Category Archives: tld hijacking

The .io Error – Taking Control of All .io Domains With a Targeted Registration

Posted on by

In a previous post we talked about taking over the .na, .co.ao, and .it.ao domain extensions with varying levels of DNS trickery. In that writeup we examined the threat model of compromising a top level domain (TLD) and what some avenues would look like for an attacker to accomplish this goal. One of the fairly… Read More Continue reading The .io Error – Taking Control of All .io Domains With a Targeted Registration→

The Journey to Hijacking a Country’s TLD – The Hidden Risks of Domain Extensions

Posted on by

I will liken him to a wise man, who built his house on a rock. The rain came down, the floods came, and the winds blew, and beat on that house; and it didn’t fall, for it was founded on the rock. Everyone who hears these words of mine, and doesn’t do them will be… Read More Continue reading The Journey to Hijacking a Country’s TLD – The Hidden Risks of Domain Extensions→