{"id":11414,"date":"2025-04-21T13:30:27","date_gmt":"2025-04-21T06:30:27","guid":{"rendered":"https:\/\/dti-jkt.telkomuniversity.ac.id\/?p=11414"},"modified":"2025-04-29T19:32:08","modified_gmt":"2025-04-29T12:32:08","slug":"kenali-dan-cegah-ancaman-broken-link-hijacking-blh","status":"publish","type":"post","link":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/kenali-dan-cegah-ancaman-broken-link-hijacking-blh\/","title":{"rendered":"Recognize and Prevent Broken Link Hijacking (BLH) Threats"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><h1 style=\"text-align: center\" class=\"vc_custom_heading vc_do_custom_heading\" >Recognize and Prevent Broken Link Hijacking (BLH) Threats<\/h1><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><h2 style=\"text-align: left\" class=\"vc_custom_heading vc_do_custom_heading\" >What Is Broken Link Hijacking?<\/h2>\n\t<div class=\"wpb_text_column wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p><strong>Broken Link Hijacking (BLH)<\/strong> is a form of cyber attack that occurs when an attacker takes over an unused domain or URL that is still linked by other websites or applications. These inactive domains can be exploited for various malicious activities, such as spreading malware or conducting digital scams (phishing).<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><h2 style=\"text-align: left\" class=\"vc_custom_heading vc_do_custom_heading\" >\u26a0\ufe0f Risks and Impacts of BLH Attacks<\/h2>\n\t<div class=\"wpb_text_column wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>BLH attacks can have serious impacts on individuals and organizations. Some of the risks that can be caused include:<\/p>\n<ul>\n<li><strong>Phishing<\/strong>Attackers are using hijacked domains to steal users' personal data.<\/li>\n<li><strong>Malware Distribution<\/strong>Compromised websites can be used to infect devices with dangerous viruses.<\/li>\n<li><strong>Defacement<\/strong>The original normal site display can be changed into a page that damages its reputation.<\/li>\n<li><strong>Impersonation<\/strong>The attacker pretends to be an official party and spreads false information.<\/li>\n<li><strong>Stored XSS<\/strong>A broken link takeover can be injected with malicious scripts that run when the site is visited.<\/li>\n<li><strong>Reputational Damage<\/strong>Users redirected to malicious sites can lose trust in the related institution or brand.<\/li>\n<\/ul>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><h2 style=\"text-align: left\" class=\"vc_custom_heading vc_do_custom_heading\" >\ud83e\uddfe Some Real-Life Cases of Public Health Centers That Have Occurred<\/h2>\n\t<div class=\"wpb_text_column wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<ol>\n<li><strong>Microsoft Passport (1999)<\/strong><br \/>\nMicrosoft briefly lost control of the domain <em>passport.com<\/em>, which was used for Hotmail services. A user successfully purchased the domain, which if misused could have been fatal. Fortunately, the domain was returned to Microsoft.<\/li>\n<li><strong>Subdomain Takeover<\/strong><br \/>\nThere are over 400,000 subdomains detected as vulnerable to takeover due to CNAME misconfigurations. Attackers can potentially exploit such subdomains to spread malware or steal user data.<\/li>\n<li><strong>JavaScript Hijacking<\/strong><br \/>\nIf an external script is linked from a defunct domain, an attacker can take over the domain and inject malicious code to steal information or hijack user accounts.<\/li>\n<\/ol>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><h2 style=\"text-align: left\" class=\"vc_custom_heading vc_do_custom_heading\" >\ud83d\udee1\ufe0f Preventive measures for BLH that can be taken<\/h2>\n\t<div class=\"wpb_text_column wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>To keep the system safe and protected from BLH threats, here are some recommended preventive measures:<\/p>\n<ol>\n<li><strong>Perform periodic link monitoring<\/strong><br \/>\nRegularly check all external links used in the system. Remove or fix inactive links.<\/li>\n<li><strong>Use Subresource Integrity (SRI)<\/strong><br \/>\nSRI allows systems to verify the authenticity of external content before it is executed by the browser.<\/li>\n<li><strong>Apply Content Security Policy (CSP)<\/strong><br \/>\nLimit external resources that the site can access only from trusted domains using CSP.