Security Affairs

MAY 1, 2024

The China-linked threat actors Muddling Meerkat are manipulating DNS to probe networks globally since 2019. Infoblox researchers observed China-linked threat actors Muddling Meerkat using sophisticated DNS activities since 2019 to bypass traditional security measures and probe networks worldwide. ” concludes the report.

DNS 142

DNS Firewall DDOS Hacking 142

Security Affairs

JUNE 11, 2022

Iran-linked Lyceum APT group uses a new.NET-based DNS backdoor to target organizations in the energy and telecommunication sectors. The Iran-linked Lyceum APT group, aka Hexane or Spilrin, used a new.NET-based DNS backdoor in a campaign aimed at companies in the energy and telecommunication sectors, ZScaler researchers warn.

DNS 145

DNS Telecommunications Malware Phishing 145

Security Affairs

JULY 26, 2024

The Internet Systems Consortium (ISC) released BIND security updates that fixed several remotely exploitable DoS bugs in the DNS software suite. The Internet Systems Consortium (ISC) released security updates for BIND that address DoS vulnerabilities that could be remotely exploited. In BIND 9 versions 9.18.1 S1 through 9.18.27-S1,

DNS 145

DNS Software Internet Internet 145

Security Affairs

DECEMBER 6, 2024

The getresetstatus vulnerability in CyberPanel (before commit 1c0c6cb ) affects dns/views.py “getresetstatus in dns/views.py “getresetstatus in dns/views.py and ftp/views.py. Attackers can manipulate the statusfile property with shell metacharacters. and ftp/views.py ” reads the advisory. . and ftp/views.py

DNS 110

DNS Authentication Ransomware Hacking 110

Security Affairs

MAY 3, 2022

A vulnerability in the domain name system (DNS) component of the uClibc library impacts millions of IoT products. Nozomi Networks warns of a vulnerability, tracked as CVE-2022-05-02, in the domain name system (DNS) component of the uClibc library which is used by a large number of IoT products. ” continues the advisory.

DNS 126

DNS IoT Hacking Cybersecurity 126

Security Affairs

JULY 17, 2020

US DHS CISA urges government agencies to patch SIGRed Windows Server DNS vulnerability within 24h due to the likelihood of the issue being exploited. The SigRed flaw was discovered by Check Point researcher Sagi Tzaik and impacts Microsoft Windows DNS. reads the analysis published by CheckPoint. ” states Krebs.

DNS 140

DNS Government Advertising Engineering 140

Security Affairs

FEBRUARY 12, 2024

ExpressVPN addressed a bug in the split tunneling feature that exposed the domains visited by the users to configured DNS servers. The expert noticed that the DNS queries were sent to the DNS server configured on the computer. Anyway, disabling the split tunneling feature will prevent the leak of the DNS requests.

DNS 138

DNS VPN Encryption Internet 138

Security Affairs

MAY 1, 2021

The Internet Systems Consortium (ISC) released updates for the BIND DNS software to patch several denial-of-service (DoS) and potential RCE flaws. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

DNS 141

DNS Software Internet Internet 141

Security Affairs

MAY 24, 2024

The use of Dynamic DNS (DDNS) services embedded in appliances can potentially expose data and devices to attacks. The use of Dynamic DNS (DDNS) services embedded in appliances, such as those provided by vendors like Fortinet or QNAP, carries cybersecurity implications. It increases the discoverability of customer devices by attackers.

DNS 137

DNS Manufacturing Firewall Internet 137

Security Affairs

JULY 14, 2019

The UK’s National Cyber Security Centre (NCSC) issued a security advisory to warn organizations of DNS hijacking attacks and provided recommendations this type of attack. “In January 2019 the NCSC published an alert to highlight a large-scale global campaign to hijack Domain Name Systems (DNS).”

DNS 108

DNS Social Engineering Accountability Advertising 108

Security Affairs

AUGUST 20, 2021

The Internet Systems Consortium (ISC) addressed a high-severity denial-of-service (DoS) flaw (CVE-2021-25218) affecting the BIND DNS software. The Internet Systems Consortium (ISC) has released security updates to address a high-severity denial-of-service (DoS) vulnerability, tracked as CVE-2021-25218 , that affects its BIND DNS software.

DNS 110

DNS Internet Internet Software 110

Security Affairs

MARCH 12, 2025

Microsoft Patch Tuesday security updates for March 2025 addressed 56 vulnerabilities in Windows and Windows Components, Office and Office Components, Azure,NET and Visual Studio, Remote Desktop Services, DNS Server, and Hyper-V Server. Six vulnerabilities are rated Critical, and 50 are rated Important in severity.

