HACKLOG 2x14 - Attacchi al Dominio Web e Domain Hijacking (Cyber/Typosquatting, Enumerazione)

https://peertube.uno/w/iKvZc2jxebfcw87bwk8Kr2

#PyPI geht gegen #DomainHijacking vor und prüft Mail-Adressen | Developer https://www.heise.de/news/PyPI-geht-gegen-Domain-Hijacking-vor-und-prueft-Mail-Adressen-10552920.html #SupplyChainAttack #SupplyChain

Following up on our previous domain hijacking blog, today we released a report about the threat actors using this attack, how to avoid your domains being hijacked, and how DNS plays a critical role in detecting and tracking these threat actors.
#dns #threatintel #cybercrime #cybersecurity #infosec #infobloxthreatintel #sittingducks #domainhijacking #phishing
https://blogs.infoblox.com/threat-intelligence/dns-predators-hijack-domains-to-supply-their-attack-infrastructure/

This attack is unbelievably powerful, easy, and preventable. It’s the criminal’s best kept secret. Much stealthier and more effective than dangling CNAMEs. We found many Russian-nexus actors, but we suspect there are more to be found. Please boost for awareness and hope we aren’t rediscovering this attack in another 6 years. Thanks to everyone contributed to our understanding of the attack and the actors using it … including Proofpoint, @rmceoin Dave Safely, Mandatory, and @briankrebs @dnsoarc #sittingducks #dns #domainhijacking #cybercrime #cybersecurity #infosec #threatintel #malware #phishing #tds #vextrio #404tds #threatintelligence #infoblox @knitcode https://blogs.infoblox.com/threat-intelligence/who-knew-domain-hijacking-is-so-easy/