Airfrance victime d’une attaque par homoglyphie de nom de domaine

Nous avions évoqué il y a quelques années la possibilité offerte aux hackers de procéder à une nouvelle forme d’attaque par ingénierie sociale : l’attaque par homoglyphie IDN.

Pour rappel, il s’agit d’une forme de phishing particulièrement ingénieuse. Cette attaque consiste à effectuer un enregistrement de noms de domaine avec des caractères issus d’alphabets non latin (ou latin étendu) similaires aux caractères ascii habituels. Certains caractères étant visuellement identiques, l’internaute, y compris averti, peut être facilement induit en erreur.

Cette forme d’attaque est restée théorique de nombreuses années et connue seulement des experts des noms de domaine comme SafeBrands. Toutefois, elle semble avoir été popularisée récemment dans le milieu dit du « hacking » et est largement utilisée depuis quelques semaines.

Aussi, depuis aujourd’hui, 13/02/2018 circule sur les réseaux sociaux une vaste escroquerie employant cette technique. De nombreux employés de SafeBrands ont d’ailleurs reçu de la part de leurs contacts ce type de message :

Bien évidemment il s’agit d’une supercherie. Le nom de domaine ici n’est pas airfrance.com mais airfrạnce.com . Le titulaire du nom de domaine a remplacé le deuxième A par une lettre équivalente de l’alphabet latin étendu : A avec « anneau souscrit » utilisé dans l’alphabet phonétique.

D’après le WHOIS du nom de domaine incriminé, celui-ci a été enregistré le 12/02 derrière un service proxy.

 

Domain Name: xn--airfrnce-rx0d.com
Registry Domain ID: 2226225207_DOMAIN_COM-VRSN
Registrar WHOIS server: whois.NameBright.com
Registrar URL: http://www.NameBright.com
Updated Date: 2018-02-12T00:00:00.000Z
Creation Date: 2018-02-12T09:50:36.000Z
Registrar Registration Expiration Date: 2019-02-12T00:00:00.000Z
Registrar: TurnCommerce, Inc. DBA NameBright.com
Registrar IANA ID: 1441
Registrar Abuse Contact Email: abuse@NameBright.com
Registrar Abuse Contact Phone: +1.720.496.0020
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Private Registration
Registrant Organization:
Registrant Street: 2635 Walnut Street
Registrant City: Denver
Registrant State/Province: CO
Registrant Postal Code: 80205
Registrant Country: US
Registrant Phone: +1.7204960020
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: xn--airfrnce-rx0d.com@NameBrightPrivacy.com

 

Le nom de domaine conduit à un formulaire demandant les coordonnées puis l’inscription moyennant un paiement par carte bancaire. Il s’agit là probablement d’une fausse page de paiement qui vise à récolter les coordonnées bancaires des internautes crédules.

 

SafeBrands invite donc les internautes à être particulièrement attentifs à ce type de fraude. Notre outil gratuit de vérification de WHOIS http://whois.safebrands.com permet de s’assurer de la titularité d’un nom de domaine.

Il existe en outre une pléthore de convertisseurs IDN afin de vérifier qu’un nom de domaine n’est pas un homoglyphe, comme par exemple celui mis à disposition par le registre Verisign : https://www.verisign.com/en_US/channel-resources/domain-registry-products/idn/idn-conversion-tool/index.xhtml?loc=en_US . Les internautes peuvent effectuer cette vérification avant d’entrer leurs coordonnées bancaires.

 

 

Les marques quant à elles peuvent se prémunir de ce type d’attaque.

 

Si vous souhaitez connaitre les solutions entreprise SafeBrands, n’hésitez pas à contacter nos chargés de clientèle en utilisant notre formulaire en ligne, par email domaines@safebrands.com ou téléphone au +33 (0)1 80 82 82 60.

191 réponses

Trackbacks (rétroliens) & Pingbacks

  1. cialis tablets australia https://buyviagraonline.nethouse.ru/

    Truly loads of useful knowledge!

  2. no 1 canadian pharcharmy online https://linktr.ee/canadianpharmacies

    Reliable content. Thank you!

  3. canadian cialis https://linktr.ee/onlinepharmacies

    Whoa a good deal of useful information!

  4. online pharmacies https://kwenzx.nethouse.ru/

    Awesome facts. With thanks!

  5. cialis 5mg https://telegra.ph/Cialis-20mg-08-13

    You actually revealed it very well.

