Malaysia Airlines Site Hacked By Lizard Squad
Context & Ripple Effects
The Malaysia Airlines defacement lands one month after Lizard Squad crippled Xbox Live and PlayStation Network over the holidays, when the group was best known for taking down gaming networks rather than corporate websites.
It also comes days after Krebs on Security reported that the group's paid DDoS tool, Lizard Stresser, runs largely on thousands of hijacked home routers — meaning the same botnet infrastructure behind the gaming outages is now pointed at an airline's public-facing domain.
First-order effects
- Malaysia Airlines has to take down or scrub its compromised website while managing customer trust in a brand already under intense scrutiny.
- Lizard Squad converts the incident into publicity for Lizard Stresser, whose commercial DDoS-for-hire model depends on exactly this kind of headline attention.
Second-order effects
- High-profile consumer brands like Lenovo — whose own site was hit weeks later in what looked like the same group's work — face pressure to audit their web infrastructure against a crew that treats defacement as marketing.
- The group's own operational security becomes a story: shortly before this attack, LizardStresser itself was breached and its customer database made public, exposing the paying users of the service.
Third-order effects
- If defacements of national carriers and search engines keep recurring — Google Malaysia's site was later hit by a DNS redirect attack — Malaysian web properties face a structural problem of DNS and hosting hygiene rather than isolated incidents.
- Consumer routers as attack infrastructure moves from an obscure security concern to a systemic one, since the scale of these attacks traces back to unpatched home devices at ISP scale.
The trend: Notoriety-driven hacking crews are evolving from one-off DDoS stunts into monetized attack services built on hijacked consumer hardware, with corporate websites replacing gaming networks as the preferred stage.