[dot]US Domain Exploited for Phishing

Phishing Data BreachesThe Interisle Consulting Group has published a paper looking at the phishing landscape in 2023, KrebsOnSecurity reports. Notably, Interisle found that the .us top-level domain is being widely abused in phishing attacks.

“.US is the ccTLD of the United States and had a very large number of its domains used for phishing -- almost 30,000 domains, more than 20,000 of which were registered maliciously by phishers,” Interisle said.

These phishing domains were used in a wide variety of attacks against targets in the US and around the world.

“Ironically, at least 109 of the .US domains in our data were used to attack the United States government, specifically the United States Postal Service and its customers,” Interisle said. “Significant numbers of .US domains were also registered to attack some of the United States’ most prominent companies, including Bank of America, Apple, Microsoft, Meta, Amazon, AT&T, Citi, Comcast, and Target. .US domains were also used to attack foreign government operations: six .US domains were used to attack Australian government services, six attacked Great Britain’s Royal Mail, one attacked Canada Post, and one attacked the Denmark Tax Authority.”

Dean Marks, emeritus executive director for the Coalition for Online Accountability, told Krebs that the .us domain should be more strictly regulated.

“Even very large ccTLDs, like .de for Germany — which has a far larger market share of domain name registrations than .US — have very low levels of abuse, including phishing and malware,” Marks said. “In my view, this situation with .US should not be acceptable to the U.S. government overall, nor to the US public.”

New-school security awareness training can give your organization an essential layer of defense by teaching your employees how to thwart phishing attacks.

KrebsOnSecurity has the story.

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:


Topics: Phishing

Subscribe To Our Blog

Cybersecurity Awareness Month Free Resource Kit

Get the latest about social engineering

Subscribe to CyberheistNews