To make this attack work, the threat actor acquires some IPv6 address space, for which they are delegated control of the corresponding .arpa subdomain. Then, instead of adding the expected PTR records, they create A records for the reverse DNS names. We have seen threat actors abuse Hurricane Electric and Cloudflare to create these records—both of which have good reputations that actors leverage—and we confirmed that some other DNS providers also allow these configurations. Our tests were not exhaustive, but we notified the providers where we discovered a gap. Figure 2 depicts the process the threat actor used to create the domain used in the phishing emails.
更多精彩内容，关注钛媒体微信号（ID：taimeiti），或者下载钛媒体App，这一点在新收录的资料中也有详细论述
。新收录的资料对此有专业解读
sa_nl.nl_family = AF_NETLINK;。新收录的资料是该领域的重要参考
В России изменились программы в автошколах22:30