DATE:
2008-09
AFFECTED COUNTRIES:
Burma
AFFECTED SITES:
irrawaddy.org
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Burmese and Southeast Asian news site DDoSed the day before the anniversary of the beginning of the Saffron Uprising.
URLS:
1. http://thedailytransit.wordpress.com/2008/09/18/a-year-gone-by-looking-back-on-the-saffron-uprising/
DATE:
2001-08
AFFECTED COUNTRIES:
Japan
AFFECTED SITES:
Several Japanese government sites
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
n/a
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Attacks in response to former Prime Minister Junichiro Koizumi's visit to the controversial Yasukuni war memorial in Tokyo.
URLS:
1. http://www.thedarkvisitor.com/2009/01/chinese-hackers-deface-yasukuni-shrine-websiteagain/
DATE:
2008-12
AFFECTED COUNTRIES:
Japan
AFFECTED SITES:
yasukuni.or.jp
EFFECT OF ATTACKS:
Defaced
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Japanese Yasukuni Shrine (Tokyo) defaced with the Chinese national flag.
URLS:
1. http://news.sohu.com/20081225/n261417059.shtml
DATE:
2007-11
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
32 websites in Racine, Wisconsin
EFFECT OF ATTACKS:
Defaced, some for months
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
32 websites on the same host in Racine, Wisconsin were hacked and defaced as part of a protest US arms sales to Taiwan.
DATE:
2007-10
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
Google.com, Yahoo.com, Microsoft.com (live.com?)
EFFECT OF ATTACKS:
Hijacked, redirect
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Hijacking
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
After George W. Bush hosted the Dalai Lama in Washington, "popular search engines [were] said to have been 'hijacked' by computer hackers who had managed to redirect users to [Baidu]." (1) He was also awarded the Congressional Gold Medal, which was protested in China.
URLS:
1. http://www.telegraph.co.uk/news/worldnews/1566735/US-websites-hijacked-by-Chinese-hackers.html
2. http://techcrunch.com/2007/10/18/baidu-hijacking-google-traffic-in-china/
3. http://searchengineland.com/did-dalai-lama-award-cause-china-to-redirect-google-yahoo-microsoft-search-traffic-to-baidu-12464
DATE:
2003-10
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
newsru.com, gazety.ru, and other sites hosted by Zenon.net
EFFECT OF ATTACKS:
Unreachable
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Unclear if this is a censorship case. ISP attacked that happened to host two major Russian media sites. The first attack was resolved in a couple hours, the second was more severe.
URLS:
1. http://lenta.ru/internet/2003/10/14/zenon/lenta
DATE:
2008-11
AFFECTED COUNTRIES:
UK
AFFECTED SITES:
bobbear.co.uk
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Black Energy botnet (operator unknown)
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
3/4 million hits daily. Botnet prefs: icmp_freq=10; icmp_size=2000; syn_freq=10; spoof_ip=0; attack_mode=0; max_sessions=30; http_freq=4; tcpudp_freq=20; udp_size=1000; tcp_size=2000; cmd=flood http bobbear.co.uk; ufreq=5; botid= (not set). (1)
EVENT DESCRIPTION:
Popular British anti-fraud site attacked alongside several cybercrime-fighting communities. 4 Black Energy botnets targeted this website only.
URLS:
1. http://www.zdnet.com/blog/security/anti-fraud-site-hit-by-a-ddos-attack/2188
DATE:
2000-10
AFFECTED COUNTRIES:
Lebanon
AFFECTED SITES:
hizbollah.org, bezbollah.org
EFFECT OF ATTACKS:
Extended outage
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Two major sites of Hezbollah attacked. Not many details available.
URLS:
1. http://lenta.ru/mideast/2000/10/27/hackers2/
DATE:
2000-08
AFFECTED COUNTRIES:
South Korea
AFFECTED SITES:
mic.go.kr
EFFECT OF ATTACKS:
Unreachable
SOURCE COUNTRY:
South Korea
ALLEGED ATTACKERS:
Progressive Network Centre
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Activists blocked access to the Ministry of Information and Communication "protesting plans to introduce a classification system for Korean Internet sites by the degree of 'impropriety' in the same manner as classified films." (1)
URLS:
1. http://lenta.ru/internet/2000/08/28/korea/
DATE:
2000-05
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
slashdot.org
EFFECT OF ATTACKS:
Down for some hours
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Slashdot posted information about Microsoft's Kerberos protocol in the name of openness despite complaints. Slashdot was DDoSed around that time.
URLS:
1. http://lenta.ru/internet/2000/05/12/ms/
DATE:
2005-05
AFFECTED COUNTRIES:
Italy, Brazil
AFFECTED SITES:
italy.indymedia.org
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
After Indymedia Italia posted controversial pictures of Pope Benedict XVI in a Nazi uniform, they had both legal and technological trouble (DDoS). Site based in Brazil.
URLS:
1. http://rjwaldmann.blogspot.com/2005/05/censorship-of-web-in-italy-my.html
2. http://lenta.ru/news/2005/05/05/popenazi/
DATE:
2008-06
AFFECTED COUNTRIES:
Lithuania
AFFECTED SITES:
Several hundred Lithuanian websites
EFFECT OF ATTACKS:
Defaced, most restored within 2 days
SOURCE COUNTRY:
Russia and others
ALLEGED ATTACKERS:
Organized at hack-war.ru
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Hundreds of sites were defaced with Soviet symbols and anti-Lithuanian slogans probably in reaction to a law outlawing the display of Soviet symbols in Lithuania. Similar in that regard to the Estonian DDoS attacks. Some governmental sites received intelligence reports of an impending attack and were able to defend, but such was not the case for most of the commercial sites affected.
URLS:
1. http://news.cnet.com/8301-10789_3-9983940-57.html
2. http://www.nytimes.com/2008/07/01/world/europe/01baltic.html?_r=2&scp=3&sq=lithuania&st=nyt&oref=slogin
3. http://www.zdnet.com/blog/security/300-lithuanian-sites-hacked-by-russian-hackers/1408
DATE:
2010-05
AFFECTED COUNTRIES:
Multiple, mostly Middle East and USA
AFFECTED SITES:
abu.qatada.com
EFFECT OF ATTACKS:
Down for 30 minutes
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.
TYPE OF ATTACK:
DoS
ATTACK SPECIFICS:
XerXeS DoS
EVENT DESCRIPTION:
"The Jester's (th3j35t3r)'s takedown announcements from Twitter for May 2010.
""www.abu-qatada.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda."" (1)"
URLS:
1. http://twitter.com/th3j35t3r/status/14389435184
DATE:
2008-07
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
nameofrussia.ru
EFFECT OF ATTACKS:
Intermittent connection problems
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
Attack lasted for three days (sporatic downtime)
EVENT DESCRIPTION:
Transmedia project to elect the most notable Russian figure(s). At the same time as the attack came a "mass vote for Joseph Stalin." (1)
URLS:
1. http://lenta.ru/news/2008/07/10/rusname/
DATE:
2007-05
AFFECTED COUNTRIES:
Russia, USA
AFFECTED SITES:
livejournal.com, livejournal.ru
EFFECT OF ATTACKS:
Site blocked in Russia for an extended period
SOURCE COUNTRY:
Russia
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
"Massive" attack
EVENT DESCRIPTION:
LiveJournal attacked, targeting community ru_nbp, supporters of Eduard Limonov (not the first attack on this group). To stabilize, Six Apart (owners of LJ) had to block the majority of Russian traffic.
