Hacker defaces Donald Trump fundraising site via subdomain takeover attack

A hacker defaced a presidential campaign fundraising website for Donald Trump with a little help from a DNS misconfiguration issue.

On 19 February, an actor known as “Pro_Mast3r” defaced the site secure2.donaldjtrump.com.

The site’s server, which is down as of this writing, was not linked from the Trump Pence campaign website. However, its certificate was legitimate. That suggests in all likelihood that Donald Trump, who took until early January 2017 to agree that Russia had hacked the DNC back in June 2016, actually used the server to fund his presidential campaign.