Key parts of the Internet infrastructure face large-scale attacks that threaten the global system of Web traffic, the Internet’s address keeper said on Friday.
The Internet Corporation for Assigned Names and Numbers (ICANN) said after an emergency meeting that there is “an ongoing and significant risk” to key parts of the infrastructure that affects the domains on which Web sites reside.
“They [hackers] are going after the Internet infrastructure itself,” ICANN chief technology officer David Conrad told reporters. “There have been targeted attacks in the past, but nothing like this.”
The attacks could date back to 2017, but have sparked growing concerns from security researchers in the past few weeks, which prompted the ICANN meeting.
The malicious activity targets the domain name system (DNS), which routes traffic to intended online destinations.
ICANN specialists and others say these attacks have a potential to snoop on data along the way, sneakily send the traffic elsewhere or enable attackers to impersonate or “spoof” critical Web sites.
“There isn’t a single tool to address this,” Conrad said, as ICANN called for an overall hardening of Web defenses.
“This is roughly equivalent to someone lying to the post office about your address, checking your mail, and then hand delivering it to your mailbox,” the US Department of Homeland Security said in a recent cybersecurity alert. “Lots of harmful things could be done to you [or the senders] depending on the content of that mail.”
So-called “DNSpionage” attacks might date back to at least 2017, said Ben Read, FireEye senior manager of cyberespionage analysis.
The list of targets included Web site registrars and Internet service providers, particularly in the Middle East.
“We’ve seen primarily targeting of e-mail names and passwords,” Read said. “There is evidence that it is coming out of Iran and being done in support of Iran.”
DNSpionage hackers appeared intent on stealing account credentials, such as e-mail passwords, in Lebanon and the United Arab Emirates, said Adam Meyers, vice president of intelligence at CrowdStrike, a cybersecurity firm.
Similar attacks took place in Europe and other parts of the Middle East, with targets including governments, intelligence services, police, airlines and the oil industry, cybersecurity specialists said.
“You definitely need knowledge of how the Internet works and you have to handle a lot of traffic being directed to you,” Meyers said of the DNSpionage hackers. “With that access, they could temporarily break portions of how the Internet works. They chose to intercept and spy on folks.”
The attack itself is technically simple, but its scope and targeting of Internet service providers along with large government entities made it “a big deal,” Meyers said.
ICANN is putting out word to Web site and online traffic handlers to ramp up security or leave users vulnerable to being tricked.
The organization urged broader implementation of domain name system security extension technology, which adds digital signatures that act as virtual seals of sorts to expose when data have been tampered with.
“It aims to assure that Internet users reach their desired online destination by helping to prevent so-called ‘man in the middle’ attacks, where a user is unknowingly redirected to a potentially malicious site,” ICANN said in the release.
Part of the challenge to keeping the Internet infrastructure safe is that Web site owners do not always grasp the imperative guarding against wily hackers, Conrad said.
“We want to make sure people understand what it means to own a domain name and put it on the Internet, because all of your customers are only as secure as you are,” Conrad said.
TYPHOON: The storm’s path indicates a high possibility of Krathon making landfall in Pingtung County, depending on when the storm turns north, the CWA said Typhoon Krathon is strengthening and is more likely to make landfall in Taiwan, the Central Weather Administration (CWA) said in a forecast released yesterday afternoon. As of 2pm yesterday, the CWA’s updated sea warning for Krathon showed that the storm was about 430km southeast of Oluanpi (鵝鑾鼻), Taiwan’s southernmost point. It was moving in west-northwest at 9kph, with maximum sustained winds of 119kph and gusts of up to 155kph, CWA data showed. Krathon is expected to move further west before turning north tomorrow, CWA forecaster Wu Wan-hua (伍婉華) said. The CWA’s latest forecast and other countries’ projections of the storm’s path indicate a higher
SLOW-MOVING STORM: The typhoon has started moving north, but at a very slow pace, adding uncertainty to the extent of its impact on the nation Work and classes have been canceled across the nation today because of Typhoon Krathon, with residents in the south advised to brace for winds that could reach force 17 on the Beaufort scale as the Central Weather Administration (CWA) forecast that the storm would make landfall there. Force 17 wind with speeds of 56.1 to 61.2 meters per second, the highest number on the Beaufort scale, rarely occur and could cause serious damage. Krathon could be the second typhoon to land in southwestern Taiwan, following typhoon Elsie in 1996, CWA records showed. As of 8pm yesterday, the typhoon’s center was 180km
TYPHOON DAY: Taitung, Pingtung, Tainan, Chiayi, Hualien and Kaohsiung canceled work and classes today. The storm is to start moving north this afternoon The outer rim of Typhoon Krathon made landfall in Taitung County and the Hengchun Peninsula (恆春半島) at about noon yesterday, the Central Weather Administration (CWA) said, adding that the eye of the storm was expected to hit land tomorrow. The CWA at 2:30pm yesterday issued a land alert for Krathon after issuing a sea alert on Sunday. It also expanded the scope of the sea alert to include waters north of Taiwan Strait, in addition to its south, from the Bashi Channel to the Pratas Islands (Dongsha Islands, 東沙群島). As of 6pm yesterday, the typhoon’s center was 160km south of
The Central Weather Administration (CWA) is set to issue sea and land warnings for Tropical Storm Krathon as projections showed that the tropical storm could strengthen into a typhoon as it approaches Taiwan proper, the CWA said yesterday. The sea warning is scheduled to take effect this morning and the land warning this evening, it said. The storm formed yesterday morning and in the evening reached a point 620 nautical miles (1,148km) southeast of Oluanpi (鵝鑾鼻), Taiwan proper’s southernmost point, moving west-southwest at 4 kph as it strengthened, the CWA said. Its radius measured between 220km and 250km, it added. Krathon is projected
RSS