We have relaunched: What's new at ZDNet Asia?

ZDNet / News / Security / Story

Globalized domains to up phishing attacks

By Vivian Yeo, ZDNet Asia on December 2, 2009

Summary

Launch of local language domain names not likely to significantly impact spam rates but can lead to more phishing attacks, warn security experts.

Topics

american standard inc., ascii, asia-pacific, banking, current domain name, domain, domain name, icann, internationalized domain name, phishing

Events

Microsoft MSDN/Developer Event
25 Mar 2010

One Marina Boulevard, Microsoft Singapore

IT Architect Regional Conference Singapore 2010
20 - 21 Apr 2010

Singapore Management University, Singapore

The Internet Show 2010
21-22 Apr 2010

Suntec Singapore

The upcoming launch of internationalized domain names (IDNs) is unlikely to have a significant impact on spam levels but may deliver a spike in phishing, security experts warned.

Momentum to introduce IDNs has stepped up over the last month, following moves by the ICANN (Internet Corporation for Assigned Names and Numbers) that introduced a fast-track process to allow countries and territories to offer non-Latin top-level domain (TLD) names.

Current domain names are based on the ASCII (American Standard Code for Information Interchange) script, which is based on the English alphabet.

In Singapore, the country's national registry for domain names, the Singapore Network Information Center, announced last month it would launch Chinese domains in phases starting from Nov. 23. DotAsia, the registry operator for ".asia", also said it would accept IDN registrations from the second half of 2010.

IT security professionals point out, though, that IDNs could push phishing volumes upward.

Manish Goel, CEO of BoxSentry, noted in an e-mail that widening the use of IDNs could increase the risk of "IDN homograph attacks", where cybercriminals substitute the numeric "1" for the letter "l".

"This may now be extended to the much wider range of homographs that exists across the Unicode character set [in different languages]," Goel said. "If this pans out, then spammers could send proportionately more phishing attacks than they do at present, with the intent of deceiving end-users into divulging their financial or other private credential data."

Concurring, Commtouch's vice president of products Asaf Greiner said certain phishing scams "may become more prevalent with the proliferation of IDNs".

He told ZDNet Asia in an e-mail that scammers are already using non-ASCII characters that are similar to ASCII counterparts. "In one case, scammers used the Cyrillic 'P' to direct users to a fake PayPal site, in hopes of stealing personal banking information," Greiner said.

He added that the company expects spammers to use non-ASCII characters in URLs contained in the body text of unsolicited messages, in a bid to bypass spam filters that do not recognize these characters. Such URLs, he noted, could link to spam and phishing sites or Web pages that carry embedded malware.

However, Ong Geok Meng, McAfee's antimalware research manager for Asia-Pacific and Japan, noted that improvements in URL filtering have led many phishers to employ a different tactics. Rather than ask the recipient to click on a Web site link, phishers attempt to lure the recipient to send their username and password to a specific e-mail address, Ong explained. "[As such,] I do not believe that the no-URL phish trend will be reversed by IDNs," he said in an e-mail.

He added that with the rollout of IDNs will make it more critical now for users to type the URL of a site they wish to visit, instead of simply clicking on a link. "Even if the link looks legitimate, with [IDN being introduced], it very well may not be."

Related stories

Chinese domain names coming soon to S'pore

Talkback

Add your opinion

In order to post a comment, you need to be registered. (Sign In or register below)

Post your comment
Transform your business interactions with real-time voice, video and telepresence solutions.
Tech Vendor: Cisco

ZDNet Asia Live

Found this great little deal calculator http://www.zdnetasia.com/downloa...

6 hours 31 minutes ago by winstoncranford on topsy

RT @mistertechblog: I wrote about Nexus One and Touchdown, desktop dock, Bluetooth/USB tethering, ebooks here: http://bit.ly/bRdzx0

12 hours 42 minutes ago by yklee13 on topsy

Read my blog post on getting the most from your Nexus One: http://www.zdnetasia.com/blogs/m...

Data Centre Operator (Fresh Graduates Welcome to Apply) in ... http://bit.ly/bagYuu

13 hours 12 minutes ago by intmasterfeed on topsy

#Cisco #Cloud Cloud on ZDNet Asia: Aussie university joins Cisco cloud ยท Early-adopter criminals embrace cloud... http://bit.ly/d93C8S #TCN

14 hours 15 minutes ago by thetechgang on topsy

RT @3wconsulting: Whitepaper from http://3W.com.au "Outsourcing Your IT Requirements to Philippines" now on @zdnetaustralia & @zdnetasia http://ow.ly/1oY9f

Whitepaper from http://3W.com.au "Outsourcing Your IT Requirements to Philippines" now on @zdnetaustralia & @zdnetasia http://ow.ly/1oYbA

Whitepaper from http://3W.com.au "Outsourcing Your IT Requirements to Philippines" now on @zdnetaustralia & @zdnetasia http://ow.ly/1oYbz

Zdnetasia.com Estimated Worth $178,365 USD. Daily Ad Revenue:$244 USD, Daily Views:81,445 Pages... - http://www.haplog.com/www.zdneta...

