Critical DNS & Domain Name Security Intelligence to Thwart Cyberattacks

on YouTube ↗40m

" summary

ICANN and CSC detail concrete findings: 325,000+ COVID‑related domains appear since Jan 2020, 64% on .COM, ~75% on gTLDs, 645+ fraudulent online stores selling “cures,” and GoDaddy, Cloudflare, AWS and Google Cloud top registrars/ISPs used. CSC uses clustering technology plus real‑time monitoring and takedown enforcement (largest UDRP firewall) to map phishing, homoglyphs and counterfeit shops. Recommended controls include DNSSEC, registry/registrar lock (effective but social‑engineering vulnerable), DoH/DoT, response‑rate limiting and minimizing out‑of‑zone name servers.

AI-written summary · about

" chapters (17)

1. 0:00Intro
2. 1:22What is the DNS Ecosystem?
3. 2:39Vulnerabilities and Mitigations for DNS
4. 3:06DNS protocol vulnerabilities and mitigations
5. 8:54DNS Namespace Vulnerabilities and Mitigations
6. 12:04DNS Service Vulnerabilities and Mitigations
7. 14:53DNS Transitive Trust Examples: .EU vs .INT
8. 16:12Provisioning vulnerabilities and mitigations Compromise at the..
9. 17:59Software Vulnerabilities and Mitigations Vulnerability. The DNS came!
10. 20:42Companies Overlooking Domain & DNS Security Risks
11. 24:17CSC Offers a Secure Domains & DNS with a Holistic Approach to Protecting Your Online Digital Assets
12. 27:06CSC - Summary - Headline Research Findings
13. 28:36COVID Related Domain Registration vs. Events Timeline
14. 34:22COVID Homoglyphs Domain Name Spoofing Variations
15. 34:33Focusing on Brand Scams Domains Containing 'covid' & 'coronavirus'
16. 35:45Examples: Counterfeit Tests & Cures Stores
17. 37:42How can you apply this information to keep your company secure?

" related talks

• 45mObserved Malicious Cyber Criminality During COVID in the African and Arab RegionsWafa Dahmani, Abdul-Hakeem Ajijola, Mohamed Ali Benmabrouk, Haitham Al Hajri, Carlos Alvarez · FIRST & AfricaCERT Virtual Symposium for the African and Arab Regions 2021
• 16mhijacking.gov.uk - Identifying and Communicating Risks to the Digital StateTerence Eden · Global Security Vulnerability Summit @ Open Source Summit North America 2022
• 22mDNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive CounterBarry Greene · FIRSTCON21 Virtual Edition 2.0
• 19mCloudy with a Chance of Cyberattacks: Dangling Resources Abuse on Cloud PlatformsNethanel Gelernter, Jens Frieß, Tobias Gattermayer, Haya Schulmann, Michael Waidner · 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24)
• 47mDNS On FireWarren Mercer, Paul Rascagnères · NorthSec 2019
• 21mWHOIS Your Daddy: Tracking Iranian-backed Cyber Operations...Austin Northcutt · BSidesSF 2025
• 39mCommSec D1 - Behaviors and Patterns of Rogue Hosting ProvidersD. Mahjoub, S. Brown · Hack In The Box Amsterdam 2018
• 25mDark Side of the DNS ForceErik Wu · Black Hat USA 2016