Webnic Registrar Blamed for Hijack of Lenovo, Google Domains
Summary: Attackers associated with the Lizard Squad briefly hijacked Google's Vietnam domain (google.com.vn) on Feb. 23 and Lenovo.com on Wednesday, redirecting visitors to defacement pages. Sources told KrebsOnSecurity that both hijacks were possible because the attackers seized control of Webnic.cc, the Malaysian registrar serving both domains and 600,000 others, using a command injection vulnerability to upload a rootkit and alter DNS records.
What's compelling: The intruders also reached Webnic's store of auth codes, the transfer secrets that can move any domain to another registrar, and the group tweeted one to prove it - meaning a single registrar compromise put 600,000 domains and their mail routing within reach.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026