URLS:
1. http://lenta.ru/news/2007/05/24/zhzh/
DATE:
2007-05
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
www.echo.msk.ru
EFFECT OF ATTACKS:
Intermittent connection problems
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Echo of Moscow Radio (Ekho Moskvy) site DDoSed
URLS:
1. http://lenta.ru/news/2007/05/02/echo/
DATE:
2008-08
AFFECTED COUNTRIES:
Georgia
AFFECTED SITES:
Tulip Systems servers, incl. president.gov.ge
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
Russia
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
500 IP addresses involved in attack
EVENT DESCRIPTION:
Targeting website of Georgian President Mikheil Saakashvili, ISP Tulip Systems was attacked.
URLS:
1. http://lenta.ru/news/2008/08/12/defence/
DATE:
2008-08
AFFECTED COUNTRIES:
Belarus
AFFECTED SITES:
kozylin.com
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Belarusian opposition leader, former presidential candidate Alexander Kozulin's website DDoSed shortly after he was released from prison.
URLS:
1. http://lenta.ru/news/2008/08/20/kgb/
DATE:
2008-10
AFFECTED COUNTRIES:
USA, Georgia, Abkhazia
AFFECTED SITES:
cyxymu.livejournal.com, abhaziya.net
EFFECT OF ATTACKS:
Connection problems, then removed by site administration
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
An attack on LiveJournal took the journal/blogging site down three times. LJ removed the target of the attack, the blog belonging to Georgian blogger Cyxymu. Cyxymu's content focuses on the conflict between Georgia and Abkhazia. After removal from LJ, Cyxymu moved to Abhaziya.net, hosted by WordPress, but that too had to be taken down.
URLS:
1. http://lenta.ru/news/2008/10/27/lj/
DATE:
2007-04
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
theotherrussia.ru, namarsh.ru, rufront.ru, kasparov.ru
EFFECT OF ATTACKS:
Unreachable
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
The main participants and organizers of the "March of Dissent" were attacked and taken down.
URLS:
1. http://lenta.ru/news/2007/04/05/blocked
DATE:
2008-12
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
patriarchia.ru
EFFECT OF ATTACKS:
Unreachable
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Attack on the Russian Orthodox Church after the death of Patriarch of Moscow and All Russia Alexy II.
URLS:
1. http://lenta.ru/news/2008/12/05/mospat/
DATE:
2008-12
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
grani.ru, kasparov.ru, natsbol.ru
EFFECT OF ATTACKS:
Site displayed only the letter X for 17 hours.
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Several Russian opposition sites attacked.
URLS:
1. http://lenta.ru/news/2008/12/24/grani/
DATE:
2008-03
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
kommersant.ru
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Rolls of toilet paper with the logo of newspaper Kommersant circulated Moscow around the time the site was DDoSed several times. This after it published some controversial statements about the Presidential administration.
URLS:
1. http://lenta.ru/articles/2009/01/04/finalmedia/
2. http://lenta.ru/articles/2008/03/06/toilet/
DATE:
2009-03
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
godmol.ru
EFFECT OF ATTACKS:
Downtime
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Federal Agency for Youth Affairs (Youth Year), which among other things is intended "to finance the development of youth parliamentarism, to do the patriotic upbringing of youth, as well as the formation of its moral values." (1) DDoSed for at least 2 weeks
URLS:
1. http://lenta.ru/news/2009/03/30/site/
DATE:
2009-04
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
mk.ru
EFFECT OF ATTACKS:
All content deleted, all but photos and videos recovered
SOURCE COUNTRY:
South Korea
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Hack
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Newspaper Moskovsky Komsomolets hacked just before the start of a new version of its portal.
URLS:
1. http://lenta.ru/articles/2009/12/04/mk
2. http://lenta.ru/news/2009/12/04/erase
DATE:
2009-12
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
vedomosti.ru
EFFECT OF ATTACKS:
Downtime
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Attack was accompanied by anonymous calls to the news site's editorial staff.
URLS:
1. http://lenta.ru/news/2010/02/11/ddos/
2. http://lenta.ru/news/2009/12/16/vdmst/
DATE:
2010-02
AFFECTED COUNTRIES:
Russia
AFFECTED SITES:
vedomosti.ru
EFFECT OF ATTACKS:
Limited accessibility
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
Attack at least four days
EVENT DESCRIPTION:
n/a
URLS:
1. http://lenta.ru/news/2010/02/11/ddos/
DATE:
2008-02
AFFECTED COUNTRIES:
Sweden
AFFECTED SITES:
wikileaks.org
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
500Mbps, targeting company's DNS
EVENT DESCRIPTION:
Attack came amidst other problems for the site--legal issues and a UPS fire. There was already an increase in traffic due to pictures of people killed in Tibet riots.
URLS:
1. http://secure.wikileaks.org/wiki/Wikileaks_survives_censorship,_ddos,_fire
2. http://www.secure64.com/news-wikileaks-dns-server-fire
3. http://www.wikileads.net/2008/04/23/update-wikileaks-was-down-in-part-because-of-a-ddos-attack/
DATE:
2010-01
AFFECTED COUNTRIES:
Multiple, mostly Middle East and USA
AFFECTED SITES:
as-ansar.com, ansarnet.info, hanein.info, atahadi.0vr.net, ansaaar.com, alemarah.info, de.ansar1.net, www.alqimmah.net, as.ansar.com, 68.15.56.91/Temp/Jihad, islamicawakening.com, islam4uk.com, salaattime.com, watchislam.com, jihadunspun.com, gawaher.com, cabinda.org, islamicnetwork.com, president.ir, radicalislam.org, almaghrib.org
EFFECT OF ATTACKS:
Short periods of downtime
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.
TYPE OF ATTACK:
DoS
ATTACK SPECIFICS:
DoS, but before Xerxes was officially announced
EVENT DESCRIPTION:
The Jester's takedown announcements from Twitter for January 2010:
"Naughty Naughty Naughty - www.as-ansar.com - down for another 30 min stretch, no longer can you rely on your site to be there. Tragic." (1)
"yet again: www.ansarnet.info - having bad morning. U might think they can employ kung-fu to stop this randomly happening. Down 30 mins." (2)
"www.ansarnet.info - 15 mins downtime, for nasty posts. Getting lonley yet? - At ya from Antarctica - no shit - check your logs." (3)
"PPS: www.ansarnet.info - down for incitement to cause terrorism, 30 mins min, @crabbyolbastard - could B more, I don't pay for server time." (4)
"Awful time for www.ansarnet.info - they appear to be be having undetermined technical difficulties originating in Kiev, Ukraine. Tragic." (5)
"www.hanein.info - heres a new one from a tip. This site is home to recruiting, and co-ordinating Jihad attacks. DOWN FOR 30 mins. Shame." (6)
"www.atahadi.0vr.net is about to have a prolonged blip in their uptime figures. For incitement to terrorism 30 minutes downtime." (7)
"www.ansaaar.com - for spreading a bad Jihad message - gonna say ummm 30 mins downtime - for starters. Know this - Ya on the naughty list." (8)
"www.alemarah.info - Official Taliban Website - for reasons that are obvious - will be experiencing technical difficulties for 30 MINS." (9)
