1. Compromised Domain
Contents
Registration Hijacking
Threat actors may change the registration of a domain name without the permission of the original registrant. They may gain access to an email account for the person listed as the owner of the domain and then claim that they forgot their password to change to the domain registration. They could also engage in [[[Social Engineering Attacks|social engineering]] with the help desk to gain access to an account or take advantage of renewal process gaps.[2]
登録権限への攻撃だけが言及されている。