Hundreds of Fake UK Bank Sites Exposed, Pose High Risk for Customers

itman · May 3, 2017

Hackers have registered over 300 domains with names similar to those of several popular British banks, which they use to trick customers into handing over personal details or login data.

According to DomainTools, a company handling domain names and DNS-based cyber threats, 324 such domains were discovered only in relation to banks in the United Kingdom, namely Barclays, HSBC, Natwest, Lloyd's and Standard Chartered.

For its discovery, the company used its PhishEye tool which allows users to search for existing bad new domains that spoof legitimate brand, product, organization, or other names.

"Imitation has long been thought to be the sincerest form of flattery, but not when it comes to domains. Domain squatters use squatted domain names to administer and run phishing, drive-by download, or revenue-generating adware campaigns," said Kyle Wilhoit, senior security researcher at Domain Tools.

According to him, many of these types of domains will simply add a letter to a brand name, which may go undetected by the user. Others will add additional letters on either side of a brand name with the same end result.
Click to expand...

http://news.softpedia.com/news/hund...sed-pose-high-risk-for-customers-515391.shtml

Rmus · May 3, 2017

itman said: ↑

http://news.softpedia.com/news/hund...sed-pose-high-risk-for-customers-515391.shtml
Click to expand...

According to him, many of these types of domains will simply add a letter to a brand name, which may go undetected by the user...Users are, of course, advised to always check the name of the domain they've entered to make sure it's correct. It's always best to check for extra letters, dashes, reverse letters, plural or singular forms of the domain or "rn" masquerading for "m."
Click to expand...

Such trickery noted here at least as far back as 2005.

I've never understood why anyone would do other than use their own bookmarks to access their financial sites.

----
rich

Rasheed187 · May 6, 2017

I guess this is where "safe banking" tools like Trusteer and others come into play. They will always check if it's the legitimate banking site.

Log in or Sign up

Hundreds of Fake UK Bank Sites Exposed, Pose High Risk for Customers

itman Registered Member

Rmus Exploit Analyst

Rasheed187 Registered Member

Log in or Sign up

Hundreds of Fake UK Bank Sites Exposed, Pose High Risk for Customers

itman Registered Member

Rmus Exploit Analyst

Rasheed187 Registered Member

Useful Searches