DoSWatch = Aggregated stories about the use of denial of service attacks and hacking as a form of censorship.

If you hear about such an event, or if you've been censored in this way, please email or use @DoSWatch on Twitter.

This is not a news site. Our goal is to collect and quickly summarize, not research and fact-check. Many details of these reports rely on translated pages, speculation, and/or anecdote, so should be treated as such. Link quality will vary.

*click for email

Sunday, August 8, 2010

Dosh (Chechnya) hacked - December 2009


DATE:
2009-12

AFFECTED COUNTRIES:
Chechnya/Russia

AFFECTED SITES:
doshdu.ru

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Chechnyan independent news site Dosh, which covers human rights issues, was hacked. Attacks take places on the site regularly. This attack was "not on schedule," after a media report that the site received a Reporters Without Borders award.

URLS:
1. http://www.newsland.ru/News/Detail/id/441275/


Ha Si Phu Library (Vietnam) hacked - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Vietnam

AFFECTED SITES:
hasiphu.com

EFFECT OF ATTACKS:
Offline

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Ha Si Phu Library hacked and taken down.

URLS:
1. http://danluanvn.blogspot.com/2010/02/thu-vien-ha-si-phu-cung-bi-tin-tac-tan.html


Chinese Security Agency website hacked - June 2005


DATE:
2005-06

AFFECTED COUNTRIES:
China

AFFECTED SITES:
www.mps.gov.cn

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
China

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Hackers attacked the Chinese Security Agency's website. Defacement criticized the agency's work, including that it can't protect itself.

URLS:
1. http://www.lenta.ru/news/2005/06/20/hackers/


Samara Region (Russia) news site hacked - December 2009


DATE:
2009-12

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
bogatoe.info

EFFECT OF ATTACKS:
Defaced. Malware.

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Samara Region news site hacked and defaced, seemingly with malware.

URLS:
1. http://www.bogatoe.info/news/119-vzlom


A New Israel Fund site DDoSed - August 2010


DATE:
2010-08

AFFECTED COUNTRIES:
Israel

AFFECTED SITES:
lonistom.co.il

EFFECT OF ATTACKS:
Taken offline

SOURCE COUNTRY:
Australia

ALLEGED ATTACKERS:
far-right activists

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
In an "ongoing war against Israeli peace activists and human rights NGOs" the New Israel Fund's site Lo Nistom ("We won't shut up") was DDoSed.

URLS:
1. http://www.richardsilverstein.com/tikun_olam/2010/08/06/israeli-rightist-cyber-vandals-take-down-new-israel-fund-site-in-dos-attack/
2. http://www.haaretz.co.il/captain/spages/1183204.html


Richard Silverstein's blog DDoSed - May 2010


DATE:
2010-05

AFFECTED COUNTRIES:
USA, Israel

AFFECTED SITES:
richardsilverstein.com

EFFECT OF ATTACKS:
Offline

SOURCE COUNTRY:
Russia, Lebanon, USA

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Liberal Jewish blogger's site Tikun Olam DDoSed. Author speculates it may have been because his "blog was mentioned in a Yediot article [the previous day] and credited with breaking the gag order against reporting the arrests of Ameer Makhoul and Said Omer. Yediot has many extreme right wing readers (you can likely read lots of hate in the Talkback for that article directed against [Silverstein]". (1)

URLS:
1. http://www.richardsilverstein.com/tikun_olam/2010/05/10/denial-of-service-attack/


Th3J35t3r's Islamic extremist DoS attacks during July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Multiple, mostly Middle East and USA

AFFECTED SITES:
annabaa.org, almoslim.net, alghurabaa.org, way2allah.com, alfaloja.net, fatwa1.com, islamicemirate.com, tawheedmedia.com, muslimdefenseforce.islamicink.com, rjfront.info, falojaa.net, islamicawakening.com, alemarah-iea.com/english, sawtaljihad.org, h-alali.net, islamicboard.com, einladungzumparadies.de

EFFECT OF ATTACKS:
Depending on attack, down for 30 minutes or Apache server defaulted (displays "Hey, it worked!" Apache install page [not the website's contents])

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.

TYPE OF ATTACK:
DoS, hack

ATTACK SPECIFICS:
XerXeS DoS as well as a "new technique" that defaults the server to display the "Hey, it worked!" Apache install page.

EVENT DESCRIPTION:
"www.annabaa.org TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (1)
"www.almoslim.net TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (2)
"www.alghurabaa.org TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (3)
"www.way2allah.com TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (4)
"www.alfaloja.net TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (5)
"www.fatwa1.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (6)
"www.islamicemirate.com TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (7)
"www.tawheedmedia.com TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (8)
"www.muslimdefenseforce.islamicink.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (9)
"www.muslimdefenseforce.islamicink.com TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (10)
"www.rjfront.info TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (11)
"www.falojaa.net TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (12)
"www.islamicawakening.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (13)
"www.falojaa.net TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (14)
"www.alemarah-iea.com/english -DOWN 30 MINS -lesser known backup of Taliban Main (now defunct) Site. Getting Personal? Admin = Adil Watanmal" (15)
"www.sawtaljihad.org - TANGO DOWN indefinitley. For online incitement to cause young muslims to carry out acts of violent jihad." (16)
"www.h-alali.net TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (17)
"www.islamicboard.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (18)
"www.einladungzumparadies.de TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (19)

URLS:
1. http://twitter.com/th3j35t3r/status/18936284340
2. http://twitter.com/th3j35t3r/status/18933773664
3. http://twitter.com/th3j35t3r/status/18781973237
4. http://twitter.com/th3j35t3r/status/18713452239
5. http://twitter.com/th3j35t3r/status/18710829991
6. http://twitter.com/th3j35t3r/status/18708341592
7. http://twitter.com/th3j35t3r/status/18547410960
8. http://twitter.com/th3j35t3r/status/18540189894
9. http://twitter.com/th3j35t3r/status/18524610749
10. http://twitter.com/th3j35t3r/status/18523737043
11. http://twitter.com/th3j35t3r/status/18472850724
12. http://twitter.com/th3j35t3r/status/18461459866
13. http://twitter.com/th3j35t3r/status/18458727660
14. http://twitter.com/th3j35t3r/status/18357305944
15. http://twitter.com/th3j35t3r/status/18296704508
16. http://twitter.com/th3j35t3r/status/18150401065
17. http://twitter.com/th3j35t3r/status/18055309513
18. http://twitter.com/th3j35t3r/status/17673225657
19. http://twitter.com/th3j35t3r/status/17611176590


Chinese Human Rights Defenders hacked - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
China

AFFECTED SITES:
crd-net.org

EFFECT OF ATTACKS:
Offline for days

SOURCE COUNTRY:
China

ALLEGED ATTACKERS:
Chinese government

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Latest DDoS attack against the Chinese Human Rights Defenders' website.

URLS:
1. http://chrdnet.org/2010/07/27/china-human-rights-briefing-weekly-july-20-26-2010/


ChristopherPitts.net (USA) hacked - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
USA

AFFECTED SITES:
christopherpitts.net

EFFECT OF ATTACKS:
Hacked, content deleted

SOURCE COUNTRY:
China

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Blogger reported being hacked after writing "several seemingly benign posts on Shanghai." "Someone managed to enter my site and delete all of these posts." (1)

URLS:
1. http://wordpress.org/support/topic/hacked-censored-in-china


Youm el-Sabea (Egypt) hacked - August 2010


DATE:
2010-08

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
youm7.com

EFFECT OF ATTACKS:
Hacked, defaced

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
Tarek Ahmed

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
"According to software engineer Abdel Rahman Ghareeb, who has closely studied hacking techniques, the security system used to safeguard Youm el-Sabea's website is an easy hack." (1)

EVENT DESCRIPTION:
Attack on a popular Egyptian independent newspaper Youm el-Sabea attributed to "transgressions against the Muslim Prophet Muhammad and his family, companions, and wives [which were] posted on Youm el-Sabea's website." (1)

"The message went on to note that the attack was primarily a response to a book by author Anis el-Degheidi--entitled, Muhakamet el-Nabi Muhammad, or “Trials of the Prophet Muhammad”--the contents of which allegedly defame the Prophet." (1)

The hacker, Tarek Ahmed, was caught shortly thereafter. (2)

URLS:
1. http://www.almasryalyoum.com/en/news/hackers-target-news-website-gamal-mubarak-facebook-page
2. http://www.almasryalyoum.com/en/news/police-arrest-youm-al-sabea-website-hacker


"Yes to Gamal Mubarak" FaceBook page hacked - August 2010


DATE:
2010-08

AFFECTED COUNTRIES:
USA, Egypt

AFFECTED SITES:
facebook.com

EFFECT OF ATTACKS:
Hacked

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
The "Yes to Gamal Mubarak" group on FaceBook was hacked. Page supporting anticipated Presidential candidate and son of the current President Gamal Mubarak was hacked and its name changed to [translation] "Denied you the beauty and unwanted you." (1) Other text read "we don't want you or your father."

