[icpmacdo]

How difficult of a thing is this to pull off?

[cheald]

If you can compromise a shared registrar, pretty trivial.

[eli]

Well, the "attacking multiple sites at once" is trivial. The "compromising a major registry" is at least supposed to be kinda hard.

[16s]

You'd have to have the ability to change DNS records for their domains. If you can point "whatever.com" to a NS that you control, it's game over until they take it back.