October 14th, 2009 . by DarkFiber Consulting
DarkFiber Consulting is aware of public reports regarding a search engine result poisoning campaign affecting search results for the Montgomery County Animal Shelter. Users seeking details on rumors about the closure of a “Montgomery County Animal Shelter” may be led to click on illegitimate search results which attempt to download malicious code. The rumors are being spread via e-mail, forums, and social networking sites, usually taking the form of a plea for readers to contact the shelter and adopt animals prior to the shelter’s closing.
DarkFiber Consulting is monitoring the situation and will provide updates as they become available.
July 14th, 2008 . by DarkFiber Consulting
DarkFiber Consulting is aware of deficiencies in the DNS protocol. Implementations of this protocol may leave the affected system vulnerable to DNS cache poisoning attacks. If an attacker can successfully conduct a cache poisoning attack, they may be able to cause a nameserver’s clients to contact the incorrect, and possibly malicious, hosts for particular services. This may allow an attacker to obtain sensitive information or mislead users into believing they are visiting a legitimate website.
DarkFiber Consulting encourages users to review “VU#800113 – Multiple DNS implementations vulnerable to cache poisoning” and apply any necessary solutions listed in that document to help mitigate the risks.
DarkFiber Consulting will provide additional information as it becomes available.