Slashdot Mirror
Iranian Hackers Suspected in Worldwide DNS Hijacking Campaign (zdnet.com)
US cybersecurity firm FireEye has uncovered an extremely sophisticated hacking campaign during which a suspected Iranian group redirected traffic from companies all over their globe through their own malicious servers, recording company credentials for future attacks. From a news report: Affected organizations include telecoms, ISPs, internet infrastructure providers, government, and sensitive commercial entities across the Middle East, North Africa, Europe, and North America. FireEye analysts believe an Iranian-based group is behind the attacks, although there is no definitive proof for exact attribution just yet. Researchers said the entities targeted by the group have no financial value, but they would be of interest to the Iranian government.
People actually believe this stuff? Don't answer, rhetorical question. Just curious...
“He’s not deformed, he’s just drunk!”
So those of us on a different globe are not affected?
I eat only the real part of complex carbohydrates.
... that Iran were the good guys. He even proved it by giving them $400M in cash!
""While the precise mechanism by which the DNS records were changed is unknown, we believe that at least some records were changed by compromising a victim's domain registrar account,"
When Republicans lie, all they effectively do is make their tiny penis just that much shorter. There are few males left. FYI that was Iran's money that the US had taken illegally and was compelled to give back by a court, in fact, and the way Obama got them to agree to the payment WITHOUT INTEREST was very much in the US best interest as it saved billions in EXTRA money that would have been paid to Iran. So yes, thanks Obama.
TLDR, basically Republicans are faggots who lie about everything.
This is timely. Right now, because of the shutdown, there are a lot of government domains whose certs are not being renewed, because there are no sysadmins able to renew them. So, with an expired cert, all it takes is a DNS attack to redirect someone from foo.gov to foo.ir, as the user is almost certainly not going to examine the cert and manually check its pedigree and dates.
This is going to cause grave security concerns going forward.
FireEye, is this the same shower that provided security to Equifax:
Equifax back FireEye for hacker defence:
“We have this category that Equifax calls unhandled malware, [with] which traditional security approaches haven’t been very helpful. Putting in FireEye has really helped us detect this unhandled malware, then gives us the capability to take action to stay secure.” link
That actually would not stop this attack. Sorry!
Bingo. Trump's "security concern" about the border (in fact 7 TIMES more terrorist suspects enter at the northern border, but forgetting that for now..) has caused massive security VULNERABILITIES across the board.
Impeach and hang the traitor.
hahhaha i dont use dns
It's an attempt @ redirecting DNS (near same as Kaminsky poisoning flaw does) & if you hardcode proper IP address to hostname in hosts, you not only RESOLVE IT FASTER vs. remote or even local DNS, but you also get there NON-REDIRECTED & where you intended to do (not a malicious doppleganger site OR otherwise non-genuine site).
* I.E. - You get where you INTENDED to get to - not some BOGUS alternate due to redirected/poisoned DNS...
APK
P.S.=> Doing hosts the way my program does allows that & protects vs. threats galore + speeds you up 2 ways, natively (vs. "Bolt-on-'MoAr'" ILLOGIC-LOGIC "solutions" full of security issues I noted in the post you replied to) + avoids DNS requestlog tracking too... apk
Ever wonder why APK always posts an an AC?
Well, it's because APK is a Chinese hacker, and is actually the one responsible for this attack!
APK Hosts File Engine rerouts all your traffic to Russia, China, and Iran!!
Unidentifiable AC stalker of me says what YOU did? Please - lmao! I'm NOT 'the bad guy' (to quote Ben Affleck's Daredevil rendition) & be GLAD I'm not - since IF I were? Believe you me - I'd be writing stuff that would BLOW AWAY any threats being done out there now - by far...
* I don't DO "bogus" crap though & why? The internet itself really - in my 1/2 century++ of existence, it's one of, if not THE coolest thing I've ever seen done in my lifetime (great learning tool more than ANYTHING imo).
