"Sitting Ducks" attack allows crooks to take full control of target domainAlmost a million websites vulnerable to takeover, experts warnTens of thousands of websites already compromised this wayAttackers gain control of target domain's DNS configurations, redirecting web traffic to malicious sites