URLS:
1. http://www.almasryalyoum.com/en/news/hackers-target-news-website-gamal-mubarak-facebook-page


Mustafa Hosny's website (Egypt) defaced - August 2010


DATE:
2010-08

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
mustafahosny.com

EFFECT OF ATTACKS:
Defaced, down for an hour

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Islamic televangelist's site defaced. Defacement text in part read "any act against the enemies of Iran will not remain without a response" (1)

URLS:
1. http://www.shorouknews.com/ContentData.aspx?ID=277548


Sunday, July 25, 2010

Several reformist blogs hacked (Iran) - August 2008


DATE:
2008-08

AFFECTED COUNTRIES:
Iran

AFFECTED SITES:
khaniki.ir, shirzad.ir, and more

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several blogs including the journals of Dr. Khanyky and Dr. Shirzad (names based on translation) hacked and defaced. Not many details available.

URLS:
1. http://persian.kamangir.net/?p=3524


Jaras News (Iran) defaced - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Iran

AFFECTED SITES:
jarasnews.com

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
Iranian Cyber Army

TYPE OF ATTACK:
Defacement, hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
News site that covers the Green Movement hacked by the Iranian Cyber Army, displaying the message, "Out of respect for the referendum which was held on 22 Bahman [February 11, 2010] and the people who voted and out of respect for the great nation and country named Iran ... do not be a tool of those who live safe and sound in America and are using you as a tool." (1)

URLS:
1. http://www.qlineorientalist.com/IranRises/category/uncategorized/
2. http://en.irangreenvoice.com/article/2010/feb/19/1236


Amirkabir University (Iran) defaced - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Iran

AFFECTED SITES:
aut.ac.ir

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
Iranian Cyber Army

TYPE OF ATTACK:
Defacedment, hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Amirkabir University's website hacked due to a Reformist Student Union. Included in defacement was the text "We will attack at the Leader's orders and put our lives on the line for him."

URLS:
1. http://en.irangreenvoice.com/article/2010/feb/19/1236
2. http://www.terrorism-info.org.il/malam_multimedia/English/eng_n/html/iran_e054.htm


Radio Zamaneh's (Persian radio in Holland) website defaced


DATE:
2010-01

AFFECTED COUNTRIES:
Netherlands

AFFECTED SITES:
radiozamaneh.com

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
Iranian Cyber Army

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Persian-language radio station (based in the Netherlands) with Iranian reformist affiliates hacked and defaced. "The message on the hacked site says in Persian: 'you who betray your country are not safe even when you are with your masters.' " (1)

URLS:
1. http://globalvoicesonline.org/2010/01/30/iran-iranian-cyber-army-hacked-radio-zamaneh/


Saturday, July 24, 2010

Kitab.nl (Tunisia) hacked - October 2009


DATE:
2009-10

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
kitab.nl

EFFECT OF ATTACKS:
Deleted blog, database and a Tunisian Prison Map. Shifted to a mirror/backup at ifikra.wordpress.com

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Tunisian government

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian political dissenter/activist Sami Ben Gharbia, director of Nawaat.org, had his blog hacked and all content removed.

URLS:
1. http://samibengharbia.com/2009/10/13/hello-world-im-hacked-again-and-again/


Kommersant (Russia) DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
kommersant.ru

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
News site often critical of Russian administration DDoSed

URLS:
1. http://www.novayagazeta.ru/news/243583.html


Dayudm.ru (Udmurtia/Russia) DDoSed - February 2008


DATE:
2008-02

AFFECTED COUNTRIES:
Udmurtia (Russia)

AFFECTED SITES:
dayudm.ru

EFFECT OF ATTACKS:
Down for over a month

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Udmurtian news site DDoSed.

URLS:
1. http://www.novayagazeta.ru/data/2008/40/15.html


Dayudm.ru (Udmurtia/Russia) DDoSed - August 2007


DATE:
2007-08

AFFECTED COUNTRIES:
Udmurtia (Russia)

AFFECTED SITES:
dayudm.ru

EFFECT OF ATTACKS:
Down for four weeks.

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Udmurtian news site DDoSed.

URLS:
1. http://www.novayagazeta.ru/data/2008/40/15.html


BlogSochi DDoSed - March 2010


DATE:
2010-03

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
blogsochi.ru

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Independent blog of Alexander Valov DDoSed after he published material about the state of Olympic construction projects in Sochi. Photos and videos depicted poor living conditions in these construction areas and other material reported that employees had not been paid.

URLS:
1. http://www.novayagazeta.ru/news/781514.html


Several Azerbaijani and Armenian sites attacked - February 2000


DATE:
2000-02

AFFECTED COUNTRIES:
Azerbaijan, Armenia

AFFECTED SITES:
aliyev.com and many others

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Azerbaijan, Armenia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"after an ethnic Armenian in California launched Aliyev.com, a site that disseminated 'black propaganda' about then Azerbaijani President Heydar Aliyev, Azerbaijani hackers launched an attack against Armenian Internet sites that included National State Television H1, and several online resources about the Turkish massacre of hundreds of thousands of ethnic Armenians during World War I." ... "a counter-offensive was launched by a group of Armenian hackers, Liazor. ...the group threatened to take down the entire Azerbaijani Internet. Indeed, the websites of many large Internet users, including humanitarian organizations, in Azerbaijan were hacked, and the email connectiosn of major Azerbaijani newspapers disrupted." (1)

Hackers in the two countries have been warring ever since these events.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


2 Azerbaijani sites defaced - February 2007


DATE:
2007-02

AFFECTED COUNTRIES:
Azerbaijan

AFFECTED SITES:
list.az, hayat.az

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Armenia

ALLEGED ATTACKERS:
axteam

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"A group of Armenian hackers calling themselves 'axteam' attacked two more Azerbaijani sites -- list.az and hayat.az -- as 'revenge for Bacioglu,' according to text posted on hayat.az. The Armenian security service has rejected the claim that it is connected with any of these attacks." (1) One in a series of many attacks related to the Nagorno-Karabakh dispute.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


5 Armenian websites defaced - January 2007


DATE:
2007-01

AFFECTED COUNTRIES:
Armenia

AFFECTED SITES:
openarmenia.com, openarmenia.ru, tamanyan.org, homeopathy.am, photoblogs.am

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Azerbaijan

ALLEGED ATTACKERS:
Bacioglu

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Azerbaijani hacker defaces 5 Armenian websites with his state's emblem and images of Azerbaijani civilians killed in Nagorno-Karabakh. Also a pledge to "fight you and all Armenians on earth as long as I live" and a threat to destroy the official website of Armenian President Kocharian. (1) One in a series of many attacks related to the Nagorno-Karabakh dispute.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


