engine - 3:20 pm on Feb 13, 2008 (gmt 0)

Users are at risk from a loophole in the the Domain Name System (DNS) that could make financial scams undetectable, according to a study by researchers from Georgia Tech and Google. The attack they describe, called "DNS resolution path corruption", could be carried out by a simple piece of code implanted via a malicious website or email attachment, the study said. The code would change a file in the Windows registry settings, telling the PC to use the malicious server for all DNS information.

DNS Resolution Path Corruption Helps Phishing Scams [pcadvisor.co.uk]