The most popular brand websites that hackers use for typosquatting campaigns

guest · Sep 1, 2020

The most popular brand websites that hackers use for typosquatting campaigns
September 1, 2020
https://www.cyberscoop.com/typosqua...t-42-wells-fargo-netflix-faceboook-microsoft/

The most imitated websites that credential-stealing, financially-motivated hackers have resorted to mimicking include Wells Fargo, Netflix, Facebook, and Microsoft, according to new Palo Alto Networks research published Tuesday.

Some of the other top brands that hackers have mimicked with typosquatting, a technique that relies on victims glancing over typos in website names that appear similar to other popular legitimate sites, also include PayPal, Apple, Royal Bank of Canada, LinkedIn, Google, Apple’s iCloud, Bank of America, Dropbox, Amazon, and Instagram, according to the research, which examines data collected in December 2019.

Of nearly 13,857 squatting domains registered in December, 18.59% are malicious, “often distributing malware or conducting phishing attacks.”
Click to expand...

Typosquatting has long been a favorite tactic for attackers looking to steal sensitive information and credentials, in part because it doesn’t cost much to initiate.

And although malicious typosquatting domain schemes, are fairly common, many security vendors aren’t adequately prepared to protect against them, the researchers note.

“The best-performing vendor covers about 25% of the malicious or high-risk squatting domains that we detected. Meanwhile, other vendors cover less than 20% of our detections,” the researchers write.
Click to expand...

Palo Alto Networks - Unit42: Cybersquatting: Attackers Mimicking Domains of Major Brands Including Facebook, Apple, Amazon and Netflix to Scam Consumers

Users on the internet rely on domain names to find brands, services, professionals and personal websites. Cybercriminals take advantage of the essential role that domain names play on the internet by registering names that appear related to existing domains or brands, with the intent of profiting from user mistakes.

This is known as cybersquatting. The purpose of squatting domains is to confuse users into believing that the targeted brands (such as Netflix) own these domain names (such as netflix-payments[.]com) or to profit from users’ typing mistakes (such as whatsalpp[.]com for WhatsApp). While cybersquatting is not always malicious toward users, it is illegal in the U.S.,[1] and squatting domains are often used or repurposed for attacks.
Click to expand...

Log in or Sign up

The most popular brand websites that hackers use for typosquatting campaigns

guest Guest

Log in or Sign up

The most popular brand websites that hackers use for typosquatting campaigns

guest Guest

Useful Searches