3 ms·
It's buried in links, but the FireEye research referenced by US CERT discusses it. https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS-Infrastructure-
by eganist 8y ago
It's buried in links, but the FireEye research referenced by US CERT discusses it.
https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS-Infrastructure-Hijacking-Campaign https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS...
And
https://www.fireeye.com/blog/threat-research/2019/01/global-dns-hijacking-campaign-dns-record-manipulation-at-scale.html https://www.fireeye.com/blog/threat-research/2019/01/global-...
---
Link chain that I followed:
1) op — https://cyber.dhs.gov/blog/#why-cisa-issued-our-first-emergency-directive https://cyber.dhs.gov/blog/#why-cisa-issued-our-first-emerge...
2) first link in op, "emergency directive" — https://cyber.dhs.gov/ed/19-01 https://cyber.dhs.gov/ed/19-01
3) footnote #1 in the emergency directive — https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS-Infrastructure-Hijacking-Campaign https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS...
4) FireEye research referenced on the US CERT page — https://www.fireeye.com/blog/threat-research/2019/01/global-dns-hijacking-campaign-dns-record-manipulation-at-scale.html https://www.fireeye.com/blog/threat-research/2019/01/global-...