DoSWatch = Aggregated stories about the use of denial of service attacks and hacking as a form of censorship.

If you hear about such an event, or if you've been censored in this way, please email or use @DoSWatch on Twitter.

This is not a news site. Our goal is to collect and quickly summarize, not research and fact-check. Many details of these reports rely on translated pages, speculation, and/or anecdote, so should be treated as such. Link quality will vary.

*click for email

Sunday, July 25, 2010

Several reformist blogs hacked (Iran) - August 2008


DATE:
2008-08

AFFECTED COUNTRIES:
Iran

AFFECTED SITES:
khaniki.ir, shirzad.ir, and more

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several blogs including the journals of Dr. Khanyky and Dr. Shirzad (names based on translation) hacked and defaced. Not many details available.

URLS:
1. http://persian.kamangir.net/?p=3524


Jaras News (Iran) defaced - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Iran

AFFECTED SITES:
jarasnews.com

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
Iranian Cyber Army

TYPE OF ATTACK:
Defacement, hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
News site that covers the Green Movement hacked by the Iranian Cyber Army, displaying the message, "Out of respect for the referendum which was held on 22 Bahman [February 11, 2010] and the people who voted and out of respect for the great nation and country named Iran ... do not be a tool of those who live safe and sound in America and are using you as a tool." (1)

URLS:
1. http://www.qlineorientalist.com/IranRises/category/uncategorized/
2. http://en.irangreenvoice.com/article/2010/feb/19/1236


Amirkabir University (Iran) defaced - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Iran

AFFECTED SITES:
aut.ac.ir

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
Iranian Cyber Army

TYPE OF ATTACK:
Defacedment, hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Amirkabir University's website hacked due to a Reformist Student Union. Included in defacement was the text "We will attack at the Leader's orders and put our lives on the line for him."

URLS:
1. http://en.irangreenvoice.com/article/2010/feb/19/1236
2. http://www.terrorism-info.org.il/malam_multimedia/English/eng_n/html/iran_e054.htm


Radio Zamaneh's (Persian radio in Holland) website defaced


DATE:
2010-01

AFFECTED COUNTRIES:
Netherlands

AFFECTED SITES:
radiozamaneh.com

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
Iranian Cyber Army

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Persian-language radio station (based in the Netherlands) with Iranian reformist affiliates hacked and defaced. "The message on the hacked site says in Persian: 'you who betray your country are not safe even when you are with your masters.' " (1)

URLS:
1. http://globalvoicesonline.org/2010/01/30/iran-iranian-cyber-army-hacked-radio-zamaneh/


Saturday, July 24, 2010

Kitab.nl (Tunisia) hacked - October 2009


DATE:
2009-10

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
kitab.nl

EFFECT OF ATTACKS:
Deleted blog, database and a Tunisian Prison Map. Shifted to a mirror/backup at ifikra.wordpress.com

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Tunisian government

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian political dissenter/activist Sami Ben Gharbia, director of Nawaat.org, had his blog hacked and all content removed.

URLS:
1. http://samibengharbia.com/2009/10/13/hello-world-im-hacked-again-and-again/


Kommersant (Russia) DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
kommersant.ru

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
News site often critical of Russian administration DDoSed

URLS:
1. http://www.novayagazeta.ru/news/243583.html


Dayudm.ru (Udmurtia/Russia) DDoSed - February 2008


DATE:
2008-02

AFFECTED COUNTRIES:
Udmurtia (Russia)

AFFECTED SITES:
dayudm.ru

EFFECT OF ATTACKS:
Down for over a month

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Udmurtian news site DDoSed.

URLS:
1. http://www.novayagazeta.ru/data/2008/40/15.html


Dayudm.ru (Udmurtia/Russia) DDoSed - August 2007


DATE:
2007-08

AFFECTED COUNTRIES:
Udmurtia (Russia)

AFFECTED SITES:
dayudm.ru

EFFECT OF ATTACKS:
Down for four weeks.

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Udmurtian news site DDoSed.

