{"id":14964,"date":"2023-06-28T01:21:11","date_gmt":"2023-06-28T05:21:11","guid":{"rendered":"https:\/\/tsisupport.com\/tsistaging\/?p=14964"},"modified":"2023-06-28T11:19:15","modified_gmt":"2023-06-28T15:19:15","slug":"security-risk-mov-and-zip-domains-can-lead-to-malware","status":"publish","type":"post","link":"https:\/\/tsisupport.com\/tsistaging\/?p=14964","title":{"rendered":"Security Risk: .Mov and .Zip domains can lead to malware"},"content":{"rendered":"

We want to bring your attention to a concerning development involving the use of new top-level domains (TLDs) introduced by Google. Specifically, threat actors are leveraging TLDs such as .mov and .zip to target organizations, posing a significant security risk.<\/span><\/p>\n

The Deceptive Nature of .mov and .zip Domains:<\/span><\/h2>\n

The primary concern lies in the fact that .mov and .zip are widely recognized file extensions for internet-shared files. Exploiting this familiarity, threat actors are employing .mov or .zip as domain extensions, allowing them to create URLs that masquerade as filenames with .mov or .zip extensions. This clever tactic enables them to purchase domains resembling familiar filenames like “update.zip” and trick unsuspecting victims into downloading malware during phishing campaigns. Our security partners at Arctic Wolf have already identified numerous instances where threat actors have misused .mov and .zip domains in successful phishing campaigns.\u00a0<\/span><\/p>\n

The Implications for your Organization’s Security:<\/span><\/h2>\n

Given the deceptive nature of .mov and .zip domains, it is imperative for organizations to understand the potential consequences they may face. Falling victim to a phishing campaign can result in severe repercussions, including unauthorized access to sensitive information, financial loss, and damage to your organization’s reputation. Therefore, taking proactive measures to mitigate these risks is of utmost importance.<\/span><\/p>\n

Here\u2019s How to Address this Security Risk:<\/span><\/h2>\n

To safeguard your organization from these targeted threats, we recommend the following steps:<\/span><\/p>\n