Underminr Flaw Lets Attackers Hide Malice Behind Trusted Websites

The article discusses a cybersecurity vulnerability known as 'Underminr,' which allows attackers to exploit the Internet infrastructure by modifying Web requests to mask malicious activities using trusted websites. This technique is similar to the earlier 'domain fronting' tactic that has been largely mitigated by CDNs since 2018. Researchers from ADAMnetworks estimate that around 42% of websites globally are vulnerable, with the risk rising to 51% in the U.S.

Underminr operates by exploiting weaknesses in DNS and CDN systems' cross-referencing, allowing attackers to pass malicious traffic through trusted channels. The article emphasizes that organizations must reconsider their CDN choices or move off vulnerable networks to protect their brand reputations and operational integrity.