Threat Management, Vulnerability Management

Hacktivist claims Facebook is vulnerable to DNS attacks, Facebook says it’s not

A fairly well-known hacktivist allegedly went public with information on how Facebook is vulnerable to DNS attacks, but the social media company said the report is bogus.

Cyberwarzone.com claimed it received instructions from Mauritania Attacker – the alleged leader of hacktivist collective AnonGhost – on how DNS attacks against Facebook are possible.

The article draws attention to a Facebook server, discovered by Mauritania Attacker, which only uses HTTP and can enable an individual to carry out various DNS attacks, including DNS spoofing. These types of attacks can result in users being redirected to other, often malicious websites.

Facebook quickly debunked the post.

“A few of our researchers have reviewed the post,” a Facebook spokesperson told SCMagazine.com on Monday. “The claim is inaccurate and doesn't represent a security risk.”

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.