Home network security scrutinised

hamba

Elite Member
Joined
May 24, 2005
Messages
8,704
Reaction score
1,344
Location
Down Here
Home network security scrutinised

Home computer users who leave default passwords on network hardware unchanged could be at risk from attack say security experts.

Researchers created an attack that surreptitiously redirects a user to nefarious sites once they have visited a booby-trapped webpage.

The attack works by re-writing the address book in network hardware to point victims to the scam sites.

About 50% of users leave default passwords unchanged, suggests research.

The theoretical attack was explored in a paper written by researchers from the University of Indiana and security firm Symantec.

In the paper the authors detail how to compromise the routers many people use to share broadband connections between machines in their home.

Making changes to a routers set-up requires the use of an administrative password, but the researchers said informal studies suggest that about half of router owners never change the default.

Their paper shows how a booby-trapped webpage could use these default passwords and JavaScript - a technology enabled on 95% of computers - to change a router's DNS settings.

The Domain Name System (DNS) turns the web names that humans use into the numeric form that computers prefer. By compromising the router malicious hackers could make it direct people to fake address books.

Phish Pharming

These fake DNS servers could redirect users to counterfeit banking, e-mail, or government sites which then collect sensitive details like account numbers, usernames, and passwords.

Phishing attacks, where users believe they are on a legitimate site when actually connected to a bogus one, are not new. However, these schemes are usually limited to individual pages.

This method would let hackers do wholesale phishing, called pharming, by redirecting every web address to illegitimate servers that either collect information or attempt to install malicious software.

"Fortunately, this attack is easy to defend against," one of the paper's authors, Zulfikar Ramzan, said on his blog.

To protect from a pharming attack of this sort, the paper recommends that users change the default administrative password on their router.

Alternatively, they can put other DNS information into each computer on their network.








Story from BBC NEWS:
Published: 2007/02/16 12:44:45 GMT
© BBC MMVII
 

biffo1

Moderator
Staff member
Moderator
Joined
Dec 5, 2006
Messages
9,096
Reaction score
2,124
Location
Manchester
Again Hatab very true , most pc users havent got a clue
 

biffo1

Moderator
Staff member
Moderator
Joined
Dec 5, 2006
Messages
9,096
Reaction score
2,124
Location
Manchester
sorry bloody spellings crap 2 quick for my own , good , im not drunk , thanks for the info hamba
 

sargie

VIP Member
VIP Member
Joined
Nov 9, 2005
Messages
8,840
Reaction score
475
Location
In limbo!
sorry bloody spellings crap 2 quick for my own , good , im not drunk , thanks for the info hamba

just edit your first post m8 rather than reposting again wont get accused of post clocking then!
 
TEST
Top