URLS:
1. http://www.novayagazeta.ru/data/2008/40/15.html


BlogSochi DDoSed - March 2010


DATE:
2010-03

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
blogsochi.ru

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Independent blog of Alexander Valov DDoSed after he published material about the state of Olympic construction projects in Sochi. Photos and videos depicted poor living conditions in these construction areas and other material reported that employees had not been paid.

URLS:
1. http://www.novayagazeta.ru/news/781514.html


Several Azerbaijani and Armenian sites attacked - February 2000


DATE:
2000-02

AFFECTED COUNTRIES:
Azerbaijan, Armenia

AFFECTED SITES:
aliyev.com and many others

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Azerbaijan, Armenia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"after an ethnic Armenian in California launched Aliyev.com, a site that disseminated 'black propaganda' about then Azerbaijani President Heydar Aliyev, Azerbaijani hackers launched an attack against Armenian Internet sites that included National State Television H1, and several online resources about the Turkish massacre of hundreds of thousands of ethnic Armenians during World War I." ... "a counter-offensive was launched by a group of Armenian hackers, Liazor. ...the group threatened to take down the entire Azerbaijani Internet. Indeed, the websites of many large Internet users, including humanitarian organizations, in Azerbaijan were hacked, and the email connectiosn of major Azerbaijani newspapers disrupted." (1)

Hackers in the two countries have been warring ever since these events.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


2 Azerbaijani sites defaced - February 2007


DATE:
2007-02

AFFECTED COUNTRIES:
Azerbaijan

AFFECTED SITES:
list.az, hayat.az

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Armenia

ALLEGED ATTACKERS:
axteam

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"A group of Armenian hackers calling themselves 'axteam' attacked two more Azerbaijani sites -- list.az and hayat.az -- as 'revenge for Bacioglu,' according to text posted on hayat.az. The Armenian security service has rejected the claim that it is connected with any of these attacks." (1) One in a series of many attacks related to the Nagorno-Karabakh dispute.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


5 Armenian websites defaced - January 2007


DATE:
2007-01

AFFECTED COUNTRIES:
Armenia

AFFECTED SITES:
openarmenia.com, openarmenia.ru, tamanyan.org, homeopathy.am, photoblogs.am

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Azerbaijan

ALLEGED ATTACKERS:
Bacioglu

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Azerbaijani hacker defaces 5 Armenian websites with his state's emblem and images of Azerbaijani civilians killed in Nagorno-Karabakh. Also a pledge to "fight you and all Armenians on earth as long as I live" and a threat to destroy the official website of Armenian President Kocharian. (1) One in a series of many attacks related to the Nagorno-Karabakh dispute.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


Azerbaijani public television station's website defaced - January 2007


DATE:
2007-01

AFFECTED COUNTRIES:
Azerbaijan

AFFECTED SITES:
itv.az

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Armenai

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Azerbaijan's public television station's website attacked, defaced with Armenia's state emblem and a warning that they would kill an Azerbaijani hacker identified as "Bacioglu" if he did not stop attacking Armenian websites. One in a series of many attacks related to the Nagorno-Karabakh dispute.

URLS:
1. http://www.eurasianet.org/departments/insight/articles/eav020807a.shtml


Several Armenian governmental (and other) sites hacked - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Armenia

AFFECTED SITES:
taxservice.am, armeniadisapora.com, mineconomy.am, and many others

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Azerbaijan, Turkey

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several Aermenian government and private websites hacked (more than 100 attacks on the Armenian State Tax Service, the Diaspora Ministry and the webmail for the Ministry of Economy.) Sites were defaced with English curse words, "the flags of Azerbaijan and Turkey, a map that shows the disputed territory of Nagorno-Karabakh as part of Azerbaijan, and photos of victims from the 1988-1994 Nagorno-Karabakh war." (1)

URLS:
1. http://www.eurasianet.org/departments/insightb/articles/eav081909a.shtml


Muslim Brotherhood (Egypt) hacked - December 2006


DATE:
2006-12

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
ikhwanweb.com

EFFECT OF ATTACKS:
Brought down several times

SOURCE COUNTRY:
USA, Germany

ALLEGED ATTACKERS:
Al Qaeda sympathizers

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Many hacking attempts on the Egyptian website Muslim Brotherhood after it made critical statements about Al Qarda leaders. It was blocked by the government temporarily then faced the hacking attempts.

