Exploit Kit Delivers Pharming Attacks Against SOHO Routers

🗓️ 26 May 2015 11:05:16Reported by Michael MimosoType

Exploit Kit Delivers Pharming Attacks Against SOHO Routers. Campaign targets Chrome users for CSRF attacks with obfuscation and DNS redirection, impacting online banking and sensitive data

Reporter	Title	Published	Views	Family All 35
0day.today	D-Link DIR636L Remote Command Injection Vulnerability	3 Mar 201500:00	–	zdt
0day.today	D-Link/TRENDnet NCC Service Command Injection Exploit	16 Apr 201500:00	–	zdt
0day.today	DLink / TRENDnet - NCC Service Command Injection Exploit	23 Mar 201700:00	–	zdt
ATTACKERKB	CVE-2015-1187	21 Sep 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.	26 Oct 201700:00	–	bdu_fstec

Source	Link
malware	www.malware.dontneedcoffee.com/2015/05/an-exploit-kit-dedicated-to-csrf.html
threatpost	www.threatpost.com/pharming-attack-targets-home-router-dns-settings/111326
threatpost	www.threatpost.com/easy-pickings-at-def-con-router-hacking-contest/107770
securelist	www.securelist.com/blog/incidents/66358/web-based-attack-targeting-home-routers-the-brazilian-way/
securelist	www.securelist.com/analysis/publications/57776/the-tale-of-one-thousand-and-one-dsl-modems/
threatpost	www.threatpost.com/300000-compromised-routers-redirecting-traffic-to-attacker-sites/104589
github	www.github.com/diafygi/webrtc-ips
tools	www.tools.ietf.org/html/rfc5389
packetstormsecurity	www.packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html

28 May 2015 22:42Current

0.2Low risk

Vulners AI Score0.2

EPSS0.82863