Sitting Ducks attack
A way to hijack a domain without touching the owner's registrar A company that registers domain names for customers with the registry. Full definition of registrar account. It works when a domain is delegated to a DNS provider A company that runs the name servers for a domain, which may differ from the registrar. Full definition of DNS provider where it is not properly set up, known as a lame delegation A delegation pointing to a name server that does not answer for the domain. Full definition of lame delegation, and that provider lets someone else claim the name. Researchers at Infoblox and Eclypsium named it in 2024.
- category
- Security and abuse