Bleeping Computer

OCTOBER 4, 2022

Russian retail chain 'DNS' (Digital Network System) disclosed yesterday that they suffered a data breach that allegedly exposed the personal information of 16 million customers and employees. [.].

Retail 99

Retail DNS Data breaches Hacking 99

Security Affairs

JUNE 11, 2022

Iran-linked Lyceum APT group uses a new.NET-based DNS backdoor to target organizations in the energy and telecommunication sectors. The Iran-linked Lyceum APT group, aka Hexane or Spilrin, used a new.NET-based DNS backdoor in a campaign aimed at companies in the energy and telecommunication sectors, ZScaler researchers warn.

DNS 143

DNS Telecommunications Malware Phishing 143

Bleeping Computer

JANUARY 19, 2023

XLoader Android malware that incorporates a function for detecting specific WiFi routers and changing their DNS. [.] Starting in September 2022, the 'Roaming Mantis' credential theft and malware distribution campaign was observed using a new version of the Wroba.o/XLoader

DNS 92

DNS Malware Hacking Mobile 92

Security Affairs

JANUARY 22, 2023

Roaming Mantis threat actors were observed using a new variant of their mobile malware Wroba to hijack DNS settings of Wi-Fi routers. Researchers from Kaspersky observed Roaming Mantis threat actors using an updated variant of their mobile malware Wroba to compromise Wi-Fi routers and hijack DNS settings. Agent.eq (a.k.a

DNS 87

DNS Mobile Malware Hacking 87

Security Affairs

MARCH 17, 2022

Researchers uncovered a new Linux botnet, tracked as B1txor20, that exploits the Log4J vulnerability and DNS tunnel. “In short, B1txor20 is a Backdoor for the Linux platform, which uses DNS Tunnel technology to build C2 communication channels. In this way, Bot and C2 achieve communication with the help of DNS protocol.”

DNS 122

DNS Malware Technology Encryption 122

Security Affairs

APRIL 7, 2024

The flaw affects multiple D-Link NAS devices, including models DNS-340L, DNS-320L, DNS-327L, and DNS-325. The flaw impacts the following devices: DNS-320L Version 1.11, Version 1.03.0904.2013, Version 1.01.0702.2013 DNS-325 Version 1.01 DNS-327L Version 1.09, Version 1.00.0409.2013 DNS-340L Version 1.08

Internet 129

Internet Internet DNS Hacking 129

Security Affairs

MAY 9, 2021

A flaw in some DNS resolvers, tracked as TsuNAME, can allow attackers to launch DDoS attacks against authoritative DNS servers. domains), and the Information Science Institute at the University of Southern California has discovered a vulnerability, named TsuNAME, in some DNS resolvers. SecurityAffairs – hacking, TsuNAME).

DNS 127

DNS DDOS Hacking Information Security 127

Security Boulevard

APRIL 6, 2022

Domain Name Server (DNS) spoofing is a type of attack in which the DNS records are altered to redirect the online traffic to a spoofed website that resembles the original destination. The post What is DNS Spoofing? appeared first on Security Boulevard.

DNS 97

DNS Hacking 97

The State of Security

MARCH 31, 2022

Last week, I attended the NotSoSecure Advanced Web Hacking training. While there were plenty of interesting topics taught, one that caught my attention was Out-of-Band (OOB) Data Exfiltration using DNS. The post Out of Band (OOB) Data Exfiltration via DNS appeared first on The State of Security. One […]… Read More.

DNS 93

DNS Hacking 93

Security Affairs

SEPTEMBER 25, 2022

The Internet Systems Consortium (ISC) fixed six remotely exploitable vulnerabilities in the BIND DNS software. The Internet Systems Consortium (ISC) this week released security patches to address six remotely exploitable vulnerabilities in BIND DNS software. SecurityAffairs – hacking, BIND DNS). Pierluigi Paganini.

DNS 100

DNS Software Internet Internet 100

Threatpost

AUGUST 12, 2021

Threatpost interviews Wiz CTO about a vulnerability recently patched by Amazon Route53's DNS service and Google Cloud DNS.

DNS 87

DNS Hacking 87

Security Affairs

MAY 3, 2022

A vulnerability in the domain name system (DNS) component of the uClibc library impacts millions of IoT products. Nozomi Networks warns of a vulnerability, tracked as CVE-2022-05-02, in the domain name system (DNS) component of the uClibc library which is used by a large number of IoT products. ” continues the advisory.

