www.expressindia.com - Weather | Horoscope | Stocks | RSS
expressindia web city
HomeBlogsCricketAstrologyShopping TendersClassifieds Opinions Hotels
Sign In / Register | Archive
Expressindia » Story

Hackers deface Eastern Rail website

Font Size

Express News Service

Posted: Dec 25, 2008 at 0307 hrs IST

Kolkata Amid growing tension between India and Pakistan, the official website of the Eastern Railway (ER) was hacked and messages were posted claiming that it was done to avenge India’s alleged violation of the Pakistani air space.

On Wednesday morning, the official site of ER — www.easternrailway.gov.in — was found corrupted with a large number of messages put up by the hackers in its scroll section. The scroll which normally consists of official announcements was flooded with notes like “Cyber war has been declared on Indian cyberspace by Whackerz-Pakistan” followed by “Indians hit hard by Zaid Hamid” and “You are hacked.”

On clicking the messages in the scroll, it opened into a new window which claimed that “Mianwalian of Whackerz” have hacked the site in response to the Pakistan air space violation .

When contacted, ER officials seemed to be unaware of the entire incident and the site was not blocked till 11.40 am.

The website, however, started to function normally after 12 noon. “This is a case of SQL injection. An investigation has been ordered and a report will be submitted within 24 hours. Technically, this cannot be called hacking as our database or confidential information could not accessed. We have, however, taken all necessary precautions,” said Samir Goswami, CPRO, ER.

The Railway officials primarily traced the root of injections to Toronto. One official of the ER said that the websites have cyber security certificate from US-based Thawte.

“We have informed the service provider and will likely get responses from them after 24 hours,” said the spokesperson of ER.

Explaining the SQL injection, Prateek Agarwal, an expert of cyber security said: “When we feed data into any website like name or age it gets converted to specific SQL commands and reaches the database.”

“The database can then retrieve the data and reply to the query. An advanced user can directly send a specific set of commands in the SQL and play havoc with any website where the database is not secure,” Agarwal added.

Discuss this story on expressindia forums
Post Comments
Name* Email ID*
Subject* Country*
Message*
Characters remaining
 
TERMS OF USE: The views, opinions and comments posted are your, and are not endorsed by this website. You shall be solely responsible for the comment posted here. The website reserves the right to delete, reject, or otherwise remove any views, opinions and comments posted or part thereof. You shall ensure that the comment is not inflammatory, abusive, derogatory, defamatory &/or obscene, or contain pornographic matter and/or does not constitute hate mail, or violate privacy of any person (s) or breach confidentiality or otherwise is illegal, immoral or contrary to public policy. Nor should it contain anything infringing copyright &/or intellectual property rights of any person(s).
I agree to the terms of use.
Cyber Attack on India by Mr. Zaid ZH on 25 Dec 2008

Sir, Kindly observe what our cyber troops have done.

Latest News

Business

Showbiz

Sports

Rly exams in regional languages simultaneously: Mamata

Pak father-son duo held in Italy over Mumbai attacks

NDMC employee gets 7 yrs jail for raping daughter

26/11 mastermind Saeed freely roaming, preaching in Pakistan

India attaches high priority to its ties with US: Manmohan

Will report to ED only after Jharkhand polls, says defiant Koda

IBN-Lokmat attack: 17 persons sent to two days police custody

More
Featured Services
© 2009 The Indian Express Limited. All rights reserved
The Indian Express Group | Advertise With Us | Privacy Policy | Feedback | Work With Us | Site Map