thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Domain Hijacking

Taking unauthorized control of a domain registration, often by compromising the registrar account.

Definition

Attackers change name servers or DNS records to redirect web and email traffic, sometimes intercepting TLS certificate issuance. Registrar account MFA, registry lock and domain transfer locks mitigate it.

Example

Attackers phish a registrar login and change a company's MX records to intercept email.

Exam tip

Registrar lock and MFA on the registrar account are the main defenses.

Related terms