That’s the term for a security risk resulting from mis-typed email addresses.
a large American financial group may take bank.com as its corporate home but internally use us.bank.com for staff email. Usually, if an address is typed with one of the dots missing, ie usbank.com, then the message is returned to its sender.But by setting up similar doppelganger domains, the researchers were able to receive messages that would otherwise be bounced back.
Researchers Peter Kim and Garrett Gee bought 30 domain names similar to subdomains used by Fortune 500 companies. Six months later, they had over 120,000 emails and over 20 GB of data at their disposal.
Here are a few examples of what Kim and Gee found, according to the Naked Security Blog:
Passwords for an IT firm’s external Cisco routers
Precise details of the contents of a large oil company’s oil tankers
VPN details and passwords for a system managing road tollways
And all this is just by buying domain names. Real, villainous typosquatters would probably run a “man in the middle” scam, where they would forward your message to the correct recipient after grabbing your email’s contents, leading you and everyone to believe that you can safely send more email to the wrong address.
We’re here to help you navigate this changed world and economy.
Our mission at Marketplace is to raise the economic intelligence of the country. It’s a tough task, but it’s never been more important.
In the past year, we’ve seen record unemployment, stimulus bills, and reddit users influencing the stock market. Marketplace helps you understand it all, will fact-based, approachable, and unbiased reporting.
Generous support from listeners and readers is what powers our nonprofit news—and your donation today will help provide this essential service. For just $5/month, you can sustain independent journalism that keeps you and thousands of others informed.