Well, the "attacking multiple sites at once" is trivial. The "compromising a major registry" is at least supposed to be kinda hard.