Anatomy of a DNS Hijacking: The Fascinating Case of the Sea Turtle Campaign

11/5/2019 12:00:00 PM [(UTC-05:00) Eastern Time (US & Canada)] - Can't make the live event? Register anyway to receive a link to the recording.

Show/Hide All Time Zones

All Time Zones

Dateline Standard Time-(UTC-12:00) International Date Line West 11/5/2019 5:00:00 AM
UTC-11-(UTC-11:00) Coordinated Universal Time-11 11/5/2019 6:00:00 AM
Aleutian Standard Time-(UTC-10:00) Aleutian Islands 11/5/2019 7:00:00 AM
Hawaiian Standard Time-(UTC-10:00) Hawaii 11/5/2019 7:00:00 AM
Marquesas Standard Time-(UTC-09:30) Marquesas Islands 11/5/2019 7:30:00 AM
Alaskan Standard Time-(UTC-09:00) Alaska 11/5/2019 8:00:00 AM
UTC-09-(UTC-09:00) Coordinated Universal Time-09 11/5/2019 8:00:00 AM
Pacific Standard Time (Mexico)-(UTC-08:00) Baja California 11/5/2019 9:00:00 AM
UTC-08-(UTC-08:00) Coordinated Universal Time-08 11/5/2019 9:00:00 AM
Pacific Standard Time-(UTC-08:00) Pacific Time (US & Canada) 11/5/2019 9:00:00 AM
US Mountain Standard Time-(UTC-07:00) Arizona 11/5/2019 10:00:00 AM
Mountain Standard Time (Mexico)-(UTC-07:00) Chihuahua, La Paz, Mazatlan 11/5/2019 10:00:00 AM
Mountain Standard Time-(UTC-07:00) Mountain Time (US & Canada) 11/5/2019 10:00:00 AM
Central America Standard Time-(UTC-06:00) Central America 11/5/2019 11:00:00 AM
Central Standard Time-(UTC-06:00) Central Time (US & Canada) 11/5/2019 11:00:00 AM
Easter Island Standard Time-(UTC-06:00) Easter Island 11/5/2019 12:00:00 PM
Central Standard Time (Mexico)-(UTC-06:00) Guadalajara, Mexico City, Monterrey 11/5/2019 11:00:00 AM
Canada Central Standard Time-(UTC-06:00) Saskatchewan 11/5/2019 11:00:00 AM
SA Pacific Standard Time-(UTC-05:00) Bogota, Lima, Quito, Rio Branco 11/5/2019 12:00:00 PM
Eastern Standard Time (Mexico)-(UTC-05:00) Chetumal 11/5/2019 12:00:00 PM
Eastern Standard Time-(UTC-05:00) Eastern Time (US & Canada) 11/5/2019 12:00:00 PM
Haiti Standard Time-(UTC-05:00) Haiti 11/5/2019 12:00:00 PM
Cuba Standard Time-(UTC-05:00) Havana 11/5/2019 12:00:00 PM
US Eastern Standard Time-(UTC-05:00) Indiana (East) 11/5/2019 12:00:00 PM
Turks And Caicos Standard Time-(UTC-05:00) Turks and Caicos 11/5/2019 12:00:00 PM
Paraguay Standard Time-(UTC-04:00) Asuncion 11/5/2019 2:00:00 PM
Atlantic Standard Time-(UTC-04:00) Atlantic Time (Canada) 11/5/2019 1:00:00 PM
Venezuela Standard Time-(UTC-04:00) Caracas 11/5/2019 1:00:00 PM
Central Brazilian Standard Time-(UTC-04:00) Cuiaba 11/5/2019 1:00:00 PM
SA Western Standard Time-(UTC-04:00) Georgetown, La Paz, Manaus, San Juan 11/5/2019 1:00:00 PM
Pacific SA Standard Time-(UTC-04:00) Santiago 11/5/2019 2:00:00 PM
Newfoundland Standard Time-(UTC-03:30) Newfoundland 11/5/2019 1:30:00 PM
Tocantins Standard Time-(UTC-03:00) Araguaina 11/5/2019 2:00:00 PM
E. South America Standard Time-(UTC-03:00) Brasilia 11/5/2019 2:00:00 PM
SA Eastern Standard Time-(UTC-03:00) Cayenne, Fortaleza 11/5/2019 2:00:00 PM
Argentina Standard Time-(UTC-03:00) City of Buenos Aires 11/5/2019 2:00:00 PM
Greenland Standard Time-(UTC-03:00) Greenland 11/5/2019 2:00:00 PM
Montevideo Standard Time-(UTC-03:00) Montevideo 11/5/2019 2:00:00 PM
Magallanes Standard Time-(UTC-03:00) Punta Arenas 11/5/2019 2:00:00 PM
Saint Pierre Standard Time-(UTC-03:00) Saint Pierre and Miquelon 11/5/2019 2:00:00 PM
Bahia Standard Time-(UTC-03:00) Salvador 11/5/2019 2:00:00 PM
UTC-02-(UTC-02:00) Coordinated Universal Time-02 11/5/2019 3:00:00 PM
Mid-Atlantic Standard Time-(UTC-02:00) Mid-Atlantic - Old 11/5/2019 3:00:00 PM