Azerbaijani public television station's website defaced - January 2007


DATE:
2007-01

AFFECTED COUNTRIES:
Azerbaijan

AFFECTED SITES:
itv.az

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Armenai

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Azerbaijan's public television station's website attacked, defaced with Armenia's state emblem and a warning that they would kill an Azerbaijani hacker identified as "Bacioglu" if he did not stop attacking Armenian websites. One in a series of many attacks related to the Nagorno-Karabakh dispute.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


Several Armenian governmental (and other) sites hacked - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Armenia

AFFECTED SITES:
taxservice.am, armeniadisapora.com, mineconomy.am, and many others

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Azerbaijan, Turkey

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several Aermenian government and private websites hacked (more than 100 attacks on the Armenian State Tax Service, the Diaspora Ministry and the webmail for the Ministry of Economy.) Sites were defaced with English curse words, "the flags of Azerbaijan and Turkey, a map that shows the disputed territory of Nagorno-Karabakh as part of Azerbaijan, and photos of victims from the 1988-1994 Nagorno-Karabakh war." (1)

URLS:
1. http://www.eurasianet.org/departments/insightb/articles/eav081909a.shtml


Muslim Brotherhood (Egypt) hacked - December 2006


DATE:
2006-12

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
ikhwanweb.com

EFFECT OF ATTACKS:
Brought down several times

SOURCE COUNTRY:
USA, Germany

ALLEGED ATTACKERS:
Al Qaeda sympathizers

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Many hacking attempts on the Egyptian website Muslim Brotherhood after it made critical statements about Al Qarda leaders. It was blocked by the government temporarily then faced the hacking attempts.

URLS:
1. http://www.ikhwanweb.com/article.php?id=2898


Alexandria University (Egypt) hacked - July 2009


DATE:
2009-07

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
alex.edu.eg

EFFECT OF ATTACKS:
Hacked

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Alexandria University hacked. Information the hacker gathered, including financial records, were left behind to show what had been done. Another file contained a message from the hacker describing his criticisms of the organization. The attacker self-identified as Egyptian

URLS:
1. http://www.ikhwanweb.com/article.php?id=20910


Al-Azhar hacked (Egypt) - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
azhar.edu.eg

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Prominent Sunni Muslim religious institution (university/mosque) hacked/defaced. Details limited.

URLS:
1. http://www.ikhwanweb.com/article.php?id=20910


Sunday, July 18, 2010

HolyQuran.net DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
USA, Saudi Arabia, Syria

AFFECTED SITES:
holyquran.net

EFFECT OF ATTACKS:
Offline for some days

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Up to 640Mbps

EVENT DESCRIPTION:
Islamic site attacked and brought offline for some days (still down at time of record).

URLS:
1. http://www.holyquran.net/ddos.html
2. http://twitter.com/MajidAlhamdan/status/18601520943


Charter97.org (Belarus) DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Belarus

AFFECTED SITES:
charter97.org

EFFECT OF ATTACKS:
Temporarily disconnect from network (over capacity)

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
2.5Gb/s

EVENT DESCRIPTION:
After the site posted the "second series of films NTV Religious Dad" it was hit by a big DDoS attack for about half a day, setting a record for biggest attack on the site to-date. The controversial video accuses Belarusian authorities of certain disappearances and murders of famous politicians, public figures, and journalists.

URLS:
1. http://charter97.org/ru/news/2010/7/17/30680/
2. http://twitter.com/newsfrombelarus/status/18784389936


Saturday, July 17, 2010

Contravia.tv (TeleSUR) hack attempt - April 2010


DATE:
2010-04

AFFECTED COUNTRIES:
Venezuela

AFFECTED SITES:
contravia.tv

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Hack attempt on the website of journalist Hollman Morris's TeleSUR program. Seems to have been ineffective. Morris said they may be related to other illegal monitoring and wiretapping he's experienced. Site was attacked with "malicious code" intended to link the page to spam, inevitably leading the site to be blocked by search engines.

URLS:
1. http://www.ifex.org/colombia/2010/06/18/morris_hack_attack/


Contravia.tv (TeleSUR) hack attempt - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Venezuela

AFFECTED SITES:
contravia.tv

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Hack attempt on the website of journalist Hollman Morris's TeleSUR program. Seems to have been ineffective. Morris said they may be related to other illegal monitoring and wiretapping he's experienced. Site was attacked with "malicious code" intended to link the page to spam, inevitably leading the site to be blocked by search engines.

URLS:
1. http://www.ifex.org/colombia/2010/06/18/morris_hack_attack/


Moscow Center for Prison Reform hacked - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
prison.org

EFFECT OF ATTACKS:
Hijacked

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, hijack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Front page of the Moscow Center for Prison Reform--one of the oldest Russian human rights NGOs, hacked. Content wasn't deleted but users can't access.

URLS:
1. http://www.allvoices.com/news/6211082-russia-human-rights-website-hacked-and-blocked


Ura.ru (Russia) hacked - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
ura.ru

EFFECT OF ATTACKS:
Hacked, content changed

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several articles on this major media outlet were changed by hackers. Hacked versions were critical of regional and federal authorities.

URLS:
1. http://www.needfirewall.com/news/russia-hackers-provoke-closure-of-the-major-news-website/


120 Malaysian sites defaced - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Malaysia

AFFECTED SITES:
About 120 sites of various kinds (official, financial, education…)

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Indonesia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Part of an ongoing culture war between Indonesia and Malaysia in which the former accuses the latter of hijacking bits of the latter's culture without giving credit. Sites were defaced on Malaysia's independence day with text accusing them of being uncreative and offensive. Sites were restored shortly after being defaced.

URLS:
1. http://www.thejakartaglobe.com/home/indonesian-hackers-claim-web-attack-on-malaysian-sites/327111


Almost 100 Malaysian sites defaced - January 2010


DATE:
2010-01

AFFECTED COUNTRIES:
Malaysia

AFFECTED SITES:
academydelphi.com, acgc.com.my, al-faizeen.com.my, anarkalihairdye.com, astree.com.my, auto-charge.net, bagsmalaysia.com, berjayabintangtimur.com.my, bionet-int.com, venkat-transport.com.my, and many others

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Indonesia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Almost 100 Malaysian sites hacked by Indonesians, defaced to display a page entitled "Down with Malingsial." Part of an ongoing culture war. Indonesia claims Malaysia stole their culture.

URLS:
1. http://www.babycorp.pro/news/100-website-malaysia-hacked-by-indonesian-hackers/index.html
2. http://www.babycorp.pro/news/again-malaysian-websites-hacked-by-indonesian-hackers/index.html


Malaysian Ministry of Health website defaced - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Malaysia

AFFECTED SITES:
hoshas.moh.gov.my

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Indonesia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Ongoing battle between Indonesian and Malaysian/Chinese hackers. This attack was on the Malaysian Ministry of Health website.

URLS:
1. http://forum.lowyat.net/topic/1484106


Friday, July 16, 2010

Yakov Krotov's sites hacked - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
krotov.info, livejournal.com

EFFECT OF ATTACKS:
Content deleted

SOURCE COUNTRY:
Germany

ALLEGED ATTACKERS:
Bonn-based hacker Sergey Maksimov ("Hacker Hell") / Brigade of Hell

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Latest victim of the hacker group Brigade of Hell is Yakov Krotov, a priest and publicist. Content from his LiveJournal account and personal site both deleted.

URLS:
1. http://globalvoicesonline.org/2010/07/14/russia-priests-blog-hacked/


Xocali.net (Armenia) DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Armenia

AFFECTED SITES:
xocali.net

EFFECT OF ATTACKS:
Service interruptions

SOURCE COUNTRY:
Aerbaijan

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Three day attack

EVENT DESCRIPTION:
Site describes inaccuracies in Azerbaijan's story of the Nagorno-Karabakh War. Suffered a large DDoS attack.

URLS:
1. http://www.panarmenian.net/eng/it_telecom/news/51360/Xocalinet_attacked_by_Azerbaijani_hackers


Syrian Center for Media and Freedom of Expression hacked - February 2007


DATE:
2007-02

AFFECTED COUNTRIES:
Syria

AFFECTED SITES:
scm-sy.org

EFFECT OF ATTACKS:
Down, a lot of content deleted (whole archive)

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Syrian Center for Media and Freedom of Expression has been harassed both online and in real-life, with legal problems for its founder(s). In this instance the site was attacked, losing its entire archive (a few months later a fire would destroy its archives in its office).

