Iranian Cyber Army hacks China's Baidu search engine


Iranian Cyber Army hacks China's Baidu search engine

Warwick Ashford

The group known as the Iranian Cyber Army, which attacked Twitter in December, has defaced another high-profile website, according to security firm Sophos.

This time the group has targeted China's biggest search engine, Baidu. The site's home page briefly displayed a message declaring the site had been hacked by the Iranian Cyber Army.

"It is not presently clear whether Baidu's site itself was compromised or, as in the case with the Twitter attack, its DNS records," said Graham Cluley senior technology consultant at Sophos.

If the website's DNS records were breached then the hackers would have been able to redirect visitor to web server under their control, he said in a blog post.

The Baidu website appeared to be back to normal in two hours, indicating that the motive for the attack was political rather than financial, said Cluley.

But it would have been easy for the hackers to create a cloned version of the main Baidu web page, he said, complete with an invisible link to a software exploit or piece of malware.

"Attacks like this are a reminder to everyone that you always need to have security scanning every webpage you visit, even if it is an established legitimate website," said Cluley.

Email Alerts

Register now to receive IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

COMMENTS powered by Disqus  //  Commenting policy