Iranian hackers deface multiple big companies Turkmenistan domains (.tm) yesterday using DNS poisoning attack. All hacked domains are registered by NIC at Turkmenistan. Hacker managed to find and exploit a SQL Injection vulnerability in NIC website in order to get database of the site.
The Hacker News

Because the passwords was stored in plain text, that make more easy for those hacker to access the domain panels of each domain and changing the DNS entries to shift websites on a rouge server with defaced page. The defaced message as shown below:
The Hacker News
Defaced domains :
  • www.youtube.tm
  • www.gmail.tm
  • www.msdn.tm
  • www.intel.tm
  • www.officexp.tm
  • www.xbox.tm
  • www.windowsvista.tm
  • www.orkut.tm
  • www.google.tm
The Hacker News

Mirror of hacks are available at Zone-H.

Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.