DNS

(get it in RSS or Atom)

Hacked Go Daddy sites infecting users with ransomware

go-daddy-thumb

Computer users are getting infected with ransomware because criminals have managed to hack the DNS records of Go Daddy hosted websites.

Google disappears for Irish internet users - but was it a nameserver hack or admin screwup?

Google disappears for Irish internet users - but was it a nameserver hack or admin screwup?

Thousands of Google users in Ireland found that they were unable to access the site earlier today when the nameservers for google.ie began to point to a third-party site based in Indonesia.

But was it an admin cockup or the result of a malicious hack?

Microsoft settles lawsuit against 3322 dot org, reveals scale of Nitol botnet in China

nitol-botnet-250

Just over two weeks ago, we wrote enthusiastically about Microsoft's legal action against 3322 dot org.

That lawsuit has now been settled, with 3322 dot org's operator agreeing to a range of security-related conditions to get his domain back.

How millions of DSL modems were hacked in Brazil, to pay for Rio prostitutes

How millions of ADSL modems were hacked in Brazil to pay for Rio prostitutes

Brazilian hackers remotely took over 4.5 million home routers, and compromised their DNS settings in their plot to make a fortune.

And what did they spend the money on? Well, in some cases, Rio prostitutes..

Microsoft gets control of zombie domain, warns about malware "in the supply chain"

Microsoft gets control of zombie domain, warns about malware "in the supply chain"

Microsoft has announced, with perfectly rightful excitement, that a court in Virginia, USA, has given it control over the domain 3322 dot org.

This is one of the most prevalent call-home locations used by the Nitol malware - a family with tens of thousands of known variants.

Go Daddy largely unavailable for over 4 hours - Hacker revenge or SNAFU?

GoDaddy250

Today Go Daddy, the worlds largest domain name registrar, was unavailable for over four hours in the middle of the North American working day. Was it a malicious hacker or simple a colossal infrastructure failure?

Phishing without a webpage - researcher reveals how a link *itself* can be malicious

Phish without a web page? Yes you can!

Can you phish without a phishing page? Research by a student at the University of Oslo in Norway finds that, with the help of a trusty URI, ‘Yes, you can.’

Has Google said your PC is infected with DNS Changer malware?

google-warning-thumb

Google is warning searchers that they could lose internet access on July 9th if they were hit by the DNS Changer malware - but could cybercriminals mimic the internet giant's warning for their own nefarious ends?

Internet doomsday on July 9th? Don't panic!

Internet doomsday on July 9th? Don't panic!

Users may not realise now that their computers are using rogue DNS servers to access the internet... but come July 9th, things might be rather different.

Find out how to check your computer, and how Sophos products can help.

Gumming up the internet: When DNS servers attack..

digital-attack-thumb

Operation Blackout's plan to shut down the internet this weekend may have come to nothing, but there is a way in which DNS servers can be used as part of a malicious attack.

Professor Alan Woodward explains more.

Has TechCrunch been hacked?

Has TechCrunch been hacked?

One of TechCrunch's web servers is serving up pages which definitely don't belong at TechCrunch!

But it may not be the result of malicious hacking..

Mystery flaw crashing DNS servers across the internet

net-globe-thumb

A zero-day vulnerability is being exploited in-the-wild to crash BIND 9 DNS servers all over the internet. The flaw, a Denial of Service vulnerability described as an "as-yet unidentified network event" affects all of the currently supported versions of BIND.

FBI Operation Ghost Click takes out DNS Changer malware network operators

fbi-img-250

The FBI is cock-a-hoop today, having just announced the bust of six Estonians for malware-related cybercrimes.

The case goes back to 2007, with the investigation itself apparently having taken two years.

Apple fakery, DNS hack, DigiNotar, Linux, Wikileaks - 60 Sec Security

60ss-20110913-250

Lots of readers said they'd like to see our 'news-with-a-conscience' videos more than once a month.

So here you go. 60 Second Security, once every two weeks.

BH 2011: Bit-squatting - DNS hijacking without exploitation

bitsquat245

Researcher Artem Dinaburg presented his paper about memory errors leading to mistaken DNS lookups at last week's Black Hat conference in Las Vegas, Nevada. He showed how attackers could use techniques similar to typosquatting to compromise users as a result of hardware errors.

Hackers hijack top Russian football club's website

Hackers mess with top Russian football club's website

Fans of FC Zenit Saint Petersburg, one of Russia's top football clubs, got a surprise this morning if they visited the team's website.

Instead of seeing stories and images of their favourite soccer players in action, they were presented with a page of insults directed at the city's political leaders.

Denial of Service vulnerabilities back in the spotlight - patch BIND now!

Denial of Service vulnerabilities - back in the spotlight - patch BIND now!

Until recently, only remote code execution vulnerabilities have made the mainstream news.

But Denial of Service vulnerabilities are important, too - especially a newly-announced bug in the DNS server, BIND.

Hack in the Box - DNS expert swings a punch

Hack in the Box - DNS expert swings a punch

I'm currently in Kuala Lumpur, capital of Malaysia, for HITB - the 8th Hack in the Box conference.

HITB prides itself on being a "deep knowledge" security event - no commercial speeches from vendors and no way to buy a speaking slot.

Twitter website struck by 'Iranian Cyber Army' hackers

Image (1) twitter-hacked.jpg for post 15581

A hacking group calling itself the "Iranian Cyber Army" pulled off a coup for about an hour earlier today, redirecting visitors to the Twitter website to a page containing a green flag and Arabic writing: Fortunately there is no indication Read more…

Cybercrime update from China, Romania and USA

Cybercrime update from China, Romania and USA

I've been swanning around Scotland for the last few days attending the wedding of some friends and trying not to do myself a mischief on the dance floor. While I was in the land of haggis, ginger hair and sporrans Read more…