menu_open Columnists
We use cookies to provide some features and experiences in QOSHE

More information  .  Close

Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams

2 0
wednesday

Get unlimited access to everything VICE has to offer.

Turn off all ads on VICE.com

Exclusive New VICE Documentaries

Member Exclusive Features & Columns

Turn off all ads on VICE.com

Exclusive New VICE Documentaries

Member Exclusive Features & Columns

Turn off all ads on VICE.com

Exclusive New VICE Documentaries

Member Exclusive Features & Columns

4 Magazines Delivered to Your Door

Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams

Be skeptical and keep your payment details to yourself.

Share on X (Opens in new window)X

Share on Facebook (Opens in new window)Facebook

Share using Native toolsShareCopied to clipboard

ARPANET. If you know your internet history, ARPANET was the forerunner of the internet. Dating back to 1969, it gave birth to the World Wide Web decades later. Far from being an obscure crumb of history, it lives on in ways that fly under the radar day to day.

But the .arpa domain still underpins our modern-day internet. Think of .arpa as the shadows off the sides of the stage. Here, all the crucial functions take place largely out of sight of those who use the internet. Rather than being used for website URLs, the kind you punch into a URL bar, .arpa websites are normally used for essential functions.

So it’s a worrying problem that hackers have figured out how to hijack .arpa domains to run phishing scams on unsuspecting people, all while making them functionally invisible to those searching for them.

Why do hackers want to host their phishing scams from websites located on .arpa domains? These websites allow them to avoid the standard security checks. Not being subject to the same scrutiny as if they were hosted on regular means, they’re less likely to be detected and taken down

Infoblox reported the find on February 26. “(A notable) tactic we have observed in the phishing email hyperlinks is the abuse of subdomains of high-profile, legitimate domains,” the report noted.

“We found over 100 instances where the threat actor used hijacked CNAMEs of well-known government agencies, universities, telecommunication companies, media organizations, and retailers.”

“The phishing emails in these campaigns are simple, usually consisting of a hyperlinked lure image,” explains the report. “The lure itself frequently promises a ‘free gift’ for completing a survey… Other lures include claims that an online subscription or service has been interrupted or that the user has exceeded their cloud storage quota.”

In any case, they end up asking for a credit card, ostensibly for a reasonable purpose, such as paying for shipping. All that is to say, be skeptical when anybody, no matter how official or legit-looking, reaches out to you with an unprompted offer of a deal too good to be true, especially if they ask for any personal information or payment details.

Share on X (Opens in new window)X

Share on Facebook (Opens in new window)Facebook

Share using Native toolsShareCopied to clipboard

WhatsApp Officially Recommends One of Our Favorite VPNs 14 minutes ago By Matt Jancer

WhatsApp Officially Recommends One of Our Favorite VPNs

Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams 19 minutes ago By Matt Jancer

Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams

Illustration by Reesa. Daily Horoscope: March 4, 2026 8 hours ago By Ashley Fike

Daily Horoscope: March 4, 2026

Photo by Luke Brennan/Getty Images Kasabian Frontman Serge Pizzorno Shares Inspirations From Three Major Artists While Planning New Live Shows 15 hours ago By Lauren Boisvert

Kasabian Frontman Serge Pizzorno Shares Inspirations From Three Major Artists While Planning New Live Shows

Photo: Nicola Colombo / Getty Images 5 Consequences to Expect With the End of Eclipse Season 15 hours ago By Sammi Caramela

5 Consequences to Expect With the End of Eclipse Season

INGLEWOOD, CALIFORNIA – SEPTEMBER 08: Musician Ozzy Osbourne performs during half-time of the NFL game between the Los Angeles Rams and the Buffalo Bills at SoFi Stadium on September 08, 2022 in Inglewood, California. (Photo by Kevork Djansezian/Getty Images) Ozzy Osbourne Statue To Be Unveiled at 2026 Hellfest in France 15 hours ago By Stephen Andrew Galiher

Ozzy Osbourne Statue To Be Unveiled at 2026 Hellfest in France

By Stephen Andrew Galiher

Screenshot: Wildlight Studios Highguard Is Shutting Down Just 45 Days After Launch 16 hours ago By Brent Koepp

Highguard Is Shutting Down Just 45 Days After Launch

Screenshot: Epic Games Rick and Morty Fortnite Wave 3 Skins Revealed – Pickle Rick Release Date & Item Shop Time Confirmed 16 hours ago By Brent Koepp

Rick and Morty Fortnite Wave 3 Skins Revealed – Pickle Rick Release Date & Item Shop Time Confirmed

(Photo by Julia Beverly/Getty Images) 4 Hip-Hop Songs To Play When You Visit the Bay Area 17 hours ago By Caleb Catlin

4 Hip-Hop Songs To Play When You Visit the Bay Area

The 2010s were lousy with superhero movies, but there were also a lot of film soundtracks that dipped into throwback nostalgia. 4 of the Best Movie Soundtracks From the 2010s 17 hours ago By Lauren Boisvert

4 of the Best Movie Soundtracks From the 2010s

Add your account details


© Vice