1. Symantec-Broadcom-Horizontal/
  2. Security Response/
  3. Attack Signatures/
  4. System Infected: Rogue DNS Server Response Activity

System Infected: Rogue DNS Server Response Activity

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

This signature detects DNS queries sent to rogue DNS servers.

Additional Information

Routers DNS entries can be hijacked and the DNS queries can be sent to rogue DNS servers that can redirect users to malicious websites.

Affected

  • Various Platforms.

Response


  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube