Website restored by TCS after hackers put it up for sale
Tata Consultancy Services Ltd, (TCS), which was recently attacked by hackers, who changed its domain name and put it up for sale; has now restored its website tcs. com.
India's largest software company website's Internet Protocol (IP) address is 216.15.200.140. But the hackers had changed it to 205.178.152.154, re-pointing the name server (NS) records of the company's website which may have been done by breaking into the NS or the registrar account, said a cyber-security expert.
It should be noted that the name servers of the Domain Name System (DNS), one of the two principal name spaces of the Internet, are the most important types of name servers in operation these days. The translation (resolution) of humanly memorable domain names (for example tcs. co) and hostnames into the corresponding numeric IP addresses (216.15. xxx. xxx), the second principle Internet name space, used to identify and locate computer systems and resources on the Internet are the most important function of these DNS servers.
It is surprising to know that the altered domain ID, 205.178.152.154, displays the ISP name as Network Solutions LLC, which is the registrar of tcs. com as well. So it seems that the TCS's registrar account might have been entered by someone with the help of a compromised password.
A report from plugged.in informed that not only did the hackers put up the domain name 'tcs.com' for sale but also provided their e-mail id 'abed_uk@hotmail.com'. They also put a whos.among.us widget to show how many people are on the site at any given point.
The incident has surely given rise to number of questions related to the security as well as the expertise of Indian engineers, even though TCS has now restored its website.