Millions of DSL modems hacked in Brazil

Powered by SC Magazine
 

Admin vulnerability.

More than 4.5 million DSL modems have been compromised as part of a sustained hacking campaign in Brazil, with the devices spreading malware and malicious web address redirects.

The attacks focused on a vulnerability in modem firmware that was largely ignored by users and the security community, security vendor Kaspersky said, allowing attackers to enter modem configuration settings and change the DNS server used to browse the internet.

The vulnerable modems, made by six different manufacturers, all use a chip set made by Broadcom.

A similar vulnerability was used by Estonian hackers to harness control of modems with its DNSChanger attack.

According to Kaspersky, the Brazilian attackers sought to steal users' banking credentials by redirecting users to false versions of popular sites — like Facebook or Google — and prompting them to install malware.

Some 40 DNS servers were set up outside Brazil too in order to serve forged requests for domain names belonging to Brazilian banks.

The country's cyber emergency and response team (CERT) estimated that roughly 4.5 million modems had been compromised as of March this year. It met with banks, ISPs, device makers and government agencies to work out a solution to the massive attack.

After manufacturers issued firmware updates to plug the security hole, the number of compromised modems reduced. However, some 300,000 modems are still thought to be controlled by attackers.

Copyright © iTnews.com.au . All rights reserved.


Millions of DSL modems hacked in Brazil
 
 
 
Top Stories
Toll Group to go Google
Poaches Woolworths project manager.
 
How News Corp's CIO tackled skills in his race to the cloud
What to do when your team’s talents are no longer needed.
 
Photos: How Thodey transformed Telstra
From turbulent Trujillo to Australia's leading telco.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  35%
 
Your insurance company
  5%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  4%
 
A Federal Government agency (ATO, Centrelink etc)
  18%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  7%
TOTAL VOTES: 3942

Vote
Do you support the abolition of the Office of the Information Commissioner?

   |   View results
I support shutting down the OAIC.
  27%
 
I DON'T support shutting the OAIC.
  73%
TOTAL VOTES: 1340

Vote