Threat actor hijacked subdomains at 30+ major universities, researcher found

Дата публикации: 20-04-2026 17:34:29

Subdomain hijackings are a common technique for piggybacking on the prestige of respected institutions, a researcher wrote.

Основное содержимое страницы с новостью.

Alex Shakhov, the founder of a cybersecurity consulting firm, disclosed in a recent blog post that earlier this month he discovered that a threat actor had taken over 34 .edu subdomains at major universities — including MIT, Harvard, Stanford and Columbia.

He found that Google had even indexed the results, websites that are serving “pornographic spam.” The full list of affected institutions includes: MIT, Harvard, Stanford, UC Berkeley, Columbia, University of Chicago, Johns Hopkins University, George Washington University, University of Michigan, Rutgers, University of Virginia, Texas A&M, UC San Diego, Stony Brook University, Auburn University, University of Utah, University of Georgia, George Mason University, TCU, UCSF, Emory University, University of Washington, Washington University in St. Louis, Case Western Reserve University, UNC Chapel Hill, UNC Greensboro, Florida State University, Florida Southern College, Cal Poly, Antioch University, Ball State University, San Diego Supercomputer Center (SDSC), Atlantis University, and SIT.

According to Shakhov’s blog post, a subdomain takeover is a simple operation that starts with finding old projects that once lived on the university’s website and taking over those subdomains to host spammy or illicit content. Because of their association with a trusted source — universities — the subdomains enjoy high rankings on Google searches.

“The root cause is simple: organizations create DNS records and never clean them up,” the post reads. “There is no expiry date on a CNAME record. Nobody gets an alert when the target stops responding. And most university IT departments don’t maintain a comprehensive inventory of their subdomains and where they point.”

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	Harvard faces ‘active and specific cybersecurity threat’	0	9.03	06-04-2026
2	В Кузнецке прошел городской конкурс «А ну-ка, парни!»	0	0	21-02-2025
3	☝Мамы, хотите действительно отдохнуть и не думать как накормить любимых, ...	5	6	29-06-2026
4	Багаевская: День 18 дек, Вт	0	0	17-12-2018
5	Багаевская: Утро 18 дек, Вт	0	0	17-12-2018
6	ISL | Bengaluru will be keen on regaining consistency as it faces Mohammedan	0	0	10-01-2025
7	🔥 Ребята из «Формулы Успеха» под руководством советника директора по ...	0	0	19-02-2025
8	Vaccineproduktion på matematisk formel	0	0	21-09-2021
9	Подскажите сколько адекватно стоит аренда двухкомнатной квартиры недалеко от метро?	0	0	10-12-2016
10	shikaj : nvidia dlss-4	0	0	21-02-2025

Классификация: Наука. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 12. Источник: edscoop.com.