{"id":1098144,"date":"2023-01-19T19:00:29","date_gmt":"2023-01-20T00:00:29","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1098144"},"modified":"2023-01-19T19:00:29","modified_gmt":"2023-01-20T00:00:29","slug":"hacker-group-incorporates-dns-hijacking-into-its-malicious-website-campaign","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1098144","title":{"rendered":"Hacker group incorporates DNS hijacking into its malicious website campaign"},"content":{"rendered":"
\n
\n \"DNS<\/p>\n

Enlarge<\/a> \/<\/span> DNS hijacking concept. <\/p>\n<\/figure>\n

<\/div>\n

Researchers have uncovered a malicious Android app that can tamper with the wireless router the infected phone is connected to and force the router to send all network devices to malicious sites.<\/p>\n

The malicious app, found by Kaspersky<\/a>, uses a technique known as DNS (Domain Name System) hijacking. Once the app is installed, it connects to the router and attempts to log in to its administrative account by using default or commonly used credentials, such as admin:admin. When successful, the app then changes the DNS server to a malicious one controlled by the attackers. From then on, devices on the network can be directed to imposter sites that mimic legitimate ones but spread malware or log user credentials or other sensitive information.<\/p>\n

Capable of spreading widely<\/h2>\n

\u201cWe believe that the discovery of this new DNS changer implementation is very important in terms of security,\u201d Kaspersky researchers wrote. \u201cThe attacker can use it to manage all communications from devices using a compromised Wi-Fi router with the rogue DNS settings.\u201d<\/p>\n<\/div>\n

Read 8 remaining paragraphs<\/a> | Comments<\/a><\/p>\n


\n
\nSource: Ars Technica – Hacker group incorporates DNS hijacking into its malicious website campaign<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Enlarge \/ DNS hijacking concept. Researchers have uncovered a malicious Android app that can tamper with the wireless router the infected phone is connected to and force the router to send all network devices to malicious sites. The malicious app, … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1098145,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1098144","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1098144","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1098144"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1098144\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1098145"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1098144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1098144"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1098144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}