URLS:
1. http://www.anhri.net/syria/scm/2008/pr0814.shtml


Palestine News Agency hacked - April 2007


DATE:
2007-04

AFFECTED COUNTRIES:
Palestine (unsure which country)

AFFECTED SITES:
wafa.ps

EFFECT OF ATTACKS:
Content deleted

SOURCE COUNTRY:
Israel?

ALLEGED ATTACKERS:
Israeli hackers

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Palestine News Agency hacked by Israeli hackers

URLS:
1. http://www.anhri.net/palestine/makal/2007/pr0401.shtml


Several Shiite sites attacked (and a subsequent counterattack) - July 2008


DATE:
2008-07

AFFECTED COUNTRIES:
Egypt, others

AFFECTED SITES:
Fatimid Egypt and Shia Egypt (URLs unknown)

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Egypt, Saudi Arabia

ALLEGED ATTACKERS:
Sunnis / Shiites

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Shiite forums and websites hacked and disabled. Shiites subsequently launched an attack on Sunni sites, but the details of the counterattack aren't clear.

URLS:
1. http://www.almasry-alyoum.com/article2.aspx?ArticleID=112685&IssueID=1097


Palestine Future, others hacked - June 2009


DATE:
2009-06

AFFECTED COUNTRIES:
Israel

AFFECTED SITES:
ppi.ps, palestinefuture.net, and other sites affiliated with the Palestine Media Network (PPI)

EFFECT OF ATTACKS:
Taken over by a hacker temporarily

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"Alhecrz"

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site suffered attempted hacking attempts previously, but this was the first time they were successful. The initial target was palestinefuture.net, then the server and other related sites. Content was removed, but successfully restored a a couple days later less the previous 50 days of posted material. Also seems like the ISP issued a $15,000 charge for overages. Site claims the reason for the attack is its "precision in exposing the violations by Israel against the Palestinian people." (1)

URLS:
1. http://www.anhri.net/lebanon/sk/2009/pr0626-2.shtml


NewYemen hacked - November 2009


DATE:
2009-11

AFFECTED COUNTRIES:
Yemen

AFFECTED SITES:
newsyemen.net

EFFECT OF ATTACKS:
Unreachable

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
News Yemen hacked. Hard to determine motive or other specifics from translation.

URLS:
1. http://www.anhri.net/yemen/makal/2009/pr1129.shtml


Sunday, July 11, 2010

South Korean governmental and financial sites DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
South Korea

AFFECTED SITES:
president.go.kr, cwd.go.kr, mofat.go.kr, naver.com, nonghyup.com, keb.co.kr, mnd.go.kr

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Germany, Austria, Georgia, US, South Korea

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Attacking bots were found to be infected (MyDoom) machines from the previous year's attack and so intensity of attacks were lower.

EVENT DESCRIPTION:
Attack on several South Korean governmental and financial websites did not come from North Korea, but location of those controlling the botnet is unknown.

URLS:
1. http://news.xinhuanet.com/english2010/sci/2010-07/08/c_13389878.htm
2. http://www.securecomputing.net.au/News/149906,third-wave-of-attacks-hits-south-korea.aspx


Saturday, July 10, 2010

Several Shiite sites defaced - August 2007


DATE:
2007-08

AFFECTED COUNTRIES:
Saudi Arabia, Morocco

AFFECTED SITES:
al-shia.org, imam-hussain.com, imam-hussain.org, m-alhassanain.com, m-alhassanain.net, m-alhassanain.org

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Saudi Arabia

ALLEGED ATTACKERS:
sNiper hEx Hicks

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several Shiite sites hacked, possibly triggered by the death of Saddam Hussein (hard to tell from translation).

URLS:
1. http://forums.naseej.com/archive/index.php/t-98793.html


Many Shiite sites defaced - March 2007-December 2009


DATE:
March 2007-December 2009

AFFECTED COUNTRIES:
Bahrain, Lebanon, Yemen, Kuwait, Turkey, Pakistan, Afghanistan, Iran, Saudi Arabia

AFFECTED SITES:
Dozens or hundreds of Shiite sites (as well as collateral damage)

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Sunni hackers Group-XP / Kabab XP

TYPE OF ATTACK:
Defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Many Shiite sites have been hacked and defaced by a group of Sunni hackers. Zone-H has a list. Most of them display scrolling text announcing their cyberwar against Shiite sites and sometimes a little bit of information specific to a particular site. Also various religious YouTube videos are embedded. ***ATTACKS STARTED IN MARCH 2007, 2009-12 IS JUST THE MOST RECENT

URLS:
1. http://www.zone-h.org/archive/notifier=XP


Wafa Sultan's website defaced - March 2008


DATE:
2008-03

AFFECTED COUNTRIES:
Syria, USA

AFFECTED SITES:
wafasultan.org

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"LoVeR HaKaRz & AlQaTaRi" alqatari@inqtr.com, x.-o-.x@hotmail.com (Muslim hackers)

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site of Wafa Sultan, an author critical of Islam and labeled an atheist, hacked by Islamic hackers.

URLS:
1. http://www.zone-h.org/mirror/id/7187879
2. http://forums.naseej.com/showthread.php?t=122837


Twitter hacked - December 2009


DATE:
2009-12

AFFECTED COUNTRIES:
USA

AFFECTED SITES:
twitter.com

EFFECT OF ATTACKS:
Hacked, defaced 2 hours

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Twitter redirected to a red and black page with green flag bearing religious slogans. "The page also contained a message in English reads: 'This site has been hacked by the Iranian army on the Internet', in addition to Persian poem says, 'We will strike if our leader is, and will sacrifice our heads if they wish our leader.'" (1) Message also threatened US Government, warning not to interfere in Iranian affairs.

URLS:
1. http://www.shorouknews.com/ContentData.aspx?id=163808


Al-Jazeera attacked - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Qatar

AFFECTED SITES:
aljazeera.net

EFFECT OF ATTACKS:
"Jamming"

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
Egyptian sports fans

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site of news organization Al-Jazeera experienced technical problems, accusing Egypt of hacking. Seems to be related to a World Cup game coverage.

URLS:
1. http://www.shorouknews.com/ContentData.aspx?id=246180


Algerian Sunrise news site defaced - March 2010


DATE:
2010-03

AFFECTED COUNTRIES:
Algeria

AFFECTED SITES:
Algerian Sunrise (URL?)

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Algerian news site defaced, denouncing "the endeavor Gazette Algerian Permanent foment sedition between the two brotherly peoples" (Egypt and Algeria). The paper had published material offensive to Egyptians.

URLS:
1. http://www.shorouknews.com/ContentData.aspx?id=194850


Friday, July 9, 2010

Tunisian Progressive Democratic Party's website hacked - October 2006


DATE:
2006-10

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
pdpinfo.org

EFFECT OF ATTACKS:
Hacked, database dropped

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site admin account hacked, database dropped. Successfully recovered, it seems.

URLS:
1. http://www.pdpinfo.org/spip.php?article3962


Cprtunisie.net (Tunisia) hacked? - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
cprtunisie.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Difficult to tell from translation, but it looks like the Congress for the Republic Tunisian opposition site was hacked.

URLS:
1. http://nawaat.org/portail/2010/06/07/%25D9%2587%25D8%25B0%25D9%2587-%25D8%25A7%25D9%2584%25D9%2582%25D8%25B1%25D8%25B5%25D9%2586%25D8%25A9-%25D9%2585%25D9%2586-%25D8%25AA%25D9%2584%25D9%2583/


Mokhtar Yahyaoui's blog hacked (Tunisia) - April 2009


DATE:
2009-04

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
yahyaoui.rsfblog.org

EFFECT OF ATTACKS:
Hacked. Permanently defaced.

