[Owasp-delhi] [Owasp-Mumbai] TCS.com -- something wrong.

Soi, Dhruv dhruv.soi at owasp.org
Sun Feb 7 07:46:10 EST 2010


Correct. The IP address that was resolving against the domain during
compromised period was: 205.178.152.154 and now after restoration its:
216.15.200.140. So not really network/application attack but DNS/account
compromise.

-----Original Message-----
From: Yash Kadakia [mailto:teccoder at gmail.com] 
Sent: 07 February 2010 17:53
To: dhruv.soi at owasp.org; 'Ajay k'; 'Raxit Sheth'; 'BarcampAhmedabad';
owasp-bangalore at lists.owasp.org; owasp-delhi at lists.owasp.org;
bangalore_barcamp at yahoogroups.com; 'BarCampMumbai2';
owasp-mumbai at lists.owasp.org
Subject: Re: [Owasp-Mumbai] TCS.com -- something wrong.

Dhruv,

I just want to add that based on your description it is not the server but
the domain registar or their account there that was probably compromised.

Regards - Yash
Yash Kadakia

Office: +91-022-23612909
Office: +1-347-99-ITSEC (+1-347-994-8732)
Mobile: +91-9833375290
Blog: http://www.yashkadakia.com/

Sent on my BlackBerryR from Vodafone

-----Original Message-----
From: "Soi, Dhruv" <dhruv.soi at owasp.org>
Date: Sun, 7 Feb 2010 17:41:15 
To: 'Ajay k'<ajaykemparaj at gmail.com>; 'Raxit
Sheth'<raxitsheth2000 at gmail.com>;
'BarcampAhmedabad'<barcampahmedabad at googlegroups.com>;
<owasp-bangalore at lists.owasp.org>; <owasp-delhi at lists.owasp.org>;
<bangalore_barcamp at yahoogroups.com>;
'BarCampMumbai2'<barcampmumbai2 at googlegroups.com>;
<owasp-mumbai at lists.owasp.org>
Subject: Re: [Owasp-Mumbai] TCS.com -- something wrong.

_______________________________________________
OWASP-Mumbai mailing list
OWASP-Mumbai at lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-mumbai




More information about the Owasp-delhi mailing list