Hello,<div><br></div><div>It is an embarrassment to take this to the list, but necessary to bring an issue of this nature to the chapter delegates in order to bring up the importance of maintaining security standards in maintaining the chapter web and email service.</div>
<div><br></div><div>1. Recently, the yahoo mail id of our Chapter Secretary was hacked and the hacker sent out a Nigerian spam message that looked like a message from Sarto (our Chapter Secretary) complete with his signature. He had difficulty having his yahoo address restored for days, and with help from Veni who wrote in to offer to write to yahoo, the account was blocked, and then yahoo sent a link for a new password, which strangely did not work. It is still in process.</div>
<div>A lot of harm has been done to him as the hacker had used his address book. This hacked address is also subscribed to the chapter mailing list with privileges, but there is no indication that the hacker has gone as far as the mailing list.</div>
<div><br></div><div>2. The website is hosted by a local webhosting service and it was noticed that the website was down, the hosting service responded to a support request with a message that the site was "suspended for sending bulk mails" There is only one email address set up, chennai@isocindiachennai dot in which I personally operate, ( it is not a dominant alias, seldom used ) </div>
<div><br></div><div>I have sent a note to the hosting service, this will also be followed up locally, but we prefer to take this issue to CERT and request them to examine the hosting service's log files.</div><div><br>
</div><div>I would also request the chapter delegates to let us know if they have received any unusual message from ISOC Chennai or from any of the addresses associated with the Chapter or chapter officers.</div><div><br>
</div><div>Thank you.</div><div>Sivasubramanian Muthusamy</div><div><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Sivasubramanian Muthusamy</b> <span dir="ltr"><<a href="mailto:isolatedn@gmail.com">isolatedn@gmail.com</a>></span><br>
Date: Tue, Mar 31, 2009 at 12:54 PM<br>Subject: Re: [SUPPORT #IIT-225158]: Domain not working.<br>To: "Support, Square Brothers." <<a href="mailto:support@squarebrothers.com">support@squarebrothers.com</a>><br>
Cc: Tamil <<a href="mailto:tamilmalaravan@bharatplanet.com">tamilmalaravan@bharatplanet.com</a>><br><br><br><div>Hello,</div><div><br></div><div>You have not sent us any communication to inform us about this serious security lapse which is a possibility due to a vulnerability in your hosting infrastructure. We would like to have the details and log files now as we prefer a complaint to the CERT.</div>
<div><br></div><div>ISOC India Chennai is part of ISOC ( <a href="http://www.isoc.org" target="_blank">http://www.isoc.org</a> ) and we need to take this issue seriously. Please let us have the complete details of this incident.</div>
<div class="im"><br clear="all">
Sivasubramanian Muthusamy<br><a href="http://isocmadras.blogspot.com" target="_blank">http://isocmadras.blogspot.com</a><br>
<br><br></div><div class="gmail_quote"><div class="im">On Tue, Mar 31, 2009 at 12:21 PM, Chandramohan <span dir="ltr"><<a href="mailto:chandramohan@bharatplanet.com" target="_blank">chandramohan@bharatplanet.com</a>></span> wrote:<br>
</div><div><div></div><div class="h5"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br>
<br>
With reference to the mail below, we have not sent any bulkmail or<br>
whatsoever from the account.<br>
May I have any references regarding the same.<br>
<br>
Regards,<br>
Chandramohan<br>
<br>
-----Original Message-----<br>
From: Support : Square Brothers [mailto:<a href="mailto:support@squarebrothers.com" target="_blank">support@squarebrothers.com</a>]<br>
Sent: 30 ?????? 2009 20:24<br>
To: <a href="mailto:tamilmalaravan@bharatplanet.com" target="_blank">tamilmalaravan@bharatplanet.com</a><br>
Cc: <a href="mailto:chandramohan@bharatplanet.com" target="_blank">chandramohan@bharatplanet.com</a><br>
Subject: [SUPPORT #IIT-225158]: Domain not working.<br>
<br>
<br>
Hi,<br>
<br>
This account was suspended for sending bulk mails.<br>
<br>
Make sure that there will be any bulk/spam mails from this hosting account.<br>
<br>
regards<br>
<br>
<br>
R.Ilangovan<br>
Member - Support<br>
Square Brothers Information Technologies (P) Ltd.,<br>
AA-9, Second Avenue, Annanagar,<br>
Chennai, Tamilnadu, India. PIN : 600040<br>
Tel : +91.44.26205355 / 26205356<br>
e-Mail : <a href="mailto:support@squarebrothers.com" target="_blank">support@squarebrothers.com</a><br>
url : <a href="http://www.squarebrothers.com" target="_blank">www.squarebrothers.com</a><br>
<br>
<br>
Ticket Details<br>
===================<br>
Ticket ID: IIT-225158<br>
Department: Support<br>
Priority: Medium<br>
Status: Closed<br>
<br>
</blockquote></div></div></div><br>
</div><br></div>