CubePilot drone software dev hit by DNS hijacking to intercept traffic
The Australian company CubePilot, which creates flight controllers for unmanned aerial vehicles (UAVs), reported that a DNS hijacking attempt has seriously disrupted operations.
Threat actors might divert traffic meant for a legitimate service to their infrastructure by stealing domain name system (DNS) records. This exposes consumers to risky situations including phishing, virus delivery, and sensitive data interception.
An attacker obtained control of the cubepilot[.]org domain DNS settings on July 24, enabling them to intercept traffic meant for internal systems, according to a status update posted on CubePilot's website.
Additionally, all cubepilot.org subdomains were covered by TLS certificates that the attacker acquired, thus customers visiting the impacted services would h...

