{"id":11788,"date":"2019-04-07T07:32:14","date_gmt":"2019-04-07T12:32:14","guid":{"rendered":"http:\/\/thewei.com\/kimi\/?p=11788"},"modified":"2019-04-07T07:34:44","modified_gmt":"2019-04-07T12:34:44","slug":"dns-servers-hacked-netizens-trying-to-reach-certain-sites-are-connected-to-phishing-sites","status":"publish","type":"post","link":"https:\/\/thewei.com\/kimi\/dns-servers-hacked-netizens-trying-to-reach-certain-sites-are-connected-to-phishing-sites\/","title":{"rendered":"DNS servers hacked: netizens trying to reach certain sites are connected to phishing sites"},"content":{"rendered":"\n

EXCERPT: Stefan Tanase, principal security researcher at Ixia, told Ars that the DNS servers described in this article were taken down and that the attackers have replaced them with new DNS servers. Ixia analyzed the rogue DNS server and found it targets the following domains: GMail.com<\/a>, PayPal.com<\/a>, Netflix.com<\/a>, Uber.com<\/a>, caix.gov.br<\/a>, itau.com.br<\/a>, bb.com.br<\/a>, bancobrasil.com.br<\/a>, sandander.com.br<\/a>, pagseguro.uol.com.br<\/a>, sandandernet.com.br<\/a>, cetelem.com.br<\/a>, and possibly other sites. People trying to reach one of these domains from an infected router will be connected to a server that serves phishing pages over plain HTTP.<\/p>\n\n\n\n

Below is how cetelem.com.br<\/a> appeared in Firefox on a machine configured to use one of the malicious DNS servers.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

What follows is this article as it appeared on Thursday, 4\/4\/2019, 2:59 PM:<\/p>\n\n\n\n

A wave of DNS hijacking attacks that abuse Google’s cloud computing service is causing consumer routers to connect to fraudulent and potentially malicious websites and addresses, a security researcher has warned.
<\/p>\n\n\n\n

By now, most people know that Domain Name System servers translate human-friendly domain names into the numeric IP addresses that computers need to find other computers on the Internet. Over the past four months, a blog post published Thursday said, attackers have been using Google cloud service to scan the Internet for routers that are vulnerable to remote exploits. When they find susceptible routers, the attackers then use the Google platform to send malicious code that configures the routers to use malicious DNS servers…<\/p>\n\n\n\n

(jump to full article)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

EXCERPT: Stefan Tanase, principal security researcher at Ixia, told Ars that the DNS servers described in this article were taken down and that the attackers have replaced them with new DNS servers. Ixia analyzed the rogue DNS server and found it targets the following domains: GMail.com, PayPal.com, Netflix.com, Uber.com, caix.gov.br, itau.com.br, bb.com.br, bancobrasil.com.br, sandander.com.br, pagseguro.uol.com.br, sandandernet.com.br, cetelem.com.br, and possibly other sites. People trying to reach one of … <\/p>\n

Continue reading “DNS servers hacked: netizens trying to reach certain sites are connected to phishing sites”<\/span><\/a><\/p>\n","protected":false},"author":28,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1],"tags":[],"class_list":["post-11788","post","type-post","status-publish","format-standard","hentry","category-all"],"jetpack_publicize_connections":[],"_links":{"self":[{"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/posts\/11788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/comments?post=11788"}],"version-history":[{"count":3,"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/posts\/11788\/revisions"}],"predecessor-version":[{"id":11796,"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/posts\/11788\/revisions\/11796"}],"wp:attachment":[{"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/media?parent=11788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/categories?post=11788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thewei.com\/kimi\/wp-json\/wp\/v2\/tags?post=11788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}