Yulia Tymoshenko’s website has been hacked

The official website of Yulia Tymoshenko was hacked. The traces of the deface were promptly eliminated, but Google remembers everything, no longer remembers, there is a screen cache.



The attack happened about an hour ago.
')
UPD Information has appeared:


“It was not the site that was hacked, but the routing table of one of the Internet providers.
The fact of a malicious violation of the rules for the use of IP address space and BGP routing by the owners of the autonomous system AS50398.

aut-num: AS50398
as-name: KARUA-AS
descr: Karavan Ltd.
org: ORG-KL64-RIPE
import: from AS8287 accept ANY
export: to AS8287 announce AS-KARAVAN
import: from AS6695 accept ANY
export: to AS6695 announce AS-KARAVAN
import: from AS5577 accept ANY
export: to AS5577 announce AS-KARAVAN
admin-c: PL4929-RIPE
tech-c: RM9560-RIPE
mnt-by: RIPE-NCC-END-MNT
mnt-by: KARAVAN-MNT
mnt-routes: KARAVAN-MNT
changed: lopez@ispkaravan.net 20100123
source: RIPE

organization: ORG-KL64-RIPE
org-name: Karavan Ltd.
org-type: OTHER
descr: Karavan Ltd.
address: Calle Santa Cruz
address: Santo Dominigo
phone: +1.8092402195
e-mail: manuele@ispkaravan.net
admin-c: PL4929-RIPE
tech-c: RM9560-RIPE
mnt-ref: KARAVAN-MNT
mnt-by: KARAVAN-MNT
changed: lopez@ispkaravan.net 20091214
source: RIPE

person: Pedro Lopez
address: Calle Santa Cruz
address: Santo Dominigo
e-mail: lopez@ispkaravan.net
phone: +1.8092402195
nic-hdl: PL4929-RIPE
mnt-by: KARAVAN-MNT
changed: lopez@ispkaravan.net 20091214
source: RIPE

person: Ricardo Manuele
address: Calle Santa Cruz
address: Santo Dominigo
e-mail: manuele@ispkaravan.net
phone: +1.8092402195
nic-hdl: RM9560-RIPE
mnt-by: KARAVAN-MNT
changed: lopez@ispkaravan.net 20091214
source: RIPE

He deliberately announced a block of addresses not belonging to him from under a non-autonomous system. Its internet provider is AS5577 despite its routing policy described in RIPE:

aut-num: AS5577
as-name: ROOT
descr: root eSolutions
...
import: from AS50398 accept AS-KARAVAN
...

as-set: AS-KARAVAN
descr: ITSP Karavan AS-SET
members: AS50398
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
only AS50398, 6849 is missing here
org: ORG-KL64-RIPE
admin-c: PL4929-RIPE
tech-c: RM9560-RIPE
mnt-by: KARAVAN-MNT
source: RIPE # Filtered

I took this route and distributed it further on the Internet.

Accordingly, it is necessary to ask questions to representatives of ISP Caravan as well as their upstream:

organization: ORG-re8-RIPE
org-name: root eSolutions
org-type: LIR
address: root SA
Andy BIERLAIR
35, rue John F. Kennedy
7327 Steinsel
Luxembourg
phone: +35220500
fax-no: +35220500500
admin-c: AB99-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ROOT-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

person: Andy BIERLAIR
address: root SA
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
nic-hdl: AB99-RIPE
mnt-by: ROOT-MNT
remarks: