Netlify DNS compromised, attackers redirecting crypto applications to phishing sites for wallet draining.
Security & Exploits ·
Netlify's DNS infrastructure has reportedly been compromised, with attackers redirecting traffic from cryptocurrency applications to malicious sites designed to drain user wallets. The incident was disclosed through a public account, raising concerns about the security of applications relying on the hosting platform's domain services.
The attack appears to involve DNS hijacking, a technique that redirects users attempting to access legitimate crypto services to fraudulent phishing pages. By controlling DNS resolution, threat actors can intercept connections at a foundational level, making the compromise difficult for end users to detect without additional security measures.
Details about the scope of affected applications, the duration of the compromise, and whether Netlify has issued an official statement or begun remediation efforts remain unclear. The full extent of wallet losses and the number of users affected have not yet been disclosed.