registrar account takeover
When an attacker gets into a customer's account at a registrar A company that registers domain names for customers with the registry. Full definition of registrar, through stolen or guessed passwords, phishing Impersonating a trusted party to steal data, often with look-alike domains. Full definition of phishing or by tricking support staff (social engineering). From there the attacker can change name server A server that holds a domain's DNS records and answers lookups. Full definition of name server, redirect email or transfer domains away. Strong passwords, two-factor authentication and registry lock A registry-level lock that strongly protects a domain against unauthorized changes. Full definition of registry lock reduce the risk.
- category
- Security and abuse