Researchers have released software that exploits the recently leaked flaw in the Internet’s Domain Name System (DNS) software. That may mean IT admins are in for a lengthy weekend of implementing and checking the patch.

IOActive researcher Dan Kaminsky discovered the bug earlier that month. The attack cipher was released Wednesday by developers of the Metasploit hacking toolkit, headed by the infamous HD Moore.

By exploiting that vulnerability, an attacker can redirect an ISP’s users to a malicious phishing

server every day they try to visit a valid Web site. The patches released through various vendors should protect from the threat, but it may be a rush for some.

Understanding the Root of the Threat

The threat emerges from two different issues with the DNS protocol, according to McAfee Avert Labs. DNS primarily uses UDP packets to send questions and receive answers. The client will accept any packet as […]

Orginal post by Top Tech News