D-Link routers vulnerable to DNS hijacking

Thursday, January 29th, 2015

At least one and likely more D-Link routers as well as those of other manufacturers using the same firmware are vulnerable to remote changing of DNS settings and, effectively, traffic hijacking, a Bulgarian security researcher has discovered. Todor Donev, a member of the Ethical Hacker research team, says that ...

More than 24M home routers enabling DNS amplification DDoS attacks

Thursday, April 3rd, 2014

Tens of millions of the home routers we rely on everyday for internet access are enabling Domain Name System (DNS) based distributed denial-of-service (DDoS) attacks, and owners may never even know it, according to research by DNS software provider Nominum. Working collaboratively with the Open Resolver Project, Nominum learned that open ...

Word and Excel Files Infected Using Windows PowerShell

Thursday, March 27th, 2014

Malware targeting Word and Excel files has been around for some time, but we recently encountered a new malware family, CRIGENT (also known as “Power Worm”) which brings several new techniques to the table. (We detect these files as W97M_CRIGENT.JER and X97M_CRIGENT.A.) Most significantly, instead of creating or including executable code, CRIGENT uses the ...

United States to give up its oversight on domain name assignment

Sunday, March 16th, 2014

In the wake of an NSA spying scandal which has shaken the faith of many in the United States' dedication to digital privacy, the U.S government has announced that it will be ceding its oversight of ICANN - the organization which manages domain name assignment for every site on the internet. According ...

Cybercriminals compromise home routers to attack online banking users

Friday, February 7th, 2014

Attacks recently observed in Poland involved cybercriminals hacking into home routers and changing their DNS settings so they can intercept user connections to online banking sites. Researchers from the Polish Computer Emergency Response Team (CERT Polska) believe attackers will likely target users from other countries as well in the future using ...