April 15th is generally a good day for most Sri Lankans: post Avurudu, we’re usually working off the kiribath and lazily wondering whether to check the office mail or not. As it turns out, some people had other things to do.
On the 15th and the following day, Anonymous hackers launched #OpSrILanka – a kind-of-global hack on a number of government and industrial websites in Sri Lanka in a vendetta against supposed Tamil genocide. Judging by the data trail, teams Anon Ghost, Indian Haxors Team, Indian Cyber Rakshak, RedCult (Lebanon), Muslim Cyber Corporation (Indonesia), Pakistan Haxors Crew, Ip Sova Crew(Malaysia), Indonesian Red Code Team, Elite Cyber Army (Philippines), Afghan Cyber Army, Indian Cyber Devils, Sec~Team-7 and Sec_dark took part in the operation. A number of individual hackers are also creidted as being part of the operation. Shadowforce, which seems to be the net manager of the Op, may be a team or an individual – we’ve yet to find out.
These attacks are seen as a way of raising awareness against the Sri Lankan government. They’re a bit late to the party, given that the war ended in 2009. That apparently didn’t stop them from hitting a lot of top-level websites, like nic.lk, gov.lk and quite a few websites belonging to corporations around Sri Lanka. AnonGhost, the Afghan Cyber Army and the Indian Haxors seem to be particularly active. Based on their publications, they’ve tried to attack almost 130 sites. Initially they seem to have tried to deface the sites, but failing that, they’ve tried to DDOS (Distributed Denial of Service) them.
Sri Lanka’s primary infrastructure seems to have stood up remarkably well to this. While a few sites were defaced, sporting hacker slogans from the various teams involved, some seem to have completely shrugged off the attack (hats off to you, network admins). It looks like the hackers expected most site maintenance staff to be offline for the Sinhala and Tamil New Year, but based on the rapid recovery we’ve been seeing over the past 30-odd hours, relatively little damage has actually been done. As of the time of writing, most of the sites that blinked at the time the attack are also back up and running.
Here’s a list of the 129 sites the hackers targeted. Note that at the time of writing, all the government sites and most of the better-maintained sites seem to be operational:
http://mohe.gov.lk/
http://www.livestock.gov.lk/site/
http://www.houseconmin.gov.lk/
http://zone-h.org/mirror/id/22206379
http://zone-hc.com/archive/mirror/3814b0a_livestock.gov.lk_mirror_.html
http://amsofttechno.com/
http://www.slpa.lk/
http://www.cicagri.com
http://microenterprises.lk/
http://complain.lk/
http://www.thirumanam.lk/
http://www.srilankabadminton.lk/
http://www.wildsrilanka.lk/
http://www.mytutor.lk/
http://lankamoto.com/
http://libertymotors.lk/
http://mytools.lk/
http://mytoolsint.com/
http://kandyriversidevilla.com/
http://ralhum.com/
http://nutrition.lk/
http://universalsoundsl.com/
http://weddingtimesl.com/
http://tillyonline.com
http://syncrosightproductions.com
http://sinsationcolombo.com/
http://admin.nutrition.lk/
http://slii.lk/
http://sunchoice.lk/
http://vallibelfinance.com/
http://victoryshipping.lk/
http://dsl.lk/
http://cambridge.lk/
http://abtravels.lk
http://anew.lk/
http://appleholidays.lk/
http://galleria.lk/
http://jewelexchange.lk/
http://bestdgc.com/
http://biz-machines.com/
http://businessmachines.lk/
http://colombiagoc.com/
http://demasu.com/
http://dslent.com
http://gadadessa.com/
http://gethsemanenet.org/
/
http://interlinkms.com/
http://itmartx.com/
http://jesussaves.lk/
http://jesussaveslk.org/
http://kannangara.info/
http://www.easyjobs.lk/
http://www.emergingmedia.lk/
http://www.helaasiriya.lk/
http://www.imperial.lk/
http://www.pintarisolutions.com
http://www.funtimesrilanka.com
http://www.cyber-illusions.net
http://www.cattleyavilla.com
http://www.argylex.com
http://www.syncrosightproductions.com
http://www.tillyonline.com
http://www.universalsoundsl.com
http://jobbook.lk/
http://220.247.225.201
http://www.srilankan.com/
http://nic.lk
http://www.cbsl.gov.lk
http://www.livestock.gov.lk
http://www.gov.lk
http://www.railway.gov.lk
http://www.pmoffice.gov.lk
http://www.slasscom.lk
What was SLCert doing all this time ? sleeping or eating kokis ?
No idea. CERT’s role seems to be more response-based than active defense.
Kokis. Some Kokis would have been nice.
but i think not only 129 sites but also 500+ sites by Defencing and Making DDOS attacks
yes but late news 🙁 already someone posted it on thehackerspoint.com
// Someone // i think it is u ??
Anonymous Hackers ? More like Indian script kiddies !!! These guys should actually start a fight against Tamil Nadu asking for more public toilets so that people don’t shit on roads and public places 🙂
Should call them the toilet army than calling them Anonymous 😉
Good One !!!! Indian Road Shitters !!!!!ha ha ha
very bad
we are social worker.to help peoples. don’t hack our web .thank
please dont hacy our web.thank