Finding WEIRD Typosquatting Websites
Source: YouTube · John Hammond · published Mar 19, 2024 · 24:28
DNS Twist is a Python tool that identifies typo-squatting domains and potential phishing sites by generating permutations of legitimate domain names and checking if they exist, helping organizations identify potential threats before they can be exploited 0:00-0:44.
Key Takeaways:
• Typosquatting domains are created when threat actors register misspelled versions of popular websites to steal credentials, conduct phishing attacks, or distribute malware 0:06-0:33.
• DNS Twist performs domain name permutation to detect homograph phishing attacks and brand impersonation, with both command-line and browser-based versions available 0:44-1:08.
• The tool can automatically take screenshots of discovered websites, perform HTML similarity analysis with fuzzy hashing, and provide IP addresses and DNS records 1:30-1:52.
• Major companies like Google and Facebook are frequent targets, with attackers creating domains like "g00gle.com" and "faceboook.com" to trick users 2:12-2:20.
• Many lookalike domains attempt to impersonate legitimate services, with some hosting malware sites or phishing pages designed to harvest user credentials 14:43-15:07.
DNS Twist provides valuable threat intelligence by revealing the landscape of potential attacks targeting your brand or organization, enabling proactive security measures to protect users and assets 23:30-23:59.
Sources:
- 0:00 Introduction to typosquatting domains and DNS Twist
- 0:44 DNS Twist functionality and usage
- 1:30(https://www.youtube.com/watch?v=h0_
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
have you ever accidentally mistyped the name of a website in your internet browser's address bar and went to the wrong website say you're trying to go to google.com and you accidentally type in three letter O's rather than the two or maybe you go to facebook.com and you miss one you go to facebook.com a lot of these domain names are often bought and used by thread actors adversaries hackers or scammers folks with ill intent to maybe host a credential harvesting website to potentially steal your username and pass password do some fishing social engineering or deploy malware so what if we could get ahead of it maybe get an idea for what these typo squatting domains or lookalike domains are and maybe we could track them down and just know what's out there so in this video I wanted to show you…