CAPEC-611 BitSquatting

abstraction: detailedstatus: active

An adversary registers a domain name one bit different than a trusted domain. A BitSquatting attack leverages random errors in memory to direct Internet traffic to adversary-controlled destinations. BitSquatting requires no exploitation or complicated reverse engineering, and is operating system and architecture agnostic. Experimental observations show that BitSquatting popular websites could redirect non-trivial amounts of Internet traffic to a malicious entity.

likelihood: Lowseverity: Medium
01

related attack patterns (1)

Related entries.

02

source

Where this definition is published.