Lenovo.com hacked by Lizard Squad, website down for 9+ hours
At around 4.00 pm ET, Lizard Squad allegedly hacked and defaced the Lenovo website.
https://twitter.com/LizardCircle/status/570473717240864768
So we've done Google Vietnam and Lenovo, what's next?
— Lizard Squad (@LizardUniverse) February 25, 2015
Users visiting Lenovo.com were shown a slideshow of some rambling teenagers and a background song “Breaking Free” from High School Musical.
We're breaking free! Soarin', flyin', there's not a star in heaven that we can't reach!
— Lizard Squad (@LizardUniverse) February 25, 2015
https://twitter.com/JZdziarski/status/570697255201734656
After around 15 minutes, Lenovo security team seemed to have gained back partial control of the website but it is not fully operational. The background music was being heard by visitors even later in the day, while the defaced page, possibly cached version, was seen intermittently by some visitors.
At around 5.30 pm ET, Lenovo got back the control and visitors were shown the below mentioned message :
The Lenovo Web site is currently unavailable but will return soon. To place or check on the status of an order or for any other enquiries, please contact a Lenovo representative during regular business hours.
The hackers, Lizard Squad put up a message mocking Lenovo in the source code which said, “the new and improved rebranded Lenovo website featuring Ryan King and Rory Andrew Godfrey.”
Both Ryan and Rory are allegedly members of the Lizard Squad. From the first evaluation, the hack seems to a DNS poisoning or spoofing where the hackers hijacked Lenovo’s domain record and redirect the Lenovo.com url to a new server under their control and serving their webpage. Therefore it doesnt seem likely that Lizard Squad accessed Lenovo servers however the with the site still being down, it is hard to come to any conclusion.
