Google.com.my is currently down for desktop users after the site was hacked and defaced by unknown culprits. The attack, which happened just about an hour ago, replaced the Google Malaysia front page with a message from the hackers.
The problem was first noticed by users who took to social media to highlight the problem. Google Tweeted that it looks like a DNS redirect. This would mean that Google was not actually hacked, but rather the domain name registry with MYNiC.
@themmailonline DNS redirection likely. Seems to be ok for most users now. FYI @mynicberhad
— Google Malaysia (@GoogleMsia) April 14, 2015
It is likely that the problem lies with MYNiC, as the message from the hackers indicates that it was done by the same group who hacked the domain name registrar two years ago. However, the scope of this hack appears to be much smaller, and only affecting the Google Malaysia website.
Google Malaysia did not comment on the matter when asked earlier today.
[Update #1] Google has tweeted that some users are still seeing the problem. We here at Lowyat.NET are also seeing the issue, although some are reporting that it can only be seen when using Google DNS. It also looks like Google Malaysia works properly on mobile devices.
Getting reports some users are experiencing http://t.co/uIvl6RbDzu DNS redirection. Please use http://t.co/AdkzwxVR4U in the meantime.
— Google Malaysia (@GoogleMsia) April 14, 2015
[Update #2] Google has issued an official statement about the incident:
“We’re aware that some users are having trouble connecting to google.com.my, or are being directed to a different website. Google services for the google.com.my domain are not compromised. We’ve reached out to the organization responsible for managing this domain name and hope to have the issue resolved.”
It also looks like the Google Malaysia Adwords site was also a victim of the attack. We do not know why this was made a target, but it looks like collateral damage from the hackers.
Developing….
