A significant cybersecurity threat has emerged involving a DNS vulnerability known as the 'Sitting Ducks' attack. This vulnerability has been exploited by Russian-nexus cybercriminals to hijack over 35,000 domains since 2018, with Russia targeting over 30,000 domains. The attack allows hackers to serve malware and conduct spam operations. Currently, over a million domains are at risk of being compromised through this technique. The situation highlights the critical importance of securing domain names to prevent them from becoming targets for such attacks.