---
id: "sitting-ducks"
kind: "glossary-term"
title: "Sitting Ducks攻击"
language: "zh-Hans"
category: "安全与滥用"
updated: "2026-10-10T12:00:00Z"
canonical: "https://tldlog.com/zh/cihui/sitting-ducks-gongji/"
translations:
  en: "https://tldlog.com/glossary/sitting-ducks/"
  es: "https://tldlog.com/es/glosario/ataque-sitting-ducks/"
  de: "https://tldlog.com/de/glossar/sitting-ducks-angriff/"
  fr: "https://tldlog.com/fr/glossaire/attaque-sitting-ducks/"
  it: "https://tldlog.com/it/glossario/attacco-sitting-ducks/"
  pt-BR: "https://tldlog.com/pt/glossario/ataque-sitting-ducks/"
  ru: "https://tldlog.com/ru/glossariy/ataka-sitting-ducks/"
---

# Sitting Ducks攻击

一种无需接触域名所有者注册服务机构账户即可劫持域名的方法。当域名被委派给某个DNS服务商、但在该服务商处并未正确配置（称为无效委派），而该服务商又允许他人认领该名称时，这种攻击就能得手。Infoblox和Eclypsium的研究人员于2024年为其命名。

## 相关术语

- [DNS劫持](https://tldlog.com/zh/cihui/dns-jiechi/)
- [域名劫持](https://tldlog.com/zh/cihui/yuming-jiechi/)
- [域名服务器](https://tldlog.com/zh/cihui/yuming-fuwuqi/)
- [授权（顶级域）](https://tldlog.com/zh/cihui/shouquan-dingjiyu/)
- [子域名接管](https://tldlog.com/zh/cihui/ziyuming-jieguan/)