URLS:
1. http://www.ikhwanweb.com/article.php?id=2898


Alexandria University (Egypt) hacked - July 2009


DATE:
2009-07

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
alex.edu.eg

EFFECT OF ATTACKS:
Hacked

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Alexandria University hacked. Information the hacker gathered, including financial records, were left behind to show what had been done. Another file contained a message from the hacker describing his criticisms of the organization. The attacker self-identified as Egyptian

URLS:
1. http://www.ikhwanweb.com/article.php?id=20910


Al-Azhar hacked (Egypt) - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Egypt

AFFECTED SITES:
azhar.edu.eg

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Prominent Sunni Muslim religious institution (university/mosque) hacked/defaced. Details limited.

URLS:
1. http://www.ikhwanweb.com/article.php?id=20910


Sunday, July 18, 2010

HolyQuran.net DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
USA, Saudi Arabia, Syria

AFFECTED SITES:
holyquran.net

EFFECT OF ATTACKS:
Offline for some days

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Up to 640Mbps

EVENT DESCRIPTION:
Islamic site attacked and brought offline for some days (still down at time of record).

URLS:
1. http://www.holyquran.net/ddos.html
2. http://twitter.com/MajidAlhamdan/status/18601520943


Charter97.org (Belarus) DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Belarus

AFFECTED SITES:
charter97.org

EFFECT OF ATTACKS:
Temporarily disconnect from network (over capacity)

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
2.5Gb/s

EVENT DESCRIPTION:
After the site posted the "second series of films NTV Religious Dad" it was hit by a big DDoS attack for about half a day, setting a record for biggest attack on the site to-date. The controversial video accuses Belarusian authorities of certain disappearances and murders of famous politicians, public figures, and journalists.

URLS:
1. http://charter97.org/ru/news/2010/7/17/30680/
2. http://twitter.com/newsfrombelarus/status/18784389936


Saturday, July 17, 2010

Contravia.tv (TeleSUR) hack attempt - April 2010


DATE:
2010-04

AFFECTED COUNTRIES:
Venezuela

AFFECTED SITES:
contravia.tv

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Hack attempt on the website of journalist Hollman Morris's TeleSUR program. Seems to have been ineffective. Morris said they may be related to other illegal monitoring and wiretapping he's experienced. Site was attacked with "malicious code" intended to link the page to spam, inevitably leading the site to be blocked by search engines.

URLS:
1. http://www.ifex.org/colombia/2010/06/18/morris_hack_attack/


Contravia.tv (TeleSUR) hack attempt - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Venezuela

AFFECTED SITES:
contravia.tv

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Hack attempt on the website of journalist Hollman Morris's TeleSUR program. Seems to have been ineffective. Morris said they may be related to other illegal monitoring and wiretapping he's experienced. Site was attacked with "malicious code" intended to link the page to spam, inevitably leading the site to be blocked by search engines.

URLS:
1. http://www.ifex.org/colombia/2010/06/18/morris_hack_attack/


Moscow Center for Prison Reform hacked - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
prison.org

EFFECT OF ATTACKS:
Hijacked

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, hijack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Front page of the Moscow Center for Prison Reform--one of the oldest Russian human rights NGOs, hacked. Content wasn't deleted but users can't access.

URLS:
1. http://www.allvoices.com/news/6211082-russia-human-rights-website-hacked-and-blocked


Ura.ru (Russia) hacked - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
ura.ru

EFFECT OF ATTACKS:
Hacked, content changed

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several articles on this major media outlet were changed by hackers. Hacked versions were critical of regional and federal authorities.