The receivers don't transmit back to the satellite. Unless there is a phone line attached to the receiver, they don't have any wa...

1 day 28 minutes ago by bessellbrowne on Apple to join the geolocation craze?

"Lead Cognos BI Developer Insurance - Jobs - ZDNet Asia" http://bit.ly/bRcxOG

1 day 23 minutes ago by rhrcognos on topsy

whatever little understanding I have we 'll only progress toward end of the world if we use HPCs to lenthen life of human being. Huma...

2 days 35 minutes ago by abhi32002@gmail.com on High computing promises elixir of life

Thanks for the knowledgeable article on SDDs. Allas...when all this reasearch will happen in Indian Universities. Hope the new bill on Fo...

2 days 47 minutes ago by abhi32002@gmail.com on APAC HPC users eye solid-state drives

It was a good article. This brings a good opportunity for Indian IT firms to come up with new solutions in this field. HPC can become a b...

2 days 6 minutes ago by abhi32002@gmail.com on High computing most-wanted job in Asia

COL KR DHARMADHIKARY(RETD) its very late to reply the link, but if it is still alive and looking for opportunity, i would like to know th...

2 days 3 minutes ago by deb021280 on Education takes off in rural India, helped by PCs

High performance computing (HPC) most-wanted job in Asia http://bit.ly/9vFC3i (via @zdnetasia) #singapore

RT @zdnetasia: EMC COO, Pat Gelsinger, on bridging gaps in the organization and its cloud ambitions in Asia. (cont) http://tl.gd/i5jjd

EMC COO, Pat Gelsinger, on bridging gaps in the organization and its cloud ambitions in Asia. http://bit.ly/9etOZW

Asian SMBs need to pay more attention to disaster recovery planning http://bit.ly/bDet08 via @zdnetasia

Asian SMBs need to pay more attention to disaster recovery planning http://bit.ly/bDet08

[TECH] URL Shorteners slow Web redirection. - http://bit.ly/bySnWK @zdnetasia

URL shorteners are great but they can slow web redirection & you pray it would never go down http://bit.ly/bySnWK via @zdnetasia

URL shorteners slow Web redirection. http://bit.ly/bySnWK

Chinese agencies cry foul over Google. http://bit.ly/by6rwV

all of sg's isps have been practising compulsory invisible proxy for all home subscribers at their backend since many years back alre...

3 days 47 minutes ago by melvinchia on Web filters mean bad news for business

it is not to good for china.
Proactol

3 days 32 minutes ago by nathonastle on Chinese ad partners beg Google for information

Very good explanation of JMX

4 days 37 minutes ago by Babith B on Managing applications with JMX

The reaction to a report issued Tuesday by Flurry Analytics managed to completely overlook some interesting news--the Android-based Motorola Droid outsold the original iPhone over the same period of time following their respective launches--to focus instead on the sales numbers for the Nexus One.

4 days 41 minutes ago by lonemavericks on diggs

Another ZTE story....

5 days 42 minutes ago by Moderate Your Greed on Philippines opens bid for final 3G license

We at www.fifosys.com have also seen a growth in IT outsourcing and anticipate it as a growing field.

5 days 16 minutes ago by sarah Jane on Companies' outsourcing spend to increase

I agree with you. The iSiVaL is super portable and TVs can't expand their image size. I recorded a video that might bring some ideas to...

5 days 46 minutes ago by Jesse B Andersen on Buying a projector? Try an LED TV instead

hermm... he deserved it.. he shud not talk abt sensitive things like tat, well, he shud think twice before saying all those things, event...

5 days 24 minutes ago by ... on Facebook user charged in Malaysia

Password manager tools are potential security threat. Criminals who hack into the computer can use the password manager to log onto any s...

5 days 24 minutes ago by ohanae on What defaults should random password generators use?

I've found the cross platform utility unetbootin to be rather handy for this kind of thing as well.

5 days 59 minutes ago by Jim on Use Live USB Creator to install Fedora 12 from a USB stick

Thanks for the article. I think the debug command has an "\" after "C:" it should say w32tm /debug /enable /file:C:\l...

5 days 59 minutes ago by Roger Biefer on Manage time accuracy with W32Tm

Keep up with ZDNet Asia

Linkedin Join our network

RSS Feeds Subscribe now

Newsletters Subscribe today

Twitter Follow us

Inside ZDNet Asia

Special Report: Tech Focus in 2010

Latest Videos on Tech Industry

Insight: Interviews with Newsmakers

Search for over 15,000 Tech Jobs in Asia

Find your Tech answers in TechGuides

IT Library: Over 60,000 IT papers at your fingertips

Download IT Priorities 2010 Report