Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Security > Incidents

February 9th, 2010, 16:02 GMT · By

Leading Indian IT Provider Has Its Domain Name Hijacked

SHARE:

Adjust text size:


Tata Consultancy Services' website put up for sale by hackers
Enlarge picture
Unidentified hackers were able to hijack the domain name of Tata Consultancy Services (TCS), the largest IT and outsourcing provider in India. The DNS servers were apparently altered in order to redirect the domain to a different server.

The attack happened last Sunday, when www.tcs.com displayed a message reading, "This domain name is for sale. Please contact us for further informations [sic.]." The contact e-mail address left by the attacker was abed_uk@hotmail.com and the message was repeated in French.

According to India's The Economic Times, the domain was hijacked for almost three hours and company officials cited DNS problems. "The TCS website www.tcs.com was disrupted. Subsequently, it has been restored and is functioning fine. None of the servers were compromised. Initial investigation reveals a DNS redirection at the domain name registrar’s end. Further investigations are on," a spokesperson commented for the newspaper.

The DNS provider for the tcs.com domain name is Network Solutions, one of the largest domain name registrars in the world. Back in January, the company announced that a remote file inclusion (RFI) vulnerability was used to compromise some of its UNIX servers, leading to the defacement of hundreds of websites. However, it is unclear if either a vulnerability or a set of stolen credentials were used in this attack.

Similar attacks affected companies such as Twitter and Baidu. Twitter's domain name was hijacked by a group calling itself the Iranian Cyber Army back in December. In January, the same group altered the DNS records for baidu.com, China's largest Web search engine. It's worth pointing out that neither of the companies share the same DNS provider, Twitter's being Dyn Inc., while Baidu's register.com.

Tata Consultancy Services is a subsidiary of Tata Group, a world-renowned multinational conglomerate of companies with interests in the steel, automotive, communication, power and IT industries, amongst others. Ironically, TCS is also a provider of security services.

TELL US WHAT YOU THINK:

2,935 hits · 1 comment · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


TechCrunch Hacked and Defaced

Baidu Blames Domain Registrar for Security Breach

Iranian Cyber Army Takes Over Baidu

Iranian Hacktivists Hijack Twitter

Comcast Domain Hijackers Indicted

READER COMMENTS:


Comment #1 by: Matt on 10 Feb 2010, 08:16 UTC reply to this comment

What I Can't understand is why does huge company's don't have there own name servers. I'm CEO of an Internet Technology company in South Africa and I run most of the company's domains on our own dns server. The possibility to get Hijacked if you got your own DNS is 3 / 100 as when you use a public dns provider like Afriaid.org.

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM