This evening someone got into my partner's netsol account and pointed linux.org DNS to their own cloudflare account. The production env (web / db) wasn't touched. DNS was simply pointing to another box.
Lesson learned - MFA ("Multi Factor Authentication") all the things. We hope to be back soon. [...]
[...]
Mainly I wanted to drive home that the actual linux.org servers were untouched and no data was leaked. Props to these guys for digging out the password to my partner's netsol acct, but all of our users' data is safe.
[^] # Re: web piraté par le DNS lui meme piraté par le web
Posté par Faya . En réponse au journal Le domaine linux.org détourné. Évalué à 7.
Anti-référence : Ils ont simplement utilisé le compte NetworkSolutions d'un admin du site pour changer le pointage des DNS
https://www.reddit.com/r/linux/comments/a3vy3n/linuxorg_goings_on/