Later archive addition

Hacking law firms with abandoned domain names

Gabor and @gszathmari · Rainbow and Unicorn · 21 August 2018

The study finds law firms and related services that still trusted expired or abandoned domains in email addresses, DNS records, and account-recovery workflows. Re-registering those domains could intercept sensitive correspondence, reset accounts, and regain access to third-party systems long after the original relationship ended.

Record

Researcher

Gabor and @gszathmari

Published by

Rainbow and Unicorn

Date

21 August 2018

In the archive

• Added to the 2018 archive after the original list was published

Tags

• domain-takeover
• email
• account-takeover
• credential-theft

This page is the archive's own catalogue record. The research is the work of Gabor and @gszathmari, first published at the original source. Preserved copies are kept so the citation survives its host.