Eight years after it was first published, the attack vector is largely unknown and unresolved. 'Sitting Ducks' technique is easier to perform, more likely to succeed, and harder to detect than other well-publicized domain hijacking attack vectors.
The flaw at the heart of the matter has been known since at least 2016, leading to the hijacking of 120,000 domains, showing the difficulty in addressing vulnerabilities arising from weak business processes.
[
Collection
]
[
|
...
]