Hacked: Email inboxes of Indian missions in US and China; NDA, DRDO officials too

Top on the list of passwords that have been posted on http://derangedsecurity.com give access to email accounts of Indian Ambassadors to China, US, Sweden, Germany, Italy, Oman, Finland besides officials of the National Defence Academy (NDA) and Defence Research and Development Organisation (DRDO).

Other accounts include those of the embassies of Uzbekistan, Iran, Afghanistan, Pakistan, Japan, China, UK and Russia.

To check the authenticity, The Indian Express sent a test mail to the Indian Ambassador in China on her official email ID and, using the password posted online, was able to access it. The email account of the Indian Ambassador to China contained details of a visit by Rajya Sabha member Arjun Sengupta to Beijing earlier this month for an ILO conference. There was also a transcript of a meeting this evening which a senior Indian official had with the Chinese Foreign Minister.

While it remains unclear how the passwords were accessed by the hacker — he has posted his name on the website as Dan Egerstad from Malmo in Sweden and even gave contact details — Indian experts said that loopholes in POP (post office protocol) mail servers could have been exploited to gain access.

“A POP server that had not been updated for security could have been exploited by the hacker to get usernames and passwords,” said a cyber security expert who did not wish to be named.