Viet Nam, seems like a favourite place for that exact crowd(cheap SIM cards, accommodations, and especially cheap booze).
- tomotomo 12y agoAnother Saigonist here. Always up for ca phe sua da with HNers.
- anhtran 12y agoI don't use 8.8.8.8 as ip for DNS. Still using the site normally.
- CoMaRL 12y agoSo, it's DNS redirect... Funny. PS: I'm in Sai Gon too, all OK for me.
- narga 12y agoI'm using Viettel and FPT Internet Connection. I confirmed that Google.com.vn has been defaced.
- deleted 12y ago[deleted]
- jonmy 12y agoI'm in Saigon, use Google DNS and it's still down for me. Before when I tried a query on Google, I got the standard SSL warning, which blocked the site and said "your connection is not private". Now, when I try a query the site just hangs and nothing happens. Something is certainly up. Maybe our neighbors way up North are messing around.
- cageface 12y agoThose of us in Vietnam that need to get around this can just browse here: http://www.google.com/ncr http://www.google.com/ncr That will set a cookie that directs searches to the main google.com domain instead of the .vn domain.
- ayyubrana 12y agoayyub rana
- jawngee 12y agoI'm using unblock-us DNS here in Saigon, no problems. Had to sshuttle into a singapore server to post this though.
- hieudang9 12y agoI'm total agree with case Webnic.cc has been compromised. "Rationale: VNNIC doesn't provide any online DNS management tools. One has to submit a paper request in person to change any DNS records"-cryptbe Btw, VNNIC redirect any unregister domains to your ads page.