CAPEC Definitions
CAPEC Definitions / CAPEC-631
CAPEC-631: SoundSquatting
An adversary registers a domain name that sounds the same as a trusted domain, but has a different spelling. A SoundSquatting attack takes advantage of a user's confusion of the two words to direct Internet traffic to adversary-controlled destinations. SoundSquatting does not require an attack against the trusted domain or complicated reverse engineering.
Severity:Medium
Possibility:Low
Extended Description
No Extended Description.
Mitigations
Authenticate all servers and perform redundant checks when using DNS hostnames.
Purchase potential SoundSquatted domains and forward to legitimate domain.
Relationships with other CAPECs
Prerequisites
An adversary requires knowledge of popular or high traffic domains, that could be used to deceive potential targets.
Related Weaknesses
No related Weaknesses found.
