Nigerian Air Force Subdomain Hijacked with 100K+ Spam Pages

A security researcher found that a subdomain of the Nigerian Air Force website was apparently hijacked via DNS and served over 100,000 spam pages with ads. Analysis suggests either stolen DNS credentials or IP reassignment, as the parent domain is hosted on Galaxybackbone while the subdomain points to a rented cloud server.

2026-10-07 ~ 2026-10-07 · 3 related posts

• Nigerian Air Force subdomain hijacked to host 101K spam pages for ad revenue — thejasminejade · 2026-10-07
• Nigerian Air Force hijack: subdomain diverges from parent's nameservers — thejasminejade · 2026-10-07
• How the Nigerian Air Force subdomain was likely hijacked: two scenarios — thejasminejade · 2026-10-07