Questions tagged [typosquatting]

Practice of registering domain names that may be mistaken for widely used sites (e.g. `googe.com` instead of `google.com`) when the user tries to type in the URL. May be used for phishing credentials and/or spreading malware.

Filter by
Sorted by
Tagged with
0
votes
0answers
35 views

Protecting an external authentication server against CSRF

I have a web application which uses an external authentication server for obtaining a session. When a client tries to login, the browser is making requests towards the external authentication server ...
3
votes
2answers
82 views

How much damage can a malicious package do with just “npm install <package>”?

I had a typo and npm installed something that is similar in name to something very popular -- I was concerned about typosquatting. It's quite plausibly legitimate and just a coincidence. I looked at ...
2
votes
0answers
25 views

Has someone quantified how much more effective typodomains are than random websites in phishing attacks?

Has someone done an actual study on how effective typo domains are versus random websites in phishing links? I am trying to justify the expense of going after typosquatters and the possibility of the ...
3
votes
4answers
379 views

Should I buy nonsense domains just to make sure my clients don't visit a misspelled domain?

I have my new website to be published (it's called buysteel.com). I will have thousands of clients visiting my site every month, and I would like to protect them around and at the site. Is it worth ...
35
votes
1answer
15k views

Was Goggle.com actually crazy malware in 2006?

This video shows how somebody accidentally opens Goggle.com instead of Google.com. He gets flooded with pop-ups, SpySheriff or SpywareSTOP get installed automatically, and the computer user has no ...
2
votes
1answer
285 views

My Lantern cloud server has a domain name that looks like typo-squatting, should I be worried?

Lantern is an app to avoid censorship. It is hosted at getlantern.org. I just noticed that the cloud server my client is using is actually roundrobin.getiantern.org Notice the i in getiantern ...
0
votes
2answers
1k views

Is Google Drive security compromised?

Today when I visited drive.google.com, I was auto-directed to http://drive.googe.com/router.php After clicking on "Exit Now" on that page I was redirected to http://globalreward-zone.sweepclam.eu/...