<\/li>\n<li><strong>Proactively manage DNS<\/strong><br \/>\nTake over or redirect unused domains immediately to prevent misuse by others.<\/li>\n<\/ol>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div class=\"wpb_text_column wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Broken Link Hijacking is a real threat that often goes unnoticed. Broken links that are left unattended can become an entry point for attackers. Therefore, it's important to always be vigilant, conduct regular monitoring, and proactively implement security measures.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div class=\"wpb_text_column wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>If there are any issues, please contact us at\u00a0<a href=\"https:\/\/wa.me\/6281319800200\">WhatsApp follows\u00a0<strong>0813-1980-0200<\/strong>\u00a0<\/a>and email\u00a0<strong><a href=\"mailto:dtijkt@telkomuniversity.ac.id\">dtijkt@telkomuniversity.ac.id<\/a><\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Hello Harmony, Excellence, Integrity<\/strong><\/p>\n<p><strong>Information Technology Support<\/strong><\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"Kenali dan Cegah Ancaman Broken Link Hijacking (BLH)\ud83d\udd0d Apa Itu Broken Link Hijacking? Broken Link Hijacking (BLH) adalah salah satu bentuk serangan siber yang terjadi ketika pelaku mengambil alih domain atau URL yang sudah tidak digunakan lagi, namun masih ditautkan oleh situs atau aplikasi lain. Domain yang sudah tidak aktif ini bisa dimanfaatkan untuk berbagai [...]","protected":false},"author":5,"featured_media":11777,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"wds_primary_category":0,"footnotes":""},"categories":[80,38,69],"tags":[147,148,146],"class_list":["post-11414","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-artikel","category-blogs","category-panduan","tag-ancaman-broken-link-hijacking-blh","tag-broken-link-hijacking-blh","tag-kenali-dan-cegah-ancaman-broken-link-hijacking-blh"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"gutentor_comment":0,"rttpg_featured_image_url":{"full":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1.webp",1920,1080,false],"landscape":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1.webp",1920,1080,false],"portraits":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1.webp",1920,1080,false],"thumbnail":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1-150x150.webp",150,150,true],"medium":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1-300x169.webp",300,169,true],"large":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1-1024x576.webp",1024,576,true],"1536x1536":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1-1536x864.webp",1536,864,true],"2048x2048":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1.webp",1920,1080,false],"trp-custom-language-flag":["https:\/\/it-jkt.telkomuniversity.ac.id\/wp-content\/uploads\/2025\/04\/Kenali-dan-Cegah-Ancaman-Broken-Link-Hijacking-BLH-1.webp",18,10,false]},"rttpg_author":{"display_name":"dianaape@telkomuniversity.ac.id","author_link":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/author\/dianaapetelkomuniversity-ac-id\/"},"rttpg_comment":0,"rttpg_category":"<a href=\"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/category\/artikel\/\" rel=\"category tag\">Artikel<\/a> <a href=\"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/category\/blogs\/\" rel=\"category tag\">Blogs<\/a> <a href=\"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/category\/panduan\/\" rel=\"category tag\">Panduan Layanan IT<\/a>","rttpg_excerpt":null,"_links":{"self":[{"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/posts\/11414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/comments?post=11414"}],"version-history":[{"count":2,"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/posts\/11414\/revisions"}],"predecessor-version":[{"id":11776,"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/posts\/11414\/revisions\/11776"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/media\/11777"}],"wp:attachment":[{"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/media?parent=11414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/categories?post=11414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/it-jkt.telkomuniversity.ac.id\/en\/wp-json\/wp\/v2\/tags?post=11414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}