Saw that TIFKAT suggests that customers manually change their DNS settings to sort out website access issues:

http://helpbusiness.spark.co.nz/app/answers/detail/a_id/3701/related/1

What actually happened? Seen suggestions that it was a DNS amplification DDoS that might have been related to Spark customers clicking on phishing messages that had them download some form of malware that compromised their computers.

Spark said:

http://www.spark.co.nz/help/servicealert/mobileservicealert/

�The root cause is likely to be a handful of customers on our network whose computers are affected by malware, generating high levels of traffic destined for overseas sites.�

Looks like it�s an ongoing issue too, as per the Spark service alerts.

Has anyone seen any more detail on the incident? If this isn�t super operational, please email me off-list.

Thanks
-- 
Juha Saarinen
twitter: juhasaarinen