Cartoon Network websites in at least 16 countries/regions have been hacked over the weekend to play videos of Arabic memes and a Brazilian male stripper, among other things.
The hack has been perpetrated by two Brazilian hackers, whose names we will not be sharing in this article, as most hackers want media attention and we don't wish to encourage similar behavior.
The two have claimed that they used a vulnerability to gain access to the website management platform used by Cartoon Network, where they switched video sources to files of their choosing.
In most cases, they replaced videos of popular cartoon shows with videos of Arabic memes, Brazilian hip-hop songs, slideshows of various memes and funny images, and videos of Ricardo Milos, a well-known Brazilian male stripper who has become an internet meme.
The hack was carried out on Friday, April 25, and the defaced videos remained on Cartoon Network websites for three days, until April 28, when the Turner-owned TV channel was notified of the incident.
Currently, the defaced Cartoon Network videos have been removed, but all other videos also fail to load, suggesting ongoing maintenance and repairs.
According to user reports from over the weekend, Cartoon Network portals in the UK, Hungary, Romania, Germany, Russia, Poland, the Czech Republic, Denmark, Norway, the Netherlands, Italy, Turkey, Mexico, Brazil, the Africa region, and the Arabic region have had videos replaced by the two hackers.
Contacted by ZDNet, Cartoon Network acknowledged the incident as well.
"On Sunday morning we were alerted that our Cartoon Network and other kids' websites had been compromised with video content that was not ours," a spokesperson for Turner, Cartoon Network's parent company, said. "We took immediate action and, as a result of this, either whole websites or the video players on our sites have been temporarily deactivated. Our teams are working hard to relaunch the sites and video players at the earliest opportunity, while ensuring the protection of our audiences."
The hackers have also claimed they had access to the Cartoon Network Asia and Pacific regional website, as well, but this was never confirmed.
It is not uncommon to see official websites defaced by hackers. The latest major site to suffer such a fate was the Wall Street Journal, defaced last year by PewDiePie fans.
Article updated with comments from Turner spokesperson.
More cybersecurity coverage:
- Security researcher creates new backdoor inspired by leaked NSA malware
- Recent Oracle WebLogic zero-day used to infect servers with ransomware
- New Oracle WebLogic zero-day discovered in the wild
- GoDaddy takes down 15,000 subdomains used for online scams
- An inside look at how credential stuffing operations work
- Dark web crime markets targeted by recurring DDoS attacks
- Vulnerabilities discovered in industrial equipment increased 30% in 2018 TechRepublic
- Amazon workers eavesdrop on your talks with Alexa CNET