The NYT reports same, via its temporary alternate news feed, http://news.nytco.com/

Also that they broke into the domain, and that the same group may be trying to attack Twitter:

Times Web Site Affected by External Hacking Attack

By CHRISTINE HAUGHNEY and NICOLE PERLROTH

August 27, 2013

The New York Times Web site was unavailable to readers Tuesday afternoon after an online attack on the company’s domain name registrar, Melbourne IT. The attack also forced employees of The Times to stop sending out sensitive e-mails.

Marc Frons, chief information officer for The New York Times Company, issued a statement at 4:20 p.m. warning employees that the disruption — which appeared to still be affecting the Web site well into the evening — was “the result of a malicious external attack.” He advised employees to “be careful when sending e-mail communications until this situation is resolved.”

In an interview, Mr. Frons said the attack was carried out by a group known as “the Syrian Electronic Army or someone trying very hard to be them.” The Web site first went down after 3 p.m.; after service was restored, the hackers quickly disrupted the site again. Shortly after 6 p.m., Mr. Frons said that “we believe that we are on the road to fixing the problem.”

Several people on Twitter also said they believed the attack was the work of the Syrian Electronic Army, a group of hackers who support President Bashar al-Assad of Syria. Matt Johansen, head of the Threat Research Center at White Hat Security, posted on Twitter that he was directed to a Syrian Web domain when he tried to access The Times’s Web site.

The S.E.A. first emerged in May 2011, during the first Syrian uprisings, when they started attacking a wide array of media outlets and nonprofits and spamming popular Facebook pages like President Obama’s and Oprah Winfrey’s with pro-Assad comments. Their goal, they said, was to offer a pro-government counternarrative to media coverage of Syria.

The group has consistently denied ties to the government of Mr. Assad and has said it does not target Syrian dissidents, but security researchers and Syrian rebels are not convinced. They say the group is the outward-facing campaign of a much quieter surveillance campaign targeting Syrian dissidents and are quick to point out that Mr. Assad once referred to the S.E.A. as “a real army in a virtual reality.”

Until now, The Times has been spared from being hacked by the S.E.A., which has successfully disrupted the Web operations of news organizations like The Financial Times. On Aug. 15, the group attacked The Washington Post’s Web site through a third-party service provided by a company called Outbrain. At the time, the S.E.A. also tried to hack CNN. Some information security experts said the group also appeared to be ready to attack The New York Times Web site that day. (Just a day earlier, on Aug. 14, The Times’s Web site was down for several hours. The Times cited technical problems and said there was no indication the site was hacked.)

In a post on Twitter Tuesday afternoon, the S.E.A. also said it had hacked the administrative contact information for Twitter’s domain name registry records. According to the Whois.com lookup service, the Syrian Electronic Army was listed on the entries for Twitter’s administrative name, technical name and e-mail address.

Jim Prosser, a Twitter spokesman, said the social network was “looking into” the Syrian Electronic Army’s claim that it had taken control of a Twitter domain.

Mr. Frons said the attacks Tuesday on Twitter and The New York Times required significantly more skill than the string of S.E.A. attacks on media outlets earlier this year, when the group attacked Twitter accounts for dozens of outlets ranging from The Guardian to The Associated Press. Those attacks caused the stock market to plunge after the group planted false tales of explosions at the White House.

“In terms of the sophistication of the attack, this is a big deal,” said Mr. Frons. “It’s sort of like breaking into the local savings and loan versus breaking into Fort Knox. A domain registrar should have extremely tight security because they are holding the security to hundreds if not thousands of Web sites.”

An April 29 piece on the Syrian Electronic Army itself at The Guardian:

Syrian Electronic Army: Assad's cyber warriors

Phishing attack is latest by pro-Assad hackers operating out of Dubai, who target sites with views opposed to their own