After taking down the online networks of Xbox Live and PlayStation for a number of days during the holidays, the Lizard Squad started spreading advertisements for their a’la carte DDoS service that could be rented out by the hour, day, or week depending on how much cash you had to drop on a for-hire botnet.
Lizard Squad then made the announcement that they had commandeered the front page of the Malaysia Airlines’ website, donning it with a cheeky message that read “404 Plane Not Found”, followed by an image of their famous pipe-smoking reptilian mascot.
The airline is already in dire straits following the loss of flight MH370 in March of last year, as ticket sales have plummeted and layoffs within the ranks nearly constant. Now to have a couple of hacker punks using their name just to up their own reputation seems to be just another nail in the coffin for the flailing company.
Lizard Squad also says they obtained a cache of usernames and passwords for Malaysia customers during the website defacement, according to a Twitter post released yesterday.
They still have yet to make good on the promise of making the database open to the public, though the company was quick to hit back, reassuring users that their data was safe and their servers showed no signs of forced entry or file loss.
“Malaysia Airlines confirms that its Domain Name System (DNS) has been compromised whereby users are re-directed to a hacker website when the URL www.malaysiaairlines.com is keyed in.
At this stage, Malaysia Airlines’ web servers are intact. The airline has resolved the issue with its service provider and the system is expected to be fully recovered within 22 hours.
The matter has also been immediately reported to CyberSecurity Malaysia and the Ministry of Transport.”
As it’s believed with the Xbox and Playstation campaigns, it’s likely that Lizard Squad isn’t so much looking for the weakest targets to exploit, but rather any that wield them the most publicity and ability to go viral. Both Xbox Live and Playstation Networks would become juicy targets over the holidays, as millions of new Christmas gamers would be flooding the network, only to find it had been taken down by the mysterious group.
Because much of their profit motive relies on showing off their capabilities to other script kiddies who might want to lease out their tools for their own nefarious needs, the organization needs to be showing off a constant string of attacks which will uphold their high profile status in the news.
The more success stories they post, the more people sign up for their service. Of course, this is the same service that was hacked just a week ago, and all its users email accounts and financial data leaked thanks to the work of a rival group.
But, as they say; all publicity is good publicity, and even if everyone hates you, you’re still getting business off the bad press.