How-to Ping IP Address and Check DNS Settings
Stay informed about the latest enterprise technology news and product updates.
Researchers discovered a wave of BGP hijacking attacks aimed at DNS servers related to payment-processing systems in an apparent effort to steal money from unsuspecting users.
Researchers discovered BGP hijacking attacks targeting payment-processing systems and using new tricks to maximize the attackers' hold on DNS servers.
Doug Madory, director of internet analysis at Oracle Dyn, previously saw
and he said has seen them continue through July. The first attack targeted an Amazon domain name system (DNS) server in order to lure victims to a malicious site and steal cryptocurrency, but more recent attacks targeted a wider range of U.S. payment services.
"As in the Amazon case, these more recent BGP hijacks enabled imposter DNS servers to return forged DNS responses, misdirecting unsuspecting users to malicious sites. By using long
servers held these bogus DNS entries in their caches long after the BGP hijack had disappeared -- maximizing the duration of the attack," Madory wrote in a
. "The normal TTL for the targeted domains was 10 minutes (600 seconds). By configuring a very long TTL, the forged record could persist in the DNS caching layer for an extended period of time, the forged record could persist in the DNS caching layer for an extended period of time Dns Check
Madory detailed attacks on telecom companies in Indonesia and Malaysia, as well as BGP hijacking attacks on U.S. credit card and payment-processing services -- the latter of which lasted anywhere from a few minutes to almost three hours. While the payment service attacks featured similar techniques to the Amazon DNS server attack, it's unclear if the same threat actors are behind them.
Justin Jett, director of audit and compliance for Plixer, based in Kennebunk, Maine, said BGP hijacking attacks are "extremely dangerous, because they don't require the attacker to break into the machines of those they want to steal from."
"Instead, they poison the DNS cache at the resolver level, which can then be used to deceive the users. When a DNS resolver's cache is poisoned with invalid information, it can take a long time post-attacked to clear the problem. This is because of how DNS TTL works," Jett wrote via email. "As Oracle Dyn mentioned, the TTL of the forged response was set to about five days. This means that once the response has been cached, it will take about five days before it will even check for the updated record and, therefore, is how long the problem will remain, even once the BGP hijack has been resolved."
Madory said he was not optimistic about what these BGP hijacking attacks might portend because of
"If previous hijacks were shots across the bow, these incidents show the internet infrastructure is now taking direct hits," Madory wrote. "Unfortunately, there is no reason not to expect to see more of these types of attacks against the internet."
Matt Chiodi, vice president of cloud security at RedLock, based in Menlo Park, Calif., was equally as worried and said that these BGP hijacking attacks should be taken as a warning.
"BGP and DNS are the silent warriors of the internet, and these attacks are extremely serious because nearly all other internet services assume they are secure. Billions of users rely on these mostly invisible services to accomplish everything from Facebook to banking," Chiodi wrote via email. "Unfortunately, mitigating BGP and DNS-based attacks is extremely difficult given the
Are Your Defenses Against Web Application Attacks Falling Further Behind?
Exposed & At Risk: Why Your Approach to Web Application Security is ...
BMC Software Relies on Threat X to Protect Its Vast Portfolio of Enterprise ...
Web-Facing Applications: Mitigating Likely Web Application Threats
Dig Deeper on Web server threats and application attacks
How can a 13-year-old configuration flaw affect SAP systems?
How did a Navarino Infinity flaw expose unauthenticated scripts?
How a Blizzard DNS rebinding flaw put millions of gamers at risk Dns Check
Return of Bleichenbacher: ROBOT attack means trouble for TLS
Yahoo data breach found to affect all 3 billion users
Apache Struts vulnerability blamed for Equifax data breach
Project Zero discovers Cloudflare bug leaking sensitive customer data
How to manage HTTP response headers for IIS, Nginx and Apache
Breaking down the DROWN attack and SSLv2 vulnerability
Breaking down the DROWN attack and SSLv2 vulnerability
How can a 13-year-old configuration flaw affect SAP systems?
How did a Navarino Infinity flaw expose unauthenticated scripts?
How a Blizzard DNS rebinding flaw put millions of gamers at risk
Dns Check
How did OurMine hackers use DNS poisoning to attack WikiLeaks?
How HTTP security headers can defend enterprise systems
How can hackers use subtitle files to control endpoint devices?
How does your organization ensure payment systems are secure?
Context-Aware Security Provides Next-Generation Protection
A New Security Strategy that Protects the Organization When Work Is Happening ...
BGP routing security flaw caused Amazon Route 53 ...
, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.
I agree to my information being processed by TechTarget and its
to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.
No problem! Submit your e-mail address below. We'll send you an email containing your password.
How does your organization ensure payment systems are secure?
How to monitor and detect a cloud API vulnerability
A REST API vulnerability in Salesforce's Marketing Cloud service put users at risk of data disclosure. Learn how to detect cloud ...
Why container orchestration platforms risk data exposure
Container orchestration platforms expose interfaces and create the risk of data exposure and unauthorized access. Expert Dave ...
Netflix launches tool for monitoring AWS credentials
At Black Hat 2018, a Netflix security engineer introduced a new open source tool designed to more effectively monitor AWS ...
Nyansa's Voyance uses machine learning to improve Wi-Fi troubleshooting
Wi-Fi woes trip up company business, but a tool that uses machine learning can help. Read this review that covers one company's ...
VMware has brought NSX microsegmentation to workloads running on Amazon Web Services. Also, at VMworld 2018, VMware said NSX ...
Dns Check
To help you determine which CDN provider is right for you, you need to be able to read between the lines and understand the key ...
Texas college CIO pushes into enterprise service management
A mature ITSM program has not only won Link Alander's IT team kudos for superb service delivery; it is also driving automation of...
How do you go from 'lousy' systems and subpar services to an ITSM program that is driving a service approach across the ...
Transforming IT infrastructure and operations to drive digital business
In an environment where speed disrupts everything, organizations must transform their I&O. Gartner's Gregory Murray explained how...
Get users on board with your VMware Workspace One deployment
Users are the crux of a Workspace One enterprise implementation, but it takes a lot of work to get them excited about new ...
VMware Workspace One updates aim to ease Windows 10 management
VMware added new Windows 10 desktop management features for IT administrators and end users in its Workspace One updates at ...
Understand Windows Insider Program for Business options
With its business-friendly Insider Program, Microsoft allows IT and users to test Windows 10 preview builds for compatibility and...
CloudHealth's Kinsella weighs in on VMware, cloud management
VMware expanded its footprint in cloud management when it acquired CloudHealth Technologies. CloudHealth CTO Joe Kinsella ...
Open source low-code platforms extend app dev capabilities
Enterprises want their apps to go to market as fast as possible. Low-code platforms accelerate development processes, and with ...
Vendor lock-in concerns are slowly dissipating as enterprises prioritize functionality and speed to market. Other concerns ...
In this e-guide, learn how Microsoft is dominating the Software-as-a-Service space thanks to its strength in collaboration ...
DfE enrols BCS to deliver computer science teacher training programme
Initial Teacher Training Scholarship Programme aims to encourage more people to train to teach science, technology, engineering ...
“Flash mob” event will create a human collage, highlighting cyber security advice
0 Reviews:
Post Your Review