Cyber Risks · Krebs on Security

Domain Theft Strands Thousands of Web Sites

Summary: Newtek Business Services, which operates more than 100,000 business Web sites and some 40,000 managed technology accounts, had three core domains hijacked over a weekend, shutting off email and stranding customer Web sites. A Vietnamese hacker replaced the login page at webcontrolcenter[dot]com with a live Web chat service, so customers seeking answers ended up chatting with the intruder, who said he had reported a bug to Newtek five days earlier and received no reply.

What you should know: A single hijacked domain put the attacker in a position to record email passwords and Web credentials submitted by any customer who visited it, and Newtek's first customer email made no mention of a breach, saying only that domains were changing due to increased security.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related