The Cyber Defense eMagazine November Edition for 2023

Mitigating Phishing with Domain Names
As we've explored various phishing tactics and their statistics, let's focus on a critical aspect of online
security: Mitigating Phishing vulnerability by choosing the right domain name.
Cybercriminals often exploit the similarity between legitimate and deceptive web addresses using
techniques like homographic phishing. This harmful strategy adds another layer to our understanding of
cybersecurity and how we can protect ourselves.
For example, consider "online.business" versus "onlıne.business." The former legitimate domain uses
the English letter “i,” while the latter uses a Latin letter. Once visitors click on the fake website, they would
come face to face with malware or a phishing scheme, with your brand name tied to the occurrence.
You can protect yourself by registering a domain that uses anti-phishing technology. Many new web
addresses (domain names beyond traditional options), such as .bio, .social, .live, and .software include
free anti-phishing technology protecting your business and customers. You can check with your domain
registrar to explore the available options.
For instance, Identity Digital, a domain registry provider, includes "Homographic Blocking” with every
domain for its lifetime. This feature prevents attacks and keeps your brand and identity security safe.
They have also implemented Registry Lock, which safeguards domains against unauthorized
modifications using a secure, multi-step process. In addition, their Security and DNS Abuse Mitigation
Team actively collaborates with law enforcement and industry partners to neutralize security threats.
Protecting Yourself Against Phishing
It’s advisable to check for suspicious URLs, scrutinize email headers for irregularities, and be cautious
with email attachments. Cybercriminals are adept at creating convincing messages that seem genuine
but contain hidden threats. Always verify the sender's email address and avoid clicking links or
downloading attachments if you doubt their legitimacy.
Incorporating a "Zero Trust" security strategy, which emphasizes verification over trust, is gaining traction.
With today’s remote work culture, this approach, coupled with proactive cybersecurity measures, is
crucial for safeguarding your personal and business data.
To improve your online safety, use smart email protection with AI. Imagine receiving an email that claims
to be from your bank, asking you to provide your account details urgently. If the email protection system
uses AI, it can quickly analyze the email's content, sender's history, and other factors. If the AI detects
any signs of deception or inconsistency, it will flag the email as suspicious, warning you that it might be
a phishing attempt.
Add an extra step to your login process with MFA. For instance, after entering your password, you might
receive a unique code on your phone that you must also input. This action ensures that even someone
who knows your password can't access your account without the second verification step. Further, remind
employees not to share MFA codes over the phone – no matter how legitimate the caller seems.
Cyber Defense eMagazine – November 2023 Edition 139
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.