Researchers’ Typosquatting Stole 20 GB of E-Mail From Fortune 500 | Threat Level

Researchers’ Typosquatting Stole 20 GB of E-Mail From Fortune 500
►http://www.wired.com/threatlevel/2011/09/doppelganger-domains

Two researchers who set up doppelganger domains to mimic legitimate domains belonging to Fortune 500 companies say they managed to vacuum up 20 gigabytes of misaddressed e-mail over six months.

The intercepted correspondence included employee usernames and passwords, sensitive security information about the configuration of corporate network architecture that would be useful to hackers, affidavits and other documents related to litigation in which the companies were embroiled, and trade secrets, such as contracts for business transactions.

http://www.wired.com/images_blogs/threatlevel/2011/09/Vulnerable-Domains_Doppelganger.jpg

#security #mail

Researchers’ Typosquatting Stole 20 GB of E-Mail From Fortune 500 | Threat Level | Wired.com
►http://www.wired.com/threatlevel/2011/09/doppelganger-domains

Two researchers who set up doppelganger domains to mimic legitimate domains belonging to Fortune 500 companies say they managed to vacuum up 20 gigabytes of misaddressed e-mail over six months.

The intercepted correspondence included employee usernames and passwords, sensitive security information about the configuration of corporate network architecture that would be useful to hackers, affidavits and other documents related to litigation in which the companies were embroiled, and trade secrets, such as contracts for business transactions.

“Twenty gigs of data is a lot of data in six months of really doing nothing,” said researcher Peter Kim from the Godai Group. “And nobody knows this is happening.”