URLS:
1. http://www.needfirewall.com/news/russia-hackers-provoke-closure-of-the-major-news-website/


120 Malaysian sites defaced - August 2009


DATE:
2009-08

AFFECTED COUNTRIES:
Malaysia

AFFECTED SITES:
About 120 sites of various kinds (official, financial, education…)

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Indonesia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Part of an ongoing culture war between Indonesia and Malaysia in which the former accuses the latter of hijacking bits of the latter's culture without giving credit. Sites were defaced on Malaysia's independence day with text accusing them of being uncreative and offensive. Sites were restored shortly after being defaced.

URLS:
1. http://www.thejakartaglobe.com/home/indonesian-hackers-claim-web-attack-on-malaysian-sites/327111


Almost 100 Malaysian sites defaced - January 2010


DATE:
2010-01

AFFECTED COUNTRIES:
Malaysia

AFFECTED SITES:
academydelphi.com, acgc.com.my, al-faizeen.com.my, anarkalihairdye.com, astree.com.my, auto-charge.net, bagsmalaysia.com, berjayabintangtimur.com.my, bionet-int.com, venkat-transport.com.my, and many others

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Indonesia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Almost 100 Malaysian sites hacked by Indonesians, defaced to display a page entitled "Down with Malingsial." Part of an ongoing culture war. Indonesia claims Malaysia stole their culture.

URLS:
1. http://www.babycorp.pro/news/100-website-malaysia-hacked-by-indonesian-hackers/index.html
2. http://www.babycorp.pro/news/again-malaysian-websites-hacked-by-indonesian-hackers/index.html


Malaysian Ministry of Health website defaced - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Malaysia

AFFECTED SITES:
hoshas.moh.gov.my

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Indonesia

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Ongoing battle between Indonesian and Malaysian/Chinese hackers. This attack was on the Malaysian Ministry of Health website.

URLS:
1. http://forum.lowyat.net/topic/1484106


Friday, July 16, 2010

Yakov Krotov's sites hacked - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Russia

AFFECTED SITES:
krotov.info, livejournal.com

EFFECT OF ATTACKS:
Content deleted

SOURCE COUNTRY:
Germany

ALLEGED ATTACKERS:
Bonn-based hacker Sergey Maksimov ("Hacker Hell") / Brigade of Hell

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Latest victim of the hacker group Brigade of Hell is Yakov Krotov, a priest and publicist. Content from his LiveJournal account and personal site both deleted.

URLS:
1. http://globalvoicesonline.org/2010/07/14/russia-priests-blog-hacked/


Xocali.net (Armenia) DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
Armenia

AFFECTED SITES:
xocali.net

EFFECT OF ATTACKS:
Service interruptions

SOURCE COUNTRY:
Aerbaijan

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Three day attack

EVENT DESCRIPTION:
Site describes inaccuracies in Azerbaijan's story of the Nagorno-Karabakh War. Suffered a large DDoS attack.

URLS:
1. http://www.panarmenian.net/eng/it_telecom/news/51360/Xocalinet_attacked_by_Azerbaijani_hackers


Syrian Center for Media and Freedom of Expression hacked - February 2007


DATE:
2007-02

AFFECTED COUNTRIES:
Syria

AFFECTED SITES:
scm-sy.org

EFFECT OF ATTACKS:
Down, a lot of content deleted (whole archive)

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Syrian Center for Media and Freedom of Expression has been harassed both online and in real-life, with legal problems for its founder(s). In this instance the site was attacked, losing its entire archive (a few months later a fire would destroy its archives in its office).

URLS:
1. http://www.anhri.net/syria/scm/2008/pr0814.shtml


Palestine News Agency hacked - April 2007


DATE:
2007-04

AFFECTED COUNTRIES:
Palestine (unsure which country)

AFFECTED SITES:
wafa.ps

EFFECT OF ATTACKS:
Content deleted

SOURCE COUNTRY:
Israel?

ALLEGED ATTACKERS:
Israeli hackers

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Palestine News Agency hacked by Israeli hackers

URLS:
1. http://www.anhri.net/palestine/makal/2007/pr0401.shtml


Several Shiite sites attacked (and a subsequent counterattack) - July 2008


DATE:
2008-07

AFFECTED COUNTRIES:
Egypt, others

AFFECTED SITES:
Fatimid Egypt and Shia Egypt (URLs unknown)

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Egypt, Saudi Arabia

ALLEGED ATTACKERS:
Sunnis / Shiites

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Shiite forums and websites hacked and disabled. Shiites subsequently launched an attack on Sunni sites, but the details of the counterattack aren't clear.

