Facebook.com=MySpace: COX Internet is victim to DNS poison attack? (Phoenix, AZ)

2 points

15 years ago

Today I experienced something peculiar when I browsed to Facebook.com and instead of seeing my friendly news feed, I saw the homepage of MySpace. I was very surprised, I hadn't been to MySpace in years, and hadn't ever even been on my computer. So I tried again and realized that www.facebook.com was resolving (not redirecting) to www.myspace.com.It seems like a DNS poison attack.To make sure, I did an nslookup for Facebook.com and went to the IP address listed. Facebook came up just fine, but the domain name still resolved to Myspace. A few other things were not resolving correctly, and some pointed to individual Myspace band pages.I didn't even want to try going to Wells Fargo or Chase bank. There probably was a good chance those domains were compromised if the attacked was being very malicious.I tried a second computer connected directly to the modem to eliminate my browser's cache and the router cache as possible causes. It appears COX communications is victim to a DNS poison attack in Phoenix, AZ.So I immediately changed my router's DNS to use OpenDNS which solved the problem right away. I posted the problem to my Facebook, and had many people comment that this has happened to them before, and quite frequently it seems. What?!! This seems like an incredibly serious problem. I'm on hold with COX now to report this, but I'm afraid they won't know what a DNS poison attack is.I'm no DNS expert, but if you are I'd love to listen to your comments in case I'm jumping to false conclusions.