DNS takeover redirects thousands of websites to malware

From the Fox-IT blog:

http://blog.fox-it.com/2013/08/05/dns-takeover-redirects-thousands-of-websites-to-malware/

Read more at above link.

Note by me:
I don't know at the moment whether it were only websites in The Netherlands.

 

I have Blue Coat K9 to block all spyware/malware sites from even loading. Its good protection from malware DNS re-direct.

 

Some extra info (autotranslated) by tweakers:

 

Thanks Gerard for that link

=====

I noticed that Fox-IT has changed their Cleanup instructions:
http://blog.fox-it.com/2013/08/05/dns-takeover-redirects-thousands-of-websites-to-malware/

Note by me:
I post that as it is posted there. Other antimalware programs may or may not be able to do the trick too.

 

Yeah, there are malicious toolbars and DNS malware attacking lots of computers and browsers.

 

Personally I think it´s strange that these things can happen to such companies.

What kind of crappy security software are they using? That´s what I would like to know.

 

Google translate dutch Foodlog.nl --http://www.foodlog.nl/short-news/detail/hoe-zat-het-met-hack-van-digitalus/--
'The study of Digital Investigation shows that through an e-mail with an almost identical-to-pdf-like malicious attachment, passwords and login data were stolen'.
"Opening this email attachement could have happened to me. The email arrrived at a department that receives numerous types of such emails daily. The file was not immediately apparent as a non-regular pdf.
A versed IT employee might have recognized this though, according to Sebastiaan de Koning, CEO of IT-Ernity." (my translation)
As is written in the press statement, the attachement was opened on a work station in the 'office' section, not in the 'production' section.

Edit; Could be something as 'innocent' as not unchecking 'hide file extensions' or more nefarious like MiniDuke link on unpatched office workstation.

 

@ Baserk

I suppose they were using some crappy security suite without HIPS.