Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams
Get unlimited access to everything VICE has to offer.
Turn off all ads on VICE.com
Exclusive New VICE Documentaries
Member Exclusive Features & Columns
Turn off all ads on VICE.com
Exclusive New VICE Documentaries
Member Exclusive Features & Columns
Turn off all ads on VICE.com
Exclusive New VICE Documentaries
Member Exclusive Features & Columns
4 Magazines Delivered to Your Door
Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams
Be skeptical and keep your payment details to yourself.
Share on X (Opens in new window)X
Share on Facebook (Opens in new window)Facebook
Share using Native toolsShareCopied to clipboard
ARPANET. If you know your internet history, ARPANET was the forerunner of the internet. Dating back to 1969, it gave birth to the World Wide Web decades later. Far from being an obscure crumb of history, it lives on in ways that fly under the radar day to day.
But the .arpa domain still underpins our modern-day internet. Think of .arpa as the shadows off the sides of the stage. Here, all the crucial functions take place largely out of sight of those who use the internet. Rather than being used for website URLs, the kind you punch into a URL bar, .arpa websites are normally used for essential functions.
So it’s a worrying problem that hackers have figured out how to hijack .arpa domains to run phishing scams on unsuspecting people, all while making them functionally invisible to those searching for them.
Why do hackers want to host their phishing scams from websites located on .arpa domains? These websites allow them to avoid the standard security checks. Not being subject to the same scrutiny as if they were hosted on regular means, they’re less likely to be detected and taken down
Infoblox reported the find on February 26. “(A notable) tactic we have observed in the phishing email hyperlinks is the abuse of subdomains of high-profile, legitimate domains,” the report noted.
“We found over 100 instances where the threat actor used hijacked CNAMEs of well-known government agencies, universities, telecommunication companies, media organizations, and retailers.”
“The phishing emails in these campaigns are simple, usually consisting of a hyperlinked lure image,” explains the report. “The lure itself frequently promises a ‘free gift’ for completing a survey… Other lures include claims that an online subscription or service has been interrupted or that the user has exceeded their cloud storage quota.”
In any case, they end up asking for a credit card, ostensibly for a reasonable purpose, such as paying for shipping. All that is to say, be skeptical when anybody, no matter how official or legit-looking, reaches out to you with an unprompted offer of a deal too good to be true, especially if they ask for any personal information or payment details.
Share on X (Opens in new window)X
Share on Facebook (Opens in new window)Facebook
Share using Native toolsShareCopied to clipboard
WhatsApp Officially Recommends One of Our Favorite VPNs 14 minutes ago By Matt Jancer
WhatsApp Officially Recommends One of Our Favorite VPNs
Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams 19 minutes ago By Matt Jancer
Hackers Have Hijacked Part of the Ancient Internet to Invisibly Deliver Scams
Illustration by Reesa. Daily Horoscope: March 4, 2026 8 hours ago By Ashley Fike
Daily Horoscope: March 4, 2026
Photo by Luke Brennan/Getty Images Kasabian Frontman Serge Pizzorno Shares Inspirations From Three Major Artists While Planning New Live Shows 15 hours ago By Lauren Boisvert
Kasabian Frontman Serge Pizzorno Shares Inspirations From Three Major Artists While Planning New Live Shows
Photo: Nicola Colombo / Getty Images 5 Consequences to Expect With the End of Eclipse Season 15 hours ago By Sammi Caramela
5 Consequences to Expect With the End of Eclipse Season
INGLEWOOD, CALIFORNIA – SEPTEMBER 08: Musician Ozzy Osbourne performs during half-time of the NFL game between the Los Angeles Rams and the Buffalo Bills at SoFi Stadium on September 08, 2022 in Inglewood, California. (Photo by Kevork Djansezian/Getty Images) Ozzy Osbourne Statue To Be Unveiled at 2026 Hellfest in France 15 hours ago By Stephen Andrew Galiher
Ozzy Osbourne Statue To Be Unveiled at 2026 Hellfest in France
By Stephen Andrew Galiher
Screenshot: Wildlight Studios Highguard Is Shutting Down Just 45 Days After Launch 16 hours ago By Brent Koepp
Highguard Is Shutting Down Just 45 Days After Launch
Screenshot: Epic Games Rick and Morty Fortnite Wave 3 Skins Revealed – Pickle Rick Release Date & Item Shop Time Confirmed 16 hours ago By Brent Koepp
Rick and Morty Fortnite Wave 3 Skins Revealed – Pickle Rick Release Date & Item Shop Time Confirmed
(Photo by Julia Beverly/Getty Images) 4 Hip-Hop Songs To Play When You Visit the Bay Area 17 hours ago By Caleb Catlin
4 Hip-Hop Songs To Play When You Visit the Bay Area
The 2010s were lousy with superhero movies, but there were also a lot of film soundtracks that dipped into throwback nostalgia. 4 of the Best Movie Soundtracks From the 2010s 17 hours ago By Lauren Boisvert
4 of the Best Movie Soundtracks From the 2010s
Add your account details
