Typical severity: Medium. Likelihood of attack: Low. An adversary registers a domain name that sounds the same as a trusted domain, but has a different spelling. A SoundSquatting attack takes advantage of a user's confusion of the two words to direct Internet traffic to adversary-controlled destinations. SoundSquatting does not require an attack against the trusted domain or complicated reverse engineering.
Authenticate all servers and perform redundant checks when using DNS hostnames. | Purchase potential SoundSquatted domains and forward to legitimate domain.