KDMS Team defaces more websites using DNS attacks

Share this article:

Hacktivist group KDMS Team took credit for compromising the website of security solutions company Rapid7 on Friday, as well as the site for its vulnerability and penetration testing framework Metasploit, posting pro-Palestine messages.

Rapid7 quickly issued a statement explaining the DNS settings for both websites were changed by a malicious third-party and the sites had to be locked down so the appropriate actions could be taken to address the issue.

“It looks like the domain was hijacked via a spoofed change request faxed to [domain registrar] Register.com,” the Rapid7 statement said.

KDMS Team made headlines earlier this week for using DNS redirection attacks to deface websites belonging to cross-platform instant messaging service WhatsApp, computer security firm AVG Technologies, and anti-virus software company Avira.

UPDATE:  Rapid7, in a statement, said that the attacker did not use a “spoofed change request fax” and and instead likely used other social engineering techniques to compromise the credentials of a Register.com employee.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

More in News

CryptoWall surpasses CryptoLocker in infection rates

CryptoWall surpasses CryptoLocker in infection rates

A threat analysis from Dell SecureWorks CTU says that CryptoWall has picked up where its famous sibling left off.

Professor says Google search, not hacking, yielded medical info

Professor says Google search, not hacking, yielded medical ...

A professor of ethical hacking at City College San Francisco came forward to clarify that he did not demonstrate hacking a medical center's server in a class.

Syrian Malware Team makes use of enhanced BlackWorm RAT

Syrian Malware Team makes use of enhanced BlackWorm ...

FireEye analyzed the hacking group's use of the malware, dubbed the "Dark Edition" of BlackWorm.