Hackers hacked the websites of a major tour operator through a file download service

The sites of the international tour operator Tez Tour in the .com and .by zones remain inaccessible as a result of the hacker attack. Responsibility for the incident was assumed by the group DATASUCKERS, reports the correspondent of the agency “Minsk-Novosti” with reference to the Telegram channel “CyberPool”.

It is specified that when trying to switch to the resources of the company, users see a notification about the disconnection of servers. The cyber attack affected both the international domain and the Belarusian segment.

The hacker group DATASUCKERS has already claimed its involvement in the hack. According to them, the entry point was the file download service Tez Tour. The attackers uploaded a file that the web server processed as PHP code. There was also a screenshot of hackers claiming that all of the company’s servers were compromised.

Commercial Director of Tez Tour Voskan Arzumanov in comments to the portal “Interfax-Tourism” confirmed the fact of the incident.

Immediately after the discovery of unauthorized activity, the necessary measures were taken to localize the incident and protect information systems. At the moment, there are no signs of compromising the data of tourists and partners. The company’s ERP system was isolated in a timely manner and was not damaged, Arzumanov said.

At the same time, he stressed that all existing reservations are preserved, obligations to customers and partners are performed as usual.

Currently, experts conduct a comprehensive inspection of the infrastructure and establish the causes of the incident. Restoration of services will be carried out in stages after passing the necessary security checks.