A group of attackers managed to compromise 300,000 home and small-office wireless routers, altering their settings to use rogue DNS servers, according to Internet security research organization Team Cymru.

In January, Team Cymrus researchers identified two TP-Link wireless routers whose settings were altered to send DNS (Domain Name System) requests to two particular IP addresses: 5.45.75.11 and 5.45.76.36. An analysis of the rogue DNS servers running at those IP addresses revealed a mass-scale compromise of consumer networking devices.

Over a one-week period, more than 300,000 unique IP addresses sent DNS requests to the two servers, the Team Cymru researchers said in a report released Monday. Many of those IP addresses corresponded to a range of routers, including models from D-Link, Micronet, Tenda, TP-Link and other manufacturers, that had their DNS settings maliciously altered, they said.

The researchers believe those devices were compromised using different techniques that exploit several known vulnerabilities. Many of the affected devices had their administrative interfaces accessible from the Internet, making them susceptible to brute-force password-guessing attacks or unauthorized access using default credentials, if their owners didnt change them, the researchers said.

A considerable number of devices also appeared to be vulnerable to a security flaw reported in January in ZynOS, a router firmware created by ZyXEL Communications thats also used on router models from other manufacturers. That vulnerability allows attackers to remotely download a file containing the configuration of vulnerable routers without authentication and parse it to extract the password for the routers administrative interface.

According to the Team Cymru researchers, its also likely that attackers used cross-site request forgery (CSRF) to exploit vulnerabilities in TP-Link routers that have been known since last year.

CSRF attacks involve placing malicious code on a website to force visitors browsers to send specially crafted requests to a third-party URL. If the users are authenticated on the third-party site and the site has no CSRF protection, the malicious requests can abuse the users access on that site to perform unauthorized actions. This type of attack is also known as session riding.

Attackers can use CSRF techniques to attack routers when their administration interfaces are only accessible from the local area network by proxying requests through their owners browsers and leveraging their authenticated sessions.

The Team Cymru researchers noted two vulnerabilities reported in various TP-Link router models last year that are known to have been targeted through CSRF attacks. One allows attackers to replace the administrator password with a blank one and the other allows changing the routers DNS settings, even if the rogue request contains bogus credentials.

The first vulnerability was tested successfully against a TP-Link TD-8840T router running firmware version 3.0.0 build 120531 that was one of the first victim devices identified in the attack campaign, the researchers said. The second vulnerability reportedly affects TP-Link WR1043ND, TL-MR3020 and TL-WDR3600 running various firmware versions, but other models might also be affected.

Continue reading here:
Attack campaign compromises 300,000 home routers, alters DNS settings

Security Door Stop. Door Stop. OnGARD Stops Burglars in Their Tracks
Nothing is stronger and more effective in preventing your door from being kicked in. ONGARD withstand shoulder slams, sledge hammers and even battering rams....

By: OnGARD Home Security Products

Read the original here:
Security Door Stop. Door Stop. OnGARD Stops Burglars in Their Tracks - Video

Coke #39;s Social Media Guard, AT T Home Security A Load Of Crap
SUBSCRIBE: http://youtube.com/subscription_center?add_user=beyondsocialmedia Beyond Social Media Show co-hosts B.L. Ochman and David Erickson discuss the bes...

By: Beyond Social Media Show

See original here:
Coke's Social Media Guard, AT&T Home Security & A Load Of Crap - Video

More in depth detail on my home security
More in depth detail on my home security Earn totally free money here - http://featu.re/MRTHAIBOX Room Tour Video Here - http://www.youtube.com/watch?v=9hnay...

By: Adams Vlogs

Read the rest here:
More in depth detail on my home security - Video

AT T Home Security Pet Commercials
SUBSCRIBE: http://youtube.com/subscription_center?add_user=estrategy During episode 37 of the Beyond Social Media Show (http://youtube.com/beyondsocialmedia)...

By: eStrategy

Read more from the original source:
AT&T Home Security Pet Commercials - Video

London & Essex (PRWEB UK) 4 March 2014

Master Security & Surveillance, one of the most trusted providers of business and home security services in London and Essex, has just announced the launch of an exciting lucky draw for homeowners in this region. Anyone liking the official Facebook page of Master Security & Surveillance now stands a chance to win a high quality home alarm system. The winner of the contest will be identified by a lucky draw. The present price of this alarm system is 400 in the market. Participants can try their luck throughout the month of March, and the lucky draw will take place in April.

