The Syrian Electronic Army claims it's taken over Twitter's domain registration. Indeed, several public Whois listings show firstname.lastname@example.org as the contact information for Twitter.com. Many Twitter users say they're experiencing problems with the service. We've reached out to Twitter, and the company responded that they're "looking into it."
Here's the tweet that alerted the world that something was odd:
— SyrianElectronicArmy (@Official_SEA16) August 27, 2013
Earlier today, SEA (or someone) took over the NYTimes' domain.
The DNS registries don't universally show the odd registration information. These databases update at different times so it makes sense that they might be out of step with each other on a recent change. Here's what the changed domain info looks like. Oddly, some of the original DNS info hasn't changed.
Several of our staff are seeing problems with Twitter, though, I'm not just yet.
Here's what Adam's seeing:
Ashley's Twitter looks like this:
This hack would be the latest hijinks by the anonymous hackers who have until now been best known for taking over the Twitter accounts of well-known and well-positioned entities.
Update 10:55pm GMT:
Both the NYTimes.com and Twitter.com show registration through the same registration service.
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.melbourneit.com
Creation Date: 18-JAN-1994
Updated Date: 27-AUG-2013
Expiration Date: 19-JAN-2014
Update 10:58pm GMT:
Looks like they've taken down Twitter.co.uk:
Update 11:32pm GMT:
Twitter's domain registration whois information appears to be back to normal Domain Tools—the service SEA linked to—and GODaddy. The GoDaddy registration says the last update was back in April, so it doesn't reflect today's changes. Don't take that to mean that we're out of the fire just yet...