Hacked Go Daddy sites infecting users with ransomware

JMH

Emeritus, Contributor
Joined
Apr 2, 2012
Posts
7,197
Users are getting infected with ransomware thanks to criminals managing to hack the DNS records of Go Daddy hosted websites.
That's not welcome news for the world's largest domain name registrar, especially so soon after the recent denial of service attack.
To understand how these attacks work, a short primer on DNS is required.
In a nutshell, DNS provides a system where computers on a network (the internet) can be referenced by a user-friendly name. These names are known as hostnames, and DNS translates them into what is known as an IP address.
A key feature of DNS is that changes can be made and applied very rapidly, allowing resources to be moved between machines/networks/locations without affecting end users. The hostnames remain constant, and DNS handles any changes in the IP address as the resources move.
http://nakedsecurity.sophos.com/201...Feed:+nakedsecurity+(Naked+Security+-+Sophos)
 
Back
Top