Comcast XFINITY → Comcast hacked?

I'm getting a funny message on comcast.net:

KRYOGENIKS EBK and DEFIANT RoXed COMCAST
sHouTz To VIRUS Warlock elul21 coll1er seven and Slacker

Page source says it comes from:
"http://www.freewebs.com/kryogeniks911/"

mady

Same here on the west coast, started around 8:00pm pt here

I'm getting a "Page Under Construction" message at the Portal site mady.

I see the real site at comcast.net, but a NetSol template page at www.comcast.net. A whois yields:

quote:

---

Registrant:
Comcast Corporation
1500 Market Street
Philadelphia, PA 19102
US

Domain Name: COMCAST.NET

------------------------------------------------------------------------
Promote your business to millions of viewers for only $1 a month
Learn how you can get an Enhanced Business Listing here for your domain name.
Learn more at »www.NetworkSolutions.com/
------------------------------------------------------------------------

Administrative Contact:
Domain Registrations, Comcast kryogenicsdefiant@gmail.com
Defiant still raping 2k8 ebk
69 dick tard lane
dildo room
PHILADELPHIA, PA 19103
US
4206661870 fax: 6664200187

Technical Contact:
Comcast Corporation kryogenicsdefiant@gmail.com
1500 Market Street
Philadelphia, PA 19102
US
215-320-8774 fax: 215-564-0132

Record expires on 24-Sep-2008.
Record created on 25-Sep-1997.
Database last updated on 28-May-2008 23:48:08 EDT.

Domain servers in listed order:

NS21.WORLDNIC.COM 205.178.190.11
NS22.WORLDNIC.COM 205.178.144.11

---

and I'm getting a notice from Network Solutions-site under construction-- with foreign languages in a box.. Can't get into the Help or community forums... Webmail was accessed..

ciao, bj

OH yeah.. Someone definitely breached Comcast.net. This is what I see

Comcast.net is down 0o -_-"

Seems more like a breach of Network Solutions (or Comcast's NetSol credentials) than Comcast itself and redirecting the domain.

I'm also seeing the Kryogeniks message...sure looks like they've been hacked....

I just got off the phone with Comcast to let them know. We'll see what happens.

mady

oh yeah... What a big mess this is . They even rerouted thier IP address:

C:\Documents and Settings>tracert www.comcast.net

Tracing route to www.comcast.net [205.178.189.131]
over a maximum of 30 hops:

1 2 ms 1 ms 1 ms 192.168.15.1
2 * * * Request timed out.
3 8 ms 12 ms 9 ms ge-1-37-ur01.chicago201.il.chicago.comcast.net [68.86.115.21]
4 9 ms 10 ms 9 ms te-8-3-ur02.chicago201.il.chicago.comcast.net [68.87.230.186]
5 7 ms 11 ms 9 ms te-3-1-ur01.chicago302.il.chicago.comcast.net [68.87.230.181]
6 8 ms 11 ms 8 ms te-8-3-ur02.chicago302.il.chicago.comcast.net [68.87.230.178]
7 8 ms * 24 ms te-3-1-ar01.chartford.ct.hartford.comcast.net [68.86.90.58]
8 13 ms 8 ms 9 ms pos-0-3-0-0-cr01.chicago.il.ibone.comcast.net [68.86.90.57]
9 45 ms 48 ms 55 ms pos-0-14-0-0-cr01.newyork.ny.ibone.comcast.net [68.86.85.105]
10 53 ms 46 ms 46 ms 204.70.144.1
11 55 ms 43 ms 45 ms cr1-pos-0-7-3-1.newyork.savvis.net [204.70.195.93]
12 50 ms 50 ms 50 ms cr1-tengig-0-15-0-0.Washington.savvis.net [204.70.196.101]
13 47 ms 50 ms 51 ms hr1-tengig9-1.sterling2dc2.savvis.net [204.70.197.74]
14 48 ms 47 ms 48 ms bhr1-gigabitethernet14-1.sterlingdc2.savvis.net [204.70.199.9
15 49 ms 51 ms 48 ms csr21-ve242.Sterlingdc2.savvis.net [216.33.98.11]
16 50 ms 49 ms 50 ms csr22-ve241.Sterlingdc2.savvis.net [216.33.98.19]
17 * *

Looks German to me. At first I thought my computer was hijaacked

Hey BJ, nice ta see ya here !

Yep. My direct link to the Help Forums is kaput now as well...

I'm goin' ta bed !

KRYOGENIKS Defiant and EBK RoXed COMCAST
sHouTz To VIRUS Warlock elul21 coll1er seven

Here too, Eastern Washington reporting in.

Same here. Hacked at 2355hrs.

yea, on my notebook, i get under construction, but on my deskto i get the hacked message. This isn't good.

Good find! It looks like Comcast's Network Solutions account actually got hacked.

Same thing here in Portland, Oregon. Notice the problem arount 8:00PM

Back at ya, EG.. And here I was all set to blame you and trying to get that link that you posted to work..

ciao, bj

Omg becareful trying to access your email accounts.

Damn what did Comcast ever do to Germany? maybe it has something to do with BT :P anyways i'm LOL'ing wonder how quicky it will be fixed

Gee guys, you make me feel invisible.

mady

You could never be invisible mady !!

hax0rzd!

Getting the Network Solutions page...

I'm getting the hacked message as well.

Same thing happening here in the middle of nowhere in the US. I heard if you call they just hang up!

Best topic EVA... DIGG OMGZ111!

I guess the BMW hit a pole!

WTF!!!! I have automatic UN+PW for my email account setup on Outlook. Who knows if they got my account info and is using it...

They didn't hang up on me. In fact, I had a very nice conversation with someone in the Canadian call center.

mady

same thing in chicago... Gmail backup FTW!

Having the same issue here in the Chicagoland Area.

The DNS seems to be pointing to a non comcast address. Looks like someone poisoned a nameserver on the comcast network somehow. Notice the trace results below.