DNS 109

DNS Hacking Information Security 109

Security Affairs

SEPTEMBER 25, 2022

The Internet Systems Consortium (ISC) fixed six remotely exploitable vulnerabilities in the BIND DNS software. The Internet Systems Consortium (ISC) this week released security patches to address six remotely exploitable vulnerabilities in BIND DNS software. SecurityAffairs – hacking, BIND DNS). Pierluigi Paganini.

DNS 108

DNS Software Internet Internet 108

Security Affairs

DECEMBER 10, 2024

Dubai Police have warned against calls from scammers asking for financial details, reminding residents that official institutions will never request this information over the phone. Based on available Passive DNS records, Resecurity identified over 144 domain names registered by the actors in the.com,om,site,top and.icu domain zones.

Social Engineering 112

Social Engineering Phishing Banking DNS 112

Security Affairs

JANUARY 22, 2023

Roaming Mantis threat actors were observed using a new variant of their mobile malware Wroba to hijack DNS settings of Wi-Fi routers. Researchers from Kaspersky observed Roaming Mantis threat actors using an updated variant of their mobile malware Wroba to compromise Wi-Fi routers and hijack DNS settings. Agent.eq (a.k.a

DNS 98

DNS Mobile Malware Hacking 98

Security Affairs

JULY 14, 2020

The SigRed flaw was discovered by Check Point researcher Sagi Tzaik and impacts Microsoft Windows DNS. An attacker could exploit the SigRed vulnerability by sending specially-crafted malicious DNS queries to a Windows DNS server. Non-Microsoft DNS Servers are not affected.”

DNS 96

DNS Advertising Hacking Malware 96

Security Affairs

FEBRUARY 19, 2025

The OpenSSH client vulnerability (CVE-2025-26465) allows an attack to succeed regardless of the VerifyHostKeyDNS setting, without user interaction or reliance on SSHFP DNS records. Introduced in December 2014 (OpenSSH 6.8p1), this flaw remained active, with FreeBSD enabling VerifyHostKeyDNS by default from 2013 to 2023, increasing exposure.

Authentication 123

Authentication System Administration DNS Hacking 123

Security Affairs

MAY 13, 2025

Between 2017 and 2019, the APT group mainly used DNS hijacking in its campaigns. The group targets government entities, Kurdish (political) groups like PKK, telecommunication, ISPs, IT-service providers (including security companies), NGO, and Media & Entertainment sectors. These tools exfiltrate data via api.wordinfos[.]com.

DNS 86

DNS Telecommunications Architecture Media 86

Security Affairs

JULY 4, 2019

Researchers at Network Security Research Lab of Qihoo 360 discovered a Lua-based backdoor dubbed Godlua that targets both Linux and Windows systems. The peculiarity of this new piece of malware is the ability to communicate with C2 servers via DNS over HTTPS ( DoH ). com domain. ” states the analysis. ” states the analysis.

DNS 107

DNS Malware Advertising DDOS 107

Security Affairs

NOVEMBER 10, 2024

“In an email to staff sent Thursday, the chief information officer at the Consumer Financial Protection Bureau warned that internal and external work-related meetings and conversations that involve nonpublic data should only be held on platforms such as Microsoft Teams and Cisco WebEx and not on work-issued or personal phones.”

Hacking 131

Hacking Internet Internet Government 131

Krebs on Security

AUGUST 23, 2024

A core part of the way these things find each other involves a Windows feature called “ DNS name devolution ,” a kind of network shorthand that makes it easier to find other computers or servers without having to specify a full, legitimate domain name for those resources. ” Caturegli said setting up an email server record for memrtcc.ad

DNS 329

DNS Internet Internet Authentication 329

Security Affairs

JANUARY 28, 2023

BIND is a suite of software for interacting with the Domain Name System (DNS) maintained by the Internet Systems Consortium (ISC). The ISC released security patches to address multiple high-severity denial-of-service DoS vulnerabilities in the DNS software suite. Then ‘named’ may exit due to a lack of free memory.

DNS 98

DNS Software Hacking Internet 98

Security Affairs

APRIL 16, 2020

Linksys has reset passwords for all its customers’ after learning on ongoing DNS hijacking attacks aimed at delivering malware. Hackers compromise D-Link and Linksys routers and change DNS settings to redirect users to bogus sites proposing a fake COVID-19 information app from the World Health Organization.

Passwords 145

Passwords DNS Malware Advertising 145

Security Affairs

AUGUST 1, 2024

Researchers warn of an attack vector in the DNS, called the Sitting Ducks, that exposes over a million domains to hackers’ takeover. Researchers from Eclypsium and Infoblox have identified an attack vector in the domain name system (DNS), dubbed the Sitting Ducks attack. ” continues the report.