  6. tadalafil without a doctor’s prescription https://linktr.ee/buycialisonline

    Great data. Regards.

  7. tadalafil without a doctor’s prescription https://form.jotform.com/ogmyn/buycialisonline

    Thanks a lot! I like it.

  8. online cialis https://kswbnh.nethouse.ru/

    Very good facts. Regards!

  9. Generic cialis tadalafil https://tadalafil20mg.webflow.io/

    Wonderful knowledge. Many thanks.

  10. tadalafil 10 mg https://hub.docker.com/r/tadalafil/20mg

    With thanks. An abundance of forum posts!

  11. online cialis https://kalwer.micro.blog/

    Appreciate it! Quite a lot of advice.

  12. cialis 5 mg http://lasweb.iwopop.com/

    Thanks, I like this!

  13. cialis pills https://owzpkg.zombeek.cz/

    Really plenty of superb material!

  14. cialis 5mg prix https://tadalafil20mg.proweb.cz/

    Really plenty of valuable info!

  15. purchasing cialis on the internet https://kasheras.livejournal.com/283.html

    Useful information. With thanks!

  16. tadalafil generic https://laswert.wordpress.com/

    You’ve made your point!

  17. cialis 20 mg https://alewrt.flazio.com/

    You actually revealed it fantastically.

  18. cialis 20 mg best price https://mewser.mystrikingly.com/

    Wow loads of very good facts!

  19. canadian rx https://kawers.micro.blog/

    Incredible loads of great advice.

  20. buy cialis online https://linktr.ee/canadianpharmacy

    This is nicely expressed! .

  21. online canadian pharmacy https://hub.docker.com/r/dkwer/drugs

    Amazing postings, Thanks a lot!

  22. cialis lowest price https://www.divephotoguide.com/user/drugs

    Truly quite a lot of amazing material!

  23. cialis from canada https://canadian-pharmacies.webflow.io/

    Reliable material. Appreciate it.

  24. tadalafil tablets https://lawert.micro.blog/

    You expressed that effectively.

  25. online prescriptions without a doctor https://canadapharmacy.teachable.com/

    You explained that wonderfully!

  26. buy cialis without a doctor’s prescription https://londondrugscanada.bigcartel.com/london-drugs

    Excellent information. Appreciate it!

  27. tadalafil 5mg https://fermser.flazio.com/

    Useful advice. Appreciate it.

  28. online pharmacy https://pedrew.zombeek.cz/

    Whoa loads of beneficial data.

  29. canadian drugstore https://kawerc.proweb.cz/

    Nicely put, Thank you.

  30. generic cialis https://hkwerf.micro.blog/

    Regards. Useful stuff.

  31. buy cialis without a doctor’s prescription https://www.formlets.com/forms/N2BtJ3kPeJ3KclCw/

    Many thanks! Lots of knowledge!

  32. medication without a doctors prescription https://hub.docker.com/r/pharmacies/online

    Superb data, Many thanks!

  33. best canadian pharmacies online https://gswera.livejournal.com/385.html

    Good knowledge. Cheers!

  34. cialis without a doctor’s prescription https://selaw.flazio.com/

    Many thanks. Lots of info.

  35. canada rx dit :

    list of reputable canadian pharmacies https://drugscanada.teachable.com/

    Nicely put. Cheers!

  36. buy cialis online http://kwerks.iwopop.com/

    You actually suggested that wonderfully.

  37. cialis 5mg http://kwsedc.iwopop.com/

    Wow many of very good knowledge.

  38. canadian medications https://kvqtig.zombeek.cz/

    You said it very well.!

  39. canadian pharmacy online 24 https://kaswes.proweb.cz/

    Many thanks. A lot of advice.

  40. cialis https://agrtyh.micro.blog/

    Seriously tons of valuable facts!

  41. tadalafil without a doctor’s prescription http://lsdevs.iwopop.com/

    Whoa tons of useful data!

  42. northwest pharmacy canada https://pharmaceuticals.teachable.com/

    Lovely stuff. With thanks!

  43. tadalafil 10 mg http://cialis.iwopop.com/

    Nicely put, Many thanks!

  44. cialis 20mg http://kawerf.iwopop.com/

    You actually revealed it very well.

  45. cialis canadian pharmacy http://herbsd.iwopop.com/

    You stated that fantastically!

  46. tadalafil tablets https://site955305180.fo.team/

    Information nicely applied..

