Sitting Ducks Archives

Sitting Ducks is an attack tactic that has been used for years by a number of threat actors to take over legitimate domains and use them in investment fraud schemes and phishing attacks. According to Infoblox, around 9% (70,000) of the over 800,000 vulnerable registered domains it discovered over the previous three months have since been hijacked. In a comprehensive analysis published with The Hacker News, the cybersecurity firm claimed that since 2018, cybercriminals have exploited this mechanism to take over tens of thousands of domain names. Governmental organizations, non-profits, and well-known brands are examples of victim domains read more about Experts Uncover 70000 Hijacked Domains in Widespread 'Sitting Ducks' Attack Scheme. Get up to date on the latest cybersecurity ne...

Through an exploit known as a Sitting Ducks attack, hostile actors have the ability to take control of over a million domains. Over a dozen cybercriminal actors with a Russian connection are using the potent attack vector—which takes advantage of DNS vulnerabilities—to surreptitiously take over domains, according to a joint investigation released by Infoblox and Eclypsium. Without having access to the real owner's account at the DNS provider or registrar, the actor in a Sitting Ducks attack takes control of a domain that is currently registered with an authoritative DNS service or web hosting company, according to the researchers. Compared to other well-known domain hijacking attack vectors read more about Over 1 Million Domains at Risk of 'Sitting Ducks' Domain Hijacking Techniq...

Tag: Sitting Ducks

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Over 1 Million Domains at Risk of ‘Sitting Ducks’ Domain Hijacking Technique