Azores Standard Time-(UTC-01:00) Azores 11/5/2019 4:00:00 PM
Cape Verde Standard Time-(UTC-01:00) Cabo Verde Is. 11/5/2019 4:00:00 PM
UTC-(UTC) Coordinated Universal Time 11/5/2019 5:00:00 PM
GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London 11/5/2019 5:00:00 PM
Greenwich Standard Time-(UTC+00:00) Monrovia, Reykjavik 11/5/2019 5:00:00 PM
Sao Tome Standard Time-(UTC+00:00) Sao Tome 11/5/2019 5:00:00 PM
Morocco Standard Time-(UTC+01:00) Casablanca 11/5/2019 6:00:00 PM
W. Europe Standard Time-(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna 11/5/2019 6:00:00 PM
Central Europe Standard Time-(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague 11/5/2019 6:00:00 PM
Romance Standard Time-(UTC+01:00) Brussels, Copenhagen, Madrid, Paris 11/5/2019 6:00:00 PM
Central European Standard Time-(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb 11/5/2019 6:00:00 PM
W. Central Africa Standard Time-(UTC+01:00) West Central Africa 11/5/2019 6:00:00 PM
Jordan Standard Time-(UTC+02:00) Amman 11/5/2019 7:00:00 PM
GTB Standard Time-(UTC+02:00) Athens, Bucharest 11/5/2019 7:00:00 PM
Middle East Standard Time-(UTC+02:00) Beirut 11/5/2019 7:00:00 PM
Egypt Standard Time-(UTC+02:00) Cairo 11/5/2019 7:00:00 PM
E. Europe Standard Time-(UTC+02:00) Chisinau 11/5/2019 7:00:00 PM
Syria Standard Time-(UTC+02:00) Damascus 11/5/2019 7:00:00 PM
West Bank Standard Time-(UTC+02:00) Gaza, Hebron 11/5/2019 7:00:00 PM
South Africa Standard Time-(UTC+02:00) Harare, Pretoria 11/5/2019 7:00:00 PM
FLE Standard Time-(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius 11/5/2019 7:00:00 PM
Israel Standard Time-(UTC+02:00) Jerusalem 11/5/2019 7:00:00 PM
Kaliningrad Standard Time-(UTC+02:00) Kaliningrad 11/5/2019 7:00:00 PM
Sudan Standard Time-(UTC+02:00) Khartoum 11/5/2019 7:00:00 PM
Libya Standard Time-(UTC+02:00) Tripoli 11/5/2019 7:00:00 PM
Namibia Standard Time-(UTC+02:00) Windhoek 11/5/2019 7:00:00 PM
Arabic Standard Time-(UTC+03:00) Baghdad 11/5/2019 8:00:00 PM
Turkey Standard Time-(UTC+03:00) Istanbul 11/5/2019 8:00:00 PM
Arab Standard Time-(UTC+03:00) Kuwait, Riyadh 11/5/2019 8:00:00 PM
Belarus Standard Time-(UTC+03:00) Minsk 11/5/2019 8:00:00 PM
Russian Standard Time-(UTC+03:00) Moscow, St. Petersburg 11/5/2019 8:00:00 PM
E. Africa Standard Time-(UTC+03:00) Nairobi 11/5/2019 8:00:00 PM
Iran Standard Time-(UTC+03:30) Tehran 11/5/2019 8:30:00 PM
Arabian Standard Time-(UTC+04:00) Abu Dhabi, Muscat 11/5/2019 9:00:00 PM
Astrakhan Standard Time-(UTC+04:00) Astrakhan, Ulyanovsk 11/5/2019 9:00:00 PM
Azerbaijan Standard Time-(UTC+04:00) Baku 11/5/2019 9:00:00 PM
Russia Time Zone 3-(UTC+04:00) Izhevsk, Samara 11/5/2019 9:00:00 PM
Mauritius Standard Time-(UTC+04:00) Port Louis 11/5/2019 9:00:00 PM
Saratov Standard Time-(UTC+04:00) Saratov 11/5/2019 9:00:00 PM
Georgian Standard Time-(UTC+04:00) Tbilisi 11/5/2019 9:00:00 PM
Volgograd Standard Time-(UTC+04:00) Volgograd 11/5/2019 9:00:00 PM
Caucasus Standard Time-(UTC+04:00) Yerevan 11/5/2019 9:00:00 PM
Afghanistan Standard Time-(UTC+04:30) Kabul 11/5/2019 9:30:00 PM
West Asia Standard Time-(UTC+05:00) Ashgabat, Tashkent 11/5/2019 10:00:00 PM
Ekaterinburg Standard Time-(UTC+05:00) Ekaterinburg 11/5/2019 10:00:00 PM
Pakistan Standard Time-(UTC+05:00) Islamabad, Karachi 11/5/2019 10:00:00 PM
Qyzylorda Standard Time-(UTC+05:00) Qyzylorda 11/5/2019 10:00:00 PM
India Standard Time-(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi 11/5/2019 10:30:00 PM
