Google hacker found a critical flaw in Blizzard Games that expose millions of PCs to DNS Rebinding attacksSecurity Affairs

Google hacker found a critical flaw in Blizzard Games that expose millions of PCs to DNS Rebinding attacksSecurity Affairs



钓鱼诱导访问恶意页面，切换DNS绑定地址为本机进行远程攻击。问题根源在于，游戏客户端没有对本机监听端口传入的命令内容做校验。实际成功概率不会很大，需要用户安装该客户端、钓鱼成功、并且页面持续到TTL过期成功切换IP地址。