V
Scaner-VSvulnerability catalog · v4.2
CAPEC-630DetailedDraft
Abstraction: Detailed
Status: Draft
Source ↗

TypoSquatting

An adversary registers a domain name with at least one character different than a trusted domain. A TypoSquatting attack takes advantage of instances where a user mistypes a URL (e.g. www.goggle.com) or not does visually verify a URL before clicking on it (e.g. phishing attack). As a result, the user is directed to an adversary-controlled destination. TypoSquatting does not require an attack against the trusted domain or complicated reverse engineering.

Open in catalog with CAPEC filter →

Related CWEs

Related vulnerabilities