ICANN gets hacked after employees hand out private data in phishing scam
ICANN has reported a major security breach. The organization, which is responsible for managing IP addresses (among other things) for the internet, was hacked late last month. Using basic spear phishing attacks, hackers managed to trick ICANN employees into giving up private credentials upon receiving emails that appeared to come from the organization itself. As a result, several internal systems have been breached.
ICANN reports that not only were internal emails accessed, but also a number of other things including an employee only wiki-page with public data, as well as the database to see who has registered a certain domain. Hackers also accessed the Centralized Zone Data System (CZDS), which allows them access to user names, addresses, emails and other contact/personal data. While certainly the most troubling of them all, the passwords stolen in the CZDS breach were encrypted and not just sitting around as plain text entries.
The organization implemented improved security measures early this year, before the attack. The group now plans to implement additional security measures.
ICANN reports that not only were internal emails accessed, but also a number of other things including an employee only wiki-page with public data, as well as the database to see who has registered a certain domain. Hackers also accessed the Centralized Zone Data System (CZDS), which allows them access to user names, addresses, emails and other contact/personal data. While certainly the most troubling of them all, the passwords stolen in the CZDS breach were encrypted and not just sitting around as plain text entries.
The organization implemented improved security measures early this year, before the attack. The group now plans to implement additional security measures.