Comodo Certificate Fraud Hack and Its Implications on Dotti Fashion Organization

COMODO
CERTIFICATE
FRAUD HACK
STUDENT NAME
STUDENT NUMBER

N
• THE CHOSEN ORGANIZATION
FOR THE SCENARIO HERE IS
DOTTI FASHION
ORGANIZATION
• MEDIUM SIZED COMPANY AND
HAS RECENTLY GROWN IN
BUSINESS]
• OPENED ITS ONLINE STORE
RECENTLY IN 2012 FOR
COMMERCIAL TRANSACTIONS
• DEALS WITH FASHION ITEMS

CONCERN
• AFTER NEWS BROKE OUT THAT THE
CERTIFICATION AUTHORITY OR CA
CALLED COMODO WAS DUPED BY AN
IRANIAN HACKER IT CAUSED A MAJOR
CONCERN IN THE IT COMMUNITY.
• THE COMMUNITY HAS EVEN URGED
PROMINENT COMPANIES LIKE
MOZILLA AND MICROSOFT TO REMOVE
COMODO AS A PROPER TRUSTABLE ROOT
SECURITY AUTHENTICATOR
(PARKINSON, S.F., EMC CORP,
2014).
• THE DIGITAL CERTIFICATION
INTEGRITY OF THE COMPANY WAS
COMPROMISED WHICH CAN PUT THE
COMPANY AT SERIOUS RISK IF PROPER
STEPS ARE NOT TAKEN.

RISKS
• THE REGISTRATION SERVER OF
THE MENTIONED COMPANY
(DOTTI) CAN GET COMPROMISED
DUE TO THE CERTIFICATION
HACK.
• THE PARTNERS WHICH ARE
CURRENTLY WORKING FOR THE
MENTIONED COMPANY CAN ALSO
GET COMPROMISED AND THEIR
PASSWORDS AND LOGIN DETAILS
CAN BE STOLEN THROUGH THE
EXPLOIT.
• THE HACK COULD POTENTIALLY
TRANSFER THE USER TRAFFIC OF
THE COMPANY TO A FAKE SITE AND
CAUSE IRREPARABLE DAMAGE TO
ITS REPUTATION.