Forest Global Training Partners

Cyber Risks · Krebs on Security

Don’t Let Your Domain Name Become a “Sitting Duck”

Summary: New research from Infoblox and Eclypsium finds more than a million domain names, including some registered by Fortune 100 firms and brand protection companies, are vulnerable to takeover through authentication weaknesses at large web hosting providers and domain registrars. The researchers estimate about one million such "Sitting Duck" domains exist and that at least 30,000 have been hijacked for malicious use since 2019, with hijacked domains used for phishing, spam, Cobalt Strike and other malware command and control, and lookalike subdomains.

Bottom line: A domain can be claimed at a DNS provider without access to the true owner's registrar account, and the researchers found hijacked examples including a CBS Interactive domain and anti-phishing[.]org, registered by the Anti-Phishing Working Group. With roughly a million domains exposed and 30,000 already hijacked since 2019, the same weakness KrebsOnSecurity documented at GoDaddy in 2019 is still present at multiple large providers.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related