Intruder alarms are one of the most traditional security measures for a household. Master Security & Surveillance offers a wide range of wireless intruder alarms depending on the individual requirements of the user. These systems not only provide safety to homeowners, but they are easy to operate, too. Pet sensitive movement detectors are used by Master Security & Surveillance to eliminate false alarms caused by pets. The company also provides no obligation quotes and free security risk assessment service for all their customers.

Announcing the launch of the companys new Facebook lucky draw offer, a senior official from Master Security & Surveillance said, "This is an excellent chance for you to bring home a world class burglar alarm for no cost at all. We are always looking to offer something extra to help you build a safe home. Just like our Facebook page and give it a try."

As the regions top security service provider, Master Security & Surveillance specializes in a broad spectrum of services such as CCTV, burglar alarms, access control, security gates and grills and Security tagging. Overseas security and covert surveillance service is also available at Master Security. Superior workmanship, top-of-the-line products, affordable pricing, and customer friendly service have made them the most preferred option in London and Essex for all types of security services.

About Master Security & Surveillance:

Master Security & Surveillance is a top rated home and business security service provider operating all over London and Essex with an extraordinary track record. Since more than two decades, they have managed to stand out from their competitors by offering top notch service to their customers within an affordable budget.

View post:
Home Security Specialist Master Security & Surveillance Announces Facebook Lucky Draw Offering Home Alarm System Worth ...

ANNAPOLIS Maryland home to the National Security Agency, the National Institute for Standards and Technology, research institutions and an ever-growing number of network security businesses has grown into a cybersecurity powerhouse.

And with large-scale and high-profile attacks on organizations like Target and Neiman Marcus, which have thrust security into the spotlight, the industry continues to thrive.

Cybersecurity experts who aim to thwart hackers armed with increasingly potent programs and techniques seem to work from a point of disadvantage, almost by definition.

We have to be right 100 percent of the time, said Jim Close, federal account manager for Sourcefire, a Columbia-based network security company that was acquired by Cisco in October. [Hackers] only have to be right once.

Chad Carroll, vice president of information operations at Chiron Technology Services in Columbia, added that most data breaches are the result of user error.

Not everybody is technically savvy, and not everybody is able to maneuver around a computer, Carroll said. They rely on others to be security-savvy for them.

Remote exploits, in which a hacker breaks through a gap in network security from outside the network, are few and far between, he added.

He also said most employees who arent on a network security team dont consider security a top priority, and mere curiosity can lead an employee to open a suspicious email attachment or click a link to a malicious site.

Too many times, the folks that defend the network think like a defender, Carroll said. And you cant. You have to think like an attacker.

But when even savvy defenders are caught off-guard, cyber attacks can deal significant damage. Greg Smith, cyber technical adviser for the Alabama-based Camber Corp., said in 2013, 122 successful cyber attacks were launched against businesses each week.

Read more here:
Maryland

Print Create a hardcopy of this page Font Size: Default font size Larger font size Fire

Posted: Monday, March 3, 2014 3:57 pm

Home security system alerts to house fire near Elkton By Carl Hamilton cahamilton@cecilwhig.com Cecil Daily

ELKTON Investigators are crediting a home security system for limiting fire damage at a home near Elkton over the weekend, according to the Maryland State Fire Marshal's Office.

The occupant was not at the home in the 300 block of Fell Road when the fire started inside a residential office, which is attached to a garage that is connected to the one-story dwelling, fire officials reported.

An online service is needed to view this article in its entirety. You need an online service to view this article in its entirety.

Or, use your linked account:

To become a new online only subscriber, please choose this option. By doing so, you will first proceed to a registration form. Upon completion of the registration form you will then continue by completing the subscription form. For assistance please call 410-398-3311. Thank you.

Please note - If you have already registered during a previous visit to this web site go to directly to the login button at the top right and then proceed to the subscription form.

To become a new online only subscriber, and have your payment automatically charged every four weeks, please choose this option. By doing so, you will first proceed to a registration form. Upon completion of the registration form you will then continue by completing the subscription form. For assistance please call 410-398-3311. Thank you.

See more here:
Home security system alerts to house fire near Elkton

Medina man warns about hidden fees when it comes to home security contracts
Medina man warns about hidden fees when it comes to home security contracts.

By: WEWS NewsChannel5

See more here:
Medina man warns about hidden fees when it comes to home security contracts - Video

Link Home Security Z-Wave Siren
Link Home Security (www.linkhomesecurity.com) offers the latest in self-installed security and home automation systems. This segment describes the benefits, ...

By: Link Home Security

Visit link:
Link Home Security Z-Wave Siren - Video