Using the DNS records, attackers are capable of rerouting user traffic and stealing credentials from what appears to be a legitimate website.

"I think 95 percent of what we see on the onion sites and other dark nets is just criminal activity."