Sri Lanka Standard Time-(UTC+05:30) Sri Jayawardenepura 11/5/2019 10:30:00 PM
Nepal Standard Time-(UTC+05:45) Kathmandu 11/5/2019 10:45:00 PM
Central Asia Standard Time-(UTC+06:00) Astana 11/5/2019 11:00:00 PM
Bangladesh Standard Time-(UTC+06:00) Dhaka 11/5/2019 11:00:00 PM
Omsk Standard Time-(UTC+06:00) Omsk 11/5/2019 11:00:00 PM
Myanmar Standard Time-(UTC+06:30) Yangon (Rangoon) 11/5/2019 11:30:00 PM
SE Asia Standard Time-(UTC+07:00) Bangkok, Hanoi, Jakarta 11/6/2019 12:00:00 AM
Altai Standard Time-(UTC+07:00) Barnaul, Gorno-Altaysk 11/6/2019 12:00:00 AM
W. Mongolia Standard Time-(UTC+07:00) Hovd 11/6/2019 12:00:00 AM
North Asia Standard Time-(UTC+07:00) Krasnoyarsk 11/6/2019 12:00:00 AM
N. Central Asia Standard Time-(UTC+07:00) Novosibirsk 11/6/2019 12:00:00 AM
Tomsk Standard Time-(UTC+07:00) Tomsk 11/6/2019 12:00:00 AM
China Standard Time-(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi 11/6/2019 1:00:00 AM
North Asia East Standard Time-(UTC+08:00) Irkutsk 11/6/2019 1:00:00 AM
Singapore Standard Time-(UTC+08:00) Kuala Lumpur, Singapore 11/6/2019 1:00:00 AM
W. Australia Standard Time-(UTC+08:00) Perth 11/6/2019 1:00:00 AM
Taipei Standard Time-(UTC+08:00) Taipei 11/6/2019 1:00:00 AM
Ulaanbaatar Standard Time-(UTC+08:00) Ulaanbaatar 11/6/2019 1:00:00 AM
Aus Central W. Standard Time-(UTC+08:45) Eucla 11/6/2019 1:45:00 AM
Transbaikal Standard Time-(UTC+09:00) Chita 11/6/2019 2:00:00 AM
Tokyo Standard Time-(UTC+09:00) Osaka, Sapporo, Tokyo 11/6/2019 2:00:00 AM
North Korea Standard Time-(UTC+09:00) Pyongyang 11/6/2019 2:00:00 AM
Korea Standard Time-(UTC+09:00) Seoul 11/6/2019 2:00:00 AM
Yakutsk Standard Time-(UTC+09:00) Yakutsk 11/6/2019 2:00:00 AM
Cen. Australia Standard Time-(UTC+09:30) Adelaide 11/6/2019 3:30:00 AM
AUS Central Standard Time-(UTC+09:30) Darwin 11/6/2019 2:30:00 AM
E. Australia Standard Time-(UTC+10:00) Brisbane 11/6/2019 3:00:00 AM
AUS Eastern Standard Time-(UTC+10:00) Canberra, Melbourne, Sydney 11/6/2019 4:00:00 AM
West Pacific Standard Time-(UTC+10:00) Guam, Port Moresby 11/6/2019 3:00:00 AM
Tasmania Standard Time-(UTC+10:00) Hobart 11/6/2019 4:00:00 AM
Vladivostok Standard Time-(UTC+10:00) Vladivostok 11/6/2019 3:00:00 AM
Lord Howe Standard Time-(UTC+10:30) Lord Howe Island 11/6/2019 4:00:00 AM
Bougainville Standard Time-(UTC+11:00) Bougainville Island 11/6/2019 4:00:00 AM
Russia Time Zone 10-(UTC+11:00) Chokurdakh 11/6/2019 4:00:00 AM
Magadan Standard Time-(UTC+11:00) Magadan 11/6/2019 4:00:00 AM
Norfolk Standard Time-(UTC+11:00) Norfolk Island 11/6/2019 4:00:00 AM
Sakhalin Standard Time-(UTC+11:00) Sakhalin 11/6/2019 4:00:00 AM
Central Pacific Standard Time-(UTC+11:00) Solomon Is., New Caledonia 11/6/2019 4:00:00 AM
Russia Time Zone 11-(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky 11/6/2019 5:00:00 AM
New Zealand Standard Time-(UTC+12:00) Auckland, Wellington 11/6/2019 6:00:00 AM
UTC+12-(UTC+12:00) Coordinated Universal Time+12 11/6/2019 5:00:00 AM
Fiji Standard Time-(UTC+12:00) Fiji 11/6/2019 6:00:00 AM
Kamchatka Standard Time-(UTC+12:00) Petropavlovsk-Kamchatsky - Old 11/6/2019 5:00:00 AM
Chatham Islands Standard Time-(UTC+12:45) Chatham Islands 11/6/2019 6:45:00 AM
UTC+13-(UTC+13:00) Coordinated Universal Time+13 11/6/2019 6:00:00 AM
Tonga Standard Time-(UTC+13:00) Nuku'alofa 11/6/2019 6:00:00 AM
Samoa Standard Time-(UTC+13:00) Samoa 11/6/2019 7:00:00 AM
Line Islands Standard Time-(UTC+14:00) Kiritimati Island 11/6/2019 7:00:00 AM

Webinar Registration

DNS is just the boring plumbing of the Internet that translates to domain names to IP addresses, right?

Wrong. It’s a major foundational element of the chain of trust in today’s ostensibly secure Internet. And despite how critical it is to security; DNS was designed before cybersecurity was a thing. Security is an afterthought in DNS.

And the bad guys are using this to their advantage. Especially a group dubbed Sea Turtle (don’t ask me, I think Talos had the naming honors on this one – I’ve always viewed Sea Turtles as cute and harmless). In this installment of my Anatomy of a Hack series, I’ll show you how DNS hijacking works and why Sea Turtle has been so successful.

This is a story of:

  • Hacked 1st parties – the ultimate intended targets
  • Hacked 3rd parties – including domain registrars and telecoms and other service providers to the primary targets
  • Certificate impersonation
  • Stolen certificates
  • Man-in-the-middle and VPN servers
  • Spearphishing

But primarily it’s about DNS hijacking. If you can tamper with the IP address returned for a victim’s domain name, you are well along your way to pwning the victim. Turns out, there are many ways to accomplish that – multiple levels at which to attack a target’s DNS records:

  1. The target organization’s account at their registrar – when you login to your domain name registrar what kind of authentication is required? If you use a weak password and there’s no dual-factor, this is the easiest way for an attacker to hijack your DNS
  2. The registrar’s network – how secure is the registrar?
  3. The DNS server. Most of us use a DNS hosting service. Same points as in #1 and #2
  4. Registries – not to be confused with registrars

Of course, we’ll talk about defensive measures including:

  • Careful selection of domain and DNS service providers
  • Registrar locks
  • 2-factor authentication
  • DNSSEC
  • Using passive DNS to detect abuse of your domains
  • Monitoring IP address changes returned for your DNS records
  • DNS over HTTPS and how it affects the Enterprise

I’ll get some help from Security Engineer, Chad Anderson of DomainTools who is an expert in leveraging DNS data in the cause of cyber security. Chad will also briefly show you their awesome technology that helps you detect attackers targeting you before they even get started.

Join us for this real-training-for-free session.

First Name:   
Last Name:   
Work Email:  
Phone:  
Job Title:  
Organization:  
Country:    
State:  
 

Your information will be shared with the sponsor.

By clicking "Submit", you're agreeing to our Privacy Policy and consenting to be contacted by us.

 

 

Additional Resources