Lord of the Internet ICANN Hacked by Intruders

Quite a vacation flavor hackers are having this year making united states of america crazy following their seemingly never catastrophe saga of hacking international organizations and web services. In the latest and quite surprising news, ICANN, the global cyberspace authority has been hacked as attackers impersonated employees to gain admission to confidential internal data.

Internet authority ICANN hacked:

The Internet Corporation for Assigned Names and Numbers (ICANN) is a US-administered nonprofit organization responsible for allocating IP addresses and domain names. In a spear phishing hacking attempt, ICANN employees were tricked into giving up their credentials every bit hackers forged trusted communication to access private data. According to the system, its internal communications, ICANN's Centralized Zone Data System (CZDS) member-only Wiki page, and the WHOIS portal (portal for looking upwardly who registered what domain) was accessed.

CZDS is a central database storing and managing millions of websites containing files mapping the path between IP address, identifying the computers hosting information, and the name of the domains. ICANN reports that the breaching of CZDS is the most troubling as intruders accessed a wide range of user information including usernames, emails, existent names, and addresses among other personal information. While passwords were as well accessed, ICANN claimed that these were encrypted and not in plain text.

The attacker obtained administrative access to all files in the CZDS. This included copies of the zone files in the system, too as information entered by users such as name, postal address, email address, fax and telephone numbers, username, and password. Although the passwords were stored as salted cryptographic hashes, we have deactivated all CZDS passwords every bit a precaution.

The authoritative and autonomous function of ICANN has long remained a bailiwick of debate equally President Obama tried to transition ICANN into a more than international organization. While it'due south yet to be seen who is behind this intrusion, spear phishing has popularly been used by the Syrian Electronic Army to hijack into media accounts of global organizations. The technique is too suggested to have been used in the latest Sony Pictures Amusement hack final calendar month.

-Source: The Verge

Source: https://wccftech.com/icann-hacked-data-compromised/

Posted by: collinsjamet1980.blogspot.com

Share this post