My DNS was hijacked, how to prevent use of my information?

Question

I just recently figured out my DNS has been hijacked after a stay at a hotel and connecting to an unknown open WiFi on accident. I have since changed the DNS servers back to Google's, but I may have entered credit card information and login information since it has been hijacked. Would SSL on websites I entered the information protect my passwords/cc numbers? What precautions can I take against identity theft?
Thanks!

Answer 1

DNS hijacked? What symptoms or conditions lead you to that assumption? Do you mean your 'hostfile' instead of DNS ? Although that DNS spoof is possible, it's more of a WAN/Network issue, as opposed to a client issue.



Spoofed Certificates are becoming more prolific, and because browsers have 'trust on first use' behavior, it may be your SSL CA was spoofed for a single session or series of connections, and you were directed to a criminal website set up to mimic the genuine article.

Firefox, with these add-on's helps keep tighter controls on Certificates:

Force-TLS;

Certificate Patrol;

Perspectives;

and "NoScript" is the single best all-around malware and hijacking deterrent there is.

Find 'em here: https://addons.mozilla.org/en-US/firefox/collections/dunbar-pappy/dunbarpappy/



For hostfile defense, try this:

"HOSTS file" (from mvps.org) which blocks evil webpage assets from re-directs which install malware or trashware. (Vista requires special instructions; on-page link)

http://www.mvps.org/winhelp2002/hosts.htm

Answer 2

You have also thought of the fact that you have just given the very terrorists that you are trying to stop a weapon as well, right? I mean, they will have the little box under their seat with a stun gun as well. If they would get to the box first, and able to use it to keep others from getting their little gun, well, then we have just given additional equipment to the hijacker. I am find with how things are operating. Obviously, something went well, because the passengers and flight crew all teamed up and stopped him. I would rather rely on everyone using their bare knuckles. That gives everyone the very same playing field, and then it is the numbers that works. And I am willing to bet there will be more honest people on board than terrorists.

Answer 3

Change your passwords and contact your credit card company...