Intelligence: Wrong Number, Right Idea

Archives

August 18, 2008: A new intelligence collecting technique has been discovered, and it's called typosquatting. It works like this. You go out and register domain names that are misspelled versions of famous ones,like lockheeedmartin.com (adding a third "e"). The real URL of the largest defense contractor in the United States islockheedmartin.com. But here's the intel angle. You don't put up a website using the misspelled address, you just turn on the email for that address. Thus if someone sending an email to bigboss@lockheeedmartin.com types in that extra "e", the typosquater gets the email, not the real bigboss@lockheedmartin.com. The first example of this was uncovered being used by someone in China. No doubt, intel agencies all over the world are checking this out.

In the past, people registered mispelled domain names for the purpose of putting up a page full of ads, and getting the revenue when all those millions of bad spellers came for a visit. Some owners of the misspelled names put up sites that infected your computer if you came to visit, which was kind of a public service in that encouraged people to be more careful with their spelling. The typosquatting is, however, basically an intel collection operation. Own enough of these bad addresses, and you can collect all manner of useful, and normally confidential, information. Corporate spies like this, but government spies like it even more.

 


Article Archive

Intelligence: Current 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999 


X

ad
0
20

Help Keep Us Soaring

We need your help! Our subscription base has slowly been dwindling. We need your help in reversing that trend. We would like to add 20 new subscribers this month.

Each month we count on your subscriptions or contributions. You can support us in the following ways:

  1. Make sure you spread the word about us. Two ways to do that are to like us on Facebook and follow us on Twitter.
  2. Subscribe to our daily newsletter. We’ll send the news to your email box, and you don’t have to come to the site unless you want to read columns or see photos.
  3. You can contribute to the health of StrategyPage. A contribution is not a donation that you can deduct at tax time, but a form of crowdfunding. We store none of your information when you contribute..
Subscribe   Contribute   Close