<h1 id="infosec-the-language-of-security">InfoSec; the language of
security.</h1>
<h2 id="what-is-typosquatting-and-how-do-scammers-use-it"><a
href="https://www.howtogeek.com/devops/what-is-typosquatting-and-how-do-scammers-use-it/">What
is Typosquatting and How Do Scammers Use it?</a></h2>
<ul>
<li>Typosquatting, as an attack, uses modified or misspelled domain
names to trick users into visiting fraudulent websites; the heart of
this attack is domain name registration. Typosquatting is deployed by
scammers to defraud unaware users. Attackers will attempt to: mimic
login pages, redirect traffic, download malware, and extort users.</li>
<li><strong>Past Known Typosquatting Attacks.</strong>
<ul>
<li><a
href="https://thehackernews.com/2021/07/several-malicious-typosquatted-python.html">Several
Malicious Typosquatted Python Libraries Found On PyPI
Repository</a></li>
<li><a
href="https://thehackernews.com/2020/04/rubygem-typosquatting-malware.html">Over
700 Malicious Typosquatted Libraries Found On RubyGems
Repository</a></li>
<li><a
href="https://blog.rust-lang.org/2022/05/10/malicious-crate-rustdecimal.html">Security
advisory: malicious crate rustdecimal</a></li>
<li><a
href="https://blog.sonatype.com/this-week-in-malware-may-13th-edition">This
Week in Malware-Malicious Rust crate, 'colors' Typosquats</a></li>
</ul></li>
<li><strong>Solutions to Typosquatting.</strong>
<ul>
<li><a
href="https://opensource.com/article/20/1/stop-typosquatting-attacks">How
to stop typosquatting attacks</a></li>
<li><a
href="https://www.howtogeek.com/363735/what-is-a-checksum-and-why-should-you-care/">What
Is a Checksum (and Why Should You Care)?</a></li>
<li><a href="https://docs.pi-hole.net/">PiHole</a></li>
<li><a href="https://design.ubuntu.com/font/">Ubuntu font
family</a></li>
</ul></li>
<li><strong>DNS monitoring services.</strong>
<ul>
<li>Link to dnstwister: <a
href="https://dnstwister.report/">https://dnstwister.report/</a></li>
<li>Link to whois: <a
href="https://www.whois.com/whois">https://www.whois.com/whois</a></li>
</ul></li>
<li><strong>Password Managers.</strong>
<ul>
<li>Link to bitwarden: <a
href="https://bitwarden.com/">https://bitwarden.com/</a></li>
<li>Link to keepassxc: <a
href="https://keepassxc.org/">https://keepassxc.org/</a></li>
</ul></li>
</ul>
<hr />
<h2 id="two-factor-and-multifactor-authentication">Two-factor and
Multifactor Authentication.</h2>
<ul>
<li><p>First, authentication. This is the process of verifying the
validity of something; in our case, user credentials/identity. The most
common way to authenticate is: <em>USERNAME</em> and <em>PASSWORD</em>.
This is just a single layer (single-factor authentication) and isn&#x2019;t
enough to discourage attackers.</p></li>
<li><p>Second, 2FA (Two-factor Authentication). 2FA increases the
difficulty for attackers by providing users an additional layer of
security to accomplish authentication. Common 2FA methods are: TOTP/OTP
(<em>the</em> <strong>One Time Password</strong>), Authenticator
Applications (<a href="https://bitwarden.com/">Bitwarden</a>, <a
href="https://keepassxc.org/">KeePassXC</a>,...), and Security Keys (<a
href="https://www.yubico.com/">Yubikey</a>). This works similar to ATMs;
to authenticate the user must provide both knowledge (account
<strong>PIN</strong>) and a physical object (bank card).</p></li>
<li><p>Last, but not least, MFA (Multifactor Authentication). Similar to
2FA, MFA offers users security with the addition of biometrics
(fingerprint scan, retina scan, facial recognition, and voice
recognition). Attackers must overcome the knowledge factor, Possession
factor, Inherence/Biometric factor, Time factor, and sometimes Location
factor.</p></li>
<li><p><strong>MORE helpful security information.</strong></p>
<ul>
<li><a href="https://fidoalliance.org/specifications/">FIDO Alliance
Specifications.</a></li>
<li><a
href="https://bitwarden.com/help/bitwarden-field-guide-two-step-login/">Field
Guide to Two-Step Login.</a></li>
</ul></li>
<li><p><strong>2FA/MFA Known Attacks.</strong></p>
<ul>
<li><a
href="https://www.vice.com/en/article/y3vz5k/booming-underground-market-bots-2fa-otp-paypal-amazon-bank-apple-venmo">Bots
That Steal Your 2FA Codes.</a></li>
<li><a
href="https://thenextweb.com/news/hackers-cracking-two-factor-authentication-security-syndication">hackers
are cracking two-factor authentication</a></li>
</ul></li>
</ul>
