Awareness on Spear Phishing Attacks using Novel TLD names in Research and Academic Field
Cristiana Constantinescu · 2023
This paper conducts a study upon possibilities and dangers of fraudulent attacks that can be performed upon academic and research platforms, with the usage of the novel top level domain names issued by Google Registry in May 2023. In the following sections, we will focus on attempts using.zip TLD. The present contains a bidirectional perspective simulated attack -one in which the academic institution represents the target and another in which the said institution represents the impersonated entity. We aim to illustrate an attacker’s workflow in order to comprehend how.zip domains can be used and lessen attacks’ implementations in academic and research scenario. By understanding attackers’ methodology, this paper offers suggestions to mitigate risks in said attacks.