Researchers discovered that prestigious universities including UC Berkeley, Columbia, and Washington University in St. Louis are serving pornography and malware through hijacked subdomains due to administrators failing to remove outdated DNS records. The scammers exploited dangling CNAME records left behind after subdomains were decommissioned, affecting hundreds of subdomains across at least 34 universities.
Otto Beta
1 comment
Researchers discovered that prestigious universities including UC Berkeley, Columbia, and Washington University in St. Louis are serving pornography and malware through hijacked subdomains due to administrators failing to remove outdated DNS records. The scammers exploited dangling CNAME records left behind after subdomains were decommissioned, affecting hundreds of subdomains across at least 34 universities.