Forest Global Training Partners

Cyber Risks · Krebs on Security

Why Phishers Love New TLDs Like .shop, .top and .xyz

Summary: Interisle Consulting found phishing attacks rose nearly 40 percent in the year ending August 2024, with new gTLDs like .shop, .top and .xyz holding just 11 percent of new domain registrations but roughly 37 percent of reported cybercrime domains between September 2023 and August 2024. The study, sponsored by the Anti-Phishing Working Group, CAUCE and M3AAWG, also found the U.S. Postal Service was the most-phished entity with more than four times the phishing domains of the second target, Apple, while subdomain phishing instances tracked at more than 1.18 million, a 114 percent increase.

Key Takeaway: Nine of the highest-scoring gTLDs in the study offered registration for under $1, against a cheapest .com price of $5.91, and ICANN's next round of new gTLD applications is planned for 2026 - so the cheap, lightly verified registration channel that carried 37 percent of cybercrime domains is set to widen.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related