Cyber Risks · Krebs on Security

Dell Lost Control of Key Customer Support Domain for a Month in 2017

Summary: Dell's contractor SoftThinks failed to renew DellBackupandRecoveryCloudStorage.com in mid-June 2017, and the domain was held for about a month by Dmitrii Vassilev of TeamInternet.com before Dell's contractor regained control. The domain was still being checked by the pre-installed Dell Backup and Recovery application, and on June 28 Equity Residential's Rapid7 and Carbon Black tools flagged the address it resolved to as malicious, with Abuse.ch's Ransomware Tracker listing the host.

Key Takeaway: A domain baked into software Dell shipped on its PCs sat in a third party's hands for a month, and the first outside signal came from a customer's security team, not from Dell - which said only that the reference was not updated and the issue was addressed.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related