Due to a typo in the settings, attackers could substitute the DNS server for MasterCard.
A security researcher from Seralys discovered a vulnerability allowing DNS server substitution for the domain mastercard.com, used in the MasterCard payment system infrastructure. Since June 2020, there has been a typo in the DNS zone settings for mastercard.com — instead of the host "a22-65.akam.net" (Akamai DNS service), the host "a22-65.akam.ne" was listed. The root zone ".ne" is assigned to the Republic of Niger, and the domain "akam.ne" turned out to be […]
