ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Phony Government Websites

    IT Discussion
    security
    6
    18
    3.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User @gjacobse
      last edited by

      @g.jacobse said:

      Nor have I.. Makes me wonder if it itself is not one of the fake GOV site...

      It's real.

      1 Reply Last reply Reply Quote 0
      • ?
        A Former User @scottalanmiller
        last edited by

        @scottalanmiller said:

        How does one make a fake government site in the US where the government controls the TLD?

        Cause we all know government systems are the most secure..

        scottalanmillerS 1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller @A Former User
          last edited by

          @thecreativeone91 said:

          @scottalanmiller said:

          How does one make a fake government site in the US where the government controls the TLD?

          Cause we all know government systems are the most secure..

          Anything on there is as official as it gets. It means that the government authenticated it, in some manner. If it gets put up with a .gov, it means the government security has already failed and the issue is the sites being hacked not them being fake.

          ? 1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller
            last edited by

            The even say look for .gov instead of .com. Honestly, if someone falls for a .com site as a government web site, they deserve to be in trouble. You've got to be REALLY uncaring to be that ignorant.

            ? 1 Reply Last reply Reply Quote 1
            • ?
              A Former User @scottalanmiller
              last edited by

              @scottalanmiller said:

              @thecreativeone91 said:

              @scottalanmiller said:

              How does one make a fake government site in the US where the government controls the TLD?

              Cause we all know government systems are the most secure..

              Anything on there is as official as it gets. It means that the government authenticated it, in some manner. If it gets put up with a .gov, it means the government security has already failed and the issue is the sites being hacked not them being fake.

              The process of requesting a .gov domain is pretty simple if you have the credentials. I don't think they hardly even read the stuff, I wouldn't be surprised if it's automated or someone just clicks approve on each one without looking into it.

              1 Reply Last reply Reply Quote 0
              • ?
                A Former User @scottalanmiller
                last edited by

                @scottalanmiller said:

                The even say look for .gov instead of .com. Honestly, if someone falls for a .com site as a government web site, they deserve to be in trouble. You've got to be REALLY uncaring to be that ignorant.

                Yeah. a lot of local gov's are using .org TLDs now for some reason.

                1 Reply Last reply Reply Quote 0
                • gjacobseG
                  gjacobse @scottalanmiller
                  last edited by

                  @scottalanmiller said:

                  How does one make a fake government site in the US where the government controls the TLD?

                  Generally most people would not give the .GOV a second thought. However, is it not possible to spoof about 80% of that to make it appear to come from a .GOV site and it not be?

                  ? scottalanmillerS 2 Replies Last reply Reply Quote 0
                  • ?
                    A Former User @gjacobse
                    last edited by

                    @g.jacobse said:

                    @scottalanmiller said:

                    How does one make a fake government site in the US where the government controls the TLD?

                    Generally most people would not give the .GOV a second thought. However, is it not possible to spoof about 80% of that to make it appear to come from a .GOV site and it not be?

                    Only with local DNS access.

                    1 Reply Last reply Reply Quote 0
                    • scottalanmillerS
                      scottalanmiller @gjacobse
                      last edited by

                      @g.jacobse said:

                      Generally most people would not give the .GOV a second thought. However, is it not possible to spoof about 80% of that to make it appear to come from a .GOV site and it not be?

                      Spoofing a TLD is a pretty difficult thing to do. You have to hijack DNS to do it. Easy to do internal in a business, hard to do to a person randomly on the Internet.

                      1 Reply Last reply Reply Quote 0
                      • gjacobseG
                        gjacobse
                        last edited by

                        Seems legit then
                        ransomware-demand.jpg

                        In the case of the OP - yes it is legitimate. But there are so many daily occurrences of those that are not.

                        "trust but verify"

                        ? LakshmanaL 2 Replies Last reply Reply Quote 1
                        • ?
                          A Former User @gjacobse
                          last edited by

                          @g.jacobse said:

                          In the case of the OP - yes it is legitimate. But there are so many daily occurrences of those that are not.

                          Daily occurrence of a .gov TLD that's fake? I've never actually seen it happen.

                          1 Reply Last reply Reply Quote 0
                          • LakshmanaL
                            Lakshmana @gjacobse
                            last edited by

                            @g.jacobse I have seen this issue at client place which was not so good

                            1 Reply Last reply Reply Quote 0
                            • DashrenderD
                              Dashrender
                              last edited by

                              Well that page is even telling people to go to [email protected] - problems abound!

                              1 Reply Last reply Reply Quote 0
                              • 1 / 1
                              • First post
                                Last post