Hackers are using fake government websites to steal sensitive data, according to the Cabinet.
According to reliable sources, the Cabinet Division issued an advisory against typosquatting attacks on Friday.
The advisory claims that cyber actors are using malicious websites with names similar to legitimate government websites.
How to check a website is real or fake
The names of the fake websites are common misspellings or short names of government websites designed to trick users into inadvertently typing their passwords and other sensitive information or downloading malware on their systems and devices.
What Hackers Do
On their malicious web pages, attackers use web-based redirections to legitimate websites, according to the advisory. This method disguises malicious websites as legitimate government sites.
What are the recommendations
The advisory also recommends taking preventive measures such as configuring your browser to restrict cross-domain redirections from unknown websites. I
t also suggests using open-source tools to identify malicious domains that may be used in a typosquatting attack. PTA will block these websites once they have been identified.
The Cabinet Division has requested that all government organisations (civil and military) take precautions to prevent such attacks on their websites.
It also recommends that website owners conduct extensive awareness campaigns to make their users aware of such attacks.
