dns-changing trojan

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

News to know: Supercomputer programming; Oracle Fusion; Patch day; Inbox 2.0

Notable headlines: Ed Burnette: SC07 Day 3: Programming bits and atoms. SiCortex wins Dev Connection "Sexiest in show" award. Emerging hardware to force drastic changes in programming. George Ou: IBM's liquid cooled System p 575 Power6 supercomputer. Gallery right. Dan...

Tags: Larry Dignan, Apple Macintosh, Oracle Corp., Network, Supercomputer, Yahoo! Inc., Microsoft Corp., Programming, European Union, DNS-changing Trojan, Development Tools, Desktops, Networking, Software Development, Software/Web Development, Hardware

Blog posts 2007-11-14

DNS-changing Trojan opens Mac OS X floodgates

DNS-changing Trojan opens Mac OS X floodgatesIt doesn't self-propagate and a user can't be "infected" simply by...It doesn't self-propagate and a user can't be "infected" simply by visiting the website.In short, the trojan is going nowhere.Pure nonsenseThis is a story with no substance...just sensationalism.The user has to go through a...

Tags: Spyware, Spyware, adware & malware, Operating systems, Viruses and worms, trojan horse, Mac OS X floodgate, DNS-changing Trojan, Apple Macintosh, floodgate, Linux, FUD, Apple Mac OS, Apple Mac OS X

Discussion threads 2007-11-13

DNS-changing Trojan opens Mac OS X floodgates

Guest Editorial by Gadi Evron "The Mac is going main-stream" is just one of the catch-phrases that we've seen in the past two weeks when reading about the Trojan horse infecting Apple Mac OS X users. This attack has created a lot of controversy...

Tags: Web, Apple Macintosh, Operating System, Trojan Horse, Apple Inc., User, Attack, DNS-changing Trojan, Apple Mac OS X, Microsoft Windows, Security, Spyware, Spyware, Adware & Malware, Operating Systems, Viruses And Worms, Software, Apple Mac OS, Ryan Naraine

Blog posts 2007-11-13

Additional Resources

Microsoft joins 'patch DNS now' chant; Apple patch missing

On the heels of the release of weaponized exploit code for the DNS cache poisoning vulnerability, Microsoft has joined the chorus of security pros pleading with DNS server providers to immediately apply patches to protect users from malicious attacks. The Redmond, Wash. security...

Tags: Apple Macintosh, DNS, Vulnerability, Apple Inc., Exploit Code, Microsoft Corp., Attack, Dan Kaminsky, Domain Names, Apple Mac OS X, Networking, Security, Internet, Operating Systems, Software, Apple Mac OS, Ryan Naraine

Blog posts 2008-07-25

How OpenDNS, PowerDNS and MaraDNS remained unaffected by the DNS cache poisoning vulnerability

The short answer is being paranoid about tackling a known vulnerability. It's 2001, and Daniel J. Bernstein DJB, author of the then popular djbdns security-aware DNS implementation, is applying basic math principles to raise awareness on what's to turn into the "sky is falling" critical Internet vulnerability in 2008, in...

Tags: DNS, Vulnerability, Anomaly, Attack, OpenDNS, MaraDNS, NSS, Domain Names, Networking, Internet, Dancho Danchev

Blog posts 2008-07-25

News to know: 'Spam king' dead; Microsoft's cloud; Dell;

Notable headlines: Ryan Naraine: Escapee 'Spam King' dead in apparent murder-suicide CBS Denver Video: 'Spam King' Inmate Dies Along With Wife, Daughter Mary Jo Foley: Ozzie foreshadows 'Zurich,' Microsoft's elastic cloud Microsoft to get more 'Apple-like' in PC,...

Tags: Larry Dignan

Blog posts 2008-07-25

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soonTTLSomething I wish I'd asked during the webcast and which I can't quite get my head around:It was said that setting a long TTL doesn't help because of the way delegation works - has to...

Tags: Domain names, DNS server, TTL, server, Kaminsky

Discussion threads 2008-07-24

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon

I listened to the Black Hat webcast today to grab as much info as I could on this subject. The biggest thing that I heard from the whole talk is that the patch fixes things to a reasonable point, but that long-term, there will have to be more work...

Tags: CERT, DNS Server, Server, Kaminsky, Dan, Patches, Domain Names, Security, Internet, Nathan McFeters

Blog posts 2008-07-24

AT&T iPhones exposed to DNS cache poisioning? Or not?

Here's a photo of my iPhone after running Dan Kaminsky's Doxpara DNS Checker tool a few minutes ago: I ran the same test at the DNS-OARC's DNS checker and got this:  209.183.33.23 (schinetdns.mycingular.net) appears to have GREAT source port randomness and GREAT transcation...

Tags: DNS, AT&T Corp., Domain Names, Networking, Internet, Ryan Naraine

Blog posts 2008-07-24

Microsoft to get more 'Apple-like' in PC, phone space

Microsoft to get more 'Apple-like' in PC, phone spaceMicrosoft Store in the works...My rep told me Microsoft is looking into significant retail space in higher end upscale shopping malls. In the mock-up of the store, boxes of Vista and Office 2007 were kept under lock and key. Customers will be...

