Cybercriminals Exploit .arpa TLD for Phishing Attacks

Cybercriminals have successfully exploited the .arpa top-level domain (TLD) by leveraging IPv6 addresses to bypass anti-phishing filters. The domain, originally designated for infrastructure purposes within the Domain Name System (DNS), is being misused to evade detection mechanisms. No specific threat actors, dates, or technical indicators such as CVE IDs were disclosed in the report. The attack vector involves manipulating DNS records associated with .arpa to facilitate phishing campaigns. The impact includes reduced effectiveness of security controls designed to block malicious domains.