Lenovo.com Hacked, but Soon Restored After Intervention by CloudFlare
Notorious hacking group Lizard Squad allegedly is behind the attack which hacked the Domain Name Service records for the Lenovo.com Web site.The primary website for Lenovo was briefly redirected in the afternoon of Feb. 25, due to what appears to be a hack of the Domain Name Service (DNS) records for the lenovo.com Website. Lenovo did not respond to a request for comment from eWEEK before this story went live. The precise time of the DNS hack is not currently known, though visitors to the Lenovo.com site seem to have experienced the re-direction from approximately 4 PM ET until 4:30 PM ET. An analysis by eWEEK at 5:30 ET still showed some availability issues when trying to reach the site. Before the site was fully restored, attackers were able to change the site's name to @LizardCircle, which is a Twitter account associated with the Lizard Squad hacking group. Lizard Squad has been connected to attacks against Microsoft's Xbox Live and Sony's Playstation Network in December. The attackers also changed the description of the Lenovo site to, "the new and improved rebranded Lenovo website featuring Ryan King and Rory Andrew Godfrey." Those two individuals are both thought to be associated with the Lizard Squad as well.
A DNS lookup of the lenovo.com domain by eWEEK at 5:20 PM EST showed that the hacked site title and description was still in place as well as a new entry for who controls the netblock where lenovo.com is hosted. CloudFlare is identified in the lookup as being the netblock owner for lenovo.com as of February 25, running on a Linux based nginx Web server.