London firm at centre of mass hack
 

A London-registered outfit appears to be at the centre of a massive attack that's redirecting traffic from 300,000 routers.

UK Company 3NT Solutions has been named as being part of an attack which has control of consumer and small office/home office (SOHO) routers throughout Europe and Asia.

Florida-based security firm Team Cymru said claims to have uncovered a "SOHO pharming" campaign that had overwritten DNS settings on 300,000 routers. That allows attackers to redirect traffic to sites and domains controlled by them, "effectively conducting a man-in-the-middle attack".

Team Cymru spokesman Steve Santorelli told PC Pro that the attack was very clever. The routers' DNS settings had been changed to two IP addresses, both of which are for machines that are physically in the Netherlands, but registered with UK company 3NT Solutions, he said.

http://news.techeye.net/business/lon...e-of-mass-hack