In Azerbaijan, 22 websites with the .az domain were hacked in one day
In a single day, 22 websites in the .az domain zone were subjected to a cyberattack.
As 1news.az reports, this was announced by the National Cybersecurity Service under the Ministry of Digital Development and Transport.
It is noted that during monitoring in the .az domain zone, numerous cases of unauthorized modification of websites were recorded. As a result of the investigation, it turned out that within one day, 22 domains were attacked by a hacker named Xscyth3.
Most of the attacked sites are connected with the tourism sector, tour operator activities, transfers, individual and group tours, as well as travel services in Baku and Azerbaijan.
According to the NCS, the simultaneity and similar nature of the incidents indicate that they may be linked to a common technical or administrative infrastructure.
During the technical check, it was established that common registration data were used on some of the domains. On some domains, the email address [email protected] and the organization name Azerbaijan Travel International were recorded. In addition, it was found that 19 domains are hosted on the AS47583 / AS-HOSTINGER network, using the same name servers (NS) and the hcdn server indicator.
The agency assessed these signs as indicators pointing to a possible connection of common infrastructure or management between the targeted domains.
The NCS recommended that website owners conduct security audits and incident investigations, and update content management systems (CMS), plugins, and other components. The recommendations also include changing administrator account passwords, implementing multifactor authentication, analyzing server and application logs, eliminating vulnerabilities, and organizing continuous security monitoring.
