A Deep Dive on the Recent Widespread DNS Hijacking Attacks – Krebs on Security
Tags
country: Albania Egypt United Arab Emirates Kuwait Cyprus Netherlands Germany Jordan Iraq Saudi Arabia Sweden Lebanon Libya
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Domains - T1583.001 Domains - T1584.001 Multi-Factor Authentication - T1556.006 Password Managers - T1555.005 Server - T1583.004 Server - T1584.004 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 652b9ec5-f7b9-442d-bfde-5cea037d87b9
Fingerprint 221189d10018d3c4
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 18, 2019, 9:50 a.m.
Added to db Feb. 17, 2023, 9:41 p.m.
Last updated Nov. 19, 2024, 9:51 p.m.
Headline A Deep Dive on the Recent Widespread DNS Hijacking Attacks
Title A Deep Dive on the Recent Widespread DNS Hijacking Attacks – Krebs on Security
Detected Hints/Tags/Attributes 85/2/32
Source URLs
Redirection Url
Details Source https://krebsonsecurity.com/2019/02/a-deep-dive-on-the-recent-widespread-dns-hijacking-attacks/
URL Provider
Details Provider Source level domain
Details krebsonsecurity.com krebsonsecurity.com
Attributes
Details Type #Events CTI Value
Details Domain 838 
example.com
Details Domain 2 
webmail.finance.gov.lb
Details Domain 1 
mail.gov.ae
Details Domain 1 
nsa.gov.iq
Details Domain 1 
webmail.mofa.gov.ae
Details Domain 1 
shish.gov.al
Details Domain 1 
mail.mfa.gov.eg
Details Domain 1 
mod.gov.eg
Details Domain 1 
embassy.ly
Details Domain 3 
owa.e-albania.al
Details Domain 1 
mail.dgca.gov.kw
Details Domain 1 
gid.gov.jo
Details Domain 3 
adpvpn.adpolice.gov.ae
Details Domain 1 
mail.asp.gov.al
Details Domain 1 
owa.gov.cy
Details Domain 1 
mail.petroleum.gov.eg
Details Domain 1 
mail.cyta.com.cy
Details Domain 1 
mail.mea.com.lb
Details Domain 70 
crt.sh
Details Domain 1 
ns0.idm.net.lb
Details Domain 3 
sa1.dnsnode.net
Details Domain 1 
fork.sth.dnsnode.net
Details Domain 2 
mmfasi.com
Details Domain 1 
ns.anycast.woodynet.net
Details Domain 1 
pch.net
Details Domain 1 
dnsnode.net
Details Domain 1 
frobbit.se
Details File 1 
-adpvpn.adp
Details File 1 
-mail.asp
Details IPv4 3 
139.59.134.216
Details IPv4 1 
194.126.10.18
Details IPv4 2 
82.196.11.127