Snappy newsletters. Simple Facebook sharing. Spirited comments. Sweet features are waiting… GET THEM NOW!

Latest Domain Name Hack Disguises Its Danger

Can secretly steer Windows users wrong

By Nick McMaster,  Newser Staff

Posted Dec 11, 2007 8:48 PM CST

(Newser) – The misdirection of “open-recursive” DNS servers, which facilitate web-surfing by translating verbal domain names into numerical IP addresses, is the new, more covert face of cyber-criminality, and could explode into a new wave of phishing attacks, IDG News reports. Hackers can use these types of DNS servers to redirect a web user to pages of their choosing, regardless of the web address they entered.

DNS server misdirection itself is not new, but attacks are now coordinated with web- or email-based malware, which changes a Windows registry setting so that an individual's computer can only visit DNS servers compromised by the criminals. With that control, they can subtly, perhaps only occasionally send a user to fake sites—such as during an online banking session—or simply hijack their entire Internet experience.

DNS server-based phishing attacks are very effective at stealing passwords.
DNS server-based phishing attacks are very effective at stealing passwords.   (shutter stock)
Phishing attacks involve the theft of personal information.
Phishing attacks involve the theft of personal information.   (Shutter stock)
« Prev« Prev | Next »Next » Slideshow
To report an error on this story, notify our editors.
A snapshot of the day's best news stories.
 
COMMENTS
Be the first to comment on this story.

More Newser Stories

'Every Network Is at Risk' Thanks to Bug

Hackers Hit Internet Giant VeriSign

Coming This Week: Dot-Anything

Internet Boots WikiLeaks—Temporarily

iTunes Hackers Emptying PayPal Accounts


NEWS FROM OUR PARTNERS
Other Sites We Like:   24/7 Wall St.   |   Betty Confidential   |   BuzzFeed   |   Cracked   |   Fark   |   Timelines   |   The Frisky   |   Geek Sugar   |   NewsOne