URLS:
1. http://www.almasry-alyoum.com/article2.aspx?ArticleID=112685&IssueID=1097


Palestine Future, others hacked - June 2009


DATE:
2009-06

AFFECTED COUNTRIES:
Israel

AFFECTED SITES:
ppi.ps, palestinefuture.net, and other sites affiliated with the Palestine Media Network (PPI)

EFFECT OF ATTACKS:
Taken over by a hacker temporarily

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"Alhecrz"

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site suffered attempted hacking attempts previously, but this was the first time they were successful. The initial target was palestinefuture.net, then the server and other related sites. Content was removed, but successfully restored a a couple days later less the previous 50 days of posted material. Also seems like the ISP issued a $15,000 charge for overages. Site claims the reason for the attack is its "precision in exposing the violations by Israel against the Palestinian people." (1)

URLS:
1. http://www.anhri.net/lebanon/sk/2009/pr0626-2.shtml


NewYemen hacked - November 2009


DATE:
2009-11

AFFECTED COUNTRIES:
Yemen

AFFECTED SITES:
newsyemen.net

EFFECT OF ATTACKS:
Unreachable

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
News Yemen hacked. Hard to determine motive or other specifics from translation.

URLS:
1. http://www.anhri.net/yemen/makal/2009/pr1129.shtml


Sunday, July 11, 2010

South Korean governmental and financial sites DDoSed - July 2010


DATE:
2010-07

AFFECTED COUNTRIES:
South Korea

AFFECTED SITES:
president.go.kr, cwd.go.kr, mofat.go.kr, naver.com, nonghyup.com, keb.co.kr, mnd.go.kr

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
Germany, Austria, Georgia, US, South Korea

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
Attacking bots were found to be infected (MyDoom) machines from the previous year's attack and so intensity of attacks were lower.

EVENT DESCRIPTION:
Attack on several South Korean governmental and financial websites did not come from North Korea, but location of those controlling the botnet is unknown.

URLS:
1. http://news.xinhuanet.com/english2010/sci/2010-07/08/c_13389878.htm
2. http://www.securecomputing.net.au/News/149906,third-wave-of-attacks-hits-south-korea.aspx


Saturday, July 10, 2010

Several Shiite sites defaced - August 2007


DATE:
2007-08

AFFECTED COUNTRIES:
Saudi Arabia, Morocco

AFFECTED SITES:
al-shia.org, imam-hussain.com, imam-hussain.org, m-alhassanain.com, m-alhassanain.net, m-alhassanain.org

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Saudi Arabia

ALLEGED ATTACKERS:
sNiper hEx Hicks

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Several Shiite sites hacked, possibly triggered by the death of Saddam Hussein (hard to tell from translation).

URLS:
1. http://forums.naseej.com/archive/index.php/t-98793.html


Many Shiite sites defaced - March 2007-December 2009


DATE:
March 2007-December 2009

AFFECTED COUNTRIES:
Bahrain, Lebanon, Yemen, Kuwait, Turkey, Pakistan, Afghanistan, Iran, Saudi Arabia

AFFECTED SITES:
Dozens or hundreds of Shiite sites (as well as collateral damage)

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Sunni hackers Group-XP / Kabab XP

TYPE OF ATTACK:
Defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Many Shiite sites have been hacked and defaced by a group of Sunni hackers. Zone-H has a list. Most of them display scrolling text announcing their cyberwar against Shiite sites and sometimes a little bit of information specific to a particular site. Also various religious YouTube videos are embedded. ***ATTACKS STARTED IN MARCH 2007, 2009-12 IS JUST THE MOST RECENT

URLS:
1. http://www.zone-h.org/archive/notifier=XP


Wafa Sultan's website defaced - March 2008


DATE:
2008-03

AFFECTED COUNTRIES:
Syria, USA

AFFECTED SITES:
wafasultan.org

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"LoVeR HaKaRz & AlQaTaRi" alqatari@inqtr.com, x.-o-.x@hotmail.com (Muslim hackers)

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site of Wafa Sultan, an author critical of Islam and labeled an atheist, hacked by Islamic hackers.

