会社のウェブサイトは www.Company.com です。 攻撃者は wwww.company.com というドメインを購入しました。 この例に当てはまる攻撃の種類は次のどれですか。
正解:A
" Typosquatting, also known as URL hijacking, is a form of cybersquatting where attackers register domain names that are intentionally similar to legitimate ones, often differing by a single character or a common typographical error. For example, an attacker might register ' wwww.company.com ' to mimic ' www.
company.com, ' tricking users who mistype the URL into visiting a malicious site. This attack exploits human error and can be used to steal credentials, distribute malware, or impersonate the legitimate entity. " Reference:CompTIA Security+ SY0-701 Study Guide, Domain 1.0: General Security Concepts, Section: " Social Engineering Attacks and Threats " (Typosquatting is typically covered under threats related to domain misuse).
Explanation:In this scenario, the attackers registered " wwww.company.com, " which is a subtle variation of " www.company.com, " relying on users mistyping or not noticing the extra " w. " This fits the definition of typosquatting perfectly. Brand impersonation (B) is related but broader and doesn't specifically tie to typographical errors. On-path (C) involves intercepting communication, and watering-hole (D) targets users via compromised legitimate sites-neither applies here.