ื ืืจืืคึผืข ืคืื โโืคืึธืจืฉืขืจ ืคืื ืชื ืืืื ืืื ืืืืขืจืกืืืขื ืืื ืืขื ืื ืืขืจืืืกืฆืืคึผืืื ืฆืขื ืืขืจ ืืื ืืจืฆืืื (ืืฉืจืื) ื ืืึท ืืึทืคืึทืื ืืืคึฟื (), ืึทืืึทืืื ื ืืืจ ืฆื ื ืืฆื ืงืืื DNS ืจืขืกืึธืืืืขืจื ืืื ืคืึทืจืงืขืจ ืึทืืคึผืืึทืคืืืขืจื, ืคึผืจืึทืืืืืืื ื ืึท ืึทืืคึผืืึทืคืึทืงืืืฉืึทื ืงืืจืก ืคืื ืึทืจืืืฃ ืฆื 1621 ืืึธื ืืื ืืขืจืืื ืขื ืคืื ืื ื ืืืขืจ ืคืื ืคึผืึทืงืืฅ (ืคึฟืึทืจ ืืขืืขืจ ืืขืื ืืขืฉืืงื ืฆื ืื ืจืขืกืึธืืืืขืจ, ืืืจ ืงืขื ืขื ืืขืจืืจืืืื 1621 ืจืืงืืืขืก ืฆื ืื ืกืขืจืืืขืจ ืคืื ืื ืงืึธืจืื) ืืื ืึทืจืืืฃ ืฆื 163 ืืื ืืื ืืขืจืืื ืขื ืคืื ืคืึทืจืงืขืจ.
ืืขืจ ืคึผืจืึธืืืขื ืืื ืฉืืึทืืืช ืฆื ืื ืคึผืืงืืืืืขืจืึทืืื ืคืื ืืขื ืคึผืจืึธืืึธืงืึธื ืืื ืึทืคืขืงืฅ ืึทืืข ืื ืก ืกืขืจืืืขืจืก ืืืึธืก ืฉืืืฆื ืจืขืงืืจืกืืืืข ืึธื ืคึฟืจืขื ืคึผืจืึทืกืขืกืื ื, ืึทืจืืึทื ืืขืจืขืื ื (CVE-2020-8616) (CVE-2020-12667) (CVE-2020-10995) ะธ (CVE-2020-12662), ืืื ืืขืืื ื ืืื ืขืคื ืืืขื ืื ืก ืืึทืืื ืื ืืก ืคืื Google, Cloudflare, Amazon, Quad9, ICANN ืืื ืื ืืขืจืข ืงืึธืืคึผืึทื ืืขืก. ืื ืคืึทืจืจืืืื ืืื ืงืึธืืึธืจืืึทื ืืืืื ืืื ืื ืก ืกืขืจืืืขืจ ืืขืืืขืืึธืคึผืขืจืก, ืืืึธืก ืกืืืืึทืืืืื ืืึทืกืื ืืืคืจืืื ืืขืจืืืึทื ืืืงืื ืืขื ืฆื ืคืึทืจืจืืืื ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืืืืขืจ ืคึผืจืึธืืืงืื. ืืึทืคืึทืื ืฉืืฅ ืืืคึผืืึทืืขื ืึทื ืืื ืจืืืืกืื
, , , .
ืื ืืึทืคืึทืื ืืื ืืืืืจื ืืืืฃ ืื ืึทืืึทืงืขืจ ื ืืฆื ืจืืงืืืขืก ืืืึธืก ืึธืคึผืฉืืงื ืฆื ืึท ืืจืืืก ื ืืืขืจ ืคืื ืืื ืึทืืขืจ ืืืืึทืืขืจืงื ืคืืงืืืืืึธืืก ื ืก ืจืขืงืึธืจืืก, ืฆื ืืืึธืก ื ืึธืืขื ืคืขืกืืงืืึทื ืืื ืืขืืึทืืืืืึทื, ืึธืืขืจ ืึธื ืกืคึผืขืฆืืคืืฆืืจื ืงืืื ืจืขืงืึธืจืืก ืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื IP ืึทืืจืขืกืขืก ืคืื ื ืก ืกืขืจืืืขืจืก ืืื ืืขืจ ืขื ืืคืขืจ. