Full Disclosure mailing list archives
Re: Newest hacks
From: "Nick Eoannidis" <nikon () xillioncomputers com>
Date: Wed, 21 Mar 2007 23:29:53 +0900
For those who haven't read about what Ken was saying. The technique is called drive by Pharming. It involves crafting a page hosting malicious JavaScript that takes advantage of default configurations in home broadband modem/routers. (dlink, Linksys, netcomm etc.) The basis of this attack is tricking a user into accessing a webpage that changes the configuration of your modem by using default username and password credentials. The report by the Indiana university is here: http://www.cs.indiana.edu/pub/techreports/TR641.pdf Symantec's noob proof response is here: http://www.symantec.com/enterprise/security_response/weblog/2007/02/driveby_ pharming_how_clicking_1.html nikon. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Newest hacks wangkaig (Mar 20)
- Re: Newest hacks Jim Popovitch (Mar 20)
- Re: Newest hacks Saeed Abu Nimeh (Mar 20)
- Message not available
- Re: Newest hacks Sebastian Krahmer (Mar 21)
- <Possible follow-ups>
- Re: Newest hacks Nick Eoannidis (Mar 21)
- Re: Newest hacks Jason Miller (Mar 21)
- Message not available
- Re: Newest hacks Jason Miller (Mar 21)
- Re: Newest hacks scott (Mar 21)
- Re: Newest hacks Jason Miller (Mar 21)