Hacking South Korea's National Cyber Security Center
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A researcher writing as "yuu" describes finding expired nameservers delegated to government domains via certificate transparency, including one for South Korea's National Cyber Security Center (ncsc.go.kr) whose delegation pointed to a lapsed domain, which they registered. Since DNSSEC was absent, this allowed DNS hijacking.