Forum Home
Press F1
 
Thread ID: 99122 2009-04-21 02:03:00 Microsoft New Zealand Hacked by Peace Crew? Chilling_Silence (9) Press F1
Post ID Timestamp Content User
766758 2009-04-21 04:36:00 and running Apache, not IIS.

Nope - the "hacker's" site is running on Apache, whereas the actual msn.co.nz which seems to be back up now, is running on IIS (see the headers from the working site).

Date: Tue, 21 Apr 2009 03:35:08 GMT
Server: Microsoft-IIS/6.0
P3p: CP="BUS CUR CONi FIN IVDi ONL OUR PHY SAMo"
server-name: web9msn22
X-powered-by: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 143998
X-UA-Compatible: IE=EmulateIE7

As I posted earlier, the "hack" wasn't into Microsoft's systems - all the hackers did was point the domain msn.co.nz at another server. Quoting from stu's link to the NZ Herald article:

Sales manager Matt Dobbs said he has staff looking into the problem.

He said the name servers had been changed on the site but they did not know how that had occurred.
somebody (208)
766759 2009-04-21 04:46:00 I'd say through social engineering, or an inside job would be most likely ...

But that's just speculation
Chilling_Silence (9)
1 2