No less than 4,000 unique web backdoors previously deployed by various threat actors have been hijacked by taking control of abandoned and expired infrastructure for as little as $20 per domain. Cybersecurity company watchTowr Labs said it pulled off the operation by registering over 40 domain names that the backdoors had been designed to use for command-and-control (C2). In partnership with the
source https://thehackernews.com/2025/01/expired-domains-allowed-control-over.html
source https://thehackernews.com/2025/01/expired-domains-allowed-control-over.html