{"id":7292,"date":"2019-02-05T08:52:11","date_gmt":"2019-02-05T13:52:11","guid":{"rendered":"https:\/\/www.cscdigitalbrand.services\/blog\/?p=7292"},"modified":"2023-08-15T10:30:22","modified_gmt":"2023-08-15T14:30:22","slug":"global-dns-hijacking","status":"publish","type":"post","link":"https:\/\/www.cscdbs.com\/blog\/global-dns-hijacking\/","title":{"rendered":"Global DNS Hijacking and How CSC Secures Your Digital Assets"},"content":{"rendered":"
\n
\"global<\/figure>\n<\/div>\n\n\n

In the world of cyber crime, the news never seems to cease. In fact, two recent news stories detail domain name system (DNS) hijacking. One article focuses on a global campaign aimed at hijacking DNS at an unprecedented scale1<\/sup><\/a>, the other, another massive scam manipulating domain names using a major retail registrar\u2019s managed DNS services<\/a>2<\/sup><\/a>. The articles highlight specific techniques the attackers used to intercept and manipulate legitimate traffic, harvest information (like credentials or emails), or cause a range of other malicious activities, such as phishing. In some cases, low validation (and often free) digital security certificates issued by some providers were used to increase the credibility of the scams, compounding the issue for brands and customers.<\/p>\n\n\n\n

DNS hijacking is not a new threat. It\u2019s been used countless times by hacktivists and others to cause destruction or raise awareness to a cause3<\/sup><\/a>. However, cyber criminals have recently begun leveraging the tactic to sabotage financial institutions4<\/sup><\/a> and cryptocurrency providers for monetary gain5<\/sup><\/a>. These latest examples prove that cyber criminals are using DNS hijacking to access companies\u2019 DNS and reroute traffic to fraudulent sites. Additionally, they are conducting phishing campaigns to steal money or data, and in some extreme cases, even government property.<\/p>\n\n\n\n

This serves\nas an important reminder to organizations: you should ensure you are\ncollaborating with corporate providers focused on security that also possess the\nagility to deal with evolving threats. To mitigate these types of attacks, your\nprovider should:<\/p>\n\n\n\n