Domain Hijacking - Attack Type

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 18, 2025
Last Seen
November 18, 2025

Domain Hijacking is a attack_type tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed November 18, 2025; most recent activity November 18, 2025.

Overview

Domain hijacking is a cybersecurity risk where attackers manipulate DNS infrastructure to redirect or intercept traffic by altering domain records or resolver behavior. The articles identify a moderate domain hijacking threat in the Unbound DNS resolver (CVE-2025-11411) and note that SUSE and openSUSE released fixes on 2025-11-18 to mitigate the vulnerability.

Related Threat Clusters

Recent Intelligence Reports

  • SUSE: Unbound Moderate Domain Hijacking Threat CVE-2025-11411 2025:4134 — Linuxsecurity · November 18, 2025
  • openSUSE: unbound Moderate Domain Hijacking Attack Fix 2025:4134 — Linuxsecurity · November 18, 2025

CVSS v3.1 Breakdown