DNS 95

DNS IoT Hacking Cybersecurity 95

Adam Levin

MARCH 21, 2019

Department of Homeland Security issued an emergency directive in January 2019 giving government agencies ten days to verify that they weren’t compromised by DNS hijacking. Today, less than 20% of DNS traffic is secured by DNSSEC, and only three percent of Fortune 1,000 companies have implemented it.

DNS 141

DNS Government Internet Internet 141

Security Affairs

SEPTEMBER 4, 2019

Experts at SEC Consult discovered several security issues in various Zyxel devices that allow to hack them via unauthenticated DNS requests. The first issue is an information disclosure flaw via unauthenticated external DNS requests that affect Zyxel devices from the USG, UAG, ATP, VPN and NXC series. Pierluigi Paganini.

DNS 77

DNS Hacking Firmware Wireless 77

Security Affairs

JANUARY 28, 2023

BIND is a suite of software for interacting with the Domain Name System (DNS) maintained by the Internet Systems Consortium (ISC). The ISC released security patches to address multiple high-severity denial-of-service DoS vulnerabilities in the DNS software suite. Then ‘named’ may exit due to a lack of free memory.

DNS 94

DNS Software Internet Internet 94

Security Affairs

AUGUST 20, 2021

The Internet Systems Consortium (ISC) addressed a high-severity denial-of-service (DoS) flaw (CVE-2021-25218) affecting the BIND DNS software. The Internet Systems Consortium (ISC) has released security updates to address a high-severity denial-of-service (DoS) vulnerability, tracked as CVE-2021-25218 , that affects its BIND DNS software.

DNS 103

DNS Internet Internet Software 103

Security Boulevard

MARCH 31, 2022

Last week, I attended the NotSoSecure Advanced Web Hacking training. While there were plenty of interesting topics taught, one that caught my attention was Out-of-Band (OOB) Data Exfiltration using DNS. The post Out of Band (OOB) Data Exfiltration via DNS appeared first on The State of Security. One […]… Read More.

DNS 52

DNS Hacking 52

Security Affairs

MAY 1, 2021

The Internet Systems Consortium (ISC) released updates for the BIND DNS software to patch several denial-of-service (DoS) and potential RCE flaws. SecurityAffairs – hacking, BIND). The post Flaws in the BIND software expose DNS servers to attacks appeared first on Security Affairs. Pierluigi Paganini.

DNS 118

DNS Software Internet Internet 118

Security Affairs

DECEMBER 10, 2018

The Linux.org website was defaced last week via DNS hijack, attackers breached into associated registrar account and changed the DNS settings. “This evening someone got into my partner’s netsol account and pointed linux.org DNS to their own cloudflare account. DNS was simply pointing to another box.”

DNS 109

DNS Accountability Advertising Authentication 109

Security Affairs

APRIL 6, 2019

Security experts at Bad Packets uncovered a DNS hijacking campaign that is targeting the users of popular online services, including Gmail, Netflix, and PayPal. Hackers compromised consumer routers and modified the DNS settings to redirect users to fake websites designed to trick victims into providing their login credentials.

DNS 105

DNS Advertising Internet Internet 105

Krebs on Security

MARCH 28, 2021

26, Shadowserver saw an attempt to install a new type of backdoor in compromised Exchange Servers, and with each hacked host it installed the backdoor in the same place: “ /owa/auth/babydraco.aspx. I’d been doxed via DNS. Further reading: A Basic Timeline of the Exchange Mass-Hack. Just my Social Security number.

Hacking 357

Hacking Cybercrime DNS Antivirus 357

Security Affairs

APRIL 11, 2024

The flaw affects D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L, these devices contain a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution. CISA orders federal agencies to fix this vulnerability by May 2, 2024.

DNS 109

DNS Authentication Hacking Cybersecurity 109

Security Affairs

FEBRUARY 19, 2021

An anonymous researcher initially reported that the Brave’s Tor mode was sending queries for.onion domains to public internet DNS resolvers, other experts confirmed his findings. Piping.onion requests through DNS where your ISP or DNS provider can see that you made a request for an.onion site defeats that purpose.”

DNS 99

DNS Internet Internet Hacking 99

Krebs on Security

SEPTEMBER 23, 2021

The data at issue refers to communications traversing the Domain Name System (DNS), a global database that maps computer-friendly coordinates like Internet addresses (e.g., DNS lookups from Alfa Bank constituted the majority of those requests. DNS lookups from Alfa Bank constituted the majority of those requests.

