HMWSSB’s website hacked, redirected to betting apps

The Hyderabad water board website has reportedly been hacked by unknown attackers. While the exact timing of the hack remains unclear, promotional links for betting, online rummy, and casinos started trending up on Google News under the latest news tab in the technology section on Friday, November 8.

Most links redirected users to an online betting site, betwww20.com, with only one subsection featuring Garena Free Fire MAX redeem codes. The breach highlights vulnerabilities within both HMWSSB’s website and Google



News’s algorithm.

According to the Hindu article, the attack is suspected to involve Structured Query Language Injection (SQLi) attack which is commonly used to hack websites. It allows hackers to exploit a website’s database by inserting malicious SQL code into forms, URLs, or other input fields. When websites fail to validate or sanitize these inputs, attackers can delete, modify, or extract sensitive data like usernames, passwords, credit card details etc which compromises Hyderabad water board website security further.