Researchers Hijack Hacker Domain Using Name Server Delegation

Infoblox researchers leveraged a DNS misconfiguration technique called 'Sitting Ducks' to claim abandoned domains used by a large-scale malicious push-notification ad network, capturing over 57 million unencrypted logs across ~120 domains and revealing global deceptive campaigns that impersonated financial brands and targeted primarily South Asia; the findings highlight weak DNS hygiene enabling domain hijacking and ongoing fraudulent push notification abuse.