[dns-operations] Possible ccTLD attack

[Stephane Bortzmeyer]

On Sun, May 17, 2009 at 12:43:41PM -0400,
 Sidney Faber <sfaber at cert.org> wrote 
 a message of 18 lines which said:

> I've picked up a rumor about attacks against ccTLD's (NZ, PR, TN,
> MA, UG, EC) by a group named "Peace Corp", possibly involving SQL
> injection.  If you're aware of any issues, please let me know & I
> can put you in touch with someone working the attack.

For .MA, as well as I know (but I have no inside information), the
SQL injection attack was against a registrAR, domain.ma:

http://www.marocinfo.net/to/index.php/Sciences-et-Technologie/Google-Maroc-deface.cfm