HPR3719: HPR News

InfoSec; the language of security.

What is Typosquatting and How Do Scammers Use it?

• Typosquatting, as an attack, uses modified or misspelled domain names to trick users into visiting fraudulent websites; the heart of this attack is domain name registration. Typosquatting is deployed by scammers to defraud unaware users. Attackers will attempt to: mimic login pages, redirect traffic, download malware, and extort users.
• Past Known Typosquatting Attacks.
  • Several Malicious Typosquatted Python Libraries Found On PyPI Repository
  • Over 700 Malicious Typosquatted Libraries Found On RubyGems Repository
  • Security advisory: malicious crate rustdecimal
  • This Week in Malware-Malicious Rust crate, 'colors' Typosquats
• Solutions to Typosquatting.
  • How to stop typosquatting attacks
  • What Is a Checksum (and Why Should You Care)?
  • PiHole
  • Ubuntu font family
• DNS monitoring services.
  • Link to dnstwister: https://dnstwister.report/
  • Link to whois: https://www.whois.com/whois
• Password Managers.
  • Link to bitwarden: https://bitwarden.com/
  • Link to keepassxc: https://keepassxc.org/

Two-factor and Multifactor Authentication.

• First, authentication. This is the process of verifying the validity of something; in our case, user credentials/identity. The most common way to authenticate is: USERNAME and PASSWORD. This is just a single layer (single-factor authentication) and isn’t enough to discourage attackers.

• Second, 2FA (Two-factor Authentication). 2FA increases the difficulty for attackers by providing users an additional layer of security to accomplish authentication. Common 2FA methods are: TOTP/OTP (the One Time Password), Authenticator Applications (Bitwarden, KeePassXC,...), and Security Keys (Yubikey). This works similar to ATMs; to authenticate the user must provide both knowledge (account PIN) and a physical object (bank card).

• Last, but not least, MFA (Multifactor Authentication). Similar to 2FA, MFA offers users security with the addition of biometrics (fingerprint scan, retina scan, facial recognition, and voice recognition). Attackers must overcome the knowledge factor, Possession factor, Inherence/Biometric factor, Time factor, and sometimes Location factor.

• MORE helpful security information.

  • FIDO Alliance Specifications.
  • Field Guide to Two-Step Login.

• 2FA/MFA Known Attacks.

  • Bots That Steal Your 2FA Codes.
  • hackers are cracking two-factor authentication

Comments

More Information...