Tìm hiểu thêm về cuốn sách “Cybersecurity Upside Down” của Benny Czarny

Tìm hiểu thêm
Chúng tôi sử dụng trí tuệ nhân tạo để dịch trang web và mặc dù chúng tôi luôn cố gắng đảm bảo độ chính xác, nhưng đôi khi bản dịch có thể không đạt độ chính xác tuyệt đối. Mong quý vị thông cảm.

Typosquatting

Typosquatting, also called URL hijacking, a sting site, or a fake URL, is a form of cybersquatting, and possibly brandjacking which relies on mistakes such as typos made by Internet users when inputting a website address into a web browser. Should a user accidentally enter an incorrect website address, they may be led to any URL (including an alternative website owned by a cybersquatter). The typosquatter's URL will usually be one of five kinds, all similar to the victim site address: -A common misspelling, or foreign language spelling, of the intended site -A misspelling based on a typographical error -A plural of a singular domain name -A different top-level domain: (i.e. .com instead of .org) -An abuse of the Country Code Top-Level Domain (ccTLD) (.cm, .co, or .om instead of .com) Similar abuses: Combosquatting - no misspelling, but appending an arbitrary word that appears legitimate, but that anyone could register. Doppelganger domain - omitting a period or inserting an extra period Appending terms such as sucks or -suckes to a domain name Once in the typosquatter's site, the user may also be tricked into thinking that they are in fact in the real site, through the use of copied or similar logos, website layouts, or content. Spam emails sometimes make use of typosquatting URLs to trick users into visiting malicious sites that look like a given bank's site, for instance.