Msn.kg, republica.kg. centralasia.ru, and many others.
EFFECT OF ATTACKS:
Several political websites were deliberately defaced. In one case, a domain address belonging to an opposition group was apparently de-registered as a result of the organization having no legal status under Kyrgyz electoral law. A DDoS temporarily disabled all sites hosted by major Kyrgyz ISPs (Elcat and AsiaInfo) and continued to affect them for days. The country's upstream providers in Russia and Europe effectively disconnected Kyrgyzstan from the rest of the world to combat attacks. Websites were also removed by their ISPs.
A hacker, "Shadow Team" and/or the Kyrgyzstan government.
TYPE OF ATTACK:
DDoS: sophisticated; looks like work of contract hackers.
These events, according to ONI, may have actually combined election-related attacks and hacking with no sure motive. The attacks include flooding journalist e-mail accounts with large amounts of spam, spoofing of e-mail from Kyrgyz websites located in the US, website defacement, DDoS, and extortion to either hurt the government's image, remove governmental opposition, or disrupt the local Internet in general. Extortion was used with affected ISPs, demanding they remove certain newspaper sites.
During Kyrgyzstan's Parliamentary elections, "Open Net Initiative documented a pattern of failures that suggest a deliberate attempt to interfere with the functioning of the Internet during election period." A hacker going by "Shadow Team" emailed the ISPs taking responsibility for the attacks and demanding the removal of two Kyrgyz newspapers - msn.kg and republica.kg. "Shadow Team" also emailed a regional news site - centralasia.ru - demanding it cease publication of all information about the tumult in Kyrgyzstan.