The Tata group company has restored its website tcs.com after hackers allegedly changed its domain name and put it up for sale

Tata Consultancy Services Ltd, (TCS), India's largest software company, has restored its website tcs.com after hackers allegedly changed its domain name and put it up for sale.

The Internet Protocol (IP) address of TCS's website is 216.15.200.140. However, the hackers changed it to 205.178.152.154, re-pointing the name server (NS) records of the company's website which may have been done by breaking into the NS or the registrar account, said a cyber-security expert.

The most prominent types of name servers in operation today are the name servers of the Domain Name System (DNS), one of the two principal name spaces of the Internet. The most important function of these DNS servers is the translation (resolution) of humanly memorable domain names (for example tcs.co) and hostnames into the corresponding numeric IP addresses (216.15.xxx.xxx), the second principle Internet name space, used to identify and locate computer systems and resources on the Internet.

Incidentally, the changed domain ID, 205.178.152.154, shows the ISP name as Network Solutions LLC, which is the registrar of tcs.com as well. So primarily, it appears that someone might have entered into TCS's registrar account; possible using a compromised password, added another expert.

According to a report from plugged.in, the hackers had put up the domain name 'tcs.com' for sale and even provided their e-mail id 'abed_uk@hotmail.com', besides displaying a whos.among.us widget to display how many people are on the site at any given point. Although TCS has now restored its website, this incident has raised many questions on the alleged breach of security as well as the expertise of Indian engineers.