How Fraudulent Domains 'Hide in Plain Sight'

ZMsiXone · Jun 18, 2019

https://www.darkreading.com/perimeter/how-fraudulent-domains-hide-in-plain-sight/d/d-id/1334987

Cybercriminals use new types of top-level domains, topical keywords, and targeted emails to trick victims into clicking malicious links.
Domain fraud is an old cybersecurity risk manifesting in new ways as cybercriminals take advantage of new top-level domains, privacy regulations, and social engineering tactics.

More than three-quarters of businesses found "lookalike" domains posing as their brand, researchers at Proofpoint Digital Risk Protection discovered as part of the 2019 Domain Fraud Report. Nearly all (96%) found exact matches of their brand-owned domain with a different top-level domain (TLD); for example, ".net" tacked on the end of the URL instead of ".com."
Click to expand...

Some fraudulent websites have certificates, which also put victims at ease.
Click to expand...

mirimir · Jun 18, 2019

The letter substitution ones are really tricky. Stuff like https://www.pаypal.com/ -- which points to https://www.xn--pypal-4ve.com/ vs http://www.paypal.com/. Because "а" is Cyrillic "a".

Log in or Sign up

How Fraudulent Domains 'Hide in Plain Sight'

ZMsiXone Registered Member

mirimir Registered Member

Log in or Sign up

How Fraudulent Domains 'Hide in Plain Sight'

ZMsiXone Registered Member

mirimir Registered Member

Useful Searches