TRA Publishes Guidelines to Detect and Fix the DNS Changer Malware

Mobilk - The Telecommunications RegulatoryAuthority (TRA) continues its efforts to ensure asafe cyber space for users in the United Arab Emirates (UAE), and monitors cyber threats that might threaten users in the countryin an effortto protect and guide them from falling prey to hackers. Proceeding from this ongoing endeavor, the TRA published on the webpage of the UAE Computer Emergency Response Team (aeCERT), a TRA initiative, information on the Malware Domain Name System (DNS) Changer that might resulted in the loss ofconnection to the internet on the 9th July 2012 for users with infected PCs. The DNS Changer has infected hundreds of thousands of PCs all around the world.

 

The TRA would like to mention that it has informed all of its constituents regardingthe incident by issuing an advisory that highlights the works of the malware and the remediation guidelines. According to the feeds the infections in the UAE were relatively small compared to other countries; however, in order to provide the highest levels of security to users, the TRA advises all users to follow the guidelines posted on aeCERT website www.aecert.ae that will enable them to detect, and fix their PCs in case of infection.

 

The DNS Changer malware functions by achieving full control of the user’s DNS serverand then controlling what sites the user connects to on the internet. Through this type of control they also can direct the user to fraudulent or phishing websites that would eventually lead to the ability of hackers to steal important information from the user’s PC.  Redirecting the user by hackers is carried outby creating a server called a Rogue DNS givingusers fake answers, alters their search,and redirects their searchto malicious websites.

 

The aeCERT noted that in order to detect this malware,it is highly recommended to check the DNS Server settings on the computer, and scan machines with up-to-date antivirus tools in order to findand remove the malware.

 

For more information on the DNS Changer malware, and means of effective prevention, please visit the aeCERT website: www.aecert.ae.