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"Dimetri" (or Tunisian government)

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Former Tunisian judge's (Mokhtar Yahyaoui) blog hacked. He was dismissed after publishing a critical open letter to President Ben Ali. His FaceBook site and email were also hacked.

URLS:
1. http://yahyaoui.rsfblog.org/
2. http://advocacy.globalvoicesonline.org/2008/08/20/silencing-online-speech-in-tunisia/
3. http://www.kalima-tunisie.info/kr/News-file-article-sid-417.html


Sunday, July 4, 2010

Turkish Internet censors DDoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Turkey

AFFECTED SITES:
ubak.gov.tr, tk.gov.tr, tib.gov.tr

EFFECT OF ATTACKS:
Unavailable for a while

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Turkish anti-censorship activists

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Ministry of Transportation, Information and Communication Technologies Authority , and the Telecommunications Communication Presidency websites were all unavailable during a DoS after those organizations, responsible for Internet censorship in Turkey, successfully blocked Google sites, including YouTube.

URLS:
1. http://cyberlaw.org.uk/2010/06/18/access-denied-to-turkish-censorship-authorities-websites/


Citizen Zouari (Tunisia) hacked - September 2009


DATE:
2009-09

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
citizenzouari.wordpress.com

EFFECT OF ATTACKS:
Hacked. Permanently defaced.

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian activist's blog hacked.

URLS:
1. http://citizenzouari.wordpress.com/


Saturday, July 3, 2010

Kitab.nl (Tunisia) hacked - June 2008


DATE:
2008-06

AFFECTED COUNTRIES:
Tunisia, Netherlands

AFFECTED SITES:
kitab.nl

EFFECT OF ATTACKS:
Inaccessible

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Tunisian government

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Blog of Tunisian human rights activist Sami Ben Gharbia hacked. Connected to attacks on nawaat.org.

URLS:
1. http://nawaat.org/portail/2008/08/20/silencing-online-speech-in-tunisia/


Nawaat.org (Tunisia) attacked - November 2004


DATE:
2004-11

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
nawaat.org

EFFECT OF ATTACKS:
Service disrupted

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian protest site attacked

URLS:
1. http://www.hns-info.net/article.php?id_article=5071


Tunis Online hacked - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
tunis-online.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
China, Netherlands

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, malware

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"Viruses and hacking attempts…every minute." (1)

URLS:
1. http://tunis-online.net/arabic/modules.php?name=News&file=article&sid=6694


Bahrain Center for Human Rights attacked - October 2004


DATE:
2004-10

AFFECTED COUNTRIES:
Bahrain

AFFECTED SITES:
bahrainrights.org

EFFECT OF ATTACKS:
Shut down in defense

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"Exposure site of the Bahrain Center for Human Rights for a heavy attack to destroy its contents, causing the owner of the space to close the site.
In immediate contact with the owner of the area said: that there is a group of several fronts, trying to destroy the specific content of the site. And that he closed the site so as not to destroy the contents. And said the area was also exposed to many of the threatening letters demanding that it stop area of the center." (1)

URLS:
1. http://www.tunezine.com/breve.php3?id_breve=832


Thursday, July 1, 2010

Progressive Democratic Party (Tunisia) attacked - November 2006


DATE:
2006-11

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
pdpinfo.org

EFFECT OF ATTACKS:
Service disrupted

SOURCE COUNTRY:
Turkey?

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian Progressive Democratic Party's website attacked. Question mark on the coutnry of origin because of unclear translation.

URLS:
1. http://www.tunisnews.net/3novembre06a.htm


Moncef Marzouki's website attacked - June 2009


DATE:
2009-06

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
moncefmarzouki.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
One of many attacks on the member of the Tunisian opposition's website.

URLS:
1. http://www.tunisnews.net/20juillet09a.htm


Mouezjemai.maktooblog.com (Tunisia) attacked - July 2009


DATE:
2009-07

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
mouezjemai.maktoobblog.com

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
The blog "for the people of Tunisia free" collective attacked "by security agents" because of certain blog entries.

URLS:
1. http://www.tunisnews.net/03Juillet09a.htm


Moncef Marzouki's website attacked - September 2009


DATE:
2009-09

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
moncefmarzouki.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
One of many attacks on the member of the Tunisian opposition's website.

URLS:
1. http://www.tunisnews.net/03Septembre09a.htm


Progressive Democratic Party (Tunisia) attacked - June 2007


DATE:
2007-06

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
pdpinfo.org

EFFECT OF ATTACKS:
Service disrupted

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Progressive Democratic Party of Tunisia's new site attacked.

URLS:
1. http://www.tunisnews.net/20juni07a.htm


Multiple radical Islamic sites DoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Multiple, mostly Middle East and USA

AFFECTED SITES:
abu-qatada.com, mtj.tw, mmagreb.com, alsunnah.info, almaqdese.net, baghdadsniper.net, ligattsecurity.com, alemarah.info, almaghrib.org, islamicawakening.com, hackteach.org

EFFECT OF ATTACKS:
Depending on attack, down for 30 minutes or Apache server defaulted (displays "Hey, it worked!" Apache install page [not the website's contents])

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.

TYPE OF ATTACK:
DoS, hack

ATTACK SPECIFICS:
XerXeS DoS as well as a "new technique" that defaults the server to display the "Hey, it worked!" Apache install page.

EVENT DESCRIPTION:
The Jester's (th3j35t3r)'s takedown announcements from Twitter for June 2010.
"www.abu-qatada.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (1)
"Ooops - http://www.abu-qatada.com apache box appears to be defaulted. Just a test of new technique - sorry guys - ok well not really sorry." (2)
"Damn - its works - http://mtj.tw - theres another - defaulted. I really must stop this. Bad times for bad guys - incoming. ;-)" (3)
"www.mmagreb.com TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (4)
"they shoulda used a different box really: http://www.alsunnah.info - virtual apache host - that's 4 (four) defaulted: http://bit.ly/bdLL2e" (5)
"Okay this is ridiculous here goes another: http://almaqdese.net - dudes ya not very good at this are ya. Too easy." (6)
"www.baghdadsniper.net TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (7)
"www.alemarah.info TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (8)
"@LIGATT - www.ligattsecurity.com - down 30 mins - RE http://bit.ly/b7Y67w - u now owe $MIL 2 charity any US/UK vets charity is fine. #LIGATT" (9)
"www.hackteach.org - DOWN 30 MINS - for attempting to propogate (lol) skiddie tools with a view to facilitate electronic-Jihad against west." (10)
"www.islamicawakening.com TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (11)
"www.almaghrib.org TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (12)

URLS:
1. http://twitter.com/th3j35t3r/status/14389435184
2. http://twitter.com/th3j35t3r/status/15206462792
3. http://twitter.com/th3j35t3r/status/15206858630
4. http://twitter.com/th3j35t3r/status/16093964004
5. http://twitter.com/th3j35t3r/status/15650317178
6. http://twitter.com/th3j35t3r/status/15207013288
7. http://twitter.com/th3j35t3r/status/16097586567
8. http://twitter.com/th3j35t3r/status/16177796900
9. http://twitter.com/th3j35t3r/status/16339163077
10. http://twitter.com/th3j35t3r/status/17187347381
11. http://twitter.com/th3j35t3r/status/17357186782
12. http://twitter.com/th3j35t3r/status/17365939892


Tunisnews attacked - April 2009


DATE:
2009-04

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
tunisnews.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
Translation not totally clear, but it appears Tunisnews.net was hacked "in a desperate attempt to silence the voice of defending freedoms and exposes the violations and practices contrary to the law." (1)

EVENT DESCRIPTION:
http://www.tunisnews.net/15Mai09a.htm

URLS:
1.


Monday, June 28, 2010

Tunis Online hacked - December 2008


DATE:
2008-12

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
tunis-online.net

EFFECT OF ATTACKS:
Some data destroyed

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"cronies of the Tunisian regime"

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisia Online hacked, data destroyed (some recovered). Report is encouraged by the attack as confirmation that they're work has caused grief.

