New Attack Hijacks DNS Traffic From 300,000 Routers 105
nk497 writes "Florida-based security firm Team Cymru said it was examining a widespread compromise"of 300,000 consumer and small office/home office (SOHO) routers in Europe and Asia. The DNS server settings were changed to a pair of IP addresses, which correspond to Dutch machines that are registered to a company that lists its address in central London. The attack highlights the flaws in router firmware, the researchers said. 'It's not new as an issue to the InfoSec community but this is one of the biggest we've seen recently as it's quite insidious,' Cymru's Steve Santorelli said, adding the hack could let the attackers conduct man in the middle attacks, impersonating your bank, for example."
Comment removed (Score:3, Insightful)
Re:Exploit, or dumb users? (Score:0, Insightful)
most people should just let their ISP provide and manage firmware updates for them
Right. Because ISPs have such stellar security track records. Not to mention the staggering amount of work it would be for an ISP to support whatever weird router the client might want to use. Unless, of course, you're proposing we'd only be able to run ISP approved hardware. Now that would splendid, indeed! Oh, wait, no it wouldn't.