Dawn Of The Dead: The Tale Of The Resurrected Domains
summary
Claim: criminals re-register abandoned JavaScript domains and turn them into a supply‑chain vector that injects skimmers into checkout pages. Method: correlation across code‑search engines, urlscan.io snapshots and automated crawling with the Chrome HAR capturer. Built a scanner called Vashu that aggregates engines, fetches HARs and analyses scripts; it scales to hundreds then thousands of hits — ~985 confirmed, then 2,480 logged referrers and nearly 5,000 potential victims — and it works to reveal widespread defunct domain attack exposure.
AI-written summary · about
chapters (10)
- 0:00Defunct domain attacks
- 3:18First web skimmer campaign
- 10:03Malicious Web Cockpit library
- 17:58Vashu Dama automated detection
- 24:04Attack traced to Just Systems
- 28:21Control of defunct domain
- 33:19Prevalence of defunct domains
- 39:00Mitigation challenges
- 42:34Summary and feedback
- 42:54Q&A
related talks
01h 01mSomething Something Cyber
28mFerris Bueller's Guide to Abuse Domain Permutations
30mTargeted Web Skimming on E-Commerce Sites
32mSomething’s Phishy: See the Hook Before the Bait
40mNavigating the Shadows: A Comprehensive Exploration of Popular and Malicious Tools on the Dark Web
29mThe Ever-Changing Labyrinth: A Large-Scale Analysis of Wildcard DNS Powered...
55mCybercrime in The Deep Web
33mOffensive Javascript Techniques for Red Teamers