EXCLUSIVE: Med Network DNS Hijack, A Web Exploit That May Spell Cyber-Disaster

What if we hijacked the dns server responses back lol?

The problem appears to be affecting ISP DNS servers...

Therefore why not bypass your ISP DNS servers altogether and resolve your domain names straight from the horses mouth...

Checkout TreeWalk

Trust me you will never use your ISP DNS servers again

great responses in this thread!

tons of information.
check this out:
www.washtimes.com...


news.google.com...

this is a bad thing.



[edit on 20-1-2005 by __rich__]

top level domains should consider start spreading their DNS towards lower domains, using pgp-keys and checksums to authenticate the sender and the content. Hackers violating the DNS through a backdoor would alter the checksum of the database, wich could be spotted by cother clients.




[edit on 2-2-2005 by Countermeasures]

EWEEK.com

By Ian Betteridge
April 5, 2005

A security company has issued a warning over a possible hijacking of the Internet's DNS system, which has resulted in some users being unable to reach some Web sites—instead being redirected to sites maintained by the attackers.

According to the SANS Internet Storm Center, the company first received reports of so-called DNS cache poisoning attacks on March 3 and has been monitoring the problem since then.

The attack compromised servers and were pointed to an incorrect address for the root entries for the entire .com domain, allowing the hijackers to reroute traffic to any server with a .com address.

More than 1,300 domain names were hijacked, including some of those belonging to American Express, H&R Block, Fedex, Wal-Mart and CNN.

More Information here

Handler on Duty Marcus H. Sachs
April 3rd 2005
After monitoring the situation for several weeks now, it has become apparent that the attacker(s) are changing their methods and toolset to point at different compromised servers in an effort to keep the attacks alive. This attack morphed into a similar attack with different IP addresses that users were re-directed toward. This will be referred to as the third attack and is still ongoing as of April 1, 2005.

Related Links
SANS
Accurately resolve Web Sites

I was going to put some of my thoughts here, but the articles speak for themselvs.

Looks like Banshee was on to something back in December eh?


[edit on 6-4-2005 by makeitso]

Just giving this a bump.

I wrote the above late last night. I doubt many saw it.