CAPEC-611 BitSquatting
abstraction: detailedstatus: activeAn adversary registers a domain name one bit different than a trusted domain. A BitSquatting attack leverages random errors in memory to direct Internet traffic to adversary-controlled destinations. BitSquatting requires no exploitation or complicated reverse engineering, and is operating system and architecture agnostic. Experimental observations show that BitSquatting popular websites could redirect non-trivial amounts of Internet traffic to a malicious entity.
likelihood: Lowseverity: Medium
01
related attack patterns (1)
Related entries.
02
source
Where this definition is published.