Hackers take over Nike Web site

[InfoSec News <isn () C4I ORG>]

[ISN Note: From Attrition comes this bit of news along with the hack]

http://www.attrition.org/mirror/attrition/2000/06/21/www.nike.com/

This was not a typical defacement. This was a DNS hijacking. There is
not enough evidence to determine at what level the DNS poisoning took
place (ie local DNS or Network Solutions).

We decided to mirror this defacement because a) Nike is a high profile
company b) there was a degree of "hacking" involved whether it be
social engineering or a server compromise and c) there was actually a
political message on the defacement that had to do with the company
who's site was defaced.

Truly a rare occurance these days.


http://www.techserver.com/noframes/story/0,2294,500219236-500312244-501742874-0,00.html

The Associated Press

BEAVERTON, Ore. (June 21, 2000 3:05 p.m. EDT
http://www.nandotimes.com) - The Nike corporate Web site was taken
over Wednesday by hackers who replaced the content with a message
about the "inequality" of the global economy.

A Web page posted by a group calling itself "S-11" appeared when the
www.nike.com address was requested.

The page says that "global justice is coming - prepare now," and calls
for action at the World Economic Forum 2000 on Sept. 11-13 in
Melbourne, Australia.

The top of one page on the site contains the words "shut down the
world economic forum."

The 2000 Olympic Games are set to begin Sept. 16 in nearby Sydney,
Australia, and Nike is a major corporate sponsor.

Nike computer technicians were regaining control of the site,
spokesman Vada Manager said Wednesday afternoon.

"We're backtracking now to find out how this happened," Manager said.

Nike has faced repeated criticism by student and labor rights groups
for years over conditions at contract factories overseas, especially
in Asia and Latin America.

The Beaverton-based athletic shoe and clothing company has worked to
improve conditions, hiring monitors and creating executive positions
to deal exclusively with labor rights.

ISN is hosted by SecurityFocus.com
---
To unsubscribe email LISTSERV () SecurityFocus com with a message body of
"SIGNOFF ISN".