"http://de.ansar1.net - is not having the best of mornings - 30 MINS DOWN for incitement to cause young muslims to perform acts of terrorism." (10)
"www.alqimmah.net - for attempting to recruit young muslims into acts of terrorism - serious technical issues for next 30 minutes." (11)
"http://de.ansar1.net will be experiencing serious technical difficulties for the next 30 minutes for incitement to cause terrorism." (12)
"www.as.ansar.com - DOWN for 30 minutes, mother-page to the taliban recruitment forums. If I am incorrect please do some more research." (13)
"Tragically, due to it's nature, the Taliban Official Site (www.alemarah.info) will be having major difficulties for at least 45 mins." (14)
"http://68.15.56.91/Temp/Jihad/ - badguy dropbox, the PETN/RDX folder is full of explosives training videos - now out of service for 30 mins." (15)
"www.alemarah.info - official taliban website (Afghan Resistance) - ooops I did it again, down for 30 minutes. Reasons err obvious. PLZ RT" (16)
"www.islamicawakening.com - another bad day due to their support of jihadists. they'll be having no website for the next 30 minutes. Sue me." (17)
"www.islam4uk.com - just released a statement on their site, DOWN FOR 30 MINS for disrespect to dead UK troops. more: http://bit.ly/4MhJjO" (18)
"www.ansaaar.com - Failure on part of moderators to remove, in fact allow pro-terrorism - result = 30 minutes of serious tech difficulties." (19)
"www.salaattime.com - Down for the next 60 minutes for making available podcasts by known jihadist Anwar Al-Awlaki: http://bit.ly/4hGKva" (20)
"www.watchislam.com broadcasts the UK Islam Channel live. They are DOWN for the next 30 minutes - Why? http://tinyurl.com/ybaudmf" (21)
"www.jihadunspun.com - 'uncensored reporting' of the "war on terrorism" WELL GODDAMN - CENSORED FOR NEXT 35 MINS. http://bit.ly/5iW1Nb" (22)
"www.gawaher.com - out of commission for next 20 minutes - for incitement to terrorism. Another one bites the dust." (23)
"www.cabinda.org - I am making an exception for FLEC. This site is now down for the next 30 minutes - why? click here: http://bit.ly/5clMRH" (24)
"www.ansarnet.info - out of commission for next 25 minutes - for incitement to terrorism." (25)
"Official Taliban website never learn - www.alemarah.info - down again for obvious reasons for next 40 mins - where the hell R your sec team?" (26)
"www.as-ansar.com - 'support of the struggle by pen and sword' - forget that shit - your hate-filled website is now - 45 mins downtime! ;D" (27)
"Official Taliban Website (www.alemarah.info) will be experiencing technical issues for 30 minutes. I do not apologize for inconvenience. :D" (28)
"Unregretabbly, www.islamicnetwork.com will be experiencing technical difficulties for next 30 mins - due to the forums inciting terrorism." (29)
"Official Presidency Website of Iran (www.president.ir) will be unavailable for the next 40 minutes, due to their oppresive Islamic regime." (30)
"www.alemarah.info - (Afghan Resistance Network) also under sporadic attack as of right now." (31)
"www.ansarnet.info - currently under sporadic attack. For incitement to cause acts of terrrorism." (32)
"www.radicalislam.org - DOWN SPORADICALLY - well c'mon the name says it all really, are they dumb or something?" (33)
"www.ansarnet.info - down www.islamicawakening.com - down - for incitement to terrorism. Scheduled Sporadic attack in progress." (34)
"www.islamicawakening.com - under sporadic attack for fuelling young terrorists. Ooops there goes another." (35)
"www.islamicnetwork.com - under sporadic attack. Don't ya just love freedom of expression, ya know that thing you muslims kill innocents for." (36)
"www.as-ansar.com also under sporadic attack - and is temporarily unavailable. We do not apologize for any inconvenience caused." (37)
"www.ansarnet.info - for incitement to terrrorize this site is now under sporadic attack & will be unavailable for certain extended periods." (38)
"www.almaghrib.org - many forum members on this site linked with al Qaeda (IbnMardiyah and Sasjamal)- this site is now under sporadic attack." (39)
"www.alemarah.info is now under sporadic cyber-attack. This 'Voice of Jihad' served only to act as tool for terrorist. OWNED. By me, Jester." (40)
"@uruknet www.radicalislam.org - also down, how would I know this?" (41)
URLS:
1. http://twitter.com/th3j35t3r/status/8167325617
2. http://twitter.com/th3j35t3r/status/8159297534
3. http://twitter.com/th3j35t3r/status/8048976393
4. http://twitter.com/th3j35t3r/status/8046318189
5. http://twitter.com/th3j35t3r/status/7960480455
6. http://twitter.com/th3j35t3r/status/7958157927
7. http://twitter.com/th3j35t3r/status/7923269698
8. http://twitter.com/th3j35t3r/status/7919044398
9. http://twitter.com/th3j35t3r/status/7916392244
10. http://twitter.com/th3j35t3r/status/7915167024
11. http://twitter.com/th3j35t3r/status/7910112176
12. http://twitter.com/th3j35t3r/status/7863853087
13. http://twitter.com/th3j35t3r/status/7843649655
14. http://twitter.com/th3j35t3r/status/7837843926
15. http://twitter.com/th3j35t3r/status/7680972813
16. http://twitter.com/th3j35t3r/status/7610203778
17. http://twitter.com/th3j35t3r/status/7609049482
18. http://twitter.com/th3j35t3r/status/7606202173
19. http://twitter.com/th3j35t3r/status/7601877047
20. http://twitter.com/th3j35t3r/status/7599063596
21. http://twitter.com/th3j35t3r/status/7591932953
22. http://twitter.com/th3j35t3r/status/7571356052
23. http://twitter.com/th3j35t3r/status/7566729155
24. http://twitter.com/th3j35t3r/status/7560199167
25. http://twitter.com/th3j35t3r/status/7556611734
26. http://twitter.com/th3j35t3r/status/7536562338
27. http://twitter.com/th3j35t3r/status/7533436592
28. http://twitter.com/th3j35t3r/status/7494711103
29. http://twitter.com/th3j35t3r/status/7459361654
30. http://twitter.com/th3j35t3r/status/7438914786
31. http://twitter.com/th3j35t3r/status/7417859766
32. http://twitter.com/th3j35t3r/status/7416431705
33. http://twitter.com/th3j35t3r/status/7386454737
34. http://twitter.com/th3j35t3r/status/7336860625
35. http://twitter.com/th3j35t3r/status/7331513520
36. http://twitter.com/th3j35t3r/status/7315607510
37. http://twitter.com/th3j35t3r/status/7309474177
38. http://twitter.com/th3j35t3r/status/7308936583
39. http://twitter.com/th3j35t3r/status/7306732887
40. http://twitter.com/th3j35t3r/status/7282216830
41. http://twitter.com/th3j35t3r/status/7284618839
DATE:
2010-02
AFFECTED COUNTRIES:
Multiple, mostly Middle East and USA
AFFECTED SITES:
7anein.net, rjfront.info, as-ansar.com, islam-ucoii.it, algathafi.org, alsunnah.info, modawanati.com, iaisite-eng.org, ansar1.info, tawhed.net, islamicawakening.com, ansarnet.info, alemarah.info, alboraq.info, baghdadsniper.net, almaghrib.org, alqimmah.net, atahadi.tk, majahdenar.com, alboraqmedia.org, muslimdefenseforce.islamicink.com, muwahideen.tk, jixad.tk, majahden.info, hunafa.com, ahlu-sunnah.com, sheikyermami.com, calltoislam.com, jaami.info
EFFECT OF ATTACKS:
Short periods of downtime. Alemarah.info - an official Taliban site - and ansarnet.info both down permanently "because their ISP is sick of hosting 'targetted' sites." (58)
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.
