Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Attack Patterns CAPEC-631 — SoundSquatting
CAPEC-631

SoundSquatting

TLP:CLEAR

Description

Typical severity: Medium. Likelihood of attack: Low. An adversary registers a domain name that sounds the same as a trusted domain, but has a different spelling. A SoundSquatting attack takes advantage of a user's confusion of the two words to direct Internet traffic to adversary-controlled destinations. SoundSquatting does not require an attack against the trusted domain or complicated reverse engineering.

Mitigation

Authenticate all servers and perform redundant checks when using DNS hostnames. | Purchase potential SoundSquatted domains and forward to legitimate domain.

Details

Platforms
Social-engineering
Added
Jul 14, 2026
Leaving Threaticon

This link opens an external site that isn't part of the platform.