The Homepage of BSNL ( Bharat Sanchar Nigam Limited ) https://www.bsnl.co.in/ was hacked today morning by hacking group Anonymous. BSNL is an Indian state-owned telecommunications company, the largest provider of fixed telephony and fourth largest mobile telephony provider in India, and is also a provider of broadband services.



The website's homepage was hacked saying, " Hacked by Anonymous India, support Aseem trivedi (cartoonist) and alok dixit on the hunger strike, remove IT Act 66a, databases of all 250 bsnl site has been deleted .............Do not think of BACKUP" with a images of Mr. Aseem while he was arrested by Police.





Hack was performed by Anonymous India hacking group and claiming to hack whole server, with 250 Databases. Hacker wrote on deface page, that they deleted all the databases and dump credentials of BSNL database servers in a pastebin File

Analyzing the dump of database After analyzing the dump of database login information, we found that company is really unconscious about their security from several years and choosing passwords of sensitive servers like "Password123" , "p3nib2", "enquiry999" , "password" , "DelBSi666" , "vpt123". Most obvious, these passwords are easily available in any wordlist and can be bruteforced in minutes.

Password123" as password for 9 Databases.



We can judge the lack of security from the point that, BSNL is using "" as password for 9 Databases.

What is Section 66A of IT Act ?

According to Indian Laws, Section 66A of IT Act is Punishment for sending offensive messages through communication service --

1.) any person who sends, by means of a computer resource or a communication device.

2.) any information that is grossly offensive or has menacing character or any information which he knows to be false, but for the purpose of causing annoyance, inconvenience, danger, obstruction, insult, injury, criminal intimidation, enmity, hatred or ill will, persistently by making use of such computer resource or a communication device.

3.) any electronic mail or electronic mail message for the purpose of causing annoyance or inconvenience or to deceive or to mislead the addressee or recipient about the origin of such message.

Why Anonymous Hack BSNL ?

Reason 1 : Last Month two girls - Shaheen Dhada and Rinu Shrinivasan - were arrested for posting comments made by them on Facebook against Maharashtra Navnirman ShivSena chief Raj Thackeray. This arrest was under Section 66A of IT Act.





Reason 2 : The Mumbai police arrested Mr Trivedi, a member of the India Against Corruption or IAC, he had put up banners mocking the Indian Constitution during an Anna Hazare rally in Mumbai. The arrest was carried out on the basis of a complaint filed by Amit Katarnayea, a legal advisor for a Mumbai-based NGO. Trivedi has been booked under IPC Section 124 A for sedition, Section 66 A of IT Act and under National Emblem Act, 1971. Here are some of the controversial cartoons posted by Trivedi, followed by a nation-wide protest.





Reason 3 : Its an old reason , Against Censorship ! Few days back The Web site of Communication and Information Technology Minister Kapil Sibal was also hacked by Anonymous India for same reason.

I guess BSNL didn't learn anything from last hacks ?

Hack-2, It is not the first time, when someone hack BSNL websites, in past many times, Pakistani and Chinese hackers already breach the company. Hack-1 Hack-3 . They learn something ? No !

shall be punishable with imprisonment for a term which may extend to three years and with fine.