Collaborate Disseminate
An emergency directive from the Department of Homeland Security provides “required actions” for U.S. government agencies to prevent widespread DNS hijacking attacks. Continue reading U.S. Gov Issues Urgent Warning of DNS Hijacking Attacks
The U.S. Department of Homeland Security (DHS) has today issued an “emergency directive” to all federal agencies ordering IT staff to audit DNS records for their respective website domains, or other agency-managed domains, within next 10 business days…. Continue reading DHS Orders U.S. Federal Agencies to Audit DNS Security for Their Domains
The Department of Homeland Security is preparing to issue a rare “emergency” directive ordering federal civilian agencies to secure the login credentials for their internet domain records, according to government officials familiar with the matter. DHS is expected to issue the order as soon as Tuesday, officials said, out of concern that federal agencies could be vulnerable to cyberattacks intended to gain access to the platforms used to manage domain name system (DNS) records. The DNS system, dubbed the “phone book of the internet,” translates a domain name to a valid IP address, sending a user to the website they are trying to access. Once compromised, a DNS server or registrar account can be used to redirect users to a malware-laden website. There are at least six civilian agency domains that have been affected by malicious DNS activity, according to people familiar with the matter. The emergency directive, which carries more urgency than DHS’s more-common Binding Operational […]
The post DHS prepares emergency order to prevent DNS hijacking appeared first on CyberScoop.
Continue reading DHS prepares emergency order to prevent DNS hijacking
An unknown actor with “a nexus to Iran” is hijacking aspects of the internet’s infrastructure to target the traffic of government and telecommunications organizations around the world, according to research published by FireEye on Wednesday. Researchers say the perpetrator is using sophisticated methods to manipulate domain name server (DNS) records, diverting the targets’ traffic through malicious servers. DNS is a behind-the-scenes system that links domain names to the actual IP addresses where the user’s intended web destination lies. The identity of the attacker remains unclear. Researchers said they’ve observed the campaign in “multiple clusters” between January 2017 and January 2019. Researchers observed at least three different techniques to hijack targets’ traffic. The methods involve using compromised credentials for the target’s DNS administration panels or domain registrar accounts in order to change DNS records, forcing the victim’s system to pass through malicious IP addresses. FireEye says the attackers also use legitimate-looking certificates on their […]
The post Broad DNS hijacking campaign could originate in Middle East: FireEye appeared first on CyberScoop.
Continue reading Broad DNS hijacking campaign could originate in Middle East: FireEye
The attacks, targeting several countries to redirect traffic and harvest credentials, have been linked to Iran. Continue reading ‘Unprecedented’ DNS Hijacking Attacks Linked to Iran
For the past year, attackers have been using an exploit kit that changes the DNS settings of home and small-business routers through users’ browsers. The tool, dubbed Novidade, was first used in Brazil in August 2017, but researchers from antivir… Continue reading Attack Kit Hijacks DNS of Home and Business Routers
Administrators lost control of the domain for several hours in a DNS hijacking incident. Continue reading Linux.org Redirected to NSFW Page Spewing Racial Epithets
BGP hijack attacks are increasing in popularity, but are still largely unaddressed in many organizational incident response plans.
The post Why You Need a BGP Hijack Response Plan appeared first on Security Intelligence.
Keeping your DNS safe is critical in today’s increasingly dangerous cyber environment Preventing hackers from accessing your private data is a complicated task on its own. Data security and privacy are becoming more difficult in the face of cybe… Continue reading Major DNS Threats: Preventing DNS Hijacking and Leaks
By understanding the basics of DNS analytics, the common methods of attack and the tools available to security teams, you will be better prepared to protect your enterprise from hidden cyberthreats.
The post 5 Tips for Uncovering Hidden Cyberthreats with DNS Analytics appeared first on Security Intelligence.
Continue reading 5 Tips for Uncovering Hidden Cyberthreats with DNS Analytics