Domain Hijacking
- •
def
- •
gaining control of a domain's registration, which determines the DNS names and IP addresses that domain points to — without needing to touch the actual servers at all
- •
- •
how it happens
- •
brute force, social engineering the account password, or gaining access to the email address that manages the domain account
- •
- •
example
- •
Saturday, October 22, 2016 — attackers changed the domain registrations for 36 domains belonging to a Brazilian bank (desktop, mobile, and more), controlling the bank's online presence for about 6 hours, affecting roughly 5 million customers and $27 billion in assets
- •
- •
related