An impersonation attack in which the attacker registers a domain name with a common misspelling of an existing domain to mislead users.

An impersonation attack in which the attacker registers a domain name with a common misspelling of an existing domain to mislead users.

• A. Pharming
• B. Typosquatting
• C. SMiShing
• D. Vishing

Answer: (B)

Typosquatting is an impersonation technique where attackers register domain names that are common misspellings or visually similar to a legitimate site in order to mislead users. The idea is to capture the traffic of people who mistype a URL or recall a brand imperfectly, and then present a look‑alike site that can harvest credentials or deliver malware. This matches the scenario because the attacker specifically relies on misspelled domain names to deceive users into thinking they’re visiting the real site. Other options describe different attack methods: pharming redirects users to malicious sites through DNS manipulation regardless of the typed URL, SMiShing uses text messages to lure victims, and vishing uses phone calls to trick people into revealing information. To defend, organizations can register common misspellings of their domains, monitor for typosquatting, and implement browser protections and user education.

Typosquatting is an impersonation technique where attackers register domain names that are common misspellings or visually similar to a legitimate site in order to mislead users. The idea is to capture the traffic of people who mistype a URL or recall a brand imperfectly, and then present a look‑alike site that can harvest credentials or deliver malware. This matches the scenario because the attacker specifically relies on misspelled domain names to deceive users into thinking they’re visiting the real site.

Other options describe different attack methods: pharming redirects users to malicious sites through DNS manipulation regardless of the typed URL, SMiShing uses text messages to lure victims, and vishing uses phone calls to trick people into revealing information. To defend, organizations can register common misspellings of their domains, monitor for typosquatting, and implement browser protections and user education.