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืึท ืึทืืึทืงืขืจ ืกืขื ืื ืึท ืึธื ืคึฟืจืขื ืฆื ืืึทืฉืืืกื ืื ื ืึธืืขื sd1.attacker.com ืืืจื ืงืึทื ืืจืึธืืืื ื ืื ืื ืก ืกืขืจืืืขืจ ืคืึทืจืึทื ืืืืึธืจืืืขื ืคึฟืึทืจ ืื attacker.com ืคืขืื. ืืื ืขื ืืคืขืจ ืฆื ืื ืืงืฉื ืคืื ืื ืจืขืกืึธืืืืขืจ ืฆื ืื ืื ืก ืกืขืจืืืขืจ ืคืื ืื ืึทืืึทืงืขืจ, ืึท ืขื ืืคืขืจ ืืื ืืจืืืก ืืืึธืก ืืขืืึทืืืืฅ ืื ืืึทืฉืืืืื ื ืคืื ืื sd1.attacker.com ืึทืืจืขืก ืฆื ืื ืื ืก ืกืขืจืืืขืจ ืคืื ืื ืงืึธืจืื ืืืจื ืื ืืึทืงืืืืื ื NS ืจืขืงืึธืจืืก ืืื ืืขืจ ืขื ืืคืขืจ ืึธื ืืืืืืืื ื ืื IP ื ืก ืกืขืจืืืขืจืก. ืืื ื ืื ืืขืจืืื ื NS ืกืขืจืืืขืจ ืืื ื ืืฉื ืืขืคึผืืึธื ืืขืจื ืคืจืืขืจ ืืื ืืืื IP ืึทืืจืขืก ืืื ื ืืฉื ืกืคึผืขืกืืคืืขื, ืืขืจ ืจืขืกืึธืืืืขืจ ืคืจืืืื ืฆื ืืึทืฉืืืกื ืื IP ืึทืืจืขืก ืคืื ืื NS ืกืขืจืืืขืจ ืืืจื ืฉืืงื ืึท ืึธื ืคึฟืจืขื ืฆื ืื ืงืึธืจืื ืก ืื ืก ืกืขืจืืืขืจ ืกืขืจืืืื ื ืื ืฆืื ืคืขืื (victim.com).
ืื ืคึผืจืึธืืืขื ืืื ืึทื ืืขืจ ืึทืืึทืงืขืจ ืงืขื ืขื ืจืืกืคึผืึทื ื ืืื ืึท ืจืืืืง ืจืฉืืื ืคืื ื ืื-ืจืืคึผืืืื ื ื ืก ืกืขืจืืืขืจืก ืืื ื ืื-ืขืืืืกืืึทื ื ืคืืงืืืฉืึทืก ืงืึธืจืื ืกืืืืึธืืึทืื ื ืขืืขื (ืคืึทืงืข-1.victim.com, fake-2.victim.com, ... fake-1000. victim.com). ืืขืจ ืจืขืกืึธืืืืขืจ ืืืขื ืคึผืจืืืืจื ืฆื ืฉืืงื ืึท ืืงืฉื ืฆื ืื ืื ืก ืกืขืจืืืขืจ ืคืื ืื ืงืึธืจืื, ืึธืืขืจ ืืืขื ืืึทืงืืืขื ืึท ืขื ืืคืขืจ ืึทื ืื ืคืขืื ืืื ื ืืฉื ืืขืคืื ืขื, ื ืึธื ืืืึธืก ืขืก ืืืขื ืคึผืจืืืืจื ืฆื ืืึทืฉืืืกื ืื ืืืืึทืืขืจ ื ืก ืกืขืจืืืขืจ ืืื ืืขืจ ืจืฉืืื, ืืื ืึทืืื ืืืืฃ ืืื ืขืจ ืืื ืืขืคืจืืืื ืึทืืข ืื NS ืจืขืงืึธืจืืก ืืืกืืขื ืืืจื ืื ืึทืืึทืงืขืจ. ืึทืงืงืึธืจืืื ืืื, ืคึฟืึทืจ ืืืื ืึทืืึทืงืขืจ ืก ืืงืฉื, ืืขืจ ืจืขืกืึธืืืืขืจ ืืืขื ืฉืืงื ืึท ืจืืืืง ื ืืืขืจ ืคืื ืจืืงืืืขืก ืฆื ืืึทืฉืืืกื NS ืืื ืืช. ืืื ื NS ืกืขืจืืืขืจ ื ืขืืขื ืืขื ืขื ืืืฉืขื ืขืจืืืืึทื ืจืึทื ืืึทืืื ืืื ืึธืคึผืฉืืงื ืฆื ื ืื-ืขืืืืกืืึทื ื ืกืืืืึธืืึทืื ืก, ืืื ืืขื ืขื ื ืืฉื ืจืืืจืืืื ืคืื ืื ืงืึทืฉ ืืื ืืขืืขืจ ืืงืฉื ืคืื ืื ืึทืืึทืงืขืจ ืจืขืืืืืืื ืืื ืึท ืคืืขืจื ืคืื ืจืืงืืืขืก ืฆื ืื ืื ืก ืกืขืจืืืขืจ ืกืขืจืืืื ื ืื ืงืึธืจืื ืก ืคืขืื.
