Large-Scale Analysis of Pop-Up Scam on Typosquatting URLs

Large-Scale Analysis of Pop-Up Scam on Typosquatting URLs

Abstract

Today, many different types of scams can be found on the internet. Online criminals are always finding new creative ways to trick internet users, be it in the form of lottery scams, downloading scam apps for smartphones or fake gambling websites. This paper presents a large-scale study on one particular delivery method of online scam: pop-up scam on typosquatting domains. Typosquatting describes the concept of registering domains which are very similar to existing ones while deliberately containing common typing errors; these domains are then used to trick online users while under the belief of browsing the intended website. Pop-up scam uses JavaScript alert boxes to present a message which attracts the user's attention very effectively, as they are a blocking user interface element.Our study among typosquatting domains derived from the Alexa Top 1 Million list revealed on 8 255 distinct typosquatting URLs a total of 9 857 pop-up messages, out of which 8 828 were malicious. The vast majority of those distinct URLs (7 176) were targeted and displayed pop-up messages to one specific HTTP user agent only. Based on our scans, we present an in-depth analysis as well as a detailed classification of different targeting parameters (user agent and language) which triggered varying kinds of pop-up scams.

Grafik Top
Authors
  • Dam, Tobias
  • Klausner, Lukas Daniel
  • Buhov, Damjan
  • Schrittwieser, Sebastian
Grafik Top
Shortfacts
Category
Paper in Conference Proceedings or in Workshop Proceedings (Paper)
Event Title
Proceedings of the 14th International Conference on Availability, Reliability and Security
Divisions
Security and Privacy
Subjects
Computersicherheit
Angewandte Informatik
Event Location
Canterbury, UK
Event Type
Conference
Event Dates
26-29 Aug 2019
Series Name
ARES '19
Publisher
Association for Computing Machinery
Date
2019
Official URL
https://doi.org/10.1145/3339252.3340332
Export
Grafik Top