'Sitting Ducks' Attacks Create Hijacking Threat for Domain Name Owners

Researchers report that Russian cybercriminals are exploiting a DNS weakness dubbed the "Sitting Ducks" attack to hijack registered domains at DNS providers; this enables phishing, malware delivery, brand impersonation, and data exfiltration. Infoblox and Eclypsium estimate more than one million domains are susceptible on any given day, the attacks are easy to execute and difficult to detect, and domain owners—especially those with domains 10+ years old—are urged to evaluate and mitigate DNS risk.