BSNL website defaced
Social post brings the matter to light; the website has been restored
Bharat Sanchar Nigam Limited (BSNL) website
www.bsnl.co.in is not only hacked for the second time in the month but also defaced on Tuesday.
This was brought to light by French Security researcher Baptiste Robert through a social post. In fact, it was the ethical hacker who identified that the website was hacked and also requested on Twitter not to deface the BSNL website. It was restored later.
The website was hacked on Tuesday by two different parties. A message on the home page said the attack was carried out by LulzSec India. “Did it for India, your website is owned by us – Security failed,” it said. A tagline of the same hacker reads — “LulzSec India was here — New security comes with new vulnerability”.
While the second attack was hacked by B1ack3r15.
Going by the name of Elliot Alderson — twitter handle @fs0c131y, the Tweet posted on Tuesday reads, “I found 2 hacked @BSNL corporate subdomains this morning. Please don’t do that if you skilled enough to deface websites, it’s awesome, but please don’t do it.
“Alert the concerned owners, give them a chance, if they don’t answer let’s discuss, I probably can help”. (sic).
Earlier in March, an anonymous French security researcher has claimed to have gained access to the private database of BSNL that contains details of more than 47,000 employees. The ethical hacker also shared a sample of the database that contains details of employee name, designation, password, mobile number, date of birth, date of retirement, e-mail addresses etc.
While, this wasn’t the first time, as in 2012, the website was hacked by the hacking group, Anonymous India, as a protest against Section 66 A of the IT Act and in support of cartoonist Aseem Trivedi, on an indefinite hunger strike at Jantar Mantar since December 8, 2012 for the same. The website was restored the same day.
While Officials from the BSNL office were not available for a comment, in an official statement, the BSNL officer said that the websites hacked didn’t have any customer related data.