Web Hack List

Later archive addition

CloudFront Domain Hijacks Under Attack

The article documents large-scale takeover of dangling CloudFront CNAMEs. When a CloudFront distribution is deleted but DNS remains, another party can claim the hostname on a new distribution, serve content under the victim's subdomain, obtain certificates, and use the trusted origin for phishing or watering-hole attacks.

Record

Researcher
Vincent Yiu

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Vincent Yiu, first published at the original source. Preserved copies are kept so the citation survives its host.