Contents
What can you do with a subdomain takeover?
Using a subdomain takeover, attackers can send phishing emails from the legitimate domain, perform cross-site scripting (XSS), or damage the reputation of the brand which is associated with the domain. You can read more about implications (risks) in my other post. Subdomain takeover is not limited to CNAME records.
How do subdomain takeovers work?
A subdomain takeover occurs when an attacker gains control over a subdomain of a target domain. An attacker can take over that subdomain by providing their own virtual host and then hosting their own content for it.
What is subdomain phishing?
A Subdomain Attack is a phishing scam that is generally aimed toward non-technical people. Scammers will show a lack of knowledge about the difference between a domain and a subdomain to launch phishing attacks.
Can a subdomain be fake?
Having control over a subdomain of a targeted domain name can be used to setup up a phishing website or other fake content. To make it more effective, one can also request a TLS certificate for it.
Are .ru websites safe?
SECURITY If you want to stay out of trouble on the World Wide Web, steer clear of Romania and Russia. These two countries, found at websites ending in . A whopping 10 per cent of all websites ending in . tk lead to pages that are filled with malware — malicious software that can infiltrate a computer and wreak havoc.
How can an attacker take over a subdomain?
An attacker can take over that subdomain by providing their own virtual host and then hosting their own content for it.
When does a subdomain take over a host?
Typically, this happens when the subdomain has a canonical name ( CNAME) in the Domain Name System ( DNS ), but no host is providing content for it. This can happen because either a virtual host hasn’t been published yet or a virtual host has been removed.
How is a subdomain like an electrical outlet?
A subdomain is like an electrical outlet. If you have your own appliance (host) plugged into it, everything is fine. However, if you remove your appliance from the outlet (or haven’t plugged one in yet), someone can plug in a different one. You must cut power at the breaker or fuse box (DNS) to prevent the outlet from being used by someone else.