Threat IntelligenceDriven Security Typosquatting Not Just a BrandTrademark

Threat Intelligence-Driven Security

Typosquatting: Not Just a Brand/Trademark Problem By Kirstin Doan, Esq.

Typosquatting: Not Just a Brand/Tradename Problem • • • Sell it back to brand owner; Make money from advertisement; Redirect traffic to competitor; Redirect back to the brand itself; Phishing scheme; Install drive-by malware or revenue generating adware; Harvest misaddressed email addresses; Block malevolent use of typo domains; and/or, Express an opinion. © 2017 Looking. Glass Confidential and Proprietary 3

Typosquatting: Hosted & Not Hosted - 356 were not hosted 281 were hosted 44%

Typosquattering Domains: Hosted Domains © 2017 Looking. Glass Confidential and Proprietary 5

Typosquatting Domains: Vulnerabilities Types of Tag Total Count Spyware Malware CC Malware Abused TLD Spamming No Tags Serving Executable Cn. C for Mobile VPN Server P 2 P IP Check Services C 2 Hosting Malware Malicious URL Bitcoin Mining Fake AV and AS C 2 Zeus Driveby Source Ponmocup Group 4 148 116 84 76 74 72 71 68 48 47 36 34 33 33 32 32 12 9 8 5 © 2017 Looking. Glass Confidential and Proprietary Percentage of Domains Tagged 53% 41% 30% 27% 26% 25% 24% 17% 13% 12% 12% 11% 4% 3% 3% 2% 6

Typosquatting: Domains that Redirects to Other Sites © 2017 Looking. Glass Confidential and Proprietary

Typosquatting: Impact to End-Users • People accessing the typosquatting are exposed: - Scams - Malware - Data theft • Companies - Brand reputational damage - Revenue and user diversion - Fraud © 2017 Looking. Glass Confidential and Proprietary 8

Corporate Snapshot ESTABLISHED 2009 HEADQUARTERS Reston, VA REGIONAL OFFICES Baltimore, MD Prague, Czech Republic San Jose, CA Republic of Singapore Salt Lake City, UT EMPLOYEES 287 CUSTOMERS + 300 commercial and government customers across the globe, protecting an estimated $2 trillion in commercial assets DISTRIBUTION Worldwide direct sales and channel partners FUNDING $85 M ($50 M Series ‘C’ 12/2015) © 2017 Looking. Glass Confidential and Proprietary 9

Thank You www. lookingglasscyber. com