Security News > 2020 > October > How cybercriminals play the domain game

The exact process for blocklisting a domain is often opaque, but it's a gradual process involving a measurable reputation for each domain that changes over time.

A company afraid of trademark infringement might want to register a domain with every conceivable variation on its name to stop phishers from targeting its customers.

Bulk domain registration is the perfect weaponisation system for cybercriminals.

So cybercriminals love it when a bulk domain registrar offers a first-year discount for domain registration - they get a deal on a domain that they were only ever going to use once anyway.

Checking IP addresses and domains against these lists is no longer enough in an environment where malicious domain volumes have increased exponentially and where a relatively slow-moving cybersecurity ecosystem still takes time to spot bad domains.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/10/21/how_cybercriminals_play_the_domain/