URLS:
1. http://www.tunisnews.net/19Decembre08a.htm


Tunisnews attacked - April 2004


DATE:
2004-04

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
tunisnews.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Translation from Arabic makes details fuzzy. A cyberattack was waged against the site as well as "Contact Us Tunisia 2003." May have been a hack via admin's email address.

URLS:
1. http://www.tunisnews.net/29avril04.htm


China Mobile hacked - September 2006


DATE:
2006-09

AFFECTED COUNTRIES:
China

AFFECTED SITES:
chinamobile.com, m-zone.com.cn

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"【935fa12ec828a3f3】"

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
China Mobile's sites attacked to protest "mobile tariff". Chinamobile.com was restored after some hours, m-zone.com.cn some time later.

URLS:
1. http://news.xinhuanet.com/society/2006-09/12/content_5079054.htm


Shishou government site (China) attacked - June 2009


DATE:
2009-06

AFFECTED COUNTRIES:
China

AFFECTED SITES:
shishou.gov.cn

EFFECT OF ATTACKS:
Unavailable

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"In June 2009, Shishou was rocked by violent protest after a man, Tu Yuangao, was found dead, supposedly due to suicide, outside the Yonglong hotel. The hotel is owned by a relative of Shishou's mayor.[1] Tu, 24, was the hotel's chef.[2] Fearing a cover up, Tu's family refused to accept that his death was a suicide, and guarded his body while awaiting investigation. When police tried to forcefully remove Tu's body, local residents joined Tu's family, blocking the hotel entrance from the police. On June 19 a large number of local residents guarded the hotel, fighting with the police, including armed police. Confrontations between the police and residents continued outside the hotel, and on June 20, the municipal government began cutting internet connections in Shishou. On June 21, the police managed to break through the crowd and took Tu's corpse to a crematorium, apparently without giving the family the investigation it had requested." (2)

During these events, the city's website was also attacked (difficult to tell what kind of attack from translation).

URLS:
1. http://tc.wangchao.net.cn/web/detail_8777.html
2. http://en.wikipedia.org/wiki/Shishou


Saturday, June 26, 2010

Charter97.org (Belarus) DDoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Belarus

AFFECTED SITES:
charter97.org

EFFECT OF ATTACKS:
Downtime

SOURCE COUNTRY:
Russia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"DDoS attacks against the popular independent website are conducted every time during outstanding political events in the country. Yesterday the web resource covered “the gas war” between Russia and Belarus. This news evoked great response of the visitors. We remind that the state propaganda covers the dispute with Russia one-sidedly, and Belarusians could find out the truth only on the web.

"It should be also noted that yesterday our website announced participation of the presidential candidate, the leader of 'European Belarus' civil campaign Andrei Sannikov, in the programs of Echo Moskvy and RTVI TV channel, dedicated to the topic “Situation in Belarus in the run-up to the presidential elections” We posted the audio recording of the program, and today the verbatim report of the program was to be placed on the website. After Andrei Sannikov announced on our website his intention to run for presidency, the news office of charter97.org was raided, searched, and computers were seized. And now a DDoS attack against the website is conducted." (1)

URLS:
1. http://charter97.org/en/news/2010/6/22/30016/


Love Sky (China) attacked - March 2009


DATE:
2009-03

AFFECTED COUNTRIES:
China

AFFECTED SITES:
Love Sky

EFFECT OF ATTACKS:
Paralyzed

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS?

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Gay community website "Love Sky" (translated name, URL unknown) attacked. Homosexuality, a controversial subject, has been the target of many cyberattacks. Description refers to "hacked" and "attack" but seems like a DoS.

URLS:
1. http://gtob.sdnews.com.cn/www.sdnews.com.cn/news/2009/3/18/739062.html


Tao Ran Ju (China) defaced - March 2010


DATE:
2010-03

AFFECTED COUNTRIES:
China

AFFECTED SITES:
Tao Ran Ju official site

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Owner of restaurant chain Tao Ran Ju spoke out in favor of nationalizing cybercafes in China to combat Internet addiction. Website was hacked shortly thereafter.

URLS:
1. http://forum.globaltimes.cn/forum/showthread.php?p=29318
2. http://big5.cri.cn/gate/big5/bbs.cri.cn/showtopic.aspx?forumid=76&topicid=718463&go=next


Chinese Postal Union website defaced - April 2010


DATE:
2010-04

AFFECTED COUNTRIES:
China, Taiwan

AFFECTED SITES:
cpwu.org.tw

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Chunghwa Postal Worker's Union website hacked and defaced.

URLS:
1. http://dig.livpage.com/dig/4390.html


Shaolin Temple website hacked - November 2009


DATE:
2009-11

AFFECTED COUNTRIES:
China

AFFECTED SITES:
shaolin.org.cn

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
After much criticism of the Temple's abbot for commercialization, the official website of the Shaolin Temple was hacked and defaced with a fake letter of apology from the abbot.

URLS:
1. http://hackerthedude.blogspot.com/2009/11/hacker-attack-shaolin-temple-kung-fu.html
2. http://buddhism.about.com/b/2009/11/15/shaolin-temple-website-hacked.htm
3. http://www.bachinese.com/forum/simple/?t27529.html


President of Taiwan's website defaced - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Taiwan

AFFECTED SITES:
president.gov.tw

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
President Ma Ying-jeou of Taiwan's website defaced

URLS:
1. http://big5.cri.cn/gate/big5/gb.cri.cn/27824/2009/08/28/110s2605598.htm


Penguin News (Falkland Islands) defaced - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Falkland Islands / UK

AFFECTED SITES:
penguin-news.com

EFFECT OF ATTACKS:
Defaced, hacked

SOURCE COUNTRY:
Argentina

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Falkland Islands newspaper hacked. Still recovering months later. Argentinian hackers defaced the site with their coutnry's flag "after the Argentine government expressed outrage at a British oil exploration in the South Atlantic." (3) This is aprt of a long dispute between Argentina and the United Kingdom over whose territory the Falklands are. From around the same time: "In February 2010, the Argentine government announced that ships traversing Argentine territorial waters en route to the Falklands, South Georgia and the South Sandwich Islands would require a permit, as part of a dispute over British oil exploration near the Falklands." (2)

URLS:
1. http://www.penguin-news.com/
2. http://en.wikipedia.org/wiki/Falkland_Islands
3. http://www.nccgroup.com/media-room/latest-news/details/10-02-22/Argentines_hack_into_islands_paper.aspx?ReturnURL=%2Fmedia-room%2Flatest-news.aspx
4. http://www.takungpao.com/news/10/02/22/_IN-1218206.htm


Jinning County government website hacked - February 2009


DATE:
2009-02

AFFECTED COUNTRIES:
China

AFFECTED SITES:
jinning.gov.cn

EFFECT OF ATTACKS:
Unreachable

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hacked

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Yunnan Jinning County government website hacked, possibly defaced. Difficult to tell from the transalted website, but seems to have been in reaction to injuries someone sustained at the Kunming Jinning County Detention Center?

URLS:
1. http://tw.18dao.info/%E4%BA%91%E5%8D%97%E6%99%8B%E5%AE%81%E5%8E%BF%E6%94%BF%E5%BA%9C%E7%BD%91%E7%AB%99%E8%A2%AB%E9%BB%91


Whitehouse.gov DDoSed - May 2001


DATE:
2001-05

AFFECTED COUNTRIES:
USA

AFFECTED SITES:
whitehouse.gov

EFFECT OF ATTACKS:
Unavailable for several hours

SOURCE COUNTRY:
China

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
n/a

URLS:
1. http://www.au.epochtimes.com/b5/1/5/4/n84659.htm


Friday, June 25, 2010

Tibetan dissident's blog hacked - June 2009?


