## page was renamed from DNS/hijacking/detectify/herokugithubdesk DNS/hijacking/detectify/herokugithubdeskについて、ここに記述してください。 Attack Scenario {{{ Your company starts using a new service, eg an external Support Ticketing-service. Your company points a subdomain to the Support Ticketing-service, eg support.your-domain.com Your company stops using this service but does not remove the subdomain redirection pointing to the ticketing system. }}} {{{ Attacker signs up for the Service and claims the domain as theirs. No verification is done by the Service Provider, and the DNS-setup is already correctly setup. Attacker can now build a complete clone of the real site, add a login form, redirect the user, steal credentials (e.g. admin accounts), cookies and/or completely destroy business credibility for your company. }}}