DNS hijacking
Named by 2 kept items in this workspace.
Search every workspace for DNS hijacking. It matches the name as written, so it can find other things that share it.
The items that name it 2
The page reports a DNS hijack of 12 DeFi front ends that share the registrar Name.com, on 30 October 2026, used to load the Step Drainer kit.
Modifying DNS records at compromised hotel WiFi vendors to redirect guest traffic to actor infrastructure (GTG-20006)
All techniques in this workspace.