Tag: domain shadowing

  • ShadowFindr – Uncover domain shadowing attacks

    ShadowFindr – Uncover domain shadowing attacks

    —

    by

    Swapneel Patnekar

    At the DNS Community Day organized by DNS-OARC at the APRICOT 2024/APNIC 57 conference, we released ShadowFindr, a web tool to detect potential domain shadowing attacks. Who is living off your domain name? ShadowFindr is a web tool built for domain name registrants that helps identify potential domain shadowing attacks. We have written about domain…

  • Domain shadowing

    Domain shadowing

    —

    by

    Swapneel Patnekar

    Domain shadowing is a technique listed by MITRE ATT&CK as T1584.001 sub-technique of T1584 This technique is not to be confused with subdomain hijacking What is a domain shadowing attack? Threat actors gain control of the DNS control panel of legitimate domain names by brute force and stealthily insert subdomains pointing to the attackers’ network…