Don’t Let Your Domain Name Become a “Sitting Duck” July 31, 2024

ronjor · Jul 31, 2024

More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, new research finds.
Infoblox, Eclypsium, and the DNS wiki listing at Github all say that web hosting giant Digital Ocean is among the vulnerable hosting firms. In response to questions, Digital Ocean said it was exploring options for mitigating such activity.
Click to expand...

https://krebsonsecurity.com/2024/07/dont-let-your-domain-name-become-a-sitting-duck/

FanJ · Jul 31, 2024

Thanks Ron! Welcome back, I'm very happy to see you here again!!

PS:
Somehow a little bit related ("authentication weaknesses at a number of large web hosting providers and domain registrars") is the recent issue at DigiCert:
DigiCert Revocation Incident (CNAME-Based Domain Validation)
https://www.wilderssecurity.com/thr...ncident-cname-based-domain-validation.454650/
Customers there had only 24 hours to get new certs:

Under strict CABF rules, certificates with an issue in their domain validation must be revoked within 24 hours, without exception.
Click to expand...

FanJ · Jul 31, 2024

While talking about DigiCert and the article from Brian Krebs,
just one snip from the article

In the case of the aforementioned Sitting Duck domain clickermediacorp[.]com, the domain was originally registered by , but it appears to have been hijacked by scammers by claiming it at the web hosting firm DNSMadeEasy, which is owned by Digicert, one of the industry’s largest issuers of digital certificates (SSL/TLS certificates).
Click to expand...

Malcontent · Aug 1, 2024

In a Sitting Ducks attack, cybercriminals exploit configuration shortcomings at the registrar level and insufficient ownership verification at DNS providers.

Researchers at DNS-focused security vendor Infoblox and at firmware and hardware protection company Eclypsium discovered that there are more than a million domains that can be hijacked every day via the Sitting Ducks attacks.
Click to expand...

Sitting Ducks DNS attacks let hackers hijack over 35,000 domains

Log in or Sign up

Don’t Let Your Domain Name Become a “Sitting Duck” July 31, 2024

ronjor Global Moderator

FanJ Updates Team

FanJ Updates Team

Malcontent Registered Member

Log in or Sign up

Don’t Let Your Domain Name Become a “Sitting Duck” July 31, 2024

ronjor Global Moderator

FanJ Updates Team

FanJ Updates Team

Malcontent Registered Member

Useful Searches