Attacks begin on net address flaw

[gkd_uk]

Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.

The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.

In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.

Net security groups say there is anecdotal evidence that small scale attacks are already happening.

Read more

 

[SticKer]

That sounds dangerous. I hope they get a fix to this problem soon.

SticKer

 

[Karl]

The only fix is DNSSEC and that is going to take time (not to mention lots of additional resources) to implement. The patches that have been released don't fix the problem, they just make it take a little longer to exploit (if your DNS software was vulnerable in the first place), which isn't a problem when you've got an army of bots carrying out the exploit.