GettyOn Friday (5 April), it emerged that home routers such as those manufactured by D-Link were being targeted by DNS hijacking. But also on 5 April, researchers at Ixia identified a new wave of DNS hijacking and detected two additional rogue DNS servers: 195.128.124.150 and 195.128.124.181. Hackers are orchestrating these attacks in the hope that users will be fooled by an unauthorized version of a well-known website. “That server would then grab your credentials, giving the attacker access to your bank accounts.”Which sites are being targeted? Meanwhile the adversary’s DNS and web server is hosted at 35.228.220.70, also belonging to Google.

Source: Forbes April 07, 2019 12:11 UTC