Hijacking Search Results Through DNS Cache Poisoning

Apr 11, 2006 - 7:17 am 0 by
Filed Under Spam

There is a known vulnerability that came to light yesterday based on a WebmasterWorld thread named Links hijacked in search engines. It is called DNS Cache Poisoning, and can affect your search marketing campaigns, big time. What happens?

Sub Attacks

Once an attacker has managed to poison a DNS cache, there are a number of ways they can subvert protocols that rely on DNS. Some of the potential methods are listed below.

Redirecting Web Traffic

An attack of this nature might range from a simple annoyance to a financial nightmare for a great number of people. The goal here is to set up a website that looks enough like the original so as to not raise any suspicion. Then the domain is hijacked via cache poisoning for as many ISPs/companies as possible, causing their traffic to hit the phony site instead.

Some of the sub-attacks here are:

Redirect a popular search engine to a pop-up ad site. Redirect a bank website to gain access to account passwords. Redirect news site to inject false stories and manipulate stocks.

From http://www.lurhq.com/cachepoisoning.html.

This can be a major issue for you and you should run a DNS Report today at http://www.dnsreport.com/.

For more information visit http://www.seoconsultants.com/tools/dns/cache/.

Forum discussion at WebmasterWorld and Search Engine Roundtable Forums.

 

Popular Categories

The Pulse of the search community

Search Video Recaps

 
- YouTube
Video Details More Videos Subscribe to Videos

Most Recent Articles

Google

Google Kwanzaa Decorations Are Live For 2024

Dec 21, 2024 - 9:18 pm
Google

Google Christmas Decorations Are Live For 2024

Dec 21, 2024 - 6:55 pm
Search Forum Recap

Daily Search Forum Recap: December 20, 2024

Dec 20, 2024 - 10:00 am
Search Video Recaps

Search News Buzz Video Recap: Google December Core Update Done, Spam Update Starts, Google Ranking Exploit Leaked, Google Tests Double Serving Ads

Dec 20, 2024 - 8:01 am
Google Updates

Google December 2024 Spam Update 👾 Rollout Shocks Before Holidays

Dec 20, 2024 - 7:51 am
Google

Google Testing Shaded Button Sitelinks On Mobile

Dec 20, 2024 - 7:41 am
Previous Story: Yahoo Publisher Network Launches Blog