Facebook By S 2014

Today rlier morning, once again Pro alleged s group "Syrian Electronic Army" have came to action, and this time once again they have big target. Look's like S Gifted Something very Big to Mark Zuckerberg.Syrian Electronic Army posted a tweet with screenshots which seems they had hijacked the Facebook's domain and changed the Registrant details and name server.


In a Tweet Wednesday evening, the s wished Mark Zuckerberg a happy birthday, along with an extra note: "Happy Birthday Mark! Facebook.com owned by #S," theTweetrd.




The domain information below is what showed as of 6:35 EST. The s have appred to modify the three primary registrant contacts, though the domain name servers do not appr to have been modified.
The of the domain contact details below was a screenshot taken byCyber Elite:

How s take control of Facebook Domain?The next tweet confirmed that the group took control of the MarkMonitor website - a website that manages Top Level domains including Facebook, Google, Yahoo and more.

The group managed to gain the admin panel of the Mark Monitor website that allowed them to access records of all domains hosted.

After lrning about the brch, the Markmonitor immediately took down the Management portaland posted this alleged screenshot:

The company's registrar, MarkMonitor, is steward to many of the Internet's biggest brands and does have strong security policies and options in place. It's likely that while the attackers may have accessed an admin account, the ability to change the DNS records may require further autheniion, but that is unclr. However, the s did make a follow-up post to Twitter saying they did change the namesevers. "We changed the nameservers, but it's taking too much time..," theTweetsaid.
It seems like facebook is lucky this time. Even though the group changed the nameserver of the domain, it didn't reflect. It's fail attempt to compromise domain's DNS records. If they had managed to change the records successfully, it could have affected millions of facebook users.
Few other screenshots provided by Syrian Electronic Army shows that the group had access to Google, Yahoo and Amazon domains.