Webnic.cc

Webnic.cc, also known as Web Commerce Communications, operates as a domain name registrar based in Malaysia. The organization facilitates domain registration services, managing critical internet infrastructure components such as DNS records and authentication codes for domain ownership transfers. Its operational scope includes maintaining domain registrations, which involves technical oversight of domain redirection and security protocols. The registrar’s role positions it as an intermediary in the global domain name system, handling sensitive client credentials essential for domain management.

In February 2015, Webnic.cc suffered a significant security breach orchestrated by the Lizard Squad, a cybercriminal group. Attackers exploited a command injection vulnerability to install a rootkit, establishing persistent access to the registrar’s systems. This compromise enabled the alteration of DNS records for high-profile domains, including Google’s Vietnam-specific site and Lenovo.com, redirecting traffic to servers controlled by the attackers. The intrusion also exposed authentication codes, potentially jeopardizing hundreds of thousands of domains registered through Webnic.cc. The Lizard Squad’s motivations appeared rooted in seeking notoriety, financial gain, and demonstrating technical dominance within the cybercriminal ecosystem. This incident underscored systemic vulnerabilities in domain registrar security practices and their broader implications for internet infrastructure integrity.