TYPE OF ATTACK:
DoS
ATTACK SPECIFICS:
XerXeS DoS
EVENT DESCRIPTION:
The Jester's takedown announcements from Twitter in February 2010:
"www.7anein.net DOWN FOR 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (1)
"www.rjfront.info DOWN FOR 30 mins. For the online radicalization of young muslims in US and Europe." (2)
"www.as-ansar.com - major jihad recruiting gateway - major issues with their ISP - courtesy Jester - this is how we bounce." (3)
"www.islam-ucoii.it DOWN FOR 30 mins. For the online radicalization of young muslims in US and Europe." (4)
"www.algathafi.org - Gadaffi's own site DOWN 60 mins - for calling for 'Jihad against SWITZERLAND?? WTF?? (see here: http://bit.ly/ahu8qa)" (5)
"www.alsunnah.info DOWN FOR 30 mins. For the online radicalization of young muslims in US and Europe." (6)
"www.modawanati.com DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims & spreading propaganda." (7)
"www.7anein.net - DOWN 30 Mins - (SELECT * FROM taliban_admins WHERE clue > 0)" (8)
"www.iaisite-eng.org DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (9)
"www.rjfront.info DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (10)
"www.ansar1.info DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (11)
"oh dear, oh dear: www.tawhed.net - DOWN 30 MINS - on the shit list - won't be the first tech diffs they suffer. #EPIC FAIL." (12)
"www.modawanati.com - DOWN 30 MINS - reasons obvious. (SELECT * FROM taliban_admin WHERE clue > 0)" (13)
"www.islamicawakening.com DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (14)
"www.7anein.net DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (15)
"www.ansarnet.info - homegrown recruiters - DOWN - reasons obvious. (PS SELECT * FROM taliban_admin WHERE clue > 0)" (16)
"www.alemarah.info - Official Taliban Site - DOWN - reasons obvious. (PS SELECT * FROM taliban_admin WHERE clue > 0)" (17)
"www.islamicawakening.com DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (18)
"www.alboraq.info DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (19)
"www.rjfront.info DOWN FOR 30 mins. For the continued distribution of jihadist instructional materials and propaganda." (20)
"www.iaisite-eng.org DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (21)
"www.islam-ucoii.it DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (22)
"www.baghdadsniper.net DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (23)
"www.islamicawakening.com DOWN FOR 30 mins. For the continued distribution of jihadist instructional materials and propaganda." (24)
"www.almaghrib.org DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (25)
"www.alqimmah.net DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (26)
"www.islamicawakening.com DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (27)
"www.alemarah.info - Down for 30. They changed their 'tack' to avoid types like little old me. This the official shadow taliban gov, afghan." (28)
"www.iaisite-eng.org DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (29)
"www.baghdadsniper.net DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (30)
"www.alemarah.info DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (31)
"www.iaisite-eng.org DOWN FOR 30 mins. For facilitating online jihadi recruitment of young muslims and spreading propaganda." (32)
"www.atahadi.tk - for the active recruitment of young muslims & especially co-ordination of western homegrown terror cells - down for 30." (33)
"www.majahdenar.com - having a bad day - down for 30 minutes for the radicalization of young muslims via the intertubes." (34)
"www.alboraqmedia.org down for 30 mins - for facilitating online jihadi recruitment of young 'homegrown' muslims and spreading propoganda." (35)
"www.muslimdefenseforce.islamicink.com - down 30 mins for jihadist recruitment and propaganda spreading." (36)
"www.muwahideen.tk - down 4 30 mins for spreading the jihad. Bad Bad Bad. Yet to hear of an argument valid enough to make me stop. All ears." (37)
"www.islamicawakening.com - down for 30 - a usual suspect." (38)
"www.almaghrib.org - down for 30 mins for incitement to terrorism. More info on the reasons why here: http://tinyurl.com/y9za9lz" (39)
"www.jixad.tk - website calling youth of azerbajan to perform jihad - down for 30 minutes." (40)
"www.majahden.info - the Al Mojahden Electronic Network, down for 30 mins for radicalizing young muslims." (41)
"www.alemarah.info - official taliban shadow government website - easy target, c'mon girls - give it some effort - DOWN 30 MINS" (42)
"www.hunafa.com - for public execution via sniper, of traffic cop in name of jihad, the broadcasting same deaths via your site - down 30 mins" (43)
"www..ansar1.info - down 30 mins minimum - for incitement to terrorism against the US and it's allies in the west. x" (44)
"Happy Days - www.alqimmah.net - tried a counter, About time somebody did, but hey - EPIC FAIL. Ya down for 30 min." (45)
"www.alqimmah.net - sucker punched for 30 minutes after a little fracar, they are down, at least 30 mins. For terror against civilian pop." (46)
"www.hunafa.com - the broadcasting & celebrating of traffic cops sniped in street for your Jihad as they protect your own, Down for 30 mins." (47)
"www.ahlu-sunnah.com - for the hero worshipping of the Bali bombers and Bin Laden - and incitement to cause terror - down for 30 mins" (48)
"This time I am not wrong - www.sheikyermami.com says - '9/11 should have been a wake-up call to the world' - down 30 mins - just for that." (49)
"www.calltoislam.com - subversive techniques to influence very small children - down for 30 minutes. Hey make yourself look the good guy. lol" (51) *Attack was in error (50)
"www.islamicawakening.com - down for 30 mins - for allowing attempts to recruit young muslims to cause acts of terror inside their forums." (52)
"www.almaghrib.org - sadly I need to test XerXeS, seems a shame to waste a good target - Down for another 30 for incitement to cause terror." (53)
"www.almaghrib.org - 2nd live firing test of XerXeS - looking good - down for 30 mins for recruiting homegrown terror cells." (54)
"www.as-ansar.com - subject to live beta testing of the new improved XerXeS Beta 1a, good so far - down for 30 mins for incitement to terror." (55)
"www.jaami.info - ooohh a good one, this guy is 'homegrown' - spreading the jihadi 'good' news from within. Down for 30 mins (minimum)." (56)
"www.modawanati.com - this site is used to communicate jihad materials - down for 30 minutes, for incitement to cause terrorism. Please RT" (57)
URLS:
1. http://twitter.com/th3j35t3r/status/9791336450
2. http://twitter.com/th3j35t3r/status/9788340950
3. http://twitter.com/th3j35t3r/status/9787327843
4. http://twitter.com/th3j35t3r/status/9749651995
5. http://twitter.com/th3j35t3r/status/9697663106
6. http://twitter.com/th3j35t3r/status/9685354742
7. http://twitter.com/th3j35t3r/status/9682299680
8. http://twitter.com/th3j35t3r/status/9646691785
9. http://twitter.com/th3j35t3r/status/9644636800
10. http://twitter.com/th3j35t3r/status/9642949710
11. http://twitter.com/th3j35t3r/status/9641842236
12. http://twitter.com/th3j35t3r/status/9594655128
13. http://twitter.com/th3j35t3r/status/9495112966
14. http://twitter.com/th3j35t3r/status/9490656523
15. http://twitter.com/th3j35t3r/status/9482867698
16. http://twitter.com/th3j35t3r/status/9449394186
17. http://twitter.com/th3j35t3r/status/9448807233
18. http://twitter.com/th3j35t3r/status/9442640891
19. http://twitter.com/th3j35t3r/status/9432092782
20. http://twitter.com/th3j35t3r/status/9427753598
21. http://twitter.com/th3j35t3r/status/9405597022
22. http://twitter.com/th3j35t3r/status/9398727103
23. http://twitter.com/th3j35t3r/status/9390600566
24. http://twitter.com/th3j35t3r/status/9386213251
25. http://twitter.com/th3j35t3r/status/9380825579
26. http://twitter.com/th3j35t3r/status/9256290654
27. http://twitter.com/th3j35t3r/status/9254964575
28. http://twitter.com/th3j35t3r/status/9253605859
29. http://twitter.com/th3j35t3r/status/9251257772
30. http://twitter.com/th3j35t3r/status/9248413963
31. http://twitter.com/th3j35t3r/status/9230458718
32. http://twitter.com/th3j35t3r/status/9188759066
33. http://twitter.com/th3j35t3r/status/9115837275
34. http://twitter.com/th3j35t3r/status/9110839156
35. http://twitter.com/th3j35t3r/status/9105846391
36. http://twitter.com/th3j35t3r/status/9101528383
37. http://twitter.com/th3j35t3r/status/9072264805
38. http://twitter.com/th3j35t3r/status/9071006926
39. http://twitter.com/th3j35t3r/status/9069332711
40. http://twitter.com/th3j35t3r/status/9014880768
41. http://twitter.com/th3j35t3r/status/9011303779
42. http://twitter.com/th3j35t3r/status/8986865526
43. http://twitter.com/th3j35t3r/status/8982315467
44. http://twitter.com/th3j35t3r/status/8879242652
45. http://twitter.com/th3j35t3r/status/8873930114
46. http://twitter.com/th3j35t3r/status/8873862371
47. http://twitter.com/th3j35t3r/status/8869458348
48. http://twitter.com/th3j35t3r/status/8825665920
49. http://twitter.com/th3j35t3r/status/8784205424
50. http://twitter.com/th3j35t3r/status/8783569697
51. http://twitter.com/th3j35t3r/status/8783294546
52. http://twitter.com/th3j35t3r/status/8775767616
53. http://twitter.com/th3j35t3r/status/8741845540
54. http://twitter.com/th3j35t3r/status/8735954297
55. http://twitter.com/th3j35t3r/status/8734613453
56. http://twitter.com/th3j35t3r/status/8559808588
57. http://twitter.com/th3j35t3r/status/8517892829
58. http://twitter.com/th3j35t3r/status/9068807377
59. http://twitter.com/th3j35t3r/status/9029180704
DATE:
2010-03
AFFECTED COUNTRIES:
Multiple, mostly Middle East and USA
AFFECTED SITES:
ansar1.info, h-alali.net, asqsatv.ps, baghdadsniper.net, abu-qatada.com, almaqdese.net, sharia4belgium.webs.com, alboraq.info, islamicawakening.com, hizb-america.org, mtj.tw, rjfront.info, modawanati.com, as-ansar.com, altartosi.com, tawheedmedia.com, tawhed.ws, alqimmah.net, islamweb.net, iaisite-eng.org, almoltaqa.ps, atahadi.com, majahden.com, almaghrib.org, alsunnah.info
EFFECT OF ATTACKS:
Short periods of downtime
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.