Banking 363

Banking DNS Internet Internet 363

Krebs on Security

FEBRUARY 26, 2023

Media coverage understandably focused on GoDaddy’s admission that it suffered three different cyberattacks over as many years at the hands of the same hacking group. But it’s worth revisiting how this group typically got in to targeted companies: By calling employees and tricking them into navigating to a phishing website.

Hacking 277

Hacking Social Engineering Phishing Scams 277

Dark Reading

JANUARY 23, 2019

All government domain owners are instructed to take immediate steps to strengthen the security of their DNS servers following a successful hacking campaign.

DNS 92

DNS Government Hacking 92

Security Affairs

APRIL 18, 2019

Iran-linked APT group OilRig is heavily leveraging on DNS tunneling for its cyber espionage campaigns, Palo Alto Networks reveals. Security researchers at Palo Alto Networks reported that Iran-linked APT group OilRig is heavily leveraging on DNS tunneling for its cyber espionage campaigns, Palo Alto Networks reveals.

DNS 78

DNS Malware Advertising Hacking 78

Security Affairs

JULY 17, 2020

US DHS CISA urges government agencies to patch SIGRed Windows Server DNS vulnerability within 24h due to the likelihood of the issue being exploited. The SigRed flaw was discovered by Check Point researcher Sagi Tzaik and impacts Microsoft Windows DNS. reads the analysis published by CheckPoint. ” states Krebs.

DNS 94

DNS Government Advertising Engineering 94

Webroot

MARCH 9, 2021

DNS (Domain Name System) is especially vulnerable. One of the most common methods of infiltration includes internet-based attacks, such as Denial of Service (DoS), Distributed Denial of Service (DDoS) and DNS poisoning. However, cybercriminals can also use legal DNS traffic surveillance to their advantage.

Hacking 115

Hacking DNS Surveillance Cybercrime 115

Krebs on Security

JULY 18, 2023

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] us , a site unabashedly dedicated to helping people hack email and online gaming accounts. A review of passive DNS records from DomainTools indicates that in 2013 pictrace[.]com

Hacking 200

Hacking Accountability Data breaches Marketing 200

Fox IT

AUGUST 11, 2022

This Saitama implant uses DNS as its sole Command and Control channel and utilizes long sleep times and (sub)domain randomization to evade detection. In May 2022, security firm Malwarebytes published a two 1 -part 2 blog about a malware sample that utilizes DNS as its sole channel for C2 communication. Introduction.

DNS 66

DNS Engineering Malware Encryption 66

Security Affairs

JULY 14, 2019

The UK’s National Cyber Security Centre (NCSC) issued a security advisory to warn organizations of DNS hijacking attacks and provided recommendations this type of attack. In response to the numerous DNS hijacking attacks the UK’s National Cyber Security Centre (NCSC) issued an alert to warn organizations of this type of attack.

DNS 76

DNS Social Engineering Accountability Advertising 76

Security Affairs

JULY 14, 2020

The SigRed flaw was discovered by Check Point researcher Sagi Tzaik and impacts Microsoft Windows DNS. An attacker could exploit the SigRed vulnerability by sending specially-crafted malicious DNS queries to a Windows DNS server. Non-Microsoft DNS Servers are not affected.”

DNS 59

DNS Advertising Malware Hacking 59

Threatpost

JUNE 26, 2019

Google finalizes its DNS-over-HTTPS service inching toward a world where DNS request are sent via HTTPS and not UDP or TCP.

DNS 85

DNS Hacking 85

Security Affairs

JANUARY 10, 2019

Security expert uncovered a DNS hijacking campaign targeting organizations in various industries worldwide and suspects Iranian APT groups. It is interesting to note that FireEye confirmed that this campaign is different from other operations carried out by Iranian APT groups due to the use of DNS hijacking at scale.

DNS 79

DNS Telecommunications Government Encryption 79

Security Affairs

APRIL 24, 2024

Mutex_ONLY_ME_V1 ), the malware searches for services.exe process and injects its next stage into the first one it can find Cleanup is performed, removing the update package GuptiMiner operates its own DNS servers to provide legitimate destination domain addresses of C2 servers through DNS TXT responses.

Antivirus 93

Antivirus Malware DNS Cryptocurrency 93

Krebs on Security

MARCH 9, 2021

The IE weakness — CVE-2021-26411 — affects both IE11 and newer EdgeHTML-based versions, and it allows attackers to run a file of their choice by getting you to view a hacked or malicious website in IE. “There is the outside chance this could be wormable between DNS servers,” warned Trend Micro’s Dustin Childs.

DNS 323

DNS Internet Internet Software 323