Menu
ICANN data compromised in spearphishing attack

ICANN data compromised in spearphishing attack

Staff email credentials and some user data, including email and postal addresses, were taken

A so-called spearphishing attack on ICANN has compromised the email credentials of several ICANN staff members and allowed the attacker access to user information, including email and postal addresses.

The targeted phishing attack also allowed the attacker to gain access to all files in ICANN's Centralized Zone Data System (CZDS), a centralized point for interested people to request access to so-called zone files provided by participating top level domains. ICANN gave notice of the breach Tuesday, though the CZDS aspect of the compromise was discovered earlier this month.

The CZDS compromise included email and postal addresses, telephone numbers, user names and passwords of some users of the organization's services, although the passwords were stored as salted cryptographic hashes. ICANN recommends that CZDS users take steps to protect online accounts for which they used the same user names or passwords, and the organization is providing notices to users whose personal information may have been compromised.

ICANN, the coordinator of the Internet's Domain Name System, believes the targeted phishing attack started in late November. The attack included email messages "crafted to appear to come from our own domain being sent to members of our staff," ICANN said in a press release.

The attackers also gained access to ICANN's Governmental Advisory Committee's Wiki, including some public information, a members-only index page, and one user's profile page. The attackers also accessed user accounts on the ICANN blog and the ICANN WHOIS information portal, but there was no other impact on those systems.

Based on ICANN's investigation so far, the organization is not aware of any other systems that were compromised. This year, ICANN began rolling out security enhancements across the organization, and it has taken additional steps since discovering the attack, it said.

"We are providing information about this incident publicly, not just because of our commitment to openness and transparency, but also because sharing of cybersecurity information helps all involved assess threats to their systems," ICANN said.

Grant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantGross. Grant's email address is grant_gross@idg.com.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags securityinternetdata breachICANNintrusion

Featured

Slideshows

Meet the leading female front runners of the Kiwi channel

Meet the leading female front runners of the Kiwi channel

Reseller News honoured the leading female front runners of the New Zealand channel at the 2018 Women in ICT Awards (WIICTA) in Auckland. The awards honoured standout individuals across seven categories, spanning Entrepreneur; Innovation; Rising Star; Shining Star; Community; Technical and Achievement.

Meet the leading female front runners of the Kiwi channel
Meet the top performing customer-centric Microsoft channel partners

Meet the top performing customer-centric Microsoft channel partners

Microsoft honoured leading partners across the channel following a year of customer innovation and market growth in New Zealand. The 2018 Microsoft Partner Awards recognised excellence within the context of the end-user, spanning a host of emerging and established providers.

Meet the top performing customer-centric Microsoft channel partners
Reseller News launches new-look Awards at 2018 Judges’ Lunch

Reseller News launches new-look Awards at 2018 Judges’ Lunch

Introducing the Reseller News Innovation Awards, launched to the channel at the 2018 Judges’ Lunch in Auckland. With more than 70 judges now part of the voting panel, the new-look awards will reflect the changing dynamics of the channel, recognising excellence across customer value and innovation - spanning start-ups, partners, distributors and vendors.

Reseller News launches new-look Awards at 2018 Judges’ Lunch
Show Comments