Sophos formally reminded the major websites to always be vigilant against possible security risks

Just after the world's largest Chinese search engine company Baidu was attacked at night by hackers on 11th, Sophos (Guardian) formally reminded major websites to be alert to potential security risks. Baidu site in the attack time period, its home page has been maliciously tampered with as marked "Iranian network Army (Iranian Cyber Army)" picture. Earlier on January 12, users visiting Baidu's website found that their home page had been tampered with as a poster labeled "The station has been attacked by the Iranian network Army (Iranian Cyber Army)" and the Iranian flag. And just in the past December 09, the International microblogging site Twitter has been the same attack, and also posted a similar banner message. Seriously affected the tens of millions of micro-blogging users of the site's normal use. "In China, the search engine service provided by Baidu has a broad user base." Millions of of users visit their websites every day. So this makes it a key target for hackers. Anyone who wants to try to undermine their safety is likely to have a devastating effect, "said Graham Cluley, a senior technical advisor from Sophos," but the Chinese netizens are fortunate that the hackers did not take the opportunity to attack the user's computer, Instead, just post some slogans. Still, we have to ask how could such a bad attack happen? "It is speculated that the attack was not targeted at Baidu's own server, but its DNS server in the record content has been tampered with." This is the same way that the Twitter site was attacked last month. "DNS records work very much like the phone book in our daily lives, and the primary role is to parse the Web site domain names (such as baidu.com) that make it easier for people to understand the memory," Cluley says. Information. This means that when users type baidu.com directly in the browser, they can see the site is not under the control of Baidu company. If the Third-party Web site contains virus programs, millions of computers will be infected and stolen from personal information. Similar attacks remind every Internet user that every Web page you visit must be scanned for security, which is known as a legitimate Web site. ”