How Typosquatting Scams Work

McAfee

Nov 22, 2020

6 MIN READ

In our digital world, scamming techniques have become more sophisticated, leading to a growing threat not only to individuals but also to businesses and organizations. One such scam is typosquatting. This deceitful practice takes advantage of internet users who inadvertently type incorrect website addresses into their web browsers. The outcome of this seemingly innocent mistake can range from irritating spam to substantial financial loss, and, in some cases, serious security breaches.

Typosquatting, Cybersquatting, URL Hijacking, or Domain Mimicking, whatever you may call it, is not a new threat. It has been around since the mid-’90s, but it has evolved over the years. In this article, we will dive deep into how these scams work, their implications, and ways to stay protected. But before moving into the specifics, it’s crucial to have a clear understanding of what Typosquatting is.

What is Typosquatting?

At its core, Typosquatting is a cyber scam that leverages the probability of errors made by internet users while typing a website address into their browser. The scam involves the creation of fake website domains that closely resemble legitimate ones but usually include common typing errors, misspellings, or the use of different top-level domains (like .com instead of .org).

When users accidentally land on these deceitfully created websites, they may be subjected to a range of fraudulent activities, including phishing attacks, forced downloads of malicious software, and advertisements that generate pay-per-click revenue for the scammer. The fake websites can also impersonate the real ones, tricking users into providing sensitive information such as login credentials or credit card information.

How Typosquatting Scams Work

It is critical to understand that Typosquatting is a game of chance for scammers. They capitalize on the likelihood that a certain percentage of online traffic will mistype URLs when browsing. By registering domains that are just a single character off from popular URLs, or by using commonly mistyped versions of web addresses, scammers can set up fake websites to ensnare unsuspecting internet users.

For instance, if a user meant to visit ‘example.com’ but instead typed ‘exmaple.com’, they could potentially land on a typosquatting site. The scammer’s goal is to benefit from this mistake in some way. This could involve displaying advertisements to earn click-through revenue, selling products or services, or attempting to collect personal information through phishing techniques.

→ Dig Deeper: 8 Ways to Know If Online Stores Are Safe and Legit

Variations of Typosquatting Scams

Typosquatting scams can take on various forms, each with its unique approach but with the same malicious intent – to deceive and exploit internet users. Let’s look at some of the common variations.

Character Omission: This involves omitting one or more characters from a legitimate domain name. For instance, ‘exmple.com’ instead of ‘example.com’.
Character Permutation: This involves transposing two adjacent characters. Using our previous example, ‘exmaple.com’ could be used instead of ‘example.com’.
Replacing Characters: Here, one or more characters are replaced with similar-looking ones. An example would be using ‘exarnple.com’ instead of ‘example.com’ where ‘a’ is used instead of ‘m’.
Adding Extra Characters: This involves adding extra characters to a legitimate domain name, like ‘examplee.com’.
Different TLDs: Scammers can register the same domain name under a different TLD (Top-Level Domain). For example, if ‘example.com’ is a well-known site, the scammer could register ‘example.net’ or ‘example.org’.

The Implications of Typosquatting Scams

Understanding the implications of typosquatting scams can highlight why it’s crucial to stay vigilant when entering website URLs. The impact of these scams can be significant, particularly if the user unknowingly shares sensitive data. The scams can also cause harm to the reputation of legitimate businesses, leading to customer mistrust and potential loss of business.

Personal Data Theft: One of the most damaging implications of typosquatting is the potential theft of personal data. By impersonating a trusted website, scammers can gain access to users’ personal details, including login credentials, credit card information, and other sensitive data.
Advertisement and Scam Revenue: The scammers can also generate revenue by displaying ads or initiating fraudulent transactions on these spoofed sites. Each time an ad is clicked or a purchase is made, the scammer benefits financially.

→ Dig Deeper: Invisible Adware: Unveiling Ad Fraud Targeting Android Users

Business Reputation Damage: Businesses also suffer, especially if their customers fall victim to these scams while thinking they are interacting with a legitimate site. This can lead to a loss of customer trust and a potential decrease in business.
Disruption of Online Services: Typosquatting scams can lead to the disruption of online services. When users unwittingly engage with counterfeit websites, they may inadvertently contribute to increased traffic on these malicious platforms. This influx of traffic can overload servers, causing downtime, slow performance, or even crashes on both the deceptive sites and, in some cases, the legitimate websites being impersonated. The resulting disruption not only affects user experience but can also have economic implications for businesses that rely on continuous and reliable online services.
Installation of Malicious Software: By deceiving users into downloading seemingly ‘important’ or ‘necessary’ pieces of software, scammers can infect computers with malware or ransomware, leading to significant harm and data loss.

How to Protect Against Typosquatting Scams

Staying safe from typosquatting scams requires a combination of awareness and the use of protective measures. Here are some steps you can take:

Double-check URLs: Always double-check the URL before pressing enter to ensure it is correct. Pay close attention to the spelling and the domain extension (.com, .org, .net etc.)
Use Bookmarks: For frequently visited sites, especially ones where sensitive information is entered, like banking or email, use bookmarks to avoid typing the URL altogether.
Install Security Software: Use reliable security software that can detect and warn about malicious websites. This adds an extra layer of protection against falling prey to typosquatting scams.
Check for HTTPS: Always check that the website you are visiting has ‘HTTPS’ at the beginning of its URL. This indicates that the website has a secure connection and is more likely to be secure.
Education and Awareness: Stay informed about the latest scams and deceptive practices, including typosquatting. Share this knowledge with friends and family to help them stay safe as well.

Final Thoughts

The world of cybercrime is full of evolving threats, and typosquatting scams are among the most deceitful. These scams capitalize on simple human errors to cause significant harm, including personal data theft and installation of malicious software. Nonetheless, by maintaining a high level of alertness, double-checking URLs, using security software, and staying informed about such threats, internet users can protect themselves from falling victim to these scams. Remember, a moment’s delay to double-check can save a load of potential trouble down the line.