Through an exploit known as a Sitting Ducks attack, hostile actors have the ability to take control of over a million domains.
Over a dozen cybercriminal actors with a Russian connection are using the potent attack vector—which takes advantage of DNS vulnerabilities—to surreptitiously take over domains, according to a joint investigation released by Infoblox and Eclypsium.
Without having access to the real owner’s account at the DNS provider or registrar, the actor in a Sitting Ducks attack takes control of a domain that is currently registered with an authoritative DNS service or web hosting company, according to the researchers.
Compared to other well-known domain hijacking attack vectors read more about Over 1 Million Domains at Risk of ‘Sitting Ducks’ Domain Hijacking Technique.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.