ePathshala Website Hacked by HEXSO2 Group

Introduction

ePathshala, a joint initiative of the Ministry of Education (MoE), Govt. of India, and the National Council of Educational Research and Training (NCERT), was developed to showcase and disseminate educational e-resources, including textbooks, audio, video, periodicals, and a variety of other digital materials.

Breach

I came across an online thread claiming that a few pages on this site had been hacked. I checked it out myself and can confirm this is indeed true. The snapshots below show evidence of the breach.

The hacker claims to be “HEXSO2,” supposedly a Bangladeshi hacker group. It is concerning to see how attackers manage to find their way through system loopholes and exploit vulnerabilities.

Currently, I can see that the About, Contact, and Epathshala pages have all been compromised.

Please note: I have blurred the objectionable content posted by the hacker in the snapshots above.