Jump to content

Bitsquatting

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Not Invisible (talk | contribs) at 14:23, 2 August 2022 (Change statistics used in paragraph about bitsquat paper to be more representative. The one day with 3400+ requests was an outlier, the average requests per day was closer to 230.). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Bitsquatting is a form of cybersquatting which relies on bit-flip errors that occur during the process of making a DNS request. These bit-flips may occur due to factors such as faulty hardware or cosmic rays. When such an error occurs, the user requesting the domain may be directed to a website registered under a domain name similar to a legitimate domain, except with one bit flipped in their respective binary representations.

A 2011 Black Hat paper detailed an analysis where eight legitimate domains were targeted with thirty one bitsquat domains. Over the course of about seven months, 52,317 requests were made to the bitsquat domains.[1]

References

  1. ^ Artem Dinaburg (July 2011). "Bitsquatting - DNS Hijacking without Exploitation" (PDF). Archived from the original (PDF) on 2018-06-11. Retrieved 2020-05-06.