Last time when Google.co.ke was also hacked (less than 3 months ago), it was a similar case. They found a way to update the nameserver records for the domain name and point it to their servers.


On Sat, Sep 21, 2013 at 5:54 PM, Adam Nelson <adam@varud.com> wrote:
Even on the Google DNS servers they've changed the nameserver ...  This is similar to the nytimes.com attack but much more significant since Google is so much more serious than nytimes about security...

➜  ~  dig @8.8.8.8 ns www.google.co.ke

; <<>> DiG 9.8.5-P1 <<>> @8.8.8.8 ns www.google.co.ke
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8053
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:

;; AUTHORITY SECTION:
google.co.ke. 1567 IN SOA b0x2.madleets.com. admin.google.co.ke. 2013092101 10800 3600 604800 86400

;; Query time: 189 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Sep 21 17:57:56 EAT 2013
;; MSG SIZE  rcvd: 93

➜  ~

--
Kili.io - OpenStack for Africa: kili.io


On Sat, Sep 21, 2013 at 5:51 PM, Dennis Kioko <dmbuvi@gmail.com> wrote:
Anyone not on JTL seeing the same? 


On Saturday, 21 September 2013, Adam Nelson wrote:
Problem for me too on jtl

Sent from my iPhone

On Sep 21, 2013, at 5:26 PM, Amarjit Labhuram <amarjit.labhuram@gmail.com> wrote:

I am using JTL

On 21 Sep 2013 17:26, "Dennis Kioko" <dmbuvi@gmail.com> wrote:
Fine on my end, what ISP are you guys on? 

On Saturday, 21 September 2013, Amarjit Labhuram wrote:

Yeah....just seen it

On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com> wrote:
Any one else right now 1719hrs Saturday 21st September

--
Lusiola Brian
|3 R 1 /-\ |\|


_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke


--
with Regards:

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke
_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke


--
with Regards:

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke


_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke