Backdoor Blunders: Cybersecurity Hijinks Uncover 4,000 Vulnerable Web Shells!
WatchTowr Labs hijacked over 4,000 web backdoors by spending just $20 per domain, taking control of abandoned infrastructure. By registering expired domains, they tracked compromised hosts and gained theoretical control. Apparently, even cybercriminals forget to renew their domains, proving that everyone makes mistakes—even hackers!

Hot Take:
Who knew expired domains could be the bargain bin of cybersecurity? For just $20, watchTowr Labs snagged themselves a backdoor bonanza, making the rest of us wonder why we’re not buying up expired domains like they’re the new Bitcoin.
Key Points:
- WatchTowr Labs hijacked over 4,000 web backdoors using expired domains.
- They registered more than 40 domain names for command-and-control operations.
- Compromised targets include governments and universities across several countries.
- Identified web shells include c99shell, r57shell, and China Chopper.
- Previous $20 domain purchase exposed over 135,000 unique systems.
Already a member? Log in here