Can hackers change DNS records via Google Console Manager or a hacked website?

What is the name of the domain?

uniramalang.ac.id

What is the isssue you’re encountering

hello, in recent days we have experienced quite strange events. where some of the DNS pointing to our subdomains changed themselves. We check in the audit log that the change was made to our main email. while on the field, none of our teams did that. We have also reset the password several times to prevent that, but the result is that the DNS changes still occur. We only realized this when we got a notification from Google Console Manager that there had been a change in owner on our subdomain. The question is, can an attacker change DNS in Cloudflare from Google Console Manager which has a new owner? and here is one of the DNS that changed itself without any changes from our team

What feature, service or problem is this related to?

DNS records

Screenshot of the error

If you think your account has been compromised, then follow the steps here…

3 Likes

Hi @latief,

From the screenshot it looks to be an API request (change).

Please ensure you roll your existing API tokens and Keys as well.

Thank you.

2 Likes

thanks, I wil try your suggest

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.