- Joined
- May 7, 2005
- Messages
- 6,822
I got hacked a few months ago and the anti virus programs took 3 days to recognise the hack and remove it, so it was a fresh hack and while I was waiting for the anti-virus programs to be updated I was exposed. Luckily Google warned me, locked my Google account so I isolated the infected PC and used another PC to change all my important passwords. Every day I allowed the infected PC to connect to the internet for 5 mins to refresh the anti virus database, after 3 days of updates Microsoft Defender recognised the trojan and removed it.
My guess is I got the trojan from a website when I was tracking down info on RS485 Modbus an industrial comms protocol. Geeky websites are more prone to having compromised sites so any site hosting python programs etc can be hiding trojans etc.
So if the anti virus programs can leave you exposed for the time it takes for them to add the trojan to their profile for removal how can you add an extra layer of defence?
Well every website you enter the url for needs to be translated to an IP address by a DNS server so you can connect and see it on your browser. What if a DNS server is updated continually with the IP addresses of hacked sites and the IP addresses of where the Trojans connect to, then if you try to connect to that IP and the connection is refused.
Quad9 provides this service for free, I have entered there DNS server details into my router so all connected devices have to use their DNS service.
www.quad9.net
Reviews show that using Quad9 blocks 95% of compromised connections.
So it reduces the probability of you getting a trojan from a website by 95% and even if you get a trojan when it tries to connect to the hackers IP address it blocks that too for 95%.
All you see is that some sites will show as not existing when you click on a link to that site, those are the sites that could be infected.
Its worked so far, I am still going to geeky sites but quite a few are unavailable showing Quad9 is working and I need to stop messing with geeky stuff.
My guess is I got the trojan from a website when I was tracking down info on RS485 Modbus an industrial comms protocol. Geeky websites are more prone to having compromised sites so any site hosting python programs etc can be hiding trojans etc.
So if the anti virus programs can leave you exposed for the time it takes for them to add the trojan to their profile for removal how can you add an extra layer of defence?
Well every website you enter the url for needs to be translated to an IP address by a DNS server so you can connect and see it on your browser. What if a DNS server is updated continually with the IP addresses of hacked sites and the IP addresses of where the Trojans connect to, then if you try to connect to that IP and the connection is refused.
Quad9 provides this service for free, I have entered there DNS server details into my router so all connected devices have to use their DNS service.
Quad9 | A public and free DNS service for a better security and privacy
A public and free DNS service for a better security and privacy
www.quad9.net
Reviews show that using Quad9 blocks 95% of compromised connections.
So it reduces the probability of you getting a trojan from a website by 95% and even if you get a trojan when it tries to connect to the hackers IP address it blocks that too for 95%.
All you see is that some sites will show as not existing when you click on a link to that site, those are the sites that could be infected.
Its worked so far, I am still going to geeky sites but quite a few are unavailable showing Quad9 is working and I need to stop messing with geeky stuff.