Welcome to WebmasterWorld Guest from 54.167.175.218

Forum Moderators: buckworks & webwork

Over 300 UK domain names hijacked in 2012 .

The Register reveals "massive security lapse" ..

   
3:48 am on Mar 22, 2013 (gmt 0)

WebmasterWorld Senior Member leosghost is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



A source told El Reg that anyone with a hosting package from 123-Reg, and hence an account control panel, simply had to change the final section of the URL manually (to, for example, /someoneelseswebsite.co.uk) to be able to gain access to another site's emails, name servers and billing.

With access to the admin panel, would-be domain thieves just had to change the contact details for UK registry Nominet to a new email address and then do a failed password request to have a new password sent to the new email address, locking the original owner out


[theregister.co.uk...]
 

Featured Threads

Hot Threads This Week

Hot Threads This Month