I just read an article in Popular Mechanics, and then went on the 'net to find some sources that confirmed this...
More Info: http://www.domaining.ws/general-news/2006/01/18/identity-theft-linked-to-dns-cache-poisoning
A continually-rising (and becoming almost as popular as phishing) technique for identity theft is called DNS Cache Poisoning. It is the most "deadly" form of identity theft, impossible to catch with the normal eye.
This is where a hacker, trojan, or by other means SOMETHING modifies your computer's DNS cache so that when you type in, for example, www.paypial.com, it goes to www.paypal.com but through a different IP address, to a perfectly identcal website, so when you enter you login info - BANG - they've got your $$$. (this only affects your computer)
Another similar way of doing this (changing nameservers, I mean), also on the rise, is by getting into domainers' registrar accounts and modifying the DNS there to affect ALL users of that domain - NO MATTER the computer, a global effect. VERY dangerous.
This is why registrars must keep their security high (and GoDaddy sends out notifications, too, for a good reason) and YOU have to change your password often! Choose good pwds!
Also, scan your comp and add a firewall so you don't become victim to the DEADLIEST FORM OF IDENTITY THEFT: DNS CACHE POISONING! It's impossible to see or notice unless the fake site isn't well-cloned.
Just FYI,
-Matt
More Info: http://www.domaining.ws/general-news/2006/01/18/identity-theft-linked-to-dns-cache-poisoning
A continually-rising (and becoming almost as popular as phishing) technique for identity theft is called DNS Cache Poisoning. It is the most "deadly" form of identity theft, impossible to catch with the normal eye.
This is where a hacker, trojan, or by other means SOMETHING modifies your computer's DNS cache so that when you type in, for example, www.paypial.com, it goes to www.paypal.com but through a different IP address, to a perfectly identcal website, so when you enter you login info - BANG - they've got your $$$. (this only affects your computer)
Another similar way of doing this (changing nameservers, I mean), also on the rise, is by getting into domainers' registrar accounts and modifying the DNS there to affect ALL users of that domain - NO MATTER the computer, a global effect. VERY dangerous.
This is why registrars must keep their security high (and GoDaddy sends out notifications, too, for a good reason) and YOU have to change your password often! Choose good pwds!
Also, scan your comp and add a firewall so you don't become victim to the DEADLIEST FORM OF IDENTITY THEFT: DNS CACHE POISONING! It's impossible to see or notice unless the fake site isn't well-cloned.
Just FYI,
-Matt
Last edited:
