APK
P.S.=> I wrote the 1st model of this program in 2001 (some old utilities I wrote still have that model (sucked vs. this version imo)) & didn't get 'serious' about it until 2010 or so when things got REALLY "stupid" out there & it's worse now so, it was needed (to help stop the 'spread of the disease' so-to-speak))... apk
Not to worry. Give him another 5 bil, and he'll give you a glorious new concrete fireWall!
“He’s not deformed, he’s just drunk!”
Guruevi is an admitted pedo. Remember that every time he speaks. (Look in his comments 6 months ago, see for yourself)
And how can we know FireEye had not received an NSL telling them to lie about this?
By the same logic that US is blocking Huawei, every US company is only one NSL away from being an extension of the US military and intelligence service. Nothing coming from any US firm can be trusted when it comes to anything related to Iran, Russia, China, etc.
See subject & "Remember what we told you" https://tech.slashdot.org/comm... "you keep your eyes open: They're EVERYWHERE..."
* :)
APK
P.S.=> "The world you live in is just a sugar-coated topping - there is ANOTHER WORLD, beneath it - & IF you want to SURVIVE IT, you'd better LEARN to PULL the TRIGGER!"... apk
See subject & "Remember what we told you" https://tech.slashdot.org/comm... "you keep your eyes open: They're EVERYWHERE..."
* "There's a war going on out there. Blade, myself & a few others try to keep it from spilling onto the streets - You have to understand: They're everywhere. We hunt 'em you see, tracking their migrations. They're hard to kill, they tend to regenerate..." - Abraham Whistler
APK
P.S.=> "The world you live in is just a sugar-coated topping - there is ANOTHER WORLD, beneath it - THE REAL WORLD, & IF you want to SURVIVE IT, you'd better LEARN to PULL the TRIGGER!"... apk
"You'll hunt me. You'll condemn me. Set the dogs on me" Batman from "The Dark Knight" (& you'll FAIL)...
* "Sometimes, people deserve to have their FAITH REWARDED" per https://tech.slashdot.org/comm...
Host-domain use in malware's down & I think what I did helped that per https://unit42.paloaltonetwork...
(Especially all you "Lucius Fox" types - as I make not only malware threats go away but I make trackers & YES DNS REDIRECTS disappear too (right from that scene in the film by analogy))
(MY FAITH IS REWARDED by that ACT OF FAITH on my part)
"He didn't do anything wrong" - Jamie Gordon "The Dark Knight"!
APK
P.S.=> Any of you with talent/skills should be doing the SAME & Make a Wheel https://isc.sans.edu/forums/di... as I did multiplatform - it's EXACTLY mostly for those who you speak of... apk
It's a "computer security" imperial textile shop well known for shouting "hackers! hacking! with hacks!" in its press releases, a press release copy/pasted by a imperial textile "news" website also well known for shouting "hackers! hacking! with hacks!", and it's about "state-run hackers! with state-hacks! cyber state-backed cyber hacking!"
And of course msmash would be the first to post this.
Dare I say it... collusion?
You backed the Shah. You done fucked up.
The only debts owed from the Iranian Revolution is an APPOLOGY from the American President for suporting the murderous Shah regime.
But keep delluding yourself with Foxnews you mouthbreathing faggot.
See subject (+ DNS tracking & security issues like Kaminsky redirect poisoning 95++% of ISP dns aren't patched vs): I do for my TOP 100 fav sites I hardcode @ TOP of hosts files (for fastest possible local RAM based resolution speed along w/ blocking ads, infectors, malware, phishmail payload links, & malcript, etc. - et al) via:
APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between chars & download)
APK Hosts File Engine 10++ SR-1 32/64-bit for Windows https://hosts-file.net/?s=Down... (DL link @ bottom)
* Soon for MacOS (just got a NEW Mac-Mini to port it there)
APK
P.S.=> Accept NO substitutes (especially INFERIOR competitors in 'solutions' FULL of security issues (DNS/Antivirus OR 'souled-out' to NOT work by default (like adblock & other easily detected & nullified browser addons that DO LESS & yet USE MORE)))... apk