CAPEC-631 SoundSquatting

abstraction: detailedstatus: active

An adversary registers a domain name that sounds the same as a trusted domain, but has a different spelling. A SoundSquatting attack takes advantage of a user's confusion of the two words to direct Internet traffic to adversary-controlled destinations. SoundSquatting does not require an attack against the trusted domain or complicated reverse engineering.

likelihood: Lowseverity: Medium
01

related attack patterns (1)

Related entries.

02

source

Where this definition is published.