Cyber Incident Victim: Antrix Corporation
Date:
Jul 2015
Location:
India
Summary
The commercial arm of the Indian Space Research Organisation experienced a website defacement incident where hackers replaced its homepage with unrelated content about discounted sports merchandise. The unauthorized content remained visible for over ten minutes before restoration, with other website pages unaffected throughout the incident. While officials acknowledged the defacement, they denied any broader security compromise and initiated an inquiry to identify responsible parties. The intrusion occurred shortly after the parent organization's successful commercial satellite launch mission. Unconfirmed allegations suggested potential Chinese involvement in the cyber intrusion, though no attribution was formally established by investigators.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 12, 2015, the website of Antrix Corporation, the commercial arm of the Indian Space Research Organisation (ISRO), was defaced by unidentified hackers. The incident occurred two days after ISRO successfully demonstrated its commercial satellite launch capabilities by deploying five satellites for the United Kingdom via the PSLV-C28 rocket from Sriharikota. Attackers replaced the Antrix homepage with unrelated content discussing 300 children from Cape Town acquiring American Major League jerseys at low prices from China. ISRO officials confirmed the defacement but denied any broader security breach beyond the superficial alteration of the homepage. The compromised content remained visible for over ten minutes before being removed, with full restoration of the legitimate homepage completed by evening. All other website pages remained operational throughout the incident. Antrix's Chief Managing Director VS Hegde could not be reached for comment, while ISRO stated that senior Antrix management had initiated an internal inquiry to identify the perpetrators.
The defacement represented a reputational challenge for Antrix following ISRO’s high-profile commercial launch success on July 10. Operational impacts were minimal, as only the homepage was altered and no data breaches or system compromises were reported. Antrix restored the website promptly and maintained normal functionality across unaffected sections during the incident. Officials did not confirm allegations circulating about potential Chinese hacker involvement despite media speculation linking the timing to geopolitical tensions. The inquiry launched by Antrix management remained ongoing at the time of reporting, with no attribution claims or technical details about the attack methodology disclosed publicly. ISRO emphasized the isolated nature of the incident while acknowledging the need for investigation into its origins.