  47. medication without a doctors prescription https://kwsde.zombeek.cz/

    Kudos. Awesome stuff.

  48. buy cialis online https://sdtyli.zombeek.cz

    You definitely made your point.

  49. tadalafil https://kwersv.proweb.cz/

    Amazing tons of valuable knowledge.

  50. canadian pharmaceuticals https://selera.mystrikingly.com/

    You actually revealed that exceptionally well.

  51. cialis 20 mg best price https://hertb.mystrikingly.com/

    You revealed it wonderfully.

  52. canada pharmacy online http://pamelaliggins.website2.me/

    You said it adequately..

  53. highest rated canadian pharmacies https://kaswesa.nethouse.ru/

    Thanks, Quite a lot of material.

  54. generic for cialis https://swenqw.company.site/

    You have made your position extremely well..

  55. online prescriptions without a doctor https://disvaiza.mystrikingly.com/

    Reliable data. Cheers!

  56. cialis lowest price https://kertvbs.webgarden.com/

    You’ve made your point!

  57. cialis canadian pharmacy https://asebg.bigcartel.com/canadian-pharmacy

    Wow plenty of very good tips.

  58. cialis prices https://dkyubn.bizwebs.com/

    Thank you. Ample postings.

  59. online pharmacy http://aonubs.website2.me/

    Nicely put, Regards!

  60. cialis tablets australia https://kwersd.mystrikingly.com/

    Many thanks. Fantastic stuff!

  61. buy cialis without a doctor’s prescription https://avuiom.sellfy.store/

    Seriously quite a lot of excellent facts!

  62. cialis purchase online without prescription https://lwerts.livejournal.com/276.html

    You have made your stand quite clearly!.

  63. cialis without a doctor’s prescription https://uertbx.livejournal.com/402.html

    You have made your stand pretty effectively..

  64. tadalafil 10 mg https://kawsear.fwscheckout.com/

    You stated this exceptionally well!

  65. cialis purchase online without prescription https://hekluy.ucraft.site/

    Cheers! I value this!

  66. cialis generico https://site561571227.fo.team/

    You actually expressed that well.

  67. tadalafil generic https://site656670376.fo.team/

    Really a good deal of terrific facts.

  68. canadian rx dit :

    safe canadian online pharmacies https://site273035107.fo.team/

    Whoa all kinds of terrific information.

  69. cialis generic https://pharmacy-online.webflow.io/

    You actually expressed it very well.

  70. tadalafil generic https://gewrt.usluga.me/

    Kudos. I like this!

  71. buy cialis without a doctor’s prescription https://kerntyast.flazio.com/

    You made your position quite clearly!.

  72. canadian pharmacy viagra brand http://ime.nu/cialisonlinei.com

    Seriously plenty of wonderful info!

  73. cialis generic https://kerbnt.flazio.com/

    Amazing write ups. Kudos.

  74. cialis without a doctor’s prescription https://kertyun.flazio.com/

    You revealed it fantastically!

  75. online prescriptions without a doctor https://deiun.flazio.com/

    Reliable data. Cheers!

  76. canadian online pharmacies https://canadian-pharmaceuticals-online.yolasite.com/

    You actually suggested this well!

  77. Cialis tadalafil https://kertubs.mystrikingly.com/

    You expressed that terrifically.

  78. canadian drugs https://kerbgsw.mystrikingly.com/

    You actually reported it perfectly!

  79. tadalafil without a doctor’s prescription https://sehytv.wordpress.com/

    Nicely put. Thank you!

  80. cialis from canada https://site373681070.fo.team/

    Useful info. Kudos!

  81. cialis lowest price https://hemuyrt.livejournal.com/325.html

    With thanks! Loads of write ups.

  82. online prescriptions without a doctor https://626106aa4da69.site123.me/blog/new-step-by-step-roadmap-for-tadalafil-5mg

    Many thanks! A good amount of posts.

  83. cialis from canada https://trosorin.mystrikingly.com/

    You’ve made your stand quite well..

  84. canadian pharmacy cialis https://site128620615.fo.team/

    Good info, Thanks!

  85. buy viagra 25mg https://kevasw.webgarden.com/

    Thank you, Loads of facts.

  86. canadian pharmacy online https://gwertvb.mystrikingly.com/

    Effectively voiced indeed. .

  87. online pharmacies canada https://site669726570.fosite.ru/

    You revealed it terrifically!

Les commentaires sont fermés.