Forgot your password?
typodupeerror
Security Networking The Internet Technology

Brazilian ISPs Hit With Massive DNS Attack 85

Posted by Soulskill
from the going-for-the-gusto dept.
wiredmikey writes "Millions of people in Brazil have potentially been exposed to malware, as a result of a nationwide DNS attack. Additionally, several organizations in Brazil are reporting that network devices are also under attack. After being compromised remotely, scores of routers and modems had their DNS settings altered to redirect traffic. In those cases, when employees of the affected companies tried to open any website, they were asked to execute a malicious Java applet, which would install malware presented as 'Google Defence' software."
This discussion has been archived. No new comments can be posted.

Brazilian ISPs Hit With Massive DNS Attack

Comments Filter:
  • You're just another BRIC in the wall.
    • by nazsco (695026)

      The only clever joke here and no score...

      also, or that was a inside job because of a cyber crime bill to be voted there soon, or china decided to take easier targets.

  • by randomErr (172078) <ervin...kosch@@@gmail...com> on Monday November 07, 2011 @06:10PM (#37978688) Homepage Journal
    Sounds like someone is creating a massive botnet for something much bigger or just putting out a warning message. They question is what?
    • What is doubtless money, and someone is in jail already.

      Insider jobs at ISPs have always had a lot of potential reach and this demonstrates that.

    • by ackthpt (218170)

      Sounds like someone is creating a massive botnet for something much bigger or just putting out a warning message. They question is what?

      Perhaps they want to try to create bots to replace the large number they have been losing of late. e.g. [slashdot.org]

    • by Smallpond (221300)

      My mail server blocks many .br addresses due to the constant spam, but br is no worse than .ar, .cn, or .pl. Maybe someone is sending a message. Though I can't imagine anybody getting that worked up over email spam these days; maybe 10 years ago.

    • "Sounds like someone is creating a massive botnet for something much bigger or just putting out a warning message. They question is what?"

      This quote from the first of the linked articles might provide a possible answer...

      "We advise all affected users to update antivirus and all software in the computer (such as Java), also change the DNS configuration to other providers (such as Google DNS)...."

      Google using their own name in the Trojan would, in my mind, be a masterful example of misdirection--nobody would

  • by orphiuchus (1146483) on Monday November 07, 2011 @06:11PM (#37978700)

    Computers may be twice as fast as they were in 1973, but I would kill to go back and live in a time where you had to actually break into my house to steal from me.

    • by rubycodez (864176)
      Fraud and forgery are very old problems, don't need a computer for them.

      Twice as fast? The 0.3 MIPS 8080 vs. a thousands or tens of thousands of MIPS per core processor of today is a much bigger jump. Or we could talk about retrieval speed of 9 track (125 kbytes / sec) vs. Ultrium LTO-5 ( 140 mbytes / second)
    • Doesn't "twice as fast in 1973" seem awfully specific to any of you *woosh* victims?

    • by Hentes (2461350)

      If you left your door wide open you would have been robbed even back then.

    • by Anonymous Coward

      Still the case. Or did the files suddenly disappear from your box?
      Information is not a physical object, and hence can not be owned, stolen or sold. Sorry if the media Mafia bullshitted you into believing them. :-/
      If you start to think about information in the right way, you will realize that it's about who you pass information on to and how much you trust them.

      In this case, somebody trusted those routers way too much, as this wasn't exactly expected.

      But if you only give access to or copy your data to people

    • Fvck that, downloading pron at 28.8k sucked.
    • You can do that without killing anyone right this minute. Just unplug your computer from the Internet, and from now on just buy all of your software on CD's or on memory sticks from people who can afford security. Rent videos from the video store instead of watching YouTube. Go to the public library to use e-mail. And never ever use a credit card. Always pay with cash, always withdrawn from the bank by a human bank teller, not an ATM.

      Then, you can use can use your computer and any other non-internet connec
  • by Anonymous Coward
    someone was not happy with the Conrad Murray verdict!
  • by Bogtha (906264) on Monday November 07, 2011 @06:17PM (#37978758)
    How many is a brazilian?
    • by TWX (665546)

      A Brazilian is how many people got attacked, silly!

      You just don't know your SI units because you're probably American. They're well versed in them in South America...

    • How many is a brazilian?

      Apparently you remove all the 111111111111111111111's and you are left with lots of Oh's

  • A ruthless minority of people seems to have forgotten good old fashioned virtue.

    If these people would just play the game, they'd get a lot more out of life.

    Ministry of Information, Deputy Minister, Eugene Helman

  • by Anonymous Coward on Monday November 07, 2011 @06:51PM (#37979090)

    A sweeping bill on cybercrime is due to be voted this week in the Brazilian Congress. The bill caters to banks and other big service providers, but is opposed by most other informed citizens, including the Brazilian Internet managers. The bill has been floored several times in the past few years, but every time was retracted due to fierce opposition. Last time that bill was up for voting there was a wave of hacker attacks to government and politicians' sites a few days before the expected voting date. Those attacks were widely believed to be an attempt by supporters to sway the vote of congressmen in favor of the bill. This attack is more serious but its timing strongly indicates that it has the same motivation.

  • when you get news about your own country first in an international news site

    • by lvxferre (2470098)
      When you know that Slashdot has better news for geeks than Terra and UOL.
      • by nazsco (695026)

        nationwide DNS attack is news for 'geeks'?!?

        brazil is the country with most widespread internet banking. Here in the US credit cards doesn't even have a chip! and most bills came with a pre-addressed envelope for you to send a ... gasp... check!

    • by SeaFox (739806)

      In your defense, maybe you couldn't reach any local news outlets online because of a DNS problem.

  • I'm the Brazilian journalist who first reported on this issue [globo.com].

    These attacks are not massive. They are happening in a server each time, and the ISPs use many different servers. As such, the number of affected victims each time is small. However, it is true they are ongoing. ISPs and users need to take action now and protect their DNSs and home routers, respectively, though ISPs are also to blame because they use the same password for the default configuration on every router. Plus, user complaints can be fou

If A = B and B = C, then A = C, except where void or prohibited by law. -- Roy Santoro

Working...