Internet related News · 2015-03-13

GoogleApps domain registration details on WHOIS have leaked, claims Cisco team

Cisco’s security team has made a claim that WHOIS registration details of over 282,000 domains linked to GoogleApps had leaked out.

Cisco’s Talos security team has written on its blog that in mid-2013, a problem had occurred that “slowly began unmasking the hidden registration information for owners’ domains that had opted into WHOIS privacy protection.”

These domains all appear to be registered via Google App, using eNom as a registrar. As of March 12, 2015, claimed the blog, there were 305,925 domains registered via Google’s partnership with eNom. 282,867 domains, or roughly 94% appeared to have been affected

WHOIS privacy protection, as many of our readers may know, is a commonly used feature for asserting privacy when it comes to Internet domain name registration. Without it, registration information associated with the domain registration, such as name, postal address, email, and phone number becomes exposed to everyone on the Web. 

Cisco Talos said it had identified many affected domains to malicious activity. Cisco Talos had immediately notified the Google security team & within days the privacy settings were restored to the affected domains.


Talos Discovery Spotlight: Hundreds of Thousands of Google Apps Domains’ Private WHOIS Information Disclosed -Cisco Blog

Mar 12, 2015

In mid-2013, a problem occurred that slowly began unmasking the hidden registration information for owners’ domains that had opted into WHOIS privacy protection….

Read more….

Google Apps WHOIS error reveals hundreds of thousands of domain owners … – The Next Web

http://news.google.com Mar 13, 2015 

The names, contact addresses, email info and phone numbers of 282,867 Google Apps domain owners have been exposed thanks to a WHOIS error, according to …

 

Read more …

White-listed phish slip through Google Apps – The Register

http://news.google.com  Mar 10, 2015 

The flaw meant attackers could register the name of a company that had not signed up to Google Apps for Work, then send phishing emails to staff that appear to come from a legitimate …

 

Read more …


Share This

Click here to opt-out of Google Analytics