Your World Of The Best Mobile Technology

Where you find the now and future tech stuffs.

21 March 2016

This Simple Typo Error Could Get Your System/Phone Hacked

A Cybersecurity firm Endgame has unearthed a new spin on the good old "typosquatting" scam  - the practice of purchasing domain names similar to legitimate websites ( think Gooogle.com) in hopes that a small keyboard snafu nets hackers access to your computer.
The new scam aims to install malware on devices after users accidentally type ".om" instead of ".com" after popular urls. Endgame discovered the scheme after one of its employees mistakenly typed "Netflix.om" instead of Netflix.com when attempting to watch the latest season of House of Cards earlier this month.


"He did not get a DNS resolution error, which would have indicated the domain he typed doesn't exist.  Instead, due to the registration of "netflix.om" by a malicious actor, the domain resolved successfully.
His browser was immediately redirected several times, and eventually landed on a 'Flash Updater' page with all the usual annoying (and to an untrained user, terrifying) scareware pop-ups."
Now this is where they want you to be, when you click on their "Flash update" they automatically gain access to your system/phone via your browser.


Another Trick

It's important to note you could also be in trouble if you typed the "c", but misplaced the period(.) (Example: bestbuyc.om or cnnc.om.) This particular typosquatting game was easy for hackers to play, Endgame said, since ".om" is the country-specific domain name for Oman. 

Protecting Yourself

Phishing and malware schemes are common attempts by scammers to get your personal information. For better Internet safety, it's generally recommended you stick to trusted and encrypted websites (double-check, of course, the spelling of each address); refrain from clicking on links in unsolicited emails and keep your security software up to date.
It's also good to monitor financial accounts regularly for fraud, and keep a close eye on your credit since a sudden drop in credit scores or unfamiliar line items on a credit report are signs identity theft is occurring. If have fallen victim to an Internet scam, you might also consider freezing your credit reports to keep new accounts from being opened in your name.

Generally, it's now advised that you double check very well after typing on your browser to make sure you've typed the correct web address to avoid being hacked through this new method devised by hackers.

No comments:

Post a Comment