TYPE OF ATTACK:
DoS
ATTACK SPECIFICS:
XerXeS DoS
EVENT DESCRIPTION:
The Jester's takedown announcements from Twitter in March 2010:
"www.ansar1.info TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (1)
"www.h-alali.net TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via web." (2)
"www.aqsatv.ps - TANGO DOWN 30 MINS (again) - I think it's little much exploiting mickey mouse to turn kids to jihad. Call me sentimental." (3)
"www.aqsatv.ps - TANGO DOWN - Shows TV inciting muslim kids to jihad using mickey mouse & others sounds stupid huh?" (4)
"www.baghdadsniper.net TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via web." (5)
"www.h-alali.net TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (6)
"www.abu-qatada.com TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (7)
"www.almaqdese.net TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (8)
"www.sharia4belgium.webs.com TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (9)
"www.alboraq.info TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (10)
"www.ansar1.info TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via web." (11)
"www.alboraq.info TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (12)
"www.islamicawakening.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (13)
"www.hizb-america.org TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (14)
"www.mtj.tw TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (15)
"www.rjfront.info TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (16)
"www.h-alali.net TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via web." (17)
"www.baghdadsniper.net TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (18)
"www.alboraq.info TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (19)
"www.baghdadsniper.net TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (20)
"www.h-alali.net TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (21)
"www.modawanati.com TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (22)
"www.as-ansar.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (23)
"www.h-alali.net TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (24)
"www.h-alali.net TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (25)
"www.baghdadsniper.net TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (26)
"www.altartosi.com TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (27)
"www.tawheedmedia.com TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via web." (28)
"www.as-ansar.com TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (29)
"www.tawheedmedia.com TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via web." (30)
"www.rjfront.info TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (31)
"www.tawhed.ws TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (32)
"www.as-ansar.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (33)
"www.alqimmah.net TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (34)
"www.tawheedmedia.com TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (35)
"www.abu-qatada.com TANGO DOWN 130 mins. For enabling recruitment, & co-ordination of jihadist terror cells via the web." (36)
"www.as-ansar.com TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (37)
"www.ansar1.info TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via the web." (38)
"www.as-ansar.com DOWN FOR 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (39)
"www.alboraq.info DOWN FOR 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (40)
"www.almaqdese.net DOWN FOR 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (41)
"www.islamweb.net DOWN FOR 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (42)
"www.abu-qatada.com DOWN FOR 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (43)
"www.iaisite-eng.org DOWN FOR 30 mins. For the online radicalization of young muslims in US and Europe." (44)
"www.as-ansar.com DOWN FOR 30 mins. For the online radicalization of young muslims in US and Europe." (45)
"www.almaqdese.net DOWN FOR 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (46)
"www.almoltaqa.ps DOWN FOR 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (47)
"www.abu-qatada.com DOWN FOR 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via the web." (48)
"www.alboraq.info TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (49)
"www.almaqdese.net TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (50)
"www.atahadi.com TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via the web." (51)
"www.ansar1.info TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (52)
"www.majahden.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (53)
"www.rjfront.info TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via the web." (54)
"www.islamicawakening.com TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (55)
"www.abu-qatada.com TANGO DOWN 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via the web." (56)
"www.iaisite-eng.org TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (57)
"www.almaghrib.org TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (58)
"www.almaghrib.org TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (59)
"www.islamicawakening.com TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (60)
"www.alsunnah.info DOWN FOR 30 mins. For enabling recruitment, & co-ordination of jihadist terror cells via the web."(61)
URLS:
1. http://twitter.com/th3j35t3r/status/10877974489
2. http://twitter.com/th3j35t3r/status/10841736021
3. http://twitter.com/th3j35t3r/status/10831463912
4. http://twitter.com/th3j35t3r/status/10829986326
5. http://twitter.com/th3j35t3r/status/10781461758
6. http://twitter.com/th3j35t3r/status/10749436688
7. http://twitter.com/th3j35t3r/status/10745815988
8. http://twitter.com/th3j35t3r/status/10741357428
9. http://twitter.com/th3j35t3r/status/10738346902
10. http://twitter.com/th3j35t3r/status/10730729454
11. http://twitter.com/th3j35t3r/status/10690446435
12. http://twitter.com/th3j35t3r/status/10688820100
13. http://twitter.com/th3j35t3r/status/10680123662
14. http://twitter.com/th3j35t3r/status/10641004649
15. http://twitter.com/th3j35t3r/status/10635675350
16. http://twitter.com/th3j35t3r/status/10586494906
17. http://twitter.com/th3j35t3r/status/10573949810
18. http://twitter.com/th3j35t3r/status/10537210634
19. http://twitter.com/th3j35t3r/status/10489605106
20. http://twitter.com/th3j35t3r/status/10487709799
21. http://twitter.com/th3j35t3r/status/10395221205
22. http://twitter.com/th3j35t3r/status/10377148342
23. http://twitter.com/th3j35t3r/status/10345905268
24. http://twitter.com/th3j35t3r/status/10338399881
25. http://twitter.com/th3j35t3r/status/10319723256
26. http://twitter.com/th3j35t3r/status/10287260007
27. http://twitter.com/th3j35t3r/status/10285384685
28. http://twitter.com/th3j35t3r/status/10276123124
29. http://twitter.com/th3j35t3r/status/10242382739
30. http://twitter.com/th3j35t3r/status/10239994295
31. http://twitter.com/th3j35t3r/status/10193176963
32. http://twitter.com/th3j35t3r/status/10187316418
33. http://twitter.com/th3j35t3r/status/10185238150
34. http://twitter.com/th3j35t3r/status/10175157248
35. http://twitter.com/th3j35t3r/status/10173057915
36. http://twitter.com/th3j35t3r/status/10137680457
37. http://twitter.com/th3j35t3r/status/10136238148
38. http://twitter.com/th3j35t3r/status/10134302939
39. http://twitter.com/th3j35t3r/status/10029365576
40. http://twitter.com/th3j35t3r/status/10021429724
41. http://twitter.com/th3j35t3r/status/9999626649
42. http://twitter.com/th3j35t3r/status/9997665667
43. http://twitter.com/th3j35t3r/status/9896537651
44. http://twitter.com/th3j35t3r/status/9894015402
45. http://twitter.com/th3j35t3r/status/9887636290
46. http://twitter.com/th3j35t3r/status/9879049277
47. http://twitter.com/th3j35t3r/status/9876204541
48. http://twitter.com/th3j35t3r/status/9821943324
49. http://twitter.com/th3j35t3r/status/10132262363
50. http://twitter.com/th3j35t3r/status/10128135263
51. http://twitter.com/th3j35t3r/status/10117015665
52. http://twitter.com/th3j35t3r/status/10116007828
53. http://twitter.com/th3j35t3r/status/10093770510
54. http://twitter.com/th3j35t3r/status/10090179708
55. http://twitter.com/th3j35t3r/status/10085946618
56. http://twitter.com/th3j35t3r/status/10083923555
57. http://twitter.com/th3j35t3r/status/10074991993
58. http://twitter.com/th3j35t3r/status/10072119079
59. http://twitter.com/th3j35t3r/status/10045959034
60. http://twitter.com/th3j35t3r/status/10039269113
61. http://twitter.com/th3j35t3r/status/10036768440
DATE:
2010-02
AFFECTED COUNTRIES:
Afghanistan
AFFECTED SITES:
alemarah.info
EFFECT OF ATTACKS:
Down for a very short time
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.
