| Home : March 04 2014 Computer News : Attack campaign compromises 300,000 home routers, alters DNS settings |
|
Attack campaign compromises 300,000 home routers, alters DNS settings |
March 04, 2014
A group of attackers managed to compromise 300,000 home and small-office wireless routers, altering their settings to use rogue DNS servers, according to Internet security research organization Team Cymru.In January, Team Cymru’s researchers identified two TP-Link wireless routers whose settings were altered to send DNS (Domain Name System) requests to two particular IP addresses: 5.45.75.11 and 5.45.76.36. An analysis of the rogue DNS servers running at those IP addresses revealed a mass-scale compromise of consumer networking devices.Over a one-week period, more than 300,000 unique IP addresses sent DNS requests to the two servers, the Team Cymru researchers said in a report released Monday. Many of those IP addresses corresponded to a range of routers, including models from D-Link, Micronet, Tenda, TP-Link and other manufacturers, that had their DNS settings maliciously altered, they said.To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2104380/attack-campaign-compromises-300000-home-routers-alters-dns-settings.html#tk.rss_all
|
|
|
|
|
