|View printer-friendly version|
There are two ways in which this DNS flaw, called a cache poisoning attack, can be exploited. DNS translates the human readable addresses on the Internet into the numeric addresses that computers use. Hackers can now tell a browser to go to a website that looks like a person's banking site, even though it isn't. For example, when a browser looks up the IP address for a bank, it will get the wrong address and point to a site that looks identical to that bank's website. This powerful attack can grab personal banking information, including passwords.
There is a more insidious attack involving email. Once again, DNS translates the domain name of the email address into computer readable form. With this cache poisoning attack, the emails are routed to a false email server where the messages are copied and then forwarded to the original recipient. Nobody knows that their personal information has just been copied, searched and the relevant information sold on the black market.
Johnson can discuss the specific mechanisms that can be used to attack email content, as well as the black market value of the information that can be garnered from email.
In addition he can discuss the benefits of encrypting email so that this style of attack cannot be used to gather personal information. This attack was first discovered 8 months ago -- how many more attacks have not been published yet?
To schedule a conversation with Mr. Johnson, please contact ZixCorp Public Relations at 214-370-2175 or for ZixCorp Email Encryption Service sales, please call 866-257-4949.
About Zix Corporation
ZixCorp is the leading provider of easy-to-use-and-deploy email encryption and e-prescribing services that Connect entities with their customers and partners to Protect and Deliver sensitive information in the healthcare, finance, insurance and government industries. ZixCorp's hosted Email Encryption Service provides an easy and cost-effective way to ensure customer privacy and regulatory compliance for corporate email. Its PocketScript(R) e-prescribing service saves lives and saves money by automating the prescription process between payors, doctors and pharmacies. For more information, visit http://www.zixcorp.com.
SOURCE Zix Corporation