Cybercriminals take advantage flaw in BIND software – Computerworld Portugal

There is no alternative to the application of correction provided by the Internet Systems Consortium

The Sucuri says it has detected attacks initiatives to DNS servers, based in a failure of the BIND 9 , the open source software more used to the machines with those functions. “We can confirm that the attacks began,” wrote Daniel Cid , CTO and founder of security company.

There is no alternative solution but to correct the software with the patch available with the Internet Systems Consortium. Linux distributions including Red Hat, the CentOS and Ubuntu has issued corrections, but it is up to managers systems implement them and restart your BIND server.

Cid also revealed that at least two of the customers Sucuri of different sectors had denial of service attacks on their machines. A successful attack leaves traces in server logs says the charge. The command “ANY TKEY” should appear when administrators have the “querylog” enabled.

Security analysts predicted that cybercriminals quickly discover how to exploit the flaw.