DATE:
2009-06

AFFECTED COUNTRIES:
China

AFFECTED SITES:
woeser.middle-way.net (and previous versions)

EFFECT OF ATTACKS:
Hacked

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tibetan dissident, writer and poet reports her blog has been hacked and shut down. Woeser.middle-way.net is her FIFTH blog. Unclear if the previous 4 were all hacked. Don't know when the hacking actually happened. 2009-06 was the date of publication.

URLS:
1. http://roomfordebate.blogs.nytimes.com/2009/06/02/chinas-new-rebels/


Burmese activist's blog hacked - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Burma

AFFECTED SITES:
www.karenunited.co.cc

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Russia, South Korea

ALLEGED ATTACKERS:
"Junta ally"

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
The following day the blog owner's email was hacked from a South Korean IP.

EVENT DESCRIPTION:
Burmese activist's blog hacked.

URLS:
1. http://democracyforburma.wordpress.com/2010/06/21/karenunited-blog-hacked-by-junta-dogs/


True Myanmar News hacked - April 2009


DATE:
2009-04

AFFECTED COUNTRIES:
Burma

AFFECTED SITES:
www.true-myanmarnews.co.cc

EFFECT OF ATTACKS:
Hacked, unavailable

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Burmese activist's blog hacked, seemingly permanently removed.

URLS:
1. http://democracyforburma.wordpress.com/2009/04/25/help-needed-my-karen-friends-blog-has-been-hacked/


Monday, June 21, 2010

Mizzima (Burma) DDoSed - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Burma

AFFECTED SITES:
mizzimaburmese.com

EFFECT OF ATTACKS:
unavailable

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Attacked on the 21st anniversary of "8888, the day of the 'People's Uprising'". (1)

URLS:
1. http://www.mizzima.com/news/inside-burma/2599-fresh-attack-on-mizzima-website.html


4 Burmese news sites DDoSed - January 2009


DATE:
2009-01

AFFECTED COUNTRIES:
Burma

AFFECTED SITES:
peoplemediavoice.com and 3 others

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
China, Russia, India?

ALLEGED ATTACKERS:
"pro-military hackers who are currently studying in China and Russia" (1)

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
4 websites attacked around the same time as Ashin Mettacara's site (unclear if part of the same attack). Considering this a DDoS since (1) says they "were also hacked similar attack to the Ashin Mettacara," which WAS DDoS. The source countries seem like guesses.

URLS:
1. http://www.ashinmettacara.org/2009/01/burma-myanmar-sri-lanka-based-burmese.html


Burmese monk in exile's site DDoSed - January 2009


DATE:
2009-01

AFFECTED COUNTRIES:
Burma, Sri Lanka, China, Russia, India

AFFECTED SITES:
ashin-mettacara.com

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
China, Russia, India?

ALLEGED ATTACKERS:
"pro-military hackers who are currently studying in China and Russia" (2)

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site of Burmese monk in exile Ashin Mettacara attacked twice in the span of a few days. Website in Sri Lanka. The source countries seem like guesses.

URLS:
1. http://www.ashinmettacara.org/2009/03/burma-sri-lanka-based-myanmar-media.html
2. http://www.ashinmettacara.org/2009/01/burma-myanmar-sri-lanka-based-burmese.html


Burmese monk in exile's site DDoSed - March 2009


DATE:
2009-03

AFFECTED COUNTRIES:
Burma, Sri Lanka

AFFECTED SITES:
ashin-mettacara.com

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site of Burmese monk in exile Ashin Mettacara attacked twice in the span of a few days. Second wave of attacks on the site in 2009. Website in Sri Lanka.

URLS:
1. http://www.ashinmettacara.org/2009/03/burma-sri-lanka-based-myanmar-media.html


Sunday, June 20, 2010

Voice of Democracy (Vietnam) hacked - January 2006


DATE:
2006-01

AFFECTED COUNTRIES:
Vietnam

AFFECTED SITES:
ptdcvn.org

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Vietnam

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
hack

ATTACK SPECIFICS:
Site went offline, then when it came back up the articles were gone and a line of text below the title said "This is the Web page of liars." (1)

EVENT DESCRIPTION:
"Less than a month after its launch on International Human Rights Day, a Vietnamese pro-democracy Web site has been forced to close following an apparent hacker attack." (1) Site is the "Voice of Democracy."

URLS:
1. http://www.rfa.org/english/news/vietnam_website-20060103.html?searchterm=None


Saturday, June 19, 2010

Photayokeking.org (Burma) DDoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Burma, USA

AFFECTED SITES:
photayokeking.org

EFFECT OF ATTACKS:
Downtime, forced change of hosts

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
State Peace and Development Council (SPDC)

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Popular Burmese Web site founded to provide 'real information' about the Burmese military, edited by a Burmese army deserter, was attacked twice in a span of two weeks. This is the second attack. The SPDC, the alleged attacker, is Burma's ruling junta. "'We know the SPDC attacked our Web site. They are afraid of us because we get the secret information from our close contacts inside the [Burmese armed forces].'" (1) Server was in USA. After this attack the site was forced to relocate to photayokeking.blogspot.com, having been dropped by its ISP.

URLS:
1. http://www.irrawaddy.org/article.php?art_id=18759


Photayokeking.org (Burma) DDoSed - May 2010


DATE:
2010-05

AFFECTED COUNTRIES:
Burma, USA

AFFECTED SITES:
photayokeking.org

EFFECT OF ATTACKS:
Downtime

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
State Peace and Development Council (SPDC)

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Popular Burmese Web site founded to provide 'real information' about the Burmese military, edited by a Burmese army deserter, was attacked twice in a span of two weeks. This is the first attack, which occurred the same day that the SPDC held a press conference in Naypyidaw accusing Maj Aung Lynn Htut (former senior intelligence officer) of stealing when he defected to the USA. The SPDC, the alleged attacker, is Burma's ruling junta. "'We know the SPDC attacked our Web site. They are afraid of us because we get the secret information from our close contacts inside the [Burmese armed forces].'" (1) Server was in USA.

URLS:
1. http://www.irrawaddy.org/article.php?art_id=18759


The Irrawaddy (Burma) hit by virus - September 2007


DATE:
2007-09

AFFECTED COUNTRIES:
Burma

AFFECTED SITES:
irrawaddy.org

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Burmese government

TYPE OF ATTACK:
virus

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"A Trojan virus infected the site at the height of monk-led protests against military rule in Burma. … The Irrawaddy Web site reported extensively on the demonstrations and posted numerous images and videos provided by so-called 'citizen journalists' inside the country." (1)

URLS:
1. http://www.irrawaddy.org/article.php?art_id=14294


Malaysian judiciary website defaced - January 2010


DATE:
2010-01

AFFECTED COUNTRIES:
Malaysia

AFFECTED SITES:
mahkamah.gov.my

EFFECT OF ATTACKS:
defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"Brainwash"

TYPE OF ATTACK:
defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Malaysian Judiciary's website hacked and defaced, replaced with a threat related to a Malaysian Catholic paper's use of the word "Allah."

URLS:
1. http://thestar.com.my/news/story.asp?file=/2010/1/7/nation/20100107224956&sec=nation
2. http://www.irrawaddy.org/article.php?art_id=17543


2 Burmese community forums attacked - August 2008


DATE:
2008-08

AFFECTED COUNTRIES:
Burma

AFFECTED SITES:
mysteryzillion.org, planet.com.mm

EFFECT OF ATTACKS:
Disabled

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Burmese government

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Two community forums that provide information and instruction on how to circumvent the regime's control were disabled and shut down by cyberattacks.

