Researchers from Softline Group analyzed 130 Russian companies across the education, consulting, and IT sectors. The study revealed that every second company has abandoned or hijacked domains, known as zombie domains. Additionally, about 37% of firms inadvertently expose partner information through subdomains or internal documentation.
Experts identify forgotten developer test environments as the primary risk. These resources are often created for specific tasks and remain active after projects conclude. When companies fail to manage DNS records or renew registrations, attackers can seize these domains to host phishing sites, distribute malware, or gain unauthorized access to corporate infrastructure.
The financial impact of these security lapses can reach hundreds of millions of rubles. While annual domain renewal costs only a few thousand rubles, the potential damage from a hijacked asset is significantly higher. Cyber-squatters often monitor recognizable brands and purchase expired domains within seconds of their release.
Security specialists recommend implementing centralized asset management and formal decommissioning procedures. This includes updating API keys, revoking certificates, and removing DNS records before a domain is released. For critical domains linked to email, authentication, or mobile apps, experts advise indefinite retention to prevent data exposure.
