13 Dec 2012

Indian Telecommunications Company Hacked by Anonymous

The Indian telecommunication company Bharat Sanchar Nigam Limited had its website defaced by Anonymous in protest against an IT law enabling the imprisonment of people who send or post offensive messages through communication services.

As a broadband service provider and the largest landline telephony service in India, BSNL’s database was allegedly deleted by Anonymous and some 250 databases were dumped in a PasteBin post. The Anonymous defacement supported a local cartoonist, Aseem Trivedi, who was imprisoned for two weeks after cartooning local corrupt political leaders.

“Hacked by Anonymous India, support Aseem trivedi (cartoonist) and alok dixit on the hunger strike, remove IT Act 66a, databases of all 250 bsnl site has been deleted.............Do not think of BACKUP,” read the messages on the defaced BSNL webpage.

 The leaked data contained weak passwords such as “password” or “password123”, raising serious security issues as most bruteforce wordlists can easily guess them.

The Section 66A of the IT Act in India states that posting or publishing information that is offensive is punishable with up to three years in prison and hefty fines. A section of the act clearly states that “any electronic mail or electronic mail message for the purpose of causing annoyance or inconvenience or to deceive or to mislead the addressee or recipient about the origin of such message,  shall be punishable with imprisonment for a term which may extend to three years and with fine.”

Although Anonymous made no other comments regarding the attack, Aseem Trivedi recently launched a hunger strike in protest against the Section 66A of the IT Act.