ืจืขืกืขืึทืจืืฉืขืจืก ืืขืืขืจื ื ืื ืืจืึทื ืคืื ืืืึทืื ืขืจืึทืืืืืื ืคืื ืฆืืืืจ ืื ืก ืจืขืกืึธืืืืขืจื ืฆื ืืขื ืคึผืจืึธืืืขื ืืื ืืืฉืืืกื ืึทื ืืืขื ืฉืืงื ืคึฟืจืืื ืฆื ืื CloudFlare ืจืขืกืึธืืืืขืจ (1.1.1.1), ืขืก ืืื ืืขืืืขื ืฆื ืคืึทืจืืจืขืกืขืจื ืื ื ืืืขืจ ืคืื ืคึผืึทืงืืฅ (PAF, ืคึผืึทืงืึทื ืึทืืคึผืืึทืคืึทืงืืืฉืึทื ืคืึทืงืืึธืจ) ืืื 48 ืืื, Google (8.8.8.8) - 30 ืืื, FreeDNS (37.235.1.174) - 50 ืืื, OpenDNS (208.67.222.222) - 32 ืืื. ืืขืจ ืืืืขืจืงื ืื ืืืงืึทืืึธืจืก ืืขื ืขื ืืืืขืจืงื ืคึฟืึทืจ
ืืขืืืขื3 (209.244.0.3) - 273 ืืื, ืงืืืึทื9 (9.9.9.9) - 415 ืืื
ืกืึทืคืขืื ืก (195.46.39.39) - 274 ืืื, ืืืขืจืืกืืื (64.6.64.6) - 202 ืืื,
ืึทืืืจืึท (156.154.71.1) - 405 ืืื, ืงืึธืืึธืืึธ ืกืขืงืืจืข (8.26.56.26) - 435 ืืื, DNS.Watch (84.200.69.80) - 486 ืืื, ืืื Norton ConnectSafe (199.85.126.10 ืืื) - 569 ืืื. ืคึฟืึทืจ ืกืขืจืืืขืจืก ืืืืืจื ืืืืฃ BIND 9.12.3, ืจืขืื ืฆื ืคึผืึทืจืึทืืขืืืืึทืืืึธื ืคืื ืจืืงืืืขืก, ืื ืืขืืืื ืก ืืืจืื ืงืขื ืขื ืืขืจืืจืืืื ืึทืจืืืฃ ืฆื 1000. ืืื Knot Resolver 5.1.0, ืื ืืขืืืื ืก ืืืจืื ืืื ืืขืขืจืขื ืขืืืขืืข ืืขื ืก ืคืื ืืื (24-48), ืืื ื ืื ืคืขืกืืงืืึทื ืคืื NS ื ืขืืขื ืืื ืืืจืืืขืงืึธืื ืกืึทืงืืืขื ืืฉืึทืื ืืื ืจืขืกืฅ ืืืืฃ ืื ืื ืขืจืืขื ืฉืืขืืจ ืืืืฃ ืื ื ืืืขืจ ืคืื ื ืึธืืขื ืืึทืืืึธืืข ืกืืขืคึผืก ืขืจืืืืื ืคึฟืึทืจ ืืืื ืืงืฉื.
ืขืก ืืขื ืขื ืฆืืืื ืืืืคึผื ืคืึทืจืืืืืืงืื ื ืกืืจืึทืืขืืืขืก. ืคึฟืึทืจ ืกืืกืืขืืขื ืืื DNSSEC ื ืืฆื ืฆื ืคืึทืจืืืึทืื ืื ืก ืงืึทืฉ ืืืืคึผืึทืก ืืืืึทื ืจืืงืืืขืก ืืขื ืขื ืืขืฉืืงื ืืื ืืจืึทืค ื ืขืืขื. ืื ืขืกืึทื ืก ืคืื ืืขื ืืืคึฟื ืืื ืฆื ืืืฉืขื ืขืจืืื ื ืขืืึทืืืื ืจืขืกืคึผืึธื ืกืขืก ืึธื ืงืึธื ืืึทืงื ืึทืืึธืจืึทืืืืืืื ืื ืก ืกืขืจืืืขืจืก, ื ืืฆื ืงืืื ืงืึธื ืืจืึธืืืจืื ื ืืืจื DNSSEC. ื ืกืืืคึผืืขืจ ืฆืืืึทื ื ืืื ืฆื ืืึทืืจืขื ืขืฆื ืื ื ืืืขืจ ืคืื ื ืขืืขื ืืืึธืก ืงืขื ืขื ืืืื ืืืคืืื ื ืืืขื ืคึผืจืึทืกืขืกืื ื ืึท ืืืื ืืขืืึทืืืืืึทื ืืขืื, ืึธืืขืจ ืืขื ืืืคึฟื ืงืขื ืคืึทืจืฉืึทืคื ืคึผืจืึธืืืขืืก ืืื ืขืืืขืืข ืืืืืกืืื ื ืงืึทื ืคืืืืขืจืืืฉืึทื ื ืืืืึทื ืื ืืืืึทืฅ ืืขื ืขื ื ืืฉื ืืืคืืื ื ืืื ืืขื ืคึผืจืึธืืึธืงืึธื.
ืืงืืจ: opennet.ru