Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool
Security professionals warn that Google's new top-level domains, .zip and .mov, pose social engineering risks while providing little reason for their existence.
Stay updated with breaking news from Tim Helming. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Security professionals warn that Google's new top-level domains, .zip and .mov, pose social engineering risks while providing little reason for their existence.
In recent weeks, the U.S. student loan market has been in the spotlight — not just for the much-discussed loan forgiveness plan launched by the Biden administration, but also for the segment’s growing position as a target for financial fraud.
Newer top-level domains and certain hosting providers are frequent sources of malicious content, while newly registered domains and free SSL certificates are not any more likely than average to be risky, new research shows.
Reseller News Join Reseller News Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.Sign up now What is typosquatting? A simple but effective attack technique A type of social engineering attack, typosquatting uses purposely misspelled domains for a variety of malicious purposes. Typosquatting definition A typosquatting attack, also known as a URL hijacking, a sting site, or a fake URL, is a type of social engineering where threat actors impersonate legitimate domains for malicious purposes such as fraud or malware spreading. The...
A common misspelling of the target domain (CSOnline.com rather than CSOOnline.com, for example) A different top-level domain (using .uk rather than .co.uk) Combining related words into the domain (CSOOnline-Cybersecurity.com) Adding periods to the URL (CSO.Online.com) Using similar looking letters to hide the false domain (ÇSÓOnliné.com) “Can you see the difference between goggle.com and google.com?” says Russell Haworth, CEO of Nominet, which acts as the registry for the .uk domain. “Essentially, typosquatting is a lookalike domain with one or two wrong or different characters with ...