Common Information
| Type | Value |
|---|---|
| Value |
Domains - T1584.001 |
| Category | Attack-Pattern |
| Type | Mitre-Attack-Pattern |
| Misp Type | Cluster |
| Description | Adversaries may hijack domains and/or subdomains that can be used during targeting. Domain registration hijacking is the act of changing the registration of a domain name without the permission of the original registrant.(Citation: ICANNDomainNameHijacking) Adversaries may gain access to an email account for the person listed as the owner of the domain. The adversary can then claim that they forgot their password in order to make changes to the domain registration. Other possibilities include social engineering a domain registration help desk to gain access to an account or taking advantage of renewal process gaps.(Citation: Krebs DNS Hijack 2019) Subdomain hijacking can occur when organizations have DNS entries that point to non-existent or deprovisioned resources. In such cases, an adversary may take control of a subdomain to conduct operations with the benefit of the trust associated with that domain.(Citation: Microsoft Sub Takeover 2020) Adversaries who compromise a domain may also engage in domain shadowing by creating malicious subdomains under their control while keeping any existing DNS records. As service will not be disrupted, the malicious subdomains may go unnoticed for long periods of time.(Citation: Palo Alto Unit 42 Domain Shadowing 2022) |
| Details | Published | Attributes | CTI | Title | ||
|---|---|---|---|---|---|---|
| Details | Website | 2024-11-15 | 0 | Holiday Shopping or holiday Scamming? Essential Tips to Keep Your Online Purchases Safe! | ||
| Details | Website | 2024-11-15 | 12 | Cybersecurity News Review — Week 46 | ||
| Details | Website | 2024-11-15 | 0 | upgrading simple shells to fully interactive ttys | ||
| Details | Website | 2024-11-15 | 5 | How Runtime Insights Help with Container Security | ||
| Details | Website | 2024-11-15 | 2 | Cyber Briefing: 2024.11.15 | ||
| Details | Website | 2024-11-15 | 0 | US EPA report cites cybersecurity flaws in drinking water systems, flags disruption risks and lack of incident reporting | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting | ||
| Details | Website | 2024-11-15 | 0 | 🚨 Known Brands, Government Domains, and More Hijacked via Sitting Ducks Attacks! 🚨 | ||
| Details | Website | 2024-11-15 | 2 | Supply Chain Security: The Backdoor That’s Leaving Your Business Wide Open | ||
| Details | Website | 2024-11-15 | 1 | Chinese SilkSpecter Hackers Attacking Black Friday Shoppers | ||
| Details | Website | 2024-11-15 | 1 | Cybercriminals Exploit SEO Tricks to Lure Shoppers to Fake Online Stores | ||
| Details | Website | 2024-11-15 | 2 | Essential Cyber Intel Brief: 11/15/2024 | ||
| Details | Website | 2024-11-15 | 0 | Scams, Smishing, and Safety Nets: How Emerging Threats Catches Phish | ||
| Details | Website | 2024-11-15 | 2 | ViperSoftX: Tracking And Countering a Persistent Threat - CUJO AI | ||
| Details | Website | 2024-11-15 | 7 | Today’s Top Cyber Intelligence Highlights — Nov 15, 2024 | ||
| Details | Website | 2024-11-15 | 33 | DONOT's Attack On Maritime & Defense Manufacturing | ||
| Details | Website | 2024-11-15 | 0 | Sumitomo Mitsui Financial Group, Mitsui Sumitomo Insurance and Cyreeg form cybersecurity JV | ||
| Details | Website | 2024-11-15 | 0 | Top 10 Daily Cybercrime Brief by FCRF [15.11.2024]: Click here to Know More | #cybercrime | #infosec | National Cyber Security Consulting | ||
| Details | Website | 2024-11-15 | 0 | Sitting Ducks DNS Attacks Threaten Over 1 Million Global Domains - RedPacket Security | ||
| Details | Website | 2024-11-15 | 0 | SilkSpecter: Chinese Threat Actor Targets Black Friday Shoppers with Fake Online Stores - CloudSEK News | ||
| Details | Website | 2024-11-15 | 26 | PXA Stealer IOCs - SEC-1275-1 | ||
| Details | Website | 2024-11-15 | 13 | SilkSpecter APT IOCs - SEC-1275-1 | ||
| Details | Website | 2024-11-15 | 17 | Lazarus APT IOCs - Part 25 - SEC-1275-1 | ||
| Details | Website | 2024-11-15 | 9 | CL-STA-0237 APT IOCs - SEC-1275-1 | ||
| Details | Website | 2024-11-15 | 346 | [GS-569] Mirai Botnet IOCs - SEC-1275-1 | ||
| Details | Website | 2024-11-15 | 1 | How Runtime Insights Help with Container Security |