Search This Blog

Powered by Blogger.

Blog Archive

Labels

Showing posts with label Domain Registrar hacked. Show all posts

Name.com hacked by the "Hack The Planet" group ; E Hacking News affected

A Hacker group called "Hack The Planet(HTP)" hacked into one of the top name registrar and web hosting company Name.com. According to Hacker News report, the Name.com was not specifically targeted, they just want to trace another hacker group causing trouble to HTP.

The Story goes like this: HTP realized another group impersonating ac1db1tch3z tried to cause trouble for HTP's botnet. HTP found out the group used an IRC channel hosted on SwiftIRC. If they could break into SwiftIRC which is hosted in Linode, they could cause all sorts of trouble for the impersonators.

To gain access to SwiftIRC , HTP decided to breach the Lionde. To breach Linode, HTP breached their domain name registrar name.com.

The rest of the story can be found here.

Name.com confirmed the security breach and started to send password-reset emails to customers.  Unfortunately, E Hacking News also received the password-reset mail :(

"Name.com recently discovered a security breach where customer account information including usernames, email addresses, and encrypted passwords and encrypted credit card account information may have been accessed by unauthorized individuals" The mail reads.

The Name.com claimed the have stored credit card info using strong encryption and  "the private keys required to access that information are stored physically in a separate remote location that was not compromised".

Fortunately, i never use my real credit card details in Internet( i know it is insecure medium).  I always generate a virtual credit card and use it , the feature provided by my Bank ;) And i never use the same password anywhere else.

*Security Tips*: Make sure to check the URL before clicking on the link provided in the email.  There are plenty of Hyena out there to take advantage of this security breach to send phishing emails.