URLS:
1. http://www.zone-h.org/mirror/id/7187879
2. http://forums.naseej.com/showthread.php?t=122837


Twitter hacked - December 2009


DATE:
2009-12

AFFECTED COUNTRIES:
USA

AFFECTED SITES:
twitter.com

EFFECT OF ATTACKS:
Hacked, defaced 2 hours

SOURCE COUNTRY:
Iran

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Twitter redirected to a red and black page with green flag bearing religious slogans. "The page also contained a message in English reads: 'This site has been hacked by the Iranian army on the Internet', in addition to Persian poem says, 'We will strike if our leader is, and will sacrifice our heads if they wish our leader.'" (1) Message also threatened US Government, warning not to interfere in Iranian affairs.

URLS:
1. http://www.shorouknews.com/ContentData.aspx?id=163808


Al-Jazeera attacked - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Qatar

AFFECTED SITES:
aljazeera.net

EFFECT OF ATTACKS:
"Jamming"

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
Egyptian sports fans

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site of news organization Al-Jazeera experienced technical problems, accusing Egypt of hacking. Seems to be related to a World Cup game coverage.

URLS:
1. http://www.shorouknews.com/ContentData.aspx?id=246180


Algerian Sunrise news site defaced - March 2010


DATE:
2010-03

AFFECTED COUNTRIES:
Algeria

AFFECTED SITES:
Algerian Sunrise (URL?)

EFFECT OF ATTACKS:
Defaced

SOURCE COUNTRY:
Egypt

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Defacement

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Algerian news site defaced, denouncing "the endeavor Gazette Algerian Permanent foment sedition between the two brotherly peoples" (Egypt and Algeria). The paper had published material offensive to Egyptians.

URLS:
1. http://www.shorouknews.com/ContentData.aspx?id=194850


Friday, July 9, 2010

Tunisian Progressive Democratic Party's website hacked - October 2006


DATE:
2006-10

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
pdpinfo.org

EFFECT OF ATTACKS:
Hacked, database dropped

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Site admin account hacked, database dropped. Successfully recovered, it seems.

URLS:
1. http://www.pdpinfo.org/spip.php?article3962


Cprtunisie.net (Tunisia) hacked? - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
cprtunisie.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Difficult to tell from translation, but it looks like the Congress for the Republic Tunisian opposition site was hacked.

URLS:
1. http://nawaat.org/portail/2010/06/07/%25D9%2587%25D8%25B0%25D9%2587-%25D8%25A7%25D9%2584%25D9%2582%25D8%25B1%25D8%25B5%25D9%2586%25D8%25A9-%25D9%2585%25D9%2586-%25D8%25AA%25D9%2584%25D9%2583/


Mokhtar Yahyaoui's blog hacked (Tunisia) - April 2009


DATE:
2009-04

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
yahyaoui.rsfblog.org

EFFECT OF ATTACKS:
Hacked. Permanently defaced.

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
"Dimetri" (or Tunisian government)

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Former Tunisian judge's (Mokhtar Yahyaoui) blog hacked. He was dismissed after publishing a critical open letter to President Ben Ali. His FaceBook site and email were also hacked.

URLS:
1. http://yahyaoui.rsfblog.org/
2. http://advocacy.globalvoicesonline.org/2008/08/20/silencing-online-speech-in-tunisia/
3. http://www.kalima-tunisie.info/kr/News-file-article-sid-417.html


Sunday, July 4, 2010

Turkish Internet censors DDoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Turkey

AFFECTED SITES:
ubak.gov.tr, tk.gov.tr, tib.gov.tr

EFFECT OF ATTACKS:
Unavailable for a while

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Turkish anti-censorship activists

TYPE OF ATTACK:
DDoS

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Ministry of Transportation, Information and Communication Technologies Authority , and the Telecommunications Communication Presidency websites were all unavailable during a DoS after those organizations, responsible for Internet censorship in Turkey, successfully blocked Google sites, including YouTube.

URLS:
1. http://cyberlaw.org.uk/2010/06/18/access-denied-to-turkish-censorship-authorities-websites/


Citizen Zouari (Tunisia) hacked - September 2009


DATE:
2009-09

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
citizenzouari.wordpress.com

EFFECT OF ATTACKS:
Hacked. Permanently defaced.

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian activist's blog hacked.

URLS:
1. http://citizenzouari.wordpress.com/


Saturday, July 3, 2010

Kitab.nl (Tunisia) hacked - June 2008


DATE:
2008-06

AFFECTED COUNTRIES:
Tunisia, Netherlands

AFFECTED SITES:
kitab.nl

EFFECT OF ATTACKS:
Inaccessible

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
Tunisian government

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Blog of Tunisian human rights activist Sami Ben Gharbia hacked. Connected to attacks on nawaat.org.

URLS:
1. http://nawaat.org/portail/2008/08/20/silencing-online-speech-in-tunisia/


Nawaat.org (Tunisia) attacked - November 2004


DATE:
2004-11

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
nawaat.org

EFFECT OF ATTACKS:
Service disrupted

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian protest site attacked

URLS:
1. http://www.hns-info.net/article.php?id_article=5071


Tunis Online hacked - February 2010


DATE:
2010-02

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
tunis-online.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
China, Netherlands

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack, malware

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"Viruses and hacking attempts…every minute." (1)

URLS:
1. http://tunis-online.net/arabic/modules.php?name=News&file=article&sid=6694


Bahrain Center for Human Rights attacked - October 2004


DATE:
2004-10

AFFECTED COUNTRIES:
Bahrain

AFFECTED SITES:
bahrainrights.org

EFFECT OF ATTACKS:
Shut down in defense

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
Hack

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
"Exposure site of the Bahrain Center for Human Rights for a heavy attack to destroy its contents, causing the owner of the space to close the site.
In immediate contact with the owner of the area said: that there is a group of several fronts, trying to destroy the specific content of the site. And that he closed the site so as not to destroy the contents. And said the area was also exposed to many of the threatening letters demanding that it stop area of the center." (1)

URLS:
1. http://www.tunezine.com/breve.php3?id_breve=832


Thursday, July 1, 2010

Progressive Democratic Party (Tunisia) attacked - November 2006


DATE:
2006-11

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
pdpinfo.org

EFFECT OF ATTACKS:
Service disrupted

SOURCE COUNTRY:
Turkey?

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Tunisian Progressive Democratic Party's website attacked. Question mark on the coutnry of origin because of unclear translation.

URLS:
1. http://www.tunisnews.net/3novembre06a.htm


Moncef Marzouki's website attacked - June 2009


DATE:
2009-06

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
moncefmarzouki.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
One of many attacks on the member of the Tunisian opposition's website.

URLS:
1. http://www.tunisnews.net/20juillet09a.htm


Mouezjemai.maktooblog.com (Tunisia) attacked - July 2009


DATE:
2009-07

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
mouezjemai.maktoobblog.com

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
The blog "for the people of Tunisia free" collective attacked "by security agents" because of certain blog entries.

URLS:
1. http://www.tunisnews.net/03Juillet09a.htm


Moncef Marzouki's website attacked - September 2009


DATE:
2009-09

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
moncefmarzouki.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
One of many attacks on the member of the Tunisian opposition's website.

URLS:
1. http://www.tunisnews.net/03Septembre09a.htm


Progressive Democratic Party (Tunisia) attacked - June 2007


DATE:
2007-06

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
pdpinfo.org

EFFECT OF ATTACKS:
Service disrupted

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
n/a

EVENT DESCRIPTION:
Progressive Democratic Party of Tunisia's new site attacked.

