Sitting Ducks DNS attacks let hackers hijack over 35,000 domains

Researchers (Infoblox and Eclypsium) warn of 'Sitting Ducks' DNS attacks that exploit lame delegations and lax provider verification to hijack domains; attackers have abused this vector since 2018 to seize at least 35,000 domains (with over a million vulnerable daily) for spam, phishing, traffic distribution systems, and malware/C2 operations, and several criminal clusters (e.g., 'Vacant Viper') have repeatedly leveraged these hijacked domains.