/* Javascripts ----------------------------------------------- */ /* * * * * * * BODY * * * * * * * ----------------------------------------------- */

Note that the title of most blog entries provides a link to the relevant document.

Wednesday, November 16, 2005

Welcome to planet Sony - over a half a million sites

Dan Kaminsky at Doxpara Research has done some great work. In his article titled "Welcome To Planet Sony", he describes how he checked DNS servers around the world for cached DNS entries for the sites that the Sony rootkit sends play information home to. And he found that over a half a million DNS servers world wide had cached the appropriate DNS entries. This probably translates to over a half a million infections. And then he went a step further, and plotted the location of these DNS servers around the world. The results are great visuals of the infection:
* North America
* Asia
* Europe

Possibly a more readable report of his work can be found in an article on Wired News titled "Sony Numbers Add Up to Trouble".

[+/-] show/hide this post