A new content delivery exploit called Underminr allows threat actors to modify web requests and use trusted websites to mask malicious activities. This domain-fronting attack can lead to brand hijacking by leveraging existing content delivery infrastructure. The article describes the technical mechanism of this exploit.
Underminr shows that content delivery infrastructure can be used to hide malicious Web traffic inside trusted domains, raising the risk of brand hijacking for websites that rely on shared delivery paths. For the streaming ecosystem, the key issue is not new content delivery capacity but abuse of the infrastructure already in place. The specific signal to watch is how the Underminr technique is described in follow-up technical guidance, especially any details on request modification and domain-fronting behavior.
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source