Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: .QA (Qatar) TLD Compromised - SANS Internet Storm Center SANS ISC InfoSec Forums

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
.QA (Qatar) TLD Compromised

According to twitter and messages we received directly, it appears that the .QA (Qatar) TLD was compromised last night by the Syrian Electronic Army. Affected domains appear to be returning back to normal at this point.

Google still returns some results for the compromissed pages, including it's own .qa site:

Links to twitter messages about the compromisse (follow at your own risk) : hxxp://


Johannes B. Ullrich, Ph.D.
SANS Technology Institute

Defending Web Applications Security Essentials - Secure DevOps Summit & Training 2018


3349 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!