[Retired Tech]

Drive-by pharming relies on the fact that the majority of users do not change the password needed to change their router’s setting from the manufacturers’ default setting – often simply the word “password”.

To carry out the attack all someone has to do is persuade a computer user to visit a website they have set up, potentially via an advert on Google or a link from a spam email.

The website contains a piece of computer code that hacks into the user’s router - unless they have changed their password - and changes the DNS server settings.

This means for example that the attacker now can direct requests for the user’s bank website to fake websites he or she has set up – potentially websites that precisely mirror the bank’s real site.

In Depth Information

Brief Outline

[Advertisements]

http://www.geekstogo...y_-t149469.html beat you to it

[dsenette]

http://www.geekstogo...y_-t149469.html beat you to it

[Retired Tech]

Not in the networking forum

[dsenette]

it's a really interesting process....just reading the proof of concept...it's a pretty devestating effect...coupled with the fact that just about nobody changes the default username/password....it COULD affect alot of people..

[Pluto56]

thanks for the info guys. I read Dsenette's thread yesterday, first thing I did after was change mine.
Thanks again!