[ubuntu-us-mn] DNS Changer malware

Fred H Olson fholson at cohousing.org
Fri Jun 1 09:06:38 UTC 2012


>Criminals have learned that if they can control a user's DNS
>servers, they can control what sites the user connects to on the
>Internet. By controlling DNS, a criminal can get an unsuspecting user
>to connect to a fraudulent website or to interfere with that user's
>online web browsing. One way criminals do this is by infecting
>computers with a class of malicious software (malware) called
>DNSChanger. In this scenario, the criminal uses the malware to change
>the user's DNS server settings to replace the ISP’s good DNS
>servers with bad DNS servers operated by the criminal. A bad DNS
>server operated by a criminal is referred to as a rogue DNS server.

That excerpt is from
http://www.fbi.gov/news/stories/2011/november/malware_110911

It does offer links to for example: http://www.dns-ok.us/
that tests one's DNS performance to see if you are using a rogue DNS.

There is also a more detailed description of the problem and
how to check one's DNS configuration - for Windows and Apple OS at:
http://www.fbi.gov/news/stories/2011/november/malware_110911/
DNS-changer-malware.pdf

Anyone care to supply how to check DNS settings for Linux?
Has anyone heard of Linux systems being affected by DNS Changer
malware or other DNS related attacks?

Fred

--
Fred H. Olson  Minneapolis,MN 55411  USA        (near north Mpls)
     Email:        fholson at cohousing.org      612-588-9532
My Link Pg: http://fholson.cohousing.org         My org:
Communications for Justice -- Free, superior listserv's w/o ads




More information about the ubuntu-us-mn mailing list