TYPE OF ATTACK:
DoS
ATTACK SPECIFICS:
XerXeS DoS
EVENT DESCRIPTION:
Site is a Taliban website. The Jester (th3j35t3r) is a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether. This attack was part of a video The Jester released to present his Xerxes software, visible at (1).
The Jester's many victims are predominantly combined by month of attack in this database. Links other than (1) for this entry are to other articles about his campaign, not necessarily about this one attack.
URLS:
1. https://www.infosecisland.com/blogview/2990-Exclusive-Video-of-XerXeS-DoS-Attack.html
2. http://information-security-resources.com/2010/01/07/patriot-hacker-hits-jihad-with-ddos-attacks/
3. https://www.infosecisland.com/blogview/2882-Jester-Unveils-XerXeS-Automated-DoS-Attack.html
4. https://www.infosecisland.com/blogview/2695-Hacktivist-Tactics-Raise-Ethical-Questions.html
DATE:
2009-09
AFFECTED COUNTRIES:
Poland
AFFECTED SITES:
Several Polish government websites
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
n/a
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
"The attack took place immediately following Russian President Vladimir Putin's visit to Poland to commemorate outbreak of the World War II and amid the heated debate in the Polish parliament regarding the Russian aggression on Poland in 1939 and the Katyn massacre." (1) Limited information was released by Polish intelligence.
URLS:
1. http://www.isn.ethz.ch/isn/layout/set/print/content/view/full/73?id=108943&lng=en&ots591=EB06339B-2726-928E-0216-1B3F15392DD8
2. http://www.wprost.pl/ar/174727/Odparlismy-rosyjski-cyberatak/
DATE:
2008-07
AFFECTED COUNTRIES:
Burma, India
AFFECTED SITES:
mizzima.com
EFFECT OF ATTACKS:
Inaccessible for days
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Burmese government
TYPE OF ATTACK:
DDoS, hack attempts
ATTACK SPECIFICS:
Site received more than 5GB of data in less than 15 minutes
EVENT DESCRIPTION:
Independent Burmese media site. "SEAPA partner Mizzima News, a Burmese independent news agency based in New Delhi, India, reported that its website has been inaccessible since 27 July due to persistent and severe" DDoS. (1) Report "a lot of intrusion attempts from servers in China, Russia and Hungary." (1)
URLS:
1. http://citizenlab.org/2008/07/information-warfare-monitor-burmese-news-agencies-under-dos-attack/
DATE:
2009-02
AFFECTED COUNTRIES:
China, Russia
AFFECTED SITES:
rusconshanghai.org.cn
EFFECT OF ATTACKS:
Defaced, offline
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Hack, defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
After reports came that the Russian Navy sank a Chinese cargo vessel, Chinese hackers protested by defacing the Russian Consulate's website in Shanghai.
URLS:
1. http://www.thedarkvisitor.com/2009/02/chinese-hackers-take-down-russian-consulate-website/
DATE:
2010-03
AFFECTED COUNTRIES:
China, USA
AFFECTED SITES:
crd-net.org
EFFECT OF ATTACKS:
"Crippled the site for more than five days" (1)
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
"Most serious attack the site has faced in its history."
EVENT DESCRIPTION:
Chinese Human Rights Defenders attacked for the second time this year. Site is managed from activists in China, hosted in the US (GoDaddy). Attack occurred shortly after GoDaddy announced it would cease registering .cn domain names and Google announced it would stop filtering Chinese searches.
URLS:
1. https://chrdnet.org/2010/03/30/china-human-rights-briefing-march-23-30-2010/
2. https://chrdnet.org/2010/03/30/following-major-announcements-by-google-and-go-daddy-regarding-china-services-hackers-strike-chinese-human-rights-defenders-website/
DATE:
2009-10
AFFECTED COUNTRIES:
China, USA
AFFECTED SITES:
Boxun.com
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
"Attacks began at 11 pm yesterday [10-20-09] and continued till 3 am. Actions revived at 8 am the next morning but were temporarily weakened at around 10 am; intensive attacks started at 10:30 the same day and lasted for a period of time." (1)
" The attack lasted till mid-night of October 21 (NY Time). But the impact was softened under the help from an expert of DDOS who is willing to support free media. The attack still continues at Oct. 23 (NY Time)" (1)
EVENT DESCRIPTION:
US-based Chinese citizen media/community/news website, dealing with politics and human rights in China, attacked.
" Before the first hit, an important anonymous phone call was received; it is still questionable that the call is related to the attacks. " (1)
URLS:
1. http://www.boxun.us/news/publish/chinanews/DDOS_attacks_paralyzed_Boxun_News_Web.shtml
DATE:
2007-12
AFFECTED COUNTRIES:
USA, China
AFFECTED SITES:
boxun.com
EFFECT OF ATTACKS:
~2000 blogs down (as part of Boxun's blog platform)
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
US-based Chinese citizen media/community/news website, dealing with politics and human rights in China, subjected to a large DDoS attack. It hosts a number of blogs
URLS:
1. http://www.ifex.org/united_states/2007/12/27/hacker_attack_on_boxun_website/
DATE:
2005-01
AFFECTED COUNTRIES:
Singapore, USA, China
AFFECTED SITES:
chinahistoryforum.com
EFFECT OF ATTACKS:
Frequent downtime
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Community based around Chinese history, administered from Singapore, hosted in America.
URLS:
1. http://www.chinahistoryforum.com/index.php?/topic/2179-server-under-ddos-attack/
2. http://www.chinahistoryforum.com/index.php?showtopic=2175
3. http://www.chinahistoryforum.com/index.php?showtopic=2179
DATE:
2009-11
AFFECTED COUNTRIES:
Sweden
AFFECTED SITES:
polisen.se
EFFECT OF ATTACKS:
Offline for a short period
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Swedish Police site attacked. Unknown motives/attackers. Not clear if this is a censorship case. Other Swedish sites were also affected.