URLS:
1. http://www.irrawaddy.org/article.php?art_id=14399


Mizzima (Burma) hacked - October 2008


DATE:
2008-10

AFFECTED COUNTRIES:
Burma

AFFECTED SITES:
mizzima.com

EFFECT OF ATTACKS:
Inaccessible

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Pro-regime hackers

TYPE OF ATTACK:
hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"The website of exiled Burmese news agency Mizzima came under attack by pro-regime hackers … [8 days later], the Mizzima website was again made inaccessible due to several hacking attempts." (1)

URLS:
1. http://www.altsean.org/Docs/PDF%20Format/Burma%20Bulletin/October%202008%20Burma%20Bulletin.pdf


Friday, June 18, 2010

2 Burmese news sites DDoSed - September 2008


DATE:
2008-09

AFFECTED COUNTRIES:
Burma, Norway, Thailand

AFFECTED SITES:
dvb.no, khitpyaing.org

EFFECT OF ATTACKS:
Inaccessible for days

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Attacks on the Democratic Voice of Burma and the New Era Journal nearly coincided with an attack on the Irrawaddy (already listed here separately). DVB's server is located in Norway and the New Era Journal's in Bangkok.

URLS:
1. http://www.abitsu.org/?p=2502


World Azerbaijani Congress website hacked - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Azerbaijan

AFFECTED SITES:
World Azerbaijani Congress

EFFECT OF ATTACKS:
hacked/defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Young Soldiers of GAMOH, Azerbaijani rights activists

TYPE OF ATTACK:
hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"Hackers accuse the World Azerbaijani Congress, an organization that aims to bring together Azerbaijanis around the world, of abandoning the Azerbaijani national movement in Iran." (1)

"GAMOH being the acronym of the Southern Azerbaijan National Awakening Movement." (1)

The message criticizes the leaders of the Green opposition movement in Iran for 'retreating' and says that attempts by the leadership of the World Azerbaijani Congress to move closer to the Green movement are a 'betrayal'." (1)

URLS:
1. http://www.news.az/articles/17430


Chinese human rights sites DDoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
China

AFFECTED SITES:
msguancha.com, Rights Network of China, Democracy China, and maybe others

EFFECT OF ATTACKS:
Freezing and crashing over multiple days

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Chinese government

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Attack lasted "for three or four days"

EVENT DESCRIPTION:
Several Chinese human rights sites attacked again. One activist "speculated that the authorities might be reacting to material relating to the 21st anniversary of the June 4 military crackdown on pro-democracy demonstration, or anticipating the second anniversary of ethnic violence in Urumqi on July 5." (1)

URLS:
1. http://www.rfa.org/english/news/china/sites-06152010102452.html


China Human Rights Defenders DDoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
China

AFFECTED SITES:
crd-net.org

EFFECT OF ATTACKS:
Inaccessible

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Attacked sustained for moret han 4 days

EVENT DESCRIPTION:
China Human Rights Defenders Chinese-language site DDoSed again.

URLS:
1. http://chrdnet.org/2010/06/15/china-human-rights-briefing-weekly-june-8-14-2010/


Sunday, June 13, 2010

3 Republican websites DDoSed - May 2010


DATE:
2010-05

AFFECTED COUNTRIES:
USA

AFFECTED SITES:
billoreilly.com, anncoulter.com, joinrudy2008.com

EFFECT OF ATTACKS:
Downtime

SOURCE COUNTRY:
USA

ALLEGED ATTACKERS:
Mitchell Frost

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Former University of Akron (Ohio) student used school computers to create a botnet and attack 3 Republican websites. 2010-05 is when the report of the student's indictment came out. The actual attacks occurred sometime in the past.

URLS:
1. http://www.scmagazineus.com/man-charged-with-attacking-oreilly-coulter-websites/article/170524/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SCMagazineHome+%28SC+Magazine%29


2 South Korean government sites DDoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
South Korea

AFFECTED SITES:
moj.go.kr, kois.go.kr

EFFECT OF ATTACKS:
"No major damage" (1)

SOURCE COUNTRY:
China

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Attacks came from 247 China-based servers

EVENT DESCRIPTION:
2 South Korean government sites DDoSed: the Ministry of Justice and the Korea Culture and Information Service. No apparent damage.

URLS:
1. http://english.yonhapnews.co.kr/techscience/2010/06/12/73/0601000000AEN20100612002100315F.HTML


Saturday, June 12, 2010

Iranian protest-rapper's site attacked - April 2010


DATE:
2010-04

AFFECTED COUNTRIES:
Iran

AFFECTED SITES:
sharrmusic.org

EFFECT OF ATTACKS:
Crashed, defaced

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
"the cyber army"

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"Site of Iranian rapper-protester Shahin Najafi taken down. ""In April, a shadowy pro-government group that calls itself 'the cyber army' shut down Mr. Najafi's Web site. The group, which hacked Iranian Twitter in December, left a message saying the site had been 'conquered by anonymous soldiers of Imam Zaman,' a reference to the Shiite messiah"" (1)."

URLS:
1. http://www.nytimes.com/2010/06/06/world/middleeast/06iranmusic.html


Jerusalem Post under attack - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Israel

AFFECTED SITES:
jpost.com

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hacks, etc.

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Many attempts were made to attack the site in the time following the Ashdod flotilla incident. Many thousands of abusive and spam emails were received, attempts were made to hack a firewall, and it seems several other forms of attacks were levied.

URLS:
1. http://breakingnews.gaeatimes.com/2010/06/01/hackers-attempt-to-crash-jerusalem-post-website-31396/


Several Vietnamese sites DDoSed - May 2010


DATE:
2010-05

AFFECTED COUNTRIES:
Vietnam

AFFECTED SITES:
danchimviet.com, dangvidan.org, dcctvn.net, hasiphu.com, minbien.org, ykien.net, vietbaosaigon.com

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Vietnam

ALLEGED ATTACKERS:
Vietnamese government

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Sites listed by Human Rights Watch as those subjected to ongoing cyber attacks in Vietnam. Exact dates of attacks not given; 2010-05 is when the report was released. Others listed were elsewhere reported to have been attacked in 2009-12 and 2010-01.

URLS:
1. http://www.hrw.org/en/news/2010/05/26/vietnam-stop-cyber-attacks-against-online-critics


Vietnamese Catholic site DDoSed - May 2010


DATE:
2010-05

AFFECTED COUNTRIES:
Vietnam

AFFECTED SITES:
dcctvn.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Vietnam

ALLEGED ATTACKERS:
Vietnamese government

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Catholic website is one that Human Rights Watch cites as one attacked many times. Attackers traced back to Viettel, a state-owned telecommunication company operated by the Vietnam Defense Ministry. Several Catholics had been criticizing government confiscation of church properties. Exact dates of attacks not given; 2010-05 is when the report was released.

URLS:
1. http://www.hrw.org/en/news/2010/05/26/vietnam-stop-cyber-attacks-against-online-critics


Vietnamese political site DDoSed - May 2010


DATE:
2010-05

AFFECTED COUNTRIES:
Vietnam

AFFECTED SITES:
thongluan.org

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Vietnam

ALLEGED ATTACKERS:
Vietnamese government

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Political commentary website is one that Human Rights Watch cites as one attacked many times. Attackers traced back to Viettel, a state-owned telecommunication company operated by the Vietnam Defense Ministry. Exact dates of attacks not given; 2010-05 is when the report was released.

URLS:
1. http://www.hrw.org/en/news/2010/05/26/vietnam-stop-cyber-attacks-against-online-critics


3 Vietnamese blogs hacked - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Vietnam

AFFECTED SITES:
blogosin.org, danchimviet.com, minhbien.org

EFFECT OF ATTACKS:
Hacked and crashed

SOURCE COUNTRY:
Vietnam

ALLEGED ATTACKERS:
Vietnamese government

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"Tran Khai Thanh Thuy, a writer and member of the editorial board of To Quoc, is sentenced to three and a half years in prison. The day of her trial, three popular blogs - Blog Osin (blogosin.org), Đan Chim Viet (danchimviet.com), and Minh Bien (www.minhbien.org) - crash after being hacked. In addition, the email accounts of Pham Thi Hoai, editor in chief of Talawas blog, and a blogger-journalist, Huy Duc (Osin), are hacked." (1)

URLS:
1. http://www.hrw.org/en/news/2010/05/26/vietnam-stop-cyber-attacks-against-online-critics


Archive