Sea Turtle hackers head to the Mediterranean, snag Greece's TLD registrar as a souvenir

Miscreants notorious for hijacking traffic to victims' servers by changing their DNS records have been accused of hacking a top domain-name registrar in Greece. The team at Cisco Talos believes the Sea Turtle group was responsible for an April cyber-break-in at ICS-Forth, the company that manages the .gr top-level domain for …

[Pascal Monett]

An interesting variation of the MITM attack

And one where the target can have as much security on its local network as it can afford, it won't make any difference.

So, if you're "worried about attacks", go ahead and add multi-factor authentication, but don't forget to phone your registrar and ask them what security they have against this.

[Nick Kew]

Re: An interesting variation of the MITM attack

This is precisely why we have cryptographic end-to-end security.

And why we have certificate authorities for servers. And - indirectly - why CAs, as a single point of failure, are a weakness in today's security, and why we should be looking to improve things with Distributed Trust Authorities.

[teknopaul]

Re: An interesting variation of the MITM attack

Be your own CA for anything important.

The list of CAs in your typical browser is a consumer rip off thats been run by the big boys so long no one dares address it.

The underlying tech works.