URLS:
1. http://www.thesecurityblog.com/2009/11/swedish-police-experience-ddos-attacks/
DATE:
2009-11
AFFECTED COUNTRIES:
Sweden
AFFECTED SITES:
fra.se
EFFECT OF ATTACKS:
Unavailable
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Swedish Signals Intelligence Agency attacked shortly after the country passed a law giving them permission to tap Internet traffic passing through national borders (which includes the majority of Russian international traffic).
URLS:
1. http://www.f-secure.com/weblog/archives/00001808.html
DATE:
2010-05
AFFECTED COUNTRIES:
Australia
AFFECTED SITES:
vocus.com.au
EFFECT OF ATTACKS:
Connectivity disruptions/congestion acorss multiple websites
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Unclear if this is a censorship case. Big IP network provider affected by DDoS for the second time in 3 months.
URLS:
1. http://www.itnews.com.au/News/174982,vocus-suffers-ddos-attack.aspx
DATE:
2010-03
AFFECTED COUNTRIES:
Australia
AFFECTED SITES:
web24.com.au
EFFECT OF ATTACKS:
some connection problems with Vocus Commnications (vocus.com.au)--one of Web24's clients?
SOURCE COUNTRY:
Spread across Asia, Russia, and USA
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
"The attack flooded a Telstra link in Melbourne that formed part of Vocus' network. Vocus is a wholesale IP network provider." (1)
EVENT DESCRIPTION:
Not clear if it's a censorship case.
Also affected another Melbourne firm, Ventra-IP to shut down its Vocus link.
URLS:
1. http://www.itnews.com.au/News/169063,web24-hit-by-ddos-attack.aspx
DATE:
2007-06
AFFECTED COUNTRIES:
USA, Russia
AFFECTED SITES:
livejournal.com
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
Russia
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
50,000 queries per second. Six Apart (owners of LJ) filtered blocks of IP addresses and created a list of stopwords temporarily).
EVENT DESCRIPTION:
LJ servers in California DDoSed. Targeted communities were the dрni, ru_рolitics, and ru_nаzbol communities.
URLS:
1. http://globalvoicesonline.org/2007/06/05/russia-livejournal-ddos-attacked/
2. http://community.livejournal.com/lj_ru_support/171891.html
DATE:
2009-06
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
boingboing.net
EFFECT OF ATTACKS:
Downage
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Tech/entertainment blog attacked after posting an Iran elections-related cyberwar guide. Unclear if it's coincidence.
URLS:
1. http://www.nowpublic.com/culture/boingboing-gets-taken-down-ddos-iran-cyberwar-guide-blame
DATE:
2007-02
AFFECTED COUNTRIES:
Panama
AFFECTED SITES:
thepanamanews.com
EFFECT OF ATTACKS:
Removed by ISP due to overage charges
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
Owner suspects "right-wing elements in the American community," but seems like speculation
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Panama's Online English-Language Newspaper.
"On Monday a hacker coming through a server in China put a bot into The Panama News and ran up a huge amount of bandwidth. So, profiteering off of this criminal act, the webserver Datarealm send me a bill for $1,600 for the extra bandwidth and now has closed down The Panama News website for nonpayment." (2)
"There is a pattern. I ask readers for funds in March and September, and in or just before those months, without fail for the past four years, I have had various electronic attacks. " (2)
The site owner and ISP eventually came to an agreement to pay a fraction of the original $1600.
URLS:
1. http://www.dailykos.com/story/2007/2/23/305240/-On-line-newspaper-shut-down-by-spammer
2. http://www.upsizethis.org/forum/index.php?showtopic=30892
DATE:
2008-02
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
codepink4peace.org
EFFECT OF ATTACKS:
Uncreachable
SOURCE COUNTRY:
n/an/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Women's anti-Iraq-war group taken down via DDoS. Motives unclear.
URLS:
1. http://www.dailykos.com/story/2008/2/20/460696/-CodePinks-web-page-weathers-DDOS-attack:-with-NYC-LI-news
2. http://www.dailykos.com/story/2008/2/21/461553/-CodePink:-the-DDOS-saga-continues
DATE:
2010-05
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
eagar4senate.com, eagarforsenate.com
EFFECT OF ATTACKS:
Defaced, sometimes unreachable
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Conservative US Senate candidate's websites hacked two days before her state's GOP convention (Utah). DoS may have been a factor, but details are scarce.
URLS:
1. http://nacilbupera.blogspot.com/2010/05/breaking-eagar-campaign-website-hacked.html
DATE:
2010-05
AFFECTED COUNTRIES:
Malawi
AFFECTED SITES:
nyasatimes.com
EFFECT OF ATTACKS:
Unavailable (an "unavailable" message only) for several hours
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Hack
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
On World Press Freedom Day, a major Malawi online news site was hacked. Not many details known.
URLS:
1. http://www.nyasatimes.com/national/nyasa-times-hacked-on-press-freedom-day.html
DATE:
2010-05
AFFECTED COUNTRIES:
Denmark
AFFECTED SITES:
kfc.dk
EFFECT OF ATTACKS:
Defacement
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Islamic activists
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
KFC's Danish website was hacked and defaced. The message on the home screen doesn't make clear why KFC was the target (assumption: high-visibility, poor security). The hackers demand the country implement rules against blasphemy (the "freedom to insult") else the "rule of hacking" will continue.
URLS:
1. http://www.internationalfreepresssociety.org/2010/05/muslims-hack-danish-chicken-website-demand-anti-blasphemy-law/
2. http://www.jihadwatch.org/2010/04/uk-kfc-goes-halal-muslims-threaten-boycott.html
DATE:
2010-05
AFFECTED COUNTRIES:
USA, Russia
AFFECTED SITES:
community.livejournal.com/golos_ameriki
EFFECT OF ATTACKS:
Defacement, several hours
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Live Journal community for Voice of America, a Russian-language service about America and current events, was defaced with a pornographic image. Not the first time the site had been attacked (see 2009-07).
DATE:
2010-05
AFFECTED COUNTRIES:
USA, Israel
AFFECTED SITES:
Jerusalem Development Authority, various nasa.gov sites
EFFECT OF ATTACKS:
Defacement
SOURCE COUNTRY:
Iran
ALLEGED ATTACKERS:
Sun Army (sun-army.com)
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
"Defacement text: "" In The Name Of God
The Nasa organization which is funded by Usa and plays an important role not only in the most of scientific fields but also in many other projects like “Star Wars” which was aimed to weeken the former soviet union , now has come down to its knees toward
the scientific level of young iranians and iran , the birth place of Cyrus the great, who formed the biggest empire the world has ever seen.
the scientific apartaide which is imposed by Usa and it alies can never prevent us from progressing in international scene , special peaceful nuclear energy.
We Congratulate You On The Occasion Of Worlds Astronomical Day"" (1)"
URLS:
1. http://computersecurityarticles.info/security/iranian-sun-army-attacks-nasa-and-jda/
2. http://garwarner.blogspot.com/2010/04/iranian-sun-army-attacks-nasa-and-jda.html
DATE:
2010-05
AFFECTED COUNTRIES:
France
AFFECTED SITES:
phmcgpe.com
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Might not be a censorship-related case as this is just a marketing company. Only including it because it seems the spokesperson for the company talks about [Asian] politics quite a bit.
URLS:
1. http://twitter.com/phmcgpe/status/13260667799
2. http://www.facebook.com/wifig/posts/122740624408299
3. http://twitter.com/phmcgpe/status/13267905136
DATE:
2010-04
AFFECTED COUNTRIES:
Australia
AFFECTED SITES:
news.com.au
EFFECT OF ATTACKS:
n/a
SOURCE COUNTRY:
China
ALLEGED ATTACKERS:
Chinese government
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Numerous DDoS attacks launched at the news site accompanied by "extortion notices demanding the retraction of articles." (1) The specific articles haven't been made public, but the Security Manager "says that the attacks occurred when something written by one of the News Limited's journalists wasn't in favor of the attackers view."
