Skip to main content
DNS

DNS shadowing

Definition, context, related terminology, and source references for DNS shadowing.

Definition

The malicious creation of many subdomains beneath a legitimately registered domain, often after account compromise, to host phishing, malware, or command-and-control infrastructure. The parent domain can initially appear reputable.