PC World is reporting that with a new form of system-level DNS hijacking is apparently possible to reliably initiate such attacks using web-based malware, rather than relying on an end-user actions to initiate such an attack.
Google and the Georgia Institute of Technology teamed up to discover a series of open-recursive DNS servers that were termed as behaving “suspiciously.” Open-recursive DNS servers are DNS servers that will answer any lookup request, no matter where it originates. When a DNS servers return accurate information as they usually do, there aren’t any issues. However, when open DNS servers fail to return valid information, a number of issues can result.