08-03-2019, 05:21 AM
(08-02-2019, 07:43 PM)Hidden Refuge Wrote: Hacking the DNS of a domain is possible if a) the DNS hosting provider gets hacked (security holes in their system maybe, etc...), b) the account that holds the domain gets hacked somehow or c) maybe someone wasn't careful enough and left access open to an API for the DNS hosting and someone found out and used API access to modify records. Otherwise it would be impossible to simply go and change the DNS entry of a domain. I mean the chance that someone went so far is unlikely.
I could great domains and all point them to your IP if I really wanted. Nothing stops me from doing so. Before you other people owned that IP address and probably hosted sites.
I can't remember where I saw this, as it came up in my researches of a few nights ago. It was a complaint about the security of Namecheap DNS. There are some dated 2018 and a major one in 2014. But I've also found this now about GoDaddy in a quick search - like ways these spammers can use the Domain Registrars to get access to domain DNS that don't belong to them:
https://krebsonsecurity.com/2019/02/croo...addy-hole/