3 ms·

tl, dr: Because Iranian hackers were hijacking DNS records for government sites.

• ciupicri 8y ago
  Where is Iran mentioned?
  • eganist 8y ago
    It's buried in links, but the FireEye research referenced by US CERT discusses it. https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS-Infrastructure-Hijacking-Campaign https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS... And https://www.fireeye.com/blog/threat-research/2019/01/global-dns-hijacking-campaign-dns-record-manipulation-at-scale.html https://www.fireeye.com/blog/threat-research/2019/01/global-... --- Link chain that I followed: 1) op — https://cyber.dhs.gov/blog/#why-cisa-issued-our-first-emergency-directive https://cyber.dhs.gov/blog/#why-cisa-issued-our-first-emerge... 2) first link in op, "emergency directive" — https://cyber.dhs.gov/ed/19-01 https://cyber.dhs.gov/ed/19-01 3) footnote #1 in the emergency directive — https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS-Infrastructure-Hijacking-Campaign https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS... 4) FireEye research referenced on the US CERT page — https://www.fireeye.com/blog/threat-research/2019/01/global-dns-hijacking-campaign-dns-record-manipulation-at-scale.html https://www.fireeye.com/blog/threat-research/2019/01/global-...
  • deleted 8y ago
    [deleted]