An image of Thai Airways logo with a Hacked text.

The official website of Thai Airways is hacked by Pakistani hacker claiming to be “Hunter butt”. The hacker also managed to upload a deface page on 23 subdomains of the Thai Airways website.

According to the subdomains defaced, Thair Airways SMTP mail server, DNS Nameservers, Payment, and booking systems had been hacked. The breached servers appear to be very sensitive, that may have users data on them.

The hacked uploaded his deface page with the file name “index.html”, with an animated emoji holding a Pakistani flag message stating the following:-

A screenshot of Thai Airways subdomain hacked and defaced by a Pakistani hacker named Hunter Butt.
A screenshot of Thai Airways subdomain hacked and defaced by a Pakistani hacker named Hunter Butt.

The subdomains that got hacked are:-

  1. smtp.thaiairways.com/index.html
  2. www.thaishop.thaiairways.com/index.html
  3. webmail.thaiairways.com/index.html
  4. devsip.thaiairways.com/index.html
  5. www.book.thaiairways.com/index.html
  6. devmyidtravel.thaiairways.com/index.html
  7. ww.thaiairways.com/index.html
  8. mobile.thaiairways.com/index.html
  9. tgmdmcs.thaiairways.com/index.html
  10. epayment.thaiairways.com/index.html
  11. devtgmail.thaiairways.com/index.html
  12. smpbkk06.thaiairways.com/index.html
  13. smpbkk04.thaiairways.com/index.html
  14. smpbkk05.thaiairways.com/index.html
  15. smpbkk03.thaiairways.com/index.html
  16. ns.thaiairways.com/index.html
  17. thaispaces.thaiairways.com/index.html
  18. login.thaiairways.com/index.html
  19. imap.thaiairways.com/index.html
  20. how2.thaiairways.com/index.html
  21. mail.thaiairways.com/index.html
  22. thaisphere.thaispace.thaiairways.com/index.html
  23. ns1.thaiairways.com/index.html

An archived page of the defacement can be found here. The hacker also archived all Thai Airways breached websites on Zone-H.

As the story is still developing, we are to update this news article as soon as new information is received regarding the Thai Airways website getting breached.

Update:- The website is now restored and the hackers page has been removed.


LEAVE A REPLY

Please enter your comment!
Please enter your name here