URLS:
1. http://www.tunisnews.net/20juni07a.htm


Multiple radical Islamic sites DoSed - June 2010


DATE:
2010-06

AFFECTED COUNTRIES:
Multiple, mostly Middle East and USA

AFFECTED SITES:
abu-qatada.com, mtj.tw, mmagreb.com, alsunnah.info, almaqdese.net, baghdadsniper.net, ligattsecurity.com, alemarah.info, almaghrib.org, islamicawakening.com, hackteach.org

EFFECT OF ATTACKS:
Depending on attack, down for 30 minutes or Apache server defaulted (displays "Hey, it worked!" Apache install page [not the website's contents])

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
The Jester (th3j35t3r), a former soldier waging a campaign against militant Islamic websites. His goal is to make communication channels used for jihadi ops unreliable, not necessarily to take them out altogether.

TYPE OF ATTACK:
DoS, hack

ATTACK SPECIFICS:
XerXeS DoS as well as a "new technique" that defaults the server to display the "Hey, it worked!" Apache install page.

EVENT DESCRIPTION:
The Jester's (th3j35t3r)'s takedown announcements from Twitter for June 2010.
"www.abu-qatada.com TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (1)
"Ooops - http://www.abu-qatada.com apache box appears to be defaulted. Just a test of new technique - sorry guys - ok well not really sorry." (2)
"Damn - its works - http://mtj.tw - theres another - defaulted. I really must stop this. Bad times for bad guys - incoming. ;-)" (3)
"www.mmagreb.com TANGO DOWN 30 mins. For the online radicalization of young muslims in US and Europe." (4)
"they shoulda used a different box really: http://www.alsunnah.info - virtual apache host - that's 4 (four) defaulted: http://bit.ly/bdLL2e" (5)
"Okay this is ridiculous here goes another: http://almaqdese.net - dudes ya not very good at this are ya. Too easy." (6)
"www.baghdadsniper.net TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (7)
"www.alemarah.info TANGO DOWN 30 mins. For online incitement to cause young muslims to carry out acts of violent jihad." (8)
"@LIGATT - www.ligattsecurity.com - down 30 mins - RE http://bit.ly/b7Y67w - u now owe $MIL 2 charity any US/UK vets charity is fine. #LIGATT" (9)
"www.hackteach.org - DOWN 30 MINS - for attempting to propogate (lol) skiddie tools with a view to facilitate electronic-Jihad against west." (10)
"www.islamicawakening.com TANGO DOWN 30 mins. For facilitating jihadi recruitment of young muslims & spreading propaganda." (11)
"www.almaghrib.org TANGO DOWN 30 mins. For the continued distribution of jihadist instructional materials & propaganda." (12)

URLS:
1. http://twitter.com/th3j35t3r/status/14389435184
2. http://twitter.com/th3j35t3r/status/15206462792
3. http://twitter.com/th3j35t3r/status/15206858630
4. http://twitter.com/th3j35t3r/status/16093964004
5. http://twitter.com/th3j35t3r/status/15650317178
6. http://twitter.com/th3j35t3r/status/15207013288
7. http://twitter.com/th3j35t3r/status/16097586567
8. http://twitter.com/th3j35t3r/status/16177796900
9. http://twitter.com/th3j35t3r/status/16339163077
10. http://twitter.com/th3j35t3r/status/17187347381
11. http://twitter.com/th3j35t3r/status/17357186782
12. http://twitter.com/th3j35t3r/status/17365939892


Tunisnews attacked - April 2009


DATE:
2009-04

AFFECTED COUNTRIES:
Tunisia

AFFECTED SITES:
tunisnews.net

EFFECT OF ATTACKS:
n/a

SOURCE COUNTRY:
n/a

ALLEGED ATTACKERS:
n/a

TYPE OF ATTACK:
n/a

ATTACK SPECIFICS:
Translation not totally clear, but it appears Tunisnews.net was hacked "in a desperate attempt to silence the voice of defending freedoms and exposes the violations and practices contrary to the law." (1)

EVENT DESCRIPTION:
http://www.tunisnews.net/15Mai09a.htm

URLS:
1.


Archive