Tags: Desktops, Microsoft Corp., Apple Inc., PC phone, PC, phone

Discussion threads 2008-07-24

News to know: DNS flaw; Amazon; Microsoft shakeup; Facebook

Notable headlines: Ryan Naraine: Researchers borrow from Google PageRank for network defense service Attack code published for DNS flaw Nate McFeters: |)ruid and HD Moore release part 2 of DNS exploit 'Spam King' escapes from federal prison iPhone vulnerable to phishing,...

Tags: Apple iPhone, Facebook, DNS, Amazon.com Inc., Microsoft Corp., Microsoft Xbox, Flaw, Game Players, Domain Names, Networking, Security, Consumer Electronics, Personal Technology, Internet, Larry Dignan

Blog posts 2008-07-24

|)ruid and HD Moore release part 2 of DNS exploit

|)ruid and HD Moore release part 2 of DNS exploitSo, Linux's BIND the first to be exploited...So, Linux's BIND the first to be exploited...Nice work!CoolNate, nice post and analysis!Wasn't the replacing the ns.victim.com cache entry part of the Halvar Flake speculation? I thought first part of the exploit was to...

Tags: Domain names, NETWORKING, Operating systems, Alecco, DNS, ruid, exploit, HD Moore, Linux

Discussion threads 2008-07-24

Live Webcast: Mid-Year Report: Malware, Spam and Web Threats in 2008

What's NOT happening in 2008? The web continues to be a vector for cyber threats. Incidents of spear-phishing continue to dupe users, and botnets are increasing in popularity amongst growing economies across the globe. Complex polymorphic viruses as opposed to the more mundane Trojan horses are getting...

Tags: Web, Webcast, Sophos Plc., Malware, Spyware, Adware & Malware, Cyberthreats, Viruses And Worms, Channel Management, Security, Marketing

Webcasts 2008-07-24

Code Diffs for DNS Exploit Code

Diffs between revisions of the exploit code released by HDM and |)ruid. Generated by Billy Rios. by Nathan McFeters

Tags: Revision, DNS, Exploit Code, Domain Names, Networking, Internet, Nathan McFeters, diffs, code, Exploit, HDM, |)ruid, Billy, Rios, McFeters, Nate, Nathan, screenshots

Image galleries 2008-07-23

|)ruid and HD Moore release part 2 of DNS exploit

[Updated 07/24/2008: Gallery images of diffs of code revisions has been included and will be updated as things change, see here.] Earlier today, noted researchers |)ruid and HD Moore released exploit code for the Metasploit tool for attacking the DNS flaw that was originally reported by Dan...

Tags: DNS, Domain, Server, Entry, Exploit, NS, NS Record, Domain Names, Networking, Internet, Nathan McFeters

Blog posts 2008-07-23

Attack code published for DNS flaw

Attack code published for DNS flawIrresponsible and evil"In an IM exchange, Moore told me his exploit takes about a minute or two to poison a DNS cache but said he is working to improve it in version 2.0."As far as i am concerened he is just an evil person to...

Tags: Domain names, Halvar, exploit, DNS

Discussion threads 2008-07-23

Microsoft splits its Platforms

Microsoft splits its Platformsjohnson leavingFirst of all, this is good news. It's not like he as done a good job running this companies marketing and online business. This is good news. Microsoft is making changes and its for the better. For all your naysayers who like to...

Tags: NETWORKING, Microsoft Corp., Johnson, rep, Juniper Networks Inc.

Discussion threads 2008-07-23

Attack code published for DNS flaw

The urgency to patch Dan Kaminsky's DNS cache poisoning vulnerability just went up a few notches. Exploit code for the flaw, which allows the insertion of malicious DNS records into the cache of the target nameserver, has been added to Metasploit, a freely distributed attack/pen-testing tool....

Tags: Ryan Naraine

Blog posts 2008-07-23

iPhone vulnerable to phishing, spamming flaws

iPhone vulnerable to phishing, spamming flawsBut I was told OS X would save me from things like this.[i]In the meantime, iPhone users should avoid clicking on links in the Mail app that refers to trusted sites.[/i]So if my mom sends me a link to a web album, I shouldn't open...

Tags: Spam, Cyberthreats, Desktops, SECURITY, spamming, Apple iPhone, PC, phishing

Discussion threads 2008-07-23

A look at the recent Firefox 3 vulnerability

A look at the recent Firefox 3 vulnerabilityLOLAlways makes me laugh when a Firefox article is written critical of it, no one adds an opinion.If this were about IE, the thread would be huge.quit making such a big deal, read moreWhy do people write about security vulnerabilities that have happened...

Tags: Web browsers, SECURITY, vulnerability, Mozilla Firefox, Mozilla Firefox 3.0

Discussion threads 2008-07-23