What's in a name? Strange behaviors at top-level domains creates uncertainty in DNS
Summary: Google introduced the .zip Top Level Domain on May 3, 2023, reviving concern about name collisions, which ICANN defines as a user unknowingly reaching a public DNS name when they intended a private resource. Cisco Talos found the .kids TLD published no A record at the root level after dropping the 127.0.53.53 address in January 2023, and Talos successfully registered your-dns-needs-immediate-attention.kids, which drew HTTP requests from systems running Microsoft's System Center Configuration Manager.
Bottom line: Because Talos could register the name the ICANN framework uses to flag collisions, it could masquerade as a trusted system to networks using .kids names, potentially relaying internal mail and dictating configuration management settings.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026