Webnic.cc

Webnic.cc, also known as Web Commerce Communications, is a domain registration provider with its headquarters in Malaysia. The company operates under the two aliases Webnic.cc and Web Commerce Communications. As a registrar, it offers services that allow customers to register and manage internet domain names. These services include the ability to configure DNS settings associated with registered domains. By interfacing with the global domain name system, Webnic.cc facilitates the reservation of top‑level and country‑code domains for a variety of users. Its client base extends beyond Malaysia, as indicated by its involvement in high‑profile domain cases that attracted international attention. The firm’s platform supports both routine registration tasks and more advanced DNS management capabilities required by customers seeking precise control over how their domains resolve. Through these core offerings, Webnic.cc functions as part of the broader internet infrastructure ecosystem that enables online presence and branding.

In February 2015, Webnic.cc became the focus of a security incident when attackers linked to the Lizard Squad exploited a command injection vulnerability in its systems. The exploit allowed the intruders to upload a rootkit onto the registrar’s servers. With the rootkit in place, the attackers altered DNS records for several prominent domains. Specifically, they hijacked Google’s Vietnam domain (google.com.vn) and Lenovo.com, redirecting visitors to attacker‑controlled web pages. Those pages displayed messages promoting the Lizard Squad and their services. The intruders leveraged Webnic.cc’s access, which had previously been noted due to the registrar’s popularity among certain underground forums. Although the rootkit was later removed, reducing the immediate risk of further hijacking via that method, the incident highlighted ongoing security challenges for the registrar. Webnic.cc had experienced similar breaches before the 2015 event, indicating a recurring pattern of threats tied to its visibility within the hacker community.