URLS:
1. http://www.outpost24.com/news/news-2010-04-14.html
2. http://www.zdnet.co.uk/news/security-threats/2010/04/14/chinese-ddos-attacks-hit-news-limited-40088621/
DATE:
2010-04
AFFECTED COUNTRIES:
Tunisia
AFFECTED SITES:
nawaat.org, yezzi.org
EFFECT OF ATTACKS:
Down for days, lost content
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Defacement, DDoS?
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
All of this based on Google Translated version of the websites (mostly in French). Sites seem to be anti-censorship/activist Tunisian blogs. Many details unclear, but according to (1) Nawaat comes under attack with increasing regularity and was taken down with one of its blogs, astubal.nawaat.org, having all its content deleted. Yezzi displayed a "you are hacked" defacement on date I visited and has apparently been down for some time.
URLS:
1. http://nawaat.org/portail/2010/04/28/fuck-you-hackers-nawaat-is-back/
DATE:
2010-04
AFFECTED COUNTRIES:
Multiple
AFFECTED SITES:
Multiple Islamic websites
EFFECT OF ATTACKS:
According to the attackers, "around 8 websites have been taken down, and about ten websites were decimated or covered with [offensive media]." (1)
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Anonymous (group of _chan (many), Ebaumsworld, Something Awful, Encyclopedia Dramatica, Partyvan, etc. users)
TYPE OF ATTACK:
Disorganized spam, trolling, unconventional DoS
ATTACK SPECIFICS:
In addition to planned general griefing, harassment, email/Twitter/website spam, and hacking attempts, a major part of the plan involved unconventional DoS actions. Many forums were rendered practically unusable, having been inundated with anti-Islam media spam over an extended period of time. Another tactic--with unknown success--was the intentional inciting of threats of violence. The threats, if on a site hosted in the United States, would then be reported to appropriate authorities in an effort to have the site taken down. Finally, a customized anti-Islam version of the Last Measure meme was created (a site trolls would link to in the late 90s that would display offensive pictures in an infinite number of browser popups along with very loud offensive audio, all of which eventually crashes the browser or computer).
EVENT DESCRIPTION:
An "Anonymous" attack on Islam in general in the name of free speech. The impetus was the censoring of South Park after death threats were made against the network and show's creators. Known as Operation Islamichan, the attack was multi-fronted to utilize several methods of harassment and hacking.
URLS:
1. http://partyvan.info/wiki/Operation_Islamichan (NSFW)
2. http://partyvan.info/wiki/Talk:Operation_Islamichan (NSFW)
DATE:
2010-04
AFFECTED COUNTRIES:
Germany
AFFECTED SITES:
salambc.com
EFFECT OF ATTACKS:
Down for days.
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
HTTP attack
EVENT DESCRIPTION:
Not many details. Two Arabic/Islamic websites attacked and taken offline. Apparently a very simple attack, but took a while for the sites to be reinstated.
URLS:
1. http://thenextweb.com/me/2010/04/16/regional-blogs-networks-massive-ddos-attacks/
DATE:
2010-04
AFFECTED COUNTRIES:
Multiple
AFFECTED SITES:
facebook.com
EFFECT OF ATTACKS:
Users banned
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Conservative Islamist activists
TYPE OF ATTACK:
Crowdsourcing exploit/unconventional DoS
ATTACK SPECIFICS:
A user with religious/political ideology disagreeable with the perpetrators is identified. A large group then swarms the account to report abuse to FaceBook in order to get the account banned.
EVENT DESCRIPTION:
Since the a FaceBook privacy policy update made more profile information public, "a group was created on Facebook (in Arabic) for the sole purpose of reporting, and thus having removed, Facebook profiles of atheist Arabs. … Once identified, the group members would then attempt to report such users." (1) Several users have been banned this way.
URLS:
1. http://jilliancyork.com/2010/04/08/on-facebook-deactivations/
2. http://www.readwriteweb.com/archives/facebooks_new_policies_make_harrassment_easy.php?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+readwriteweb+%28ReadWriteWeb%29
DATE:
2010-04
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
arabcrunch.com
EFFECT OF ATTACKS:
Down for 4 days, some data loss.
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
DDoS
ATTACK SPECIFICS:
HTTP attack
EVENT DESCRIPTION:
Not many details. Two Arabic/Islamic websites attacked and taken offline. Apparently a very simple attack, but took a while for the sites to be reinstated.
URLS:
1. http://thenextweb.com/me/2010/04/16/regional-blogs-networks-massive-ddos-attacks/
2. http://arabcrunch.com/2010/04/breaking-emerging-while-still-under-ddos-attack-arabcrunch-com-is-back-to-serve-the-community-thanks-to-spirula-systems.html
3. http://www.spirulasystems.com/news/spirula-systems-defends-ddos-attack-arabcrunch
DATE:
2010-04
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
revolutionislam.com
EFFECT OF ATTACKS:
Defaced, then taken down
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Website of the group that made threatening statements toward Matt Stone and Trey Parker, creators of South Park, for the cartoon's portrayal of Islam.
URLS:
1. http://con.ca/news/3540
2. http://blackhole.xerces.com/showthread.php?p=147848
3. http://news.blogs.cnn.com/2010/04/19/security-brief-radical-islamic-web-site-takes-on-south-park/
4. http://www.huffingtonpost.com/2010/04/23/revolution-islam-website_n_549361.html
DATE:
2010-04
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
watchglennbeck.com
EFFECT OF ATTACKS:
Forwarded to cair.com
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Muslim hackers
TYPE OF ATTACK:
Hack/redirect
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Conservative talk show host Glen Beck's website was hacked to forward to cair.com, a Muslim civil rights site.
URLS:
1. http://www.ronpaulforums.com/showthread.php?s=43d6853483013257f330a3045d8270e5&t=240425
DATE:
2010-04
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
jimleeforcongress2010.com
EFFECT OF ATTACKS:
Site unavailable.
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Political opponents.
TYPE OF ATTACK:
Hack
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Site hacked and taken offline multiple times in the same week. Not many details.
URLS:
1. http://theconservativist.com/2010/04/06/jim-lee-for-congress-hacked/
DATE:
2010-04
AFFECTED COUNTRIES:
USA
AFFECTED SITES:
berkshirepublishing.com
EFFECT OF ATTACKS:
Site unavailable (unclear).
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
n/a
TYPE OF ATTACK:
n/a
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Not clear whether or not this is a censorship case. Author describes an article about Chinese economic issues at the same time she mentions having been hacked.
URLS:
1. http://www.berkshirepublishing.com/blog/?p=1511
DATE:
2010-04
AFFECTED COUNTRIES:
Philippines
AFFECTED SITES:
mannyvillar.com.ph
EFFECT OF ATTACKS:
Site defaced (still defaced when visited).
SOURCE COUNTRY:
n/a
ALLEGED ATTACKERS:
Political opponents / "VILLARROYO'S FANS" / Kris Aquino
TYPE OF ATTACK:
Defacement
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Presidential candidate/Senator Manny Villar's site was hacked/defaced. "Villarroyo" would seem to be a portmanteau of Villar and Arroyo, the latter a reference to current president Gloria Macapagal-Arroyo, with whom Villar became closely associated with recently. Hacker claimed to be Kris Aquino and urged visitors to vote for Villar's opponent, Noynoy Aquino III.
URLS:
1. http://www.pinoysoundingboard.com/2010/03/manny-villar-website-hacked-by-kris-aquino/
2. http://www.mannyvillar.com.ph/index.php
3. http://www.calvinshub.com/2010/03/manny-villars-website-got-hacked/
4. http://www.techie.com.ph/news/election-2010-manny-villars-site-hacked
