Master Card DNS Error Went Unnoticed for Years
Summary: MasterCard's DNS settings for the subdomain az.mastercard.com relied on a mistyped server name ending in 'akam.ne' instead of 'akam.net' from June 30, 2020 until January 14, 2025. Security researcher Philippe Caturegli spent $300 and nearly three months registering the unused akam.ne domain through Niger's registry, then saw hundreds of thousands of DNS requests hitting his server each day from locations around the globe.
Bottom line: Caturegli said that by setting a long TTL, an attacker could have used public resolvers like Cloudflare and Google to reroute far more than the one-fifth of traffic a single server of MasterCard's five would suggest, and could have obtained SSL/TLS certificates or received Windows authentication credentials. MasterCard's response was that there was no risk to its systems and a request through Bugcrowd to remove his LinkedIn post.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026