A few hours ago, visitors of the official Google Kenya domain (google.co.ke) were met with a page that displayed the following message: “Hacked by TiGER-M@TE, Bangladeshi hacker.”Currently, Google Kenya appears to be working properly, but I’ve managed to find mirrors of the defacement page.
The most likely scenario is that Google itself hasn’t been breached. Instead, the hacker compromised some DNS servers, probably the ones of the .ke domain registrar, and altered them to make sure google.co.ke visitors would be redirected to his defacement page.
In addition to Google.co.ke, the hacker also defaced the Kenya domains of Dell, Skype, HP, Youtube, LinkedIn, Bing, Microsoft and others.
Back in February, TiGER-M@TE utilized the same method to deface the Malawi sites of Google, Coca Cola, Yahoo, Fanta and Hotmail.
The same technique was used in the past months by other hackers to deface Google Morocco, Google Turkmenistan, Google Saint Helena and other Google sites.