Over 1 million domains have been found potentially vulnerable to a “Sitting Ducks” attack, a cyber-threat that exploits DNS misconfigurations to hijack domains. The report, published by Infoblox Threat Intel, suggests that this type of attack, active since 2018, allows threat actors to leverage hijacked domains for malicious activities ranging from malware distribution to phishing.

Source: Infosecurity Magazine – Information Security & IT Security