Topic

Domain Impersonation

The practice of registering internet domains that closely resemble a real organisation's name so that fraudulent mail, invoices and web pages appear to come from it.

Current clusters

security1 publisher

A million CEO-impersonation emails asked accounts payable to approve a nearly $50,000 ACH payment

Microsoft counted more than a million of them between August 3 and 5, each carrying a fabricated ServiceNow invoice and a staged executive email thread, with the attacker's beneficiary bank details changing between targets.

Publishers:microsoft.com

Reality

Evidence55
Adoption45
Hype gap+20
Incentives60
Confidence55