DNS 125

DNS Accountability Risk Hacking 125

Security Affairs

FEBRUARY 12, 2024

Public Wi-Fi users are prime targets for MITM attacks because the information they send is often not encrypted, meaning it’s easy for hackers to access your data. Hackers use intercepted data to hijack your current session on a website, giving them access to your private accounts and information.

DNS 143

DNS VPN Encryption Passwords 143

Security Affairs

AUGUST 4, 2024

Volexity researchers reported that a China-linked APT group, tracked as StormBamboo (aka Evasive Panda , Daggerfly , and StormCloud), successfully compromised an undisclosed internet service provider (ISP) in order to poison DNS responses for target organizations. The company linked the attacks to StormBamboo APT group.

Malware 144

Malware DNS Firewall Software 144

Security Affairs

SEPTEMBER 19, 2020

The popular encrypted email service Tutanota was hit with a series of DDoS attacks this week targeting its website fist and its DNS providers later. Encrypted email service, Tutanota suffered a series of DDoS attacks that initially targeted the website and later its DNS providers. “As a result these providers went down. .

DDOS 145

DDOS Encryption DNS Advertising 145

Security Affairs

APRIL 10, 2025

DNS records link domains like servicewrap-go[.]com All versions analyzed used the same Telegram token and chat ID. The researchers noticed that the spam domains rotate frequently to evade detection. The oldest, akirateam[.]com com , dates to Jan 2022. com to 77980.bodis[.]com com , a known malvertising host. Connections suggest ties to unj[.]digital

eCommerce 129

eCommerce Technology DNS Business Services 129

Security Affairs

APRIL 24, 2024

Mutex_ONLY_ME_V1 ), the malware searches for services.exe process and injects its next stage into the first one it can find Cleanup is performed, removing the update package GuptiMiner operates its own DNS servers to provide legitimate destination domain addresses of C2 servers through DNS TXT responses. ” concludes the report.

Antivirus 132

Antivirus Malware DNS Cryptocurrency 132

Security Affairs

MARCH 3, 2024

The Bifrost RAT has been active since 2004, it allows its operators to gather sensitive information, including hostname and IP address. ” The sample binary analyzed by the experts is compiled for x86, the authors removed debugging information and symbol tables to hinder analysis. com by using the public DNS resolver at 168.95[.]1.1.

DNS 141

DNS Malware Encryption Hacking 141

Security Affairs

APRIL 30, 2025

They also updated the OceanMap stealer to exfiltrate browser credentials and ran phishing campaigns to steal Yahoo and UKR.NET login info using fake pages and dynamic DNS to hide infrastructure. In 2023, they used free web services like InfinityFree and Mocky.IO reads a statement published by Frances Ministry for Europe and Foreign Affairs.

Government 115

Government Phishing DNS VPN 115

Security Affairs

OCTOBER 11, 2021

A malicious cyber actor who gains control of the private key associated with a wildcard certificate will provide them the ability to impersonate any of the sites represented, and gain access to valid user credentials and protected information.” ” reads the Cybersecurity Information Sheet released by NSA. Pierluigi Paganini.

DNS 142

DNS Encryption Risk Firewall 142

Security Affairs

NOVEMBER 4, 2020

150 PAGESLOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. We hope you enjoy this month’s edition…packed with over 150 pages of excellent content. Always free, no strings attached.

InfoSec 137

InfoSec DNS Advertising Marketing 137

Security Affairs

APRIL 11, 2024

The flaw affects D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L, these devices contain a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.

DNS 132

DNS Authentication Hacking Cybersecurity 132

Security Affairs

NOVEMBER 24, 2020

Crooks were able to trick GoDaddy staff into handing over control of crypto-biz domain names in a classic DNS hijacking attack. Crooks were able to hijack traffic and email to various cryptocurrency-related websites as a result of a DNS hijacking attack on domains managed by GoDaddy. SecurityAffairs – hacking, DNS hijacking).

Social Engineering 106

Social Engineering Engineering DNS Accountability 106

Security Affairs

JANUARY 5, 2025

Nuclei supports multiple protocols, including HTTP, TCP, DNS, TLS, andCode. Nuclei templates using the code protocol can assess system security but risk executing malicious code locally, potentially compromising servers or infrastructure.

DNS 117

DNS Risk Engineering Hacking 117

Security Affairs

APRIL 7, 2024

The flaw affects multiple D-Link NAS devices, including models DNS-340L, DNS-320L, DNS-327L, and DNS-325. An attacker can exploit the flaw to achieve command execution on the affected D-Link NAS devices, gain access to potential access to sensitive information, system configuration alteration, or denial of service.

Internet 110

Internet Internet DNS Hacking 110