Follow TV Tropes

Following

FBI will be shutting down several ISPs on Monday due to DNS Malware

Go To

SgtRicko Since: Jul, 2009
#1: Jul 8th 2012 at 10:07:26 PM

Link Here

Figured some of you guys might have wanted to see this one, just in case. I'll let the article do most of the talking:

"The problem began when international hackers ran an online advertising scam to take control of more than 570,000 infected computers around the world. When the FBI went in to take down the hackers late last year, agents realized that if they turned off the malicious servers being used to control the computers, all the victims would lose their Internet service.

In a highly unusual move, the FBI set up the safety net. The bureau brought in a private company to install two clean Internet servers to take over for the malicious servers so that people would not suddenly lose their Internet.

The FBI arranged for a private company to run a website — http://www.dcwg.org — as a place where computer users could go to see if their computer was infected by DNS Changer, and find links to other computer security business sites where they could find fixes for the problem. (If you want a quick check of your computer's status, the FBI-authorized dns-ok.us site is fast — no software is required for the scan.)"

And by the way... the website mentioned that one of the symptoms showing you might have the malware is that you won't be able to visit the free-checkup sites due to the malware causing issues. I tried to visit the US site and, guess what? All I got was the "page could not be displayed" prompt from Internet Explorer. I decided to test some of the other sites, particularly the Australian, German, French, and Dutch sites, and they showed me as clean! So what the heck does that mean?

ohsointocats from The Sand Wastes Since: Oct, 2011 Relationship Status: Showing feelings of an almost human nature
#2: Jul 9th 2012 at 5:28:16 AM

I'm not sure what's up with your issue. I checked last night and the US site worked fine.

Fighteer Lost in Space from The Time Vortex (Time Abyss) Relationship Status: TV Tropes ruined my love life
Lost in Space
#3: Jul 9th 2012 at 9:14:44 AM

Considering that the final number of known infected machines was under 300,000 worldwide prior to the servers being taken down, this issue is being played for massively excessive hype by the media.

"It's Occam's Shuriken! If the answer is elusive, never rule out ninjas!"
Nohbody "In distress", my ass. from Somewhere in Dixie Since: Jan, 2001 Relationship Status: Mu
"In distress", my ass.
#4: Jul 9th 2012 at 9:20:00 AM

^ Imagine that...

Less sarcastically, given how long the problem has been known, I have just about zero sympathy for anyone who's actually hit by the server shutdown.

[edit] Also, if the affected machines are out of date on that front, what else are they in desperate need of patching for? When I was working the at the abuse desk at AboveNet, it was a rare day when there were less than 2-3 mail servers in Asia (primarily PRC and S. Korea) that were set to be open relays and were being abused to send spam. The head network guru didn't even bother trying to get them to fix the servers, they just pulled the plug on the internet connection for the offending party(ies).

edited 9th Jul '12 9:23:00 AM by Nohbody

All your safe space are belong to Trump
Karmakin Moar and Moar and Moar Since: Aug, 2009
Moar and Moar and Moar
#5: Jul 9th 2012 at 9:36:40 AM

Oh wow. I remember DNS Changer. That's an old one. Do you know why it was interesting?

It was cross-platform. Yup. It affected OS X as well. There was actually something in my old job where DNS Changer directly impacted the software I was supporting. Fun fun times.

Democracy is the process in which we determine the government that we deserve
SgtRicko Since: Jul, 2009
#6: Jul 9th 2012 at 10:54:57 AM

...Well I'm still online. Guess it was just all BS on the website's part.

A bit strange that the FBI would even do something like this, though. Why not leave it to a company like Norton or Lavasoft to handle the situation, or even the ISP providers themselves?

edited 9th Jul '12 9:35:17 PM by SgtRicko

Karkadinn Karkadinn from New Orleans, Louisiana Since: Jul, 2009
Karkadinn
#7: Jul 9th 2012 at 11:05:32 AM

There's been a LOT of different entities involved in anti-DNS malware efforts, Ricko, including all of the ones you just mentioned in that sentence. It was originally extremely widespread, but the disinfection campaign has been sufficiently intense that the numbers of infected P Cs have been dropping like Wile E. Coyote off a cliff. There's still some thousands left infected, but compared to the original numbers it's a drop in the bucket. It may seem overhyped now, but a lot of that is because of the 'hype' that helped to mitigate the threat in the first place over the past few months.

As far as sheer danger of consequences go, it's really not THAT special, so I'm assuming that news channels mostly picked up an interest in it as a result of the sheer quantity of victims. Or maybe just because that one company was reporting it, so everyone else felt like they had to, too.

Furthermore, I think Guantanamo must be destroyed.
Angeldeb82 Since: Dec, 2010
Masterofchaos Since: Dec, 2010
#9: Jul 9th 2012 at 3:58:13 PM

Well, seeing that I can still go to TV tropes, I'm a-okay.:D

Nohbody "In distress", my ass. from Somewhere in Dixie Since: Jan, 2001 Relationship Status: Mu
"In distress", my ass.
#10: Jul 9th 2012 at 4:34:23 PM

^^ Another article from the "related" links pretty much said what I was thinking (and mentioned in less detail in my previous post).

[edit]A couple hundred thousand[/edit] people out of an online population of like a billion (or whatever) people? After 16 months of advance notice, with plenty of free tools to fix the issue (presumably including Windows Update for the Windows crowd, though over a year there's been so many security patches that I have no idea which specific update without doing far more digging than it's really worth)? Not up now, tough shit.

^ At least you have your priorities straight. grin

edited 9th Jul '12 4:36:43 PM by Nohbody

All your safe space are belong to Trump
Psyga315 Since: Jan, 2001
#11: Jul 9th 2012 at 9:08:43 PM

In fact... this is practically over... Whatever damage was done was done...

Pykrete NOT THE BEES from Viridian Forest Since: Sep, 2009
NOT THE BEES
#12: Jul 10th 2012 at 8:12:44 PM

Why not leave it to a company like Norton or Lavasoft to handle the situation, or even the ISP providers themselves?

To be fair, I wouldn't leave much to Norton right now. :|

0dd1 Just awesome like that from Nowhere Land Since: Sep, 2009
Just awesome like that
#13: Jul 10th 2012 at 8:46:08 PM

I wouldn't leave much to Norton now or any time in the past since they have existed. Their software has always been terrible.

Insert witty and clever quip here. My page, as the database hates my handle.
Pykrete NOT THE BEES from Viridian Forest Since: Sep, 2009
NOT THE BEES
#14: Jul 10th 2012 at 8:54:13 PM

It used to at least do its job to an appreciable extent.

Add Post

Total posts: 14
Top