[funsec] Rogue DNS Servers

2007-03-28 Thread Fergie
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A couple of colleagues (Feike Hacquebord and Chenghuai Lu) did this research and published this report. [snip] Researchers of Trend Micro have identified a network of more than 115 rogue DNS servers that are used by a certain variant of

Re: [funsec] Rogue DNS Servers

2007-03-28 Thread Jeff Kell
Fergie wrote: Researchers of Trend Micro have identified a network of more than 115 rogue DNS servers that are used by a certain variant of TROJ_DNSCHANG. These DNS servers exhibit interesting behavior. I get timeouts trying to reference the URL, so I can't get the details... but... If