3 ms·

I don't understand how the attack works from reading this. Seems to me like it's related to UPnP. Any idea?

• jacquesm 11y ago
  If I understood it right it connects to the same VPN server, sets up port forwarding there, then uses the default route to trick the victim into connecting outside the VPN to a resource the attacker controls for instance by making them visit a webpage with an embedded resource placed there by the attacker.
• ogurechny 11y ago
  It's a standard gimmick with NAT users accessing their own external IP address. Someone was in a hurry to make easy money and didn't read http://www.netfilter.org/documentation/HOWTO/NAT-HOWTO.html http://www.netfilter.org/documentation/HOWTO/NAT-HOWTO.html Notice how they haven't informed any software developers about